$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/CD56EE84A1B711EFB6A2A32DC4F9AE02.roa File: CD56EE84A1B711EFB6A2A32DC4F9AE02.roa (raw, json) Hash identifier: e0DDB57Y7SGC8rWc3Ozg+WzxMnyr3TW/EsNdoBakZnw= Subject key identifier: 68:95:A6:85:FF:23:D6:02:B6:1C:47:B5:10:E8:62:A7:19:43:55:C2 Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E Certificate serial: 0122 Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/CD56EE84A1B711EFB6A2A32DC4F9AE02.roa Signing time: Wed 13 Nov 2024 12:07:07 +0000 ROA not before: Wed 13 Nov 2024 12:07:07 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 138346 IP address blocks: 103.179.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E Validity Not Before: Nov 13 12:07:07 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=6734966b-7791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:5c:aa:bf:05:c5:67:37:32:c0:f1:1c:e5: 97:40:20:d5:61:86:78:07:fb:dd:18:7c:67:53:79: 11:85:92:72:d0:11:36:ac:90:b1:3f:60:a6:75:e8: 35:d6:25:01:7c:5f:53:ab:85:a8:da:87:a4:cf:e3: 26:07:23:25:c9:f7:48:c3:84:9e:00:8a:86:d4:a4: 8f:0c:22:9b:a8:fc:89:30:0c:cf:c2:57:fe:b6:56: ce:74:fd:16:42:ce:27:b8:ab:77:ee:04:43:da:62: 97:48:a5:99:bd:13:22:12:08:43:3b:8c:4a:2e:59: 3b:3d:0d:7f:d4:51:94:cf:45:53:98:98:a9:ac:92: 49:e0:eb:a9:79:0f:39:b2:4b:54:eb:43:2a:e7:5a: a8:13:68:09:6f:82:58:7f:4f:38:74:7d:e8:2e:93: 76:b9:f7:38:4f:71:0c:10:a3:97:dd:b4:c0:57:b9: ef:30:76:88:44:ba:6f:63:82:64:f1:1a:66:c3:a3: 76:fb:07:70:51:58:8b:37:0a:e4:11:c8:48:43:14: fb:20:5a:8f:ec:ea:41:da:6e:2a:0e:da:5a:51:35: c1:e6:67:4d:8e:e8:a3:d9:20:0a:e1:99:7e:46:10: 9d:f1:75:38:2b:f5:7b:02:61:1b:dc:3b:72:df:f0: ec:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:95:A6:85:FF:23:D6:02:B6:1C:47:B5:10:E8:62:A7:19:43:55:C2 X509v3 Authority Key Identifier: keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/CD56EE84A1B711EFB6A2A32DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.127.0/24 Signature Algorithm: sha256WithRSAEncryption 36:ab:a2:4a:09:b3:8a:01:bc:91:e2:83:ed:16:28:e8:12:a1: 21:3e:2d:b7:f4:5d:04:a9:ee:42:3e:84:3b:0a:07:8b:4f:8d: f1:e9:bd:21:42:b8:38:a2:28:55:5a:db:17:ca:da:b0:4c:e8: a5:11:30:09:06:f7:12:33:da:a5:6b:bf:8a:5d:50:04:9b:7e: 69:f6:38:8e:69:44:54:45:12:d3:d0:03:e0:3e:dd:03:0b:d8: cb:8f:b6:b8:8e:da:62:02:07:25:f5:9a:a9:e5:b1:fc:a3:7f: 1d:1a:7d:93:3b:3b:3f:1d:0c:e8:02:af:c8:56:77:45:41:6f: f7:bd:df:f1:90:20:97:fe:ae:df:50:86:ca:c8:f1:ee:a7:a4: b1:bf:28:41:3d:d1:9f:76:46:8b:75:f3:37:09:9f:0f:a1:33: 9f:82:b9:1a:8a:f2:66:d0:57:9a:49:b0:37:d5:e0:42:61:82: f7:60:78:53:65:22:a6:e6:95:7f:2e:48:08:b3:8a:e5:d7:df: 81:bc:13:34:49:6e:d0:f8:00:15:a3:5b:0e:01:51:0f:04:8e: 13:35:05:ee:81:3a:51:12:7f:8c:e5:b9:4a:32:c3:17:65:53: 62:37:b0:31:65:75:a9:67:33:f1:2c:1b:11:5a:2e:ce:1e:09: 0d:4e:11:54 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKDIwRUQwQUFCMjA3NTBCOEIyN0E4NkRGOTg5QTc1NEJG NTcyNkREN0UwHhcNMjQxMTEzMTIwNzA3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM0OTY2Yi03NzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpFcqr8FxWc3MsDxHOWXQCDVYYZ4B/vdGHxnU3kRhZJy0BE2rJCxP2Cmdeg1 1iUBfF9Tq4Wo2oekz+MmByMlyfdIw4SeAIqG1KSPDCKbqPyJMAzPwlf+tlbOdP0W Qs4nuKt37gRD2mKXSKWZvRMiEghDO4xKLlk7PQ1/1FGUz0VTmJiprJJJ4OupeQ85 sktU60Mq51qoE2gJb4JYf084dH3oLpN2ufc4T3EMEKOX3bTAV7nvMHaIRLpvY4Jk 8Rpmw6N2+wdwUViLNwrkEchIQxT7IFqP7OpB2m4qDtpaUTXB5mdNjuij2SAK4Zl+ RhCd8XU4K/V7AmEb3Dty3/DsgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGiVpoX/ I9YCthxHtRDoYqcZQ1XCMB8GA1UdIwQYMBaAFCDtCqsgdQuLJ6ht+YmnVL9XJt1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi9JTzBLcXlCMUM0c25xRzM1aWFkVXYxY20z WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lPMEtxeUIxQzRzbnFHMzVpYWRVdjFjbTNYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFCNjQvOUI0NEVCNzQ4RjI5MTFFQ0I2QTY5OTZDQzRGOUFFMDIvQ0Q1NkVFODRB MUI3MTFFRkI2QTJBMzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABns38wDQYJKoZIhvcNAQELBQADggEBADarokoJs4oBvJHi g+0WKOgSoSE+Lbf0XQSp7kI+hDsKB4tPjfHpvSFCuDiiKFVa2xfK2rBM6KURMAkG 9xIz2qVrv4pdUASbfmn2OI5pRFRFEtPQA+A+3QML2MuPtriO2mICByX1mqnlsfyj fx0afZM7Oz8dDOgCr8hWd0VBb/e93/GQIJf+rt9QhsrI8e6npLG/KEE90Z92Rot1 8zcJnw+hM5+CuRqK8mbQV5pJsDfV4EJhgvdgeFNlIqbmlX8uSAiziuXX34G8EzRJ btD4ABWjWw4BUQ8EjhM1Be6BOlESf4zluUoywxdlU2I3sDFldalnM/EsGxFaLs4e CQ1OEVQ= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org