$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F8BCA17670C611EFBF64266FC4F9AE02.roa File: F8BCA17670C611EFBF64266FC4F9AE02.roa (raw, json) Hash identifier: 0Xx+rkEjjbktgMFiX+FcjqqR+mXuZTeDGa2pOpO6Mfs= Subject key identifier: 9F:B5:C9:C8:6B:23:6E:72:0E:73:EB:05:60:2D:D1:18:81:EB:A6:39 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0A93 Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F8BCA17670C611EFBF64266FC4F9AE02.roa Signing time: Thu 12 Sep 2024 05:22:15 +0000 ROA not before: Thu 12 Sep 2024 05:22:15 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 9311 IP address blocks: 103.18.229.0/24 maxlen: 24 103.18.231.0/24 maxlen: 24 103.231.37.0/24 maxlen: 24 103.231.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2707 (0xa93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Sep 12 05:22:15 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66e27a87-810c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3a:57:6c:ac:86:21:34:05:6a:d8:4f:09:22: 60:45:ed:d2:1a:a2:1b:a2:ab:44:b6:8c:25:a2:da: c8:5d:1a:60:1f:f0:af:17:ec:17:83:2c:b0:d5:ce: c2:ce:1c:1f:d4:0b:e3:3a:85:5a:46:ca:39:3c:74: 75:09:a3:54:4d:28:9c:0b:8a:a6:93:f8:d8:2f:64: 2e:34:01:61:e1:92:2d:a4:e8:47:da:25:84:d3:a5: c5:8e:2d:e2:36:e3:f4:dd:bf:e6:c5:05:c7:58:93: 8f:bd:b8:fc:ea:af:8f:e6:2f:0b:52:23:ca:28:54: e3:d8:29:b3:ef:86:dc:24:e6:88:84:8c:51:6c:b5: a6:ce:76:a8:e6:ec:e8:5a:6f:92:5b:46:17:b6:d4: e0:6f:30:35:ac:69:f1:98:2b:d6:72:03:bb:27:e5: 4c:25:07:f0:e9:f4:d5:e5:2b:27:49:4f:eb:e8:ed: b6:58:b2:62:c6:84:57:de:1e:58:85:3e:60:8b:ce: 55:c4:d7:a5:45:2b:db:f4:1d:4c:00:2b:cb:cc:bb: a0:80:63:26:a6:1a:89:f6:d5:04:8a:05:8a:cc:13: 85:f0:5e:52:46:57:c4:58:12:13:5a:7d:da:8f:50: 4d:1b:74:05:cb:79:78:67:7a:05:a2:4d:98:d2:7f: dc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B5:C9:C8:6B:23:6E:72:0E:73:EB:05:60:2D:D1:18:81:EB:A6:39 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F8BCA17670C611EFBF64266FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.18.229.0/24 103.18.231.0/24 103.231.37.0/24 103.231.39.0/24 Signature Algorithm: sha256WithRSAEncryption af:02:2d:84:d8:aa:25:5c:bb:54:4a:ed:34:7e:b6:88:c9:06: 51:c8:59:19:71:46:3c:ca:35:a0:9b:c3:86:e1:fa:82:15:55: 0c:0b:10:1c:e6:47:ca:8e:b2:cd:9c:15:8c:d4:05:de:99:90: 8b:6d:3a:60:97:30:af:f8:80:cb:74:e8:5f:3f:de:6a:f5:1a: 36:70:0a:db:48:07:43:eb:ad:ef:33:74:b0:6c:6c:a5:ee:02: 29:9e:b5:2b:64:b7:57:93:01:d2:9c:32:b2:0b:fc:10:9d:2c: 56:ac:b1:f2:10:b4:32:7c:d3:73:2c:87:08:bf:b0:c6:f9:44: b1:a3:fd:c5:4c:33:ec:71:f8:b2:04:13:a7:33:93:d6:d8:f5: 15:c8:c4:84:96:f0:45:c4:5f:1f:6a:72:7f:04:7a:8a:90:7e: fc:49:59:fd:5e:22:19:eb:e0:eb:ee:22:e1:9c:36:6a:fd:cb: 80:75:a4:d3:19:e5:35:20:e8:e8:e8:6d:de:44:ad:db:71:9c: 57:22:66:d1:74:ce:a1:5b:79:f1:af:0b:d2:a5:41:f1:83:7f: d3:f4:dc:b6:16:04:8f:7c:84:61:83:c0:63:99:45:73:60:e7: e3:c0:f2:8d:c8:44:e9:7c:7e:72:c3:df:ef:ee:4c:09:f4:e4: 1e:69:b3:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjQwOTEyMDUyMjE1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUyN2E4Ny04MTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jpXbKyGITQFathPCSJgRe3SGqIboqtEtowlotrIXRpgH/CvF+wXgyyw1c7C zhwf1AvjOoVaRso5PHR1CaNUTSicC4qmk/jYL2QuNAFh4ZItpOhH2iWE06XFji3i NuP03b/mxQXHWJOPvbj86q+P5i8LUiPKKFTj2Cmz74bcJOaIhIxRbLWmznao5uzo Wm+SW0YXttTgbzA1rGnxmCvWcgO7J+VMJQfw6fTV5SsnSU/r6O22WLJixoRX3h5Y hT5gi85VxNelRSvb9B1MACvLzLuggGMmphqJ9tUEigWKzBOF8F5SRlfEWBITWn3a j1BNG3QFy3l4Z3oFok2Y0n/cxQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFJ+1ychr I25yDnPrBWAt0RiB66Y5MB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJCNUIvMjlERTc0OEE0MTlFMTFFQUI4NjZFNzdBQzRGOUFFMDIvRjhCQ0ExNzY3 MEM2MTFFRkJGNjQyNjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnEuUDBABnEucDBABn5yUDBABn5ycwDQYJKoZIhvcNAQEL BQADggEBAK8CLYTYqiVcu1RK7TR+tojJBlHIWRlxRjzKNaCbw4bh+oIVVQwLEBzm R8qOss2cFYzUBd6ZkIttOmCXMK/4gMt06F8/3mr1GjZwCttIB0Prre8zdLBsbKXu AimetStkt1eTAdKcMrIL/BCdLFassfIQtDJ803Mshwi/sMb5RLGj/cVMM+xx+LIE E6czk9bY9RXIxISW8EXEXx9qcn8EeoqQfvxJWf1eIhnr4OvuIuGcNmr9y4B1pNMZ 5TUg6Ojobd5ErdtxnFciZtF0zqFbefGvC9KlQfGDf9P03LYWBI98hGGDwGOZRXNg 5+PA8o3IROl8fnLD3+/uTAn05B5ps5Y= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:49 2024 by rpki-client on console-ams.rpki-client.org