$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/FFDA736894CB11ECA827746DC4F9AE02.roa File: FFDA736894CB11ECA827746DC4F9AE02.roa (raw, json) Hash identifier: nbCviYG6ZU2PoxH5R9L614zoQP6hvAN/12PgWuwOdEc= Subject key identifier: 81:CC:A0:26:CD:08:C9:4C:16:08:FE:67:98:7F:47:DD:10:96:20:C5 Certificate issuer: /CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C Certificate serial: 02C1 Authority key identifier: 41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/FFDA736894CB11ECA827746DC4F9AE02.roa Signing time: Sat 17 Feb 2024 03:05:18 +0000 ROA not before: Sat 17 Feb 2024 03:05:18 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 149505 IP address blocks: 103.181.104.0/23 maxlen: 23 103.181.104.0/24 maxlen: 24 103.181.105.0/24 maxlen: 24 2001:df0:6bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C Validity Not Before: Feb 17 03:05:18 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d0226e-2ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:24:c8:5d:05:aa:2c:17:39:05:9b:6f:e0: e9:80:d1:d0:15:83:f9:12:2b:f0:f8:25:78:7e:3e: ea:38:64:f1:09:9c:89:c0:20:c1:eb:33:f6:c0:7c: 6e:99:86:d1:dc:8a:6c:ce:4b:b6:1e:af:15:4f:c5: 48:dc:50:7b:ab:11:17:c7:64:fd:27:e5:f9:cc:45: 5b:14:13:95:0e:23:0a:7d:d9:5f:b5:35:90:de:98: 02:20:11:55:86:0d:8f:db:25:4e:75:43:e8:a1:02: a3:45:9c:4f:82:64:cd:e1:a8:14:73:ad:bb:2e:9c: e8:7a:35:16:74:0e:cc:47:a7:1f:a9:84:c1:6b:8d: a2:21:74:8f:dd:4f:62:7f:f3:b5:cc:48:2d:5e:38: 18:42:94:61:1d:16:dc:45:3a:87:0c:a1:15:39:8c: cd:f4:ee:e5:d9:d0:d4:65:05:fd:43:90:77:c9:6a: 3e:8b:d3:e8:a3:ff:c5:ab:c6:97:16:30:6f:bb:d3: 55:95:8a:05:b1:7e:87:76:69:5e:cc:a4:c4:1d:1d: e8:be:bd:08:fa:c8:9b:a2:b8:d4:ef:fc:4c:01:88: 7d:9c:90:02:a8:2f:3f:ec:bb:1a:e2:8e:e2:4b:06: 2c:9e:73:3f:ef:f6:3a:60:4b:70:18:bd:ac:58:ad: f4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CC:A0:26:CD:08:C9:4C:16:08:FE:67:98:7F:47:DD:10:96:20:C5 X509v3 Authority Key Identifier: keyid:41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/FFDA736894CB11ECA827746DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.104.0/23 IPv6: 2001:df0:6bc0::/48 Signature Algorithm: sha256WithRSAEncryption 8e:7d:b8:62:fd:c7:8e:ba:ed:81:e8:d5:51:00:09:2d:bc:5a: 67:fb:4b:e6:70:d8:bf:71:e1:e8:52:44:62:f1:db:4e:40:b0: 43:0c:0e:a9:ba:3e:5e:1d:98:77:8c:39:73:65:c7:21:5a:2e: 6f:f6:52:b0:fd:db:c6:b8:29:8c:10:96:40:79:d4:45:5b:ca: aa:c9:9e:4c:a3:72:de:4c:ce:11:8e:7d:b2:b4:e4:b1:93:d9: 16:65:12:a7:23:27:0c:0c:2b:86:16:aa:13:75:9d:6b:d9:d4: 8f:0e:d9:e8:90:64:bb:ce:06:2e:87:0e:2c:d8:3c:59:4b:a0: 14:4e:6f:f8:e8:27:17:22:99:fb:49:85:78:e2:6e:5a:f3:32: be:39:f2:72:bb:53:3b:cf:64:98:07:ea:c8:cc:5c:79:92:52: 9a:0b:2d:27:be:e4:54:d3:2c:6f:08:cb:7b:5c:3a:0f:70:57: 86:17:81:af:6e:ca:e1:75:c5:14:eb:72:07:45:6d:4c:07:23: b1:24:d5:f8:9e:c4:42:16:c8:ed:61:8f:22:0b:3c:ae:23:b7: 94:ea:1f:08:51:da:b8:dc:a1:fd:b4:f4:dd:dc:b6:d0:8a:d7: 75:6d:32:db:af:cc:8d:98:67:9e:e2:b1:33:23:52:96:92:e1: 1b:ff:11:95 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM4QzkxMTAvBgNVBAUTKDQxMjNBQzJFQzA2OUQyRUYyNzIwMUY0REJDQUFDNkMx OTEyMTkwMkMwHhcNMjQwMjE3MDMwNTE4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQwMjI2ZS0yZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI4kyF0FqiwXOQWbb+DpgNHQFYP5Eivw+CV4fj7qOGTxCZyJwCDB6zP2wHxu mYbR3Ipszku2Hq8VT8VI3FB7qxEXx2T9J+X5zEVbFBOVDiMKfdlftTWQ3pgCIBFV hg2P2yVOdUPooQKjRZxPgmTN4agUc627LpzoejUWdA7MR6cfqYTBa42iIXSP3U9i f/O1zEgtXjgYQpRhHRbcRTqHDKEVOYzN9O7l2dDUZQX9Q5B3yWo+i9Poo//Fq8aX FjBvu9NVlYoFsX6HdmlezKTEHR3ovr0I+siborjU7/xMAYh9nJACqC8/7Lsa4o7i SwYsnnM/7/Y6YEtwGL2sWK30CwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIHMoCbN CMlMFgj+Z5h/R90QliDFMB8GA1UdIwQYMBaAFEEjrC7AadLvJyAfTbyqxsGRIZAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzhDOS83MzhEREZDNDk0 QzgxMUVDOTVDQjk3NjVDNEY5QUUwMi9RU09zTHNCcDB1OG5JQjlOdktyR3daRWhr Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTT3NMc0JwMHU4bklCOU52S3JHd1pFaGtDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUM4QzkvNzM4RERGQzQ5NEM4MTFFQzk1Q0I5NzY1QzRGOUFFMDIvRkZEQTczNjg5 NENCMTFFQ0E4Mjc3NDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntWgwDwQCAAIwCQMHACABDfBrwDANBgkqhkiG9w0BAQsF AAOCAQEAjn24Yv3HjrrtgejVUQAJLbxaZ/tL5nDYv3Hh6FJEYvHbTkCwQwwOqbo+ Xh2Yd4w5c2XHIVoub/ZSsP3bxrgpjBCWQHnURVvKqsmeTKNy3kzOEY59srTksZPZ FmUSpyMnDAwrhhaqE3Wda9nUjw7Z6JBku84GLocOLNg8WUugFE5v+OgnFyKZ+0mF eOJuWvMyvjnycrtTO89kmAfqyMxceZJSmgstJ77kVNMsbwjLe1w6D3BXhheBr27K 4XXFFOtyB0VtTAcjsSTV+J7EQhbI7WGPIgs8riO3lOofCFHauNyh/bT03dy20IrX dW0y26/MjZhnnuKxMyNSlpLhG/8RlQ== -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org