$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/BB2A40229BA811EF88DC4B0DC4F9AE02.roa File: BB2A40229BA811EF88DC4B0DC4F9AE02.roa (raw, json) Hash identifier: mA4NPbgtdMFtne8pWaTtQYIX/GAm9AP8n2tobaAe+TE= Subject key identifier: 23:56:B9:00:CA:5B:56:1E:DF:73:4E:1C:CE:C3:50:F1:DB:6E:8E:FD Certificate issuer: /CN=A91EBA0E/serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17 Certificate serial: 0148 Authority key identifier: 92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/BB2A40229BA811EF88DC4B0DC4F9AE02.roa Signing time: Tue 05 Nov 2024 19:04:07 +0000 ROA not before: Tue 05 Nov 2024 19:04:07 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 151966 IP address blocks: 103.174.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA0E/serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17 Validity Not Before: Nov 5 19:04:07 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=672a6c27-38c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:59:71:f1:e5:c3:47:ff:3d:a8:98:da:88: b3:6c:37:cc:a3:8f:cf:ef:65:b8:6c:5f:53:0b:f8: 14:87:e6:77:7a:72:05:21:78:64:83:5b:fa:58:4c: af:fa:8e:dd:03:a8:9d:7a:84:b4:bc:d6:c4:67:dd: 91:24:fd:2b:27:9a:cf:44:8b:b1:8c:11:0e:b4:37: 04:8a:6d:60:2b:cd:81:07:de:78:76:86:7a:80:34: b6:33:52:a4:9e:23:d9:9c:e5:4c:6b:ea:83:f6:84: 5c:4a:ec:7b:af:11:73:06:dc:1a:92:2b:76:af:0a: 7c:f9:5b:2c:8e:dd:95:f5:cf:7d:91:90:6d:95:53: 72:88:68:8a:b1:40:17:45:4a:d5:40:3a:7b:28:c8: 2f:a6:35:0d:9d:cf:fe:be:dc:f5:d4:66:ea:ff:f1: a2:d8:06:52:52:24:29:f7:7d:82:4a:60:33:32:88: 3f:7f:7c:a5:54:7e:b3:97:2c:c2:f7:b6:ea:aa:33: 99:1c:99:d5:75:91:4a:26:c2:a0:72:b0:e2:71:5a: 13:87:20:f0:08:13:75:5e:be:4a:2e:61:52:05:8d: d4:88:22:7c:b8:f4:b2:86:f2:69:5b:16:8a:9b:d8: 51:8d:91:02:ad:19:4e:29:43:f1:1d:f6:a8:bb:35: 57:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:56:B9:00:CA:5B:56:1E:DF:73:4E:1C:CE:C3:50:F1:DB:6E:8E:FD X509v3 Authority Key Identifier: keyid:92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/BB2A40229BA811EF88DC4B0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.86.0/23 Signature Algorithm: sha256WithRSAEncryption b8:b1:b2:27:ff:b5:c4:f2:0a:4d:f5:19:6f:b6:83:64:0d:30: c5:70:9f:d5:bd:15:1e:92:6b:ba:f8:ca:02:99:bd:73:cd:25: 5c:a3:49:27:dc:51:89:17:cc:ae:ea:17:29:6f:36:69:bb:41: 41:da:ee:69:1b:9a:62:9f:de:52:09:10:fc:45:33:f9:e3:0f: b6:4e:13:45:36:5f:e7:61:fa:cd:0d:58:ed:d3:9a:19:e1:4a: 5f:1a:a4:03:e1:34:03:4d:61:72:88:75:7d:69:7d:e8:58:c3: 6b:4d:8e:55:73:e5:6a:37:53:fb:b8:80:6a:68:84:e9:f2:29: ce:7e:55:ca:a0:95:8e:23:15:15:5c:1d:11:2b:7b:98:14:8c: 18:5b:cc:3c:86:57:20:8f:5d:88:3c:3b:98:fc:c7:3a:6f:e3: 14:a5:03:02:cd:f0:ff:91:12:ad:0b:ea:25:45:b8:32:b3:d8: 2a:6c:f1:4f:f7:14:1d:81:6a:6a:ce:d3:1f:e6:2b:92:1e:e6: 2c:99:e8:aa:e6:5c:75:1f:16:06:bf:e4:7e:7a:f7:a8:fb:55: f1:8e:bc:ce:3e:3e:28:e3:ef:a3:96:fd:de:c6:92:a0:e0:ef: 01:3a:20:89:2b:a4:54:92:2b:6f:f8:55:f1:e3:a3:de:7c:e2: 30:2a:38:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMEUxMTAvBgNVBAUTKDkyNkQ5QURDNkZCODczRDc2NUJCNDEyMjcyODBDMUYx MTg0NkVFMTcwHhcNMjQxMTA1MTkwNDA3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJhNmMyNy0zOGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt55ZcfHlw0f/PaiY2oizbDfMo4/P72W4bF9TC/gUh+Z3enIFIXhkg1v6WEyv +o7dA6ideoS0vNbEZ92RJP0rJ5rPRIuxjBEOtDcEim1gK82BB954doZ6gDS2M1Kk niPZnOVMa+qD9oRcSux7rxFzBtwakit2rwp8+Vssjt2V9c99kZBtlVNyiGiKsUAX RUrVQDp7KMgvpjUNnc/+vtz11Gbq//Gi2AZSUiQp932CSmAzMog/f3ylVH6zlyzC 97bqqjOZHJnVdZFKJsKgcrDicVoThyDwCBN1Xr5KLmFSBY3UiCJ8uPSyhvJpWxaK m9hRjZECrRlOKUPxHfaouzVX5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCNWuQDK W1Ye33NOHM7DUPHbbo79MB8GA1UdIwQYMBaAFJJtmtxvuHPXZbtBInKAwfEYRu4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkEwRS9EQkJFRDIwNkMw MDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5ZGx1MEVpY29EQjhSaEc3 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ttMmEzRy00YzlkbHUwRWljb0RCOFJoRzdoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJBMEUvREJCRUQyMDZDMDA1MTFFREEyNTVGQTEwQzRGOUFFMDIvQkIyQTQwMjI5 QkE4MTFFRjg4REM0QjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrlYwDQYJKoZIhvcNAQELBQADggEBALixsif/tcTyCk31 GW+2g2QNMMVwn9W9FR6Sa7r4ygKZvXPNJVyjSSfcUYkXzK7qFylvNmm7QUHa7mkb mmKf3lIJEPxFM/njD7ZOE0U2X+dh+s0NWO3TmhnhSl8apAPhNANNYXKIdX1pfehY w2tNjlVz5Wo3U/u4gGpohOnyKc5+VcqglY4jFRVcHREre5gUjBhbzDyGVyCPXYg8 O5j8xzpv4xSlAwLN8P+REq0L6iVFuDKz2Cps8U/3FB2BamrO0x/mK5Ie5iyZ6Krm XHUfFga/5H5696j7VfGOvM4+Pijj76OW/d7GkqDg7wE6IIkrpFSSK2/4VfHjo958 4jAqONg= -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:18 2024 by rpki-client on console-ams.rpki-client.org