$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/B0D084CC9AAB11EFAEA9A178C4F9AE02.roa File: B0D084CC9AAB11EFAEA9A178C4F9AE02.roa (raw, json) Hash identifier: fjyX2RfOmg6f9yVXW0sBxbxsI7qZZGdjm0T3kgyFLM4= Subject key identifier: A7:9D:9D:8E:72:65:24:55:9F:57:35:DD:7B:0F:A5:DB:39:2A:74:37 Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Certificate serial: D4 Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/B0D084CC9AAB11EFAEA9A178C4F9AE02.roa Signing time: Mon 04 Nov 2024 12:52:47 +0000 ROA not before: Mon 04 Nov 2024 12:52:47 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 139008 IP address blocks: 103.213.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Validity Not Before: Nov 4 12:52:47 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6728c39f-271c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:26:2e:ec:3a:5b:98:6c:2e:c5:06:f8:71: b4:7b:0e:7a:1c:bd:03:5f:5a:4f:ca:7e:5f:8c:57: 06:96:8b:9b:db:bb:6d:30:3d:d2:03:9c:b2:6e:32: df:46:c9:ca:e1:04:20:cb:db:86:c2:bf:bb:ec:8a: 9d:80:82:df:5d:ee:4b:cb:a0:b6:e0:ad:0e:96:26: 86:6d:d2:f3:0a:d1:56:aa:a3:57:d6:8b:01:da:7b: 79:7d:77:86:46:a0:b4:02:da:e4:69:0d:24:37:42: 75:12:da:0e:e2:47:fa:10:d5:a6:e2:41:77:66:52: d3:e0:80:39:d4:65:99:00:cb:89:e8:a9:4e:bf:a8: 79:27:65:a2:fa:37:bf:03:b0:47:92:17:36:64:a4: fa:db:f7:ab:89:e7:2e:77:fe:26:9c:79:b0:59:39: 9e:e6:78:e0:c3:6f:44:17:f2:ee:6a:1a:ec:cf:4f: 9e:9b:05:a7:91:c9:0a:09:09:88:7c:75:1f:24:35: c6:77:fc:5e:f8:ce:9a:8a:b6:07:4e:9c:3b:41:1f: 73:5b:36:8d:bc:f5:ff:0c:3a:15:45:61:72:71:3d: 57:8b:70:c4:00:3f:ea:92:53:52:26:8a:83:6a:b7: b0:14:c5:12:0c:52:f1:80:a1:19:86:fc:73:51:c9: 22:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9D:9D:8E:72:65:24:55:9F:57:35:DD:7B:0F:A5:DB:39:2A:74:37 X509v3 Authority Key Identifier: keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/B0D084CC9AAB11EFAEA9A178C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.213.221.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:54:7a:e2:d4:71:dd:4b:c0:f1:76:84:38:47:96:b7:6d:8f: 50:90:11:b2:14:35:04:6c:fe:29:56:a0:0a:ce:ea:e9:97:3e: 9f:62:21:85:18:95:82:c5:8a:b3:20:d2:ad:cb:bb:14:5d:f9: 34:16:e0:a8:c1:a1:23:64:99:68:13:de:b3:73:df:d9:93:94: 64:9d:6d:aa:41:f4:f9:57:37:83:f9:e8:e8:87:67:ea:50:63: dd:3b:79:69:d3:40:4e:d6:ca:bc:3a:7f:56:19:73:b0:20:84: 21:18:05:01:df:5a:b0:6f:54:4b:e7:b9:fd:1b:16:17:e9:a7: 5e:b7:a9:a2:59:37:34:47:75:7a:66:20:9e:a4:15:01:bc:9d: fe:91:bc:65:87:c2:f3:9e:04:df:e6:b6:2f:8f:da:e5:9d:26: 99:bd:a8:12:98:c8:dc:41:a8:e6:7b:9e:71:1c:5e:2d:78:12: 8e:35:41:ed:5f:cf:94:54:79:f0:ed:b3:45:2a:93:01:41:74: 0b:1c:83:82:4c:30:84:26:2f:7a:59:e1:f9:5b:f5:ea:2f:ad: 1b:fe:07:de:a0:80:f3:ee:72:02:b4:d9:3f:4c:32:dd:19:6b: 12:82:ec:7b:0e:ab:96:80:5c:97:9c:6a:53:b8:45:09:2a:fc: 72:e8:5d:fc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5RUMxMTAvBgNVBAUTKEUxQjlBNkVCMEM4RkFGRjdGNTRDNjhDMDU2MjRBMjhD RkQzRkFERUMwHhcNMjQxMTA0MTI1MjQ3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI4YzM5Zi0yNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3g0mLuw6W5hsLsUG+HG0ew56HL0DX1pPyn5fjFcGloub27ttMD3SA5yybjLf RsnK4QQgy9uGwr+77IqdgILfXe5Ly6C24K0OliaGbdLzCtFWqqNX1osB2nt5fXeG RqC0AtrkaQ0kN0J1EtoO4kf6ENWm4kF3ZlLT4IA51GWZAMuJ6KlOv6h5J2Wi+je/ A7BHkhc2ZKT62/eriecud/4mnHmwWTme5njgw29EF/Luahrsz0+emwWnkckKCQmI fHUfJDXGd/xe+M6airYHTpw7QR9zWzaNvPX/DDoVRWFycT1Xi3DEAD/qklNSJoqD arewFMUSDFLxgKEZhvxzUckiiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKednY5y ZSRVn1c13XsPpds5KnQ3MB8GA1UdIwQYMBaAFOG5pusMj6/39UxowFYkooz9P63s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlFQy8xMzU1RTc1MjY2 QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJfZjFUR2pBVmlTaWpQMF9y ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjM5RUMvMTM1NUU3NTI2NkJCMTFFRTg0NjJFRTg0QzRGOUFFMDIvQjBEMDg0Q0M5 QUFCMTFFRkFFQTlBMTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn1d0wDQYJKoZIhvcNAQELBQADggEBAH9UeuLUcd1LwPF2 hDhHlrdtj1CQEbIUNQRs/ilWoArO6umXPp9iIYUYlYLFirMg0q3LuxRd+TQW4KjB oSNkmWgT3rNz39mTlGSdbapB9PlXN4P56OiHZ+pQY907eWnTQE7Wyrw6f1YZc7Ag hCEYBQHfWrBvVEvnuf0bFhfpp163qaJZNzRHdXpmIJ6kFQG8nf6RvGWHwvOeBN/m ti+P2uWdJpm9qBKYyNxBqOZ7nnEcXi14Eo41Qe1fz5RUefDts0UqkwFBdAscg4JM MIQmL3pZ4flb9eovrRv+B96ggPPucgK02T9MMt0ZaxKC7HsOq5aAXJecalO4RQkq /HLoXfw= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org