$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/173CA1AABCA011ED914D176DC4F9AE02.roa File: 173CA1AABCA011ED914D176DC4F9AE02.roa (raw, json) Hash identifier: ZtA42MiYiR48zZwCRwa0egur+P+IXymEJJp62pzAS3Q= Subject key identifier: CC:78:7C:93:B7:74:37:70:C0:3F:FF:96:10:82:53:0F:19:61:CC:49 Certificate issuer: /CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Certificate serial: 2036 Authority key identifier: FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/173CA1AABCA011ED914D176DC4F9AE02.roa Signing time: Wed 26 Jun 2024 09:15:37 +0000 ROA not before: Wed 26 Jun 2024 09:15:37 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 64072 IP address blocks: 103.25.120.0/22 maxlen: 24 2404:bc80::/32 maxlen: 32 2404:bc80::/48 maxlen: 48 2404:bc80:1::/48 maxlen: 48 2404:bc80:2::/48 maxlen: 48 2404:bc80:3::/48 maxlen: 48 2404:bc80:4::/48 maxlen: 48 2404:bc80:5::/48 maxlen: 48 2404:bc80:6::/48 maxlen: 48 2404:bc80:7::/48 maxlen: 48 2404:bc80:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8246 (0x2036) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Validity Not Before: Jun 26 09:15:37 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=667bdc39-2cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f7:b0:0a:d4:2b:de:94:a9:88:cd:4c:4b:07: ad:8c:90:f7:08:9a:fe:fa:a3:fa:cc:8b:68:0c:4a: a5:a0:00:3a:3f:6e:ce:d6:5f:0c:9d:2a:6c:5c:b1: 99:a6:26:d9:80:7f:d4:1a:42:29:40:5d:5e:00:95: 80:23:a3:08:0b:a0:bc:86:47:27:13:b7:2f:0f:42: 08:d1:7d:e5:cc:9f:39:4a:c3:47:e2:c6:94:a4:59: 9f:24:b4:6a:95:75:c7:d9:c4:41:67:26:d7:18:27: f8:de:2f:0d:64:73:48:8e:7f:15:37:ff:16:ec:cd: 55:4e:9a:ad:45:13:29:aa:86:df:03:d1:7d:df:92: 8a:a1:c7:bb:b6:dc:d4:7e:02:65:22:0f:ff:4f:15: 2b:21:a5:f6:db:46:92:68:10:98:89:a1:2b:32:f7: 11:0a:c5:6e:65:17:45:6b:93:c2:30:2b:f3:d2:f9: 07:66:da:37:ff:7d:64:e3:73:3f:48:36:98:06:44: 1a:7d:6c:9c:94:1d:33:ad:0b:d4:9c:ea:1b:db:81: 58:fd:8a:c3:f5:76:7e:1c:dd:da:c5:c0:fd:f9:63: 41:a4:3d:2e:c0:c9:15:be:31:f3:3a:84:eb:07:c3: 69:1c:48:d6:da:9a:12:35:7c:da:54:43:02:54:1b: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:78:7C:93:B7:74:37:70:C0:3F:FF:96:10:82:53:0F:19:61:CC:49 X509v3 Authority Key Identifier: keyid:FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/173CA1AABCA011ED914D176DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.25.120.0/22 IPv6: 2404:bc80::/32 Signature Algorithm: sha256WithRSAEncryption 3a:53:00:58:d7:91:01:d7:7d:14:ff:d9:e8:97:65:af:91:79: 73:f4:b9:d3:84:b8:98:76:47:9f:af:83:7a:e7:55:62:89:4c: e5:dc:1e:4a:1a:08:49:73:c7:ab:09:8c:e1:e8:0b:f0:b2:e6: 07:6f:14:4e:97:14:b4:c6:9c:07:e6:f3:bb:fd:71:b6:60:5f: c5:87:7d:50:65:ee:bf:7e:27:d4:99:41:eb:bf:48:16:71:86: 13:46:ca:ab:3c:46:e9:82:b6:62:f1:79:b1:cc:4d:01:b9:71: d9:9e:1b:26:fc:73:0b:ec:de:3a:81:b7:d3:2b:14:eb:89:01: 8b:2f:ed:fe:c0:e8:83:b1:15:3e:39:f4:8f:5f:76:10:51:b5: 17:b6:14:41:cb:4f:4a:96:b3:67:06:2f:0e:95:5d:0e:6f:15: 2e:54:97:60:65:26:d2:cc:92:f8:37:b2:28:47:ab:f4:75:47: 0d:79:a0:b5:d1:95:07:d7:bb:7b:07:99:d3:bc:ec:3a:9b:af: c1:34:5b:96:1f:41:71:1d:9d:c1:62:c0:c9:b1:13:a9:55:34: ac:89:d1:ec:a1:f7:be:30:74:56:54:4f:49:f7:6b:36:bd:77: 30:2e:48:5f:11:23:d7:9c:d1:c7:54:b2:45:36:75:5c:46:28: c3:91:71:aa -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICIDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1MzQxMTAvBgNVBAUTKEZFMUQ1QkY5MDJGQTkxMkQ3RTBCNUU5ODBDRjkxREJE RkQyQkI2NEYwHhcNMjQwNjI2MDkxNTM3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdiZGMzOS0yY2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5vewCtQr3pSpiM1MSwetjJD3CJr++qP6zItoDEqloAA6P27O1l8MnSpsXLGZ pibZgH/UGkIpQF1eAJWAI6MIC6C8hkcnE7cvD0II0X3lzJ85SsNH4saUpFmfJLRq lXXH2cRBZybXGCf43i8NZHNIjn8VN/8W7M1VTpqtRRMpqobfA9F935KKoce7ttzU fgJlIg//TxUrIaX220aSaBCYiaErMvcRCsVuZRdFa5PCMCvz0vkHZto3/31k43M/ SDaYBkQafWyclB0zrQvUnOob24FY/YrD9XZ+HN3axcD9+WNBpD0uwMkVvjHzOoTr B8NpHEjW2poSNXzaVEMCVBt6PQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMx4fJO3 dDdwwD//lhCCUw8ZYcxJMB8GA1UdIwQYMBaAFP4dW/kC+pEtfgtemAz5Hb39K7ZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODUzNC82RTZBNDYyQ0ZF REQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtTMS1DMTZZRFBrZHZmMHJ0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19oMWItUUw2a1MxLUMxNllEUGtkdmYwcnRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg1MzQvNkU2QTQ2MkNGRUREMTFFNUI0OTA1RDdDQzRGOUFFMDIvMTczQ0ExQUFC Q0EwMTFFRDkxNEQxNzZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnGXgwDQQCAAIwBwMFACQEvIAwDQYJKoZIhvcNAQELBQAD ggEBADpTAFjXkQHXfRT/2eiXZa+ReXP0udOEuJh2R5+vg3rnVWKJTOXcHkoaCElz x6sJjOHoC/Cy5gdvFE6XFLTGnAfm87v9cbZgX8WHfVBl7r9+J9SZQeu/SBZxhhNG yqs8RumCtmLxebHMTQG5cdmeGyb8cwvs3jqBt9MrFOuJAYsv7f7A6IOxFT459I9f dhBRtRe2FEHLT0qWs2cGLw6VXQ5vFS5Ul2BlJtLMkvg3sihHq/R1Rw15oLXRlQfX u3sHmdO87Dqbr8E0W5YfQXEdncFiwMmxE6lVNKyJ0eyh974wdFZUT0n3aza9dzAu SF8RI9ec0cdUskU2dVxGKMORcao= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:23 2024 by rpki-client on console-fra.rpki-client.org