$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/81D3C438E5E611E9A31D0F15C4F9AE02.roa File: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (raw, json) Hash identifier: t/3xs1tllIZ0lEVRUOVq7qYsLRIvRot539D1245Vi/I= Subject key identifier: BF:7D:67:C4:3D:94:B1:D6:E1:12:82:5F:51:D9:AA:89:51:4C:77:0C Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Certificate serial: 0BFD Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/81D3C438E5E611E9A31D0F15C4F9AE02.roa Signing time: Fri 22 Dec 2023 19:06:59 +0000 ROA not before: Fri 22 Dec 2023 19:06:59 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 14630 IP address blocks: 103.124.124.0/24 maxlen: 24 103.124.125.0/24 maxlen: 24 103.124.126.0/24 maxlen: 24 103.124.127.0/24 maxlen: 24 2403:df40::/32 maxlen: 32 2403:df40:14::/48 maxlen: 48 2403:df40:15::/48 maxlen: 48 2403:df40:16::/48 maxlen: 48 2403:df40:117::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3069 (0xbfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Validity Not Before: Dec 22 19:06:59 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6585de53-6469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cc:fe:f0:5a:19:76:8f:68:cd:de:a7:a2:c3: a8:7f:fa:b8:bf:c8:37:fb:73:a9:50:9a:de:9a:3e: 7b:fb:62:bb:d8:62:fb:94:3f:67:c5:e4:1b:17:9c: ff:d6:09:fd:99:fd:e9:05:43:45:c0:d5:d1:3f:61: f9:69:e9:02:2b:56:bd:8a:b4:4f:e8:66:1e:2e:43: b7:a8:75:d7:f4:f8:72:2e:ca:3d:19:21:ba:ac:6f: 6a:74:e3:b1:08:ef:c5:72:72:0a:47:2d:74:79:81: 24:ea:3f:2f:97:a2:e3:d6:04:1e:0b:a6:70:ed:66: 04:83:e6:87:2a:78:c2:59:30:e7:83:5a:22:52:49: 88:54:b2:73:1a:34:6b:ad:05:49:15:02:01:84:94: 58:eb:5c:23:a2:d3:18:59:bf:20:9d:33:93:ff:8f: 8c:9f:ef:d6:ec:7f:94:11:3d:07:f5:59:39:90:91: ee:1f:3f:b8:ef:ab:51:bb:79:74:a2:b4:88:8e:ed: 4d:6e:ef:bb:2c:55:6d:a7:0d:08:5d:03:e3:0c:35: 7b:62:a1:04:ad:36:ae:c0:24:af:63:62:9f:eb:d0: b9:ed:17:7d:5c:24:4e:6e:6b:3e:d3:af:20:db:f2: 8b:f2:d4:d6:26:0d:6a:e4:e9:f3:e6:5f:ef:b0:95: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7D:67:C4:3D:94:B1:D6:E1:12:82:5F:51:D9:AA:89:51:4C:77:0C X509v3 Authority Key Identifier: keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/81D3C438E5E611E9A31D0F15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.124.0/22 IPv6: 2403:df40::/32 Signature Algorithm: sha256WithRSAEncryption 18:87:07:b7:34:01:36:b8:7b:d7:86:b4:37:8c:7f:8b:08:29: 49:f7:16:79:7f:22:b1:89:a6:eb:9a:2d:60:61:50:63:92:2e: 2d:af:65:fa:88:70:22:7e:59:43:13:8a:70:00:22:f0:ad:6c: e9:29:66:e6:55:11:3f:f4:1e:28:a6:16:3a:fa:49:6a:a7:05: 26:c6:05:7c:9e:af:b5:78:33:6f:36:1f:fc:d0:20:78:43:b0: c8:d5:46:16:2b:3a:01:f5:27:a6:e4:0c:38:a6:40:e0:a4:6a: c1:ab:76:ce:39:f1:a8:e0:a1:cf:e3:78:b4:cb:64:da:8d:d2: 74:b2:63:78:a7:16:03:67:b3:d4:95:ac:62:cf:e1:61:61:7d: 13:01:76:a7:f5:24:91:fa:8c:3f:71:61:ff:92:09:d6:03:3c: 0d:ac:1a:27:ce:8e:01:21:f0:d6:94:53:87:6b:6b:cf:1d:37: 47:65:ed:77:35:60:d9:ef:b7:90:fc:b4:1c:ef:df:f1:b6:7a: 2b:18:d7:9c:97:82:36:bd:3c:1b:8c:ea:3e:f0:96:d0:f5:56: 81:95:f0:b6:ba:33:43:6f:0e:70:66:45:d8:c5:a6:cf:8c:4e: c0:eb:46:74:63:99:1c:bd:33:7d:e2:e2:ef:dd:9c:ac:85:75: f0:d0:a4:ed -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF MjA2MUM1QzEwHhcNMjMxMjIyMTkwNjU5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTg1ZGU1My02NDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMz+8FoZdo9ozd6nosOof/q4v8g3+3OpUJremj57+2K72GL7lD9nxeQbF5z/ 1gn9mf3pBUNFwNXRP2H5aekCK1a9irRP6GYeLkO3qHXX9PhyLso9GSG6rG9qdOOx CO/FcnIKRy10eYEk6j8vl6Lj1gQeC6Zw7WYEg+aHKnjCWTDng1oiUkmIVLJzGjRr rQVJFQIBhJRY61wjotMYWb8gnTOT/4+Mn+/W7H+UET0H9Vk5kJHuHz+476tRu3l0 orSIju1Nbu+7LFVtpw0IXQPjDDV7YqEErTauwCSvY2Kf69C57Rd9XCRObms+068g 2/KL8tTWJg1q5Onz5l/vsJWYaQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFL99Z8Q9 lLHW4RKCX1HZqolRTHcMMB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1 RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU5QTYvNDA4NDhDM0VFNUU1MTFFOTlGMUY3QzEzQzRGOUFFMDIvODFEM0M0MzhF NUU2MTFFOUEzMUQwRjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfHwwDQQCAAIwBwMFACQD30AwDQYJKoZIhvcNAQELBQAD ggEBABiHB7c0ATa4e9eGtDeMf4sIKUn3Fnl/IrGJpuuaLWBhUGOSLi2vZfqIcCJ+ WUMTinAAIvCtbOkpZuZVET/0HiimFjr6SWqnBSbGBXyer7V4M282H/zQIHhDsMjV RhYrOgH1J6bkDDimQOCkasGrds458ajgoc/jeLTLZNqN0nSyY3inFgNns9SVrGLP 4WFhfRMBdqf1JJH6jD9xYf+SCdYDPA2sGifOjgEh8NaUU4dra88dN0dl7Xc1YNnv t5D8tBzv3/G2eisY15yXgja9PBuM6j7wltD1VoGV8La6M0NvDnBmRdjFps+MTsDr RnRjmRy9M33i4u/dnKyFdfDQpO0= -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:11 2024 by rpki-client on console-ams.rpki-client.org