$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/8A162CBC5CC011EEAD18A95CC4F9AE02.roa File: 8A162CBC5CC011EEAD18A95CC4F9AE02.roa (raw, json) Hash identifier: rEAT4gefcZZU44A5t6u/DPJuHuAnismT6uJCr5cyCuY= Subject key identifier: 2E:C1:FE:70:68:8D:C5:E6:60:B0:C7:97:C7:98:F2:6E:0F:A8:ED:FF Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B Certificate serial: 0670 Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/8A162CBC5CC011EEAD18A95CC4F9AE02.roa Signing time: Sun 07 Jul 2024 17:58:11 +0000 ROA not before: Sun 07 Jul 2024 17:58:10 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 138968 IP address blocks: 103.242.0.0/22 maxlen: 24 2400:be80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B Validity Not Before: Jul 7 17:58:10 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=668ad732-4970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c2:be:89:b9:13:e3:65:7e:36:62:6f:23:9c: ea:3f:5b:d2:3b:ff:ba:65:86:7e:7a:d0:52:28:34: 35:0a:38:dc:6d:a7:5b:f5:4e:f5:02:38:de:d7:28: 8a:ec:98:de:ba:c3:ec:ca:ac:40:e4:42:6f:4e:9f: bf:4a:f5:13:88:24:1e:93:16:8f:4c:f7:4f:af:92: ce:f7:84:2a:bb:0e:68:c7:d2:14:79:48:8f:de:0f: f1:f7:8d:46:07:6b:63:b5:d5:44:cb:d9:f6:81:6f: 33:f2:00:30:eb:67:07:9e:1d:9b:4f:3e:ca:d6:31: 17:1a:c0:8a:83:c6:35:43:96:82:48:af:80:05:0d: a1:f2:f7:e1:97:a7:b2:9a:eb:96:d5:1b:92:97:1c: 6e:2b:b3:3c:80:6d:8f:b3:6c:bc:bb:ad:76:cd:ef: b8:8a:49:5d:46:45:fe:c3:46:65:4e:83:2e:42:50: 1c:54:73:ec:79:2f:b9:b8:56:2c:5e:35:c3:a2:e2: 0f:a2:b3:09:61:58:4d:5f:b2:78:e0:b1:11:fd:45: 50:de:41:d0:a7:3e:40:29:7f:0c:09:11:c3:70:e0: 6f:1b:f3:6d:1b:32:db:6a:ff:61:82:b6:b9:5b:19: 4a:7c:47:fd:4a:20:62:12:99:4f:54:b3:95:ef:38: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C1:FE:70:68:8D:C5:E6:60:B0:C7:97:C7:98:F2:6E:0F:A8:ED:FF X509v3 Authority Key Identifier: keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/8A162CBC5CC011EEAD18A95CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.242.0.0/22 IPv6: 2400:be80::/32 Signature Algorithm: sha256WithRSAEncryption 71:c4:c6:46:9f:6e:32:2d:e6:59:a3:7d:da:32:16:a3:a7:19: da:42:cb:7a:61:a8:0d:56:b4:d6:52:04:cb:86:3e:2f:81:41: f3:e5:63:e7:73:80:75:71:07:cc:60:d8:e8:5f:b8:3d:78:91: b6:26:2c:00:56:5d:c7:28:59:44:bb:b1:ce:62:2d:78:69:8e: 7e:44:d9:34:bb:20:90:49:a7:a4:92:97:f0:4f:e7:15:12:8a: 23:ef:6a:d7:85:95:b6:18:f0:12:9d:06:30:58:33:1a:18:3e: ac:47:bf:99:b3:a7:7f:03:95:8a:58:c6:97:56:c1:fc:bb:b6: 2a:e8:cc:6c:06:c5:3f:4d:3b:5a:20:63:16:78:82:20:a5:8b: e3:57:af:d5:7e:61:75:dc:73:44:ed:5c:e9:81:dd:57:1d:ae: 62:6f:92:45:8c:e2:0e:db:1e:8d:40:d6:54:ef:7a:8d:56:5e: d2:b4:15:4e:b6:63:1b:9f:e1:1e:e8:a4:42:0b:73:10:f6:6c: e9:e3:fb:0a:f6:04:83:74:8f:9f:d9:71:94:bf:79:1c:54:5f: b2:b9:ed:9b:09:31:02:6e:8e:71:57:a5:cf:87:0a:e5:7f:66: 5d:9a:42:4f:8d:91:89:7a:e3:cb:d6:b4:f6:3b:9e:f2:c6:80: 30:d5:25:ea -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2NjUxMTAvBgNVBAUTKDMwNThBNDY5QjY3RDAzMDcyQzJEOEEzODVFOUYyQUFC QkExMzRFMkIwHhcNMjQwNzA3MTc1ODEwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjhhZDczMi00OTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMK+ibkT42V+NmJvI5zqP1vSO/+6ZYZ+etBSKDQ1Cjjcbadb9U71Ajje1yiK 7JjeusPsyqxA5EJvTp+/SvUTiCQekxaPTPdPr5LO94Qquw5ox9IUeUiP3g/x941G B2tjtdVEy9n2gW8z8gAw62cHnh2bTz7K1jEXGsCKg8Y1Q5aCSK+ABQ2h8vfhl6ey muuW1RuSlxxuK7M8gG2Ps2y8u612ze+4ikldRkX+w0ZlToMuQlAcVHPseS+5uFYs XjXDouIPorMJYVhNX7J44LER/UVQ3kHQpz5AKX8MCRHDcOBvG/NtGzLbav9hgra5 WxlKfEf9SiBiEplPVLOV7zixfQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFC7B/nBo jcXmYLDHl8eY8m4PqO3/MB8GA1UdIwQYMBaAFDBYpGm2fQMHLC2KOF6fKqu6E04r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTY2NS82RDBEMTJCODRC RjUxMUVCQkQ4M0I4N0JDNEY5QUUwMi9NRmlrYWJaOUF3Y3NMWW80WHA4cXE3b1RU aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01GaWthYlo5QXdjc0xZbzRYcDhxcTdvVFRpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjk2NjUvNkQwRDEyQjg0QkY1MTFFQkJEODNCODdCQzRGOUFFMDIvOEExNjJDQkM1 Q0MwMTFFRUFEMThBOTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn8gAwDQQCAAIwBwMFACQAvoAwDQYJKoZIhvcNAQELBQAD ggEBAHHExkafbjIt5lmjfdoyFqOnGdpCy3phqA1WtNZSBMuGPi+BQfPlY+dzgHVx B8xg2OhfuD14kbYmLABWXccoWUS7sc5iLXhpjn5E2TS7IJBJp6SSl/BP5xUSiiPv ateFlbYY8BKdBjBYMxoYPqxHv5mzp38DlYpYxpdWwfy7tirozGwGxT9NO1ogYxZ4 giCli+NXr9V+YXXcc0TtXOmB3VcdrmJvkkWM4g7bHo1A1lTveo1WXtK0FU62Yxuf 4R7opEILcxD2bOnj+wr2BIN0j5/ZcZS/eRxUX7K57ZsJMQJujnFXpc+HCuV/Zl2a Qk+NkYl648vWtPY7nvLGgDDVJeo= -----END CERTIFICATE-----Generated at Wed Nov 20 23:56:03 2024 by rpki-client on console-ams.rpki-client.org