$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa File: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (raw, json) Hash identifier: Rkwjwwz10qgJT86xyhauvrRZPrkV1Yaz2EgapqKprnA= Subject key identifier: C9:38:14:92:30:5A:94:69:B5:8A:C7:23:36:A8:AD:DA:97:CE:60:00 Certificate issuer: /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Certificate serial: 0289 Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa Signing time: Sun 22 Sep 2024 08:44:59 +0000 ROA not before: Sun 22 Sep 2024 08:44:59 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 134715 IP address blocks: 103.179.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Validity Not Before: Sep 22 08:44:59 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=66efd90a-be0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:01:f5:7e:00:da:2c:a5:70:f1:14:f0:a8:45: 3c:ec:b3:27:10:01:b1:fa:54:65:c4:47:19:58:28: 2b:64:f3:9b:a4:1a:12:46:e5:47:60:89:f1:61:cc: 96:9c:b2:26:02:a4:31:60:a9:66:e3:1c:00:bf:8c: 5b:22:3a:8b:94:bf:29:83:f5:00:67:0d:04:76:b2: 33:f7:ea:7b:71:99:fb:3b:13:95:7a:4a:a8:46:4b: 30:d3:80:58:5d:f2:43:97:a7:88:58:3a:31:6b:e8: 12:97:b6:31:f7:ab:f2:17:61:48:2d:32:24:6d:6c: 36:f0:bf:1e:68:d7:92:37:7f:11:bf:85:dc:ac:9f: 6b:bd:b4:aa:b2:a2:d8:03:81:38:4a:37:40:1f:c6: 2a:94:47:92:36:2d:f1:19:db:53:6f:4c:b6:4b:0a: 9b:47:5c:f2:58:d7:25:29:70:3a:05:47:96:8c:7a: fb:0f:d6:91:b8:f0:71:43:48:9f:5f:7f:dd:d5:9b: 97:95:1e:1f:8d:02:97:99:70:5c:95:12:da:a1:e7: 4a:71:2b:88:36:8c:b4:42:ce:47:95:32:74:d1:08: b5:d0:f0:e6:11:43:b9:84:97:79:12:bc:49:5c:3f: 43:a0:cc:d5:2f:d9:18:d8:fe:d3:23:c0:4b:51:31: 28:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:38:14:92:30:5A:94:69:B5:8A:C7:23:36:A8:AD:DA:97:CE:60:00 X509v3 Authority Key Identifier: keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.206.0/23 Signature Algorithm: sha256WithRSAEncryption 87:fd:ac:59:44:1e:48:be:54:11:4a:b6:19:0e:80:f7:b2:f3: bd:c7:eb:82:44:b3:8c:9f:62:9e:33:0e:b1:63:82:0b:fc:16: 91:8d:b1:55:4d:b3:3e:3d:c0:7d:c7:6d:39:35:2d:be:cf:98: 91:03:ff:d7:4c:e4:ea:b4:e2:1d:42:20:c6:e9:75:df:8c:9b: 40:1a:dc:00:2d:00:38:c6:9d:71:47:08:fa:2c:d9:ce:fc:1d: 94:95:4d:c6:ee:a6:12:6f:5a:c1:76:2c:fa:2c:a0:2c:76:12: 18:5e:2d:3b:e5:e4:e5:01:19:e6:8b:e8:2f:b1:f0:ed:b2:07: 6a:09:8e:57:3b:7e:82:8b:11:5b:2f:da:a9:c9:af:73:e5:c3: aa:3e:7e:01:00:b8:43:58:32:11:87:63:c4:97:b9:38:aa:d3: f0:19:4e:5f:b1:65:f0:29:f5:22:82:0b:a9:74:af:88:34:27: 44:31:e7:a0:29:3e:a2:d3:25:11:69:e5:a8:6e:d3:99:b5:27: 38:ef:d0:e6:94:71:03:df:9c:0d:24:2b:dc:ad:60:f3:41:40: 61:1a:7c:d4:28:60:5a:6b:d6:98:62:b4:71:53:1c:41:43:1b: 75:e3:8f:61:1a:61:f3:01:9d:d2:a2:0f:f4:79:23:8c:ca:fd: 3b:bf:36:21 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNTQxMTAvBgNVBAUTKDIyQjM3NDRFMTQ4OUE0QTUxMTJCQ0Q4Q0JGMTdBOThG RjFEQjY2NzUwHhcNMjQwOTIyMDg0NDU5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVmZDkwYS1iZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7wH1fgDaLKVw8RTwqEU87LMnEAGx+lRlxEcZWCgrZPObpBoSRuVHYInxYcyW nLImAqQxYKlm4xwAv4xbIjqLlL8pg/UAZw0EdrIz9+p7cZn7OxOVekqoRksw04BY XfJDl6eIWDoxa+gSl7Yx96vyF2FILTIkbWw28L8eaNeSN38Rv4XcrJ9rvbSqsqLY A4E4SjdAH8YqlEeSNi3xGdtTb0y2SwqbR1zyWNclKXA6BUeWjHr7D9aRuPBxQ0if X3/d1ZuXlR4fjQKXmXBclRLaoedKcSuINoy0Qs5HlTJ00Qi10PDmEUO5hJd5ErxJ XD9DoMzVL9kY2P7TI8BLUTEonQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMk4FJIw WpRptYrHIzaordqXzmAAMB8GA1UdIwQYMBaAFCKzdE4UiaSlESvNjL8XqY/x22Z1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI1NC83MjczNzVCNEQ0 RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBLVVJLODJNdnhlcGpfSGJa blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyTjBUaFNKcEtVUks4Mk12eGVwal9IYlpuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjJCNTQvNzI3Mzc1QjRENEY1MTFFQzhFMTNGRTRFQzRGOUFFMDIvRjJDOTFGNTY3 OEJFMTFFRkJCM0ZDNzZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFns84wDQYJKoZIhvcNAQELBQADggEBAIf9rFlEHki+VBFK thkOgPey873H64JEs4yfYp4zDrFjggv8FpGNsVVNsz49wH3HbTk1Lb7PmJED/9dM 5Oq04h1CIMbpdd+Mm0Aa3AAtADjGnXFHCPos2c78HZSVTcbuphJvWsF2LPosoCx2 EhheLTvl5OUBGeaL6C+x8O2yB2oJjlc7foKLEVsv2qnJr3Plw6o+fgEAuENYMhGH Y8SXuTiq0/AZTl+xZfAp9SKCC6l0r4g0J0Qx56ApPqLTJRFp5ahu05m1Jzjv0OaU cQPfnA0kK9ytYPNBQGEafNQoYFpr1phitHFTHEFDG3Xjj2EaYfMBndKiD/R5I4zK /Tu/NiE= -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:57 2024 by rpki-client on console-ams.rpki-client.org