$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/001209082A2111EAB1BF9C2EC4F9AE02.roa File: 001209082A2111EAB1BF9C2EC4F9AE02.roa (raw, json) Hash identifier: UrQLK1EA1WcvJrkNSpWHXgKfB78ZZNO0hE+SH1PfHhI= Subject key identifier: 8B:B8:10:70:6B:5B:8F:E6:B0:46:B1:0E:7D:0F:A6:F7:6B:2F:0E:17 Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Certificate serial: 0A79 Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/001209082A2111EAB1BF9C2EC4F9AE02.roa Signing time: Fri 22 Dec 2023 20:08:06 +0000 ROA not before: Fri 22 Dec 2023 20:08:06 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 139885 IP address blocks: 103.146.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2681 (0xa79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Validity Not Before: Dec 22 20:08:06 2023 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=6585eca6-1d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3c:31:b0:3c:7c:fc:8f:d2:b3:ce:69:f2:78: b9:8f:01:5a:f8:1f:dc:bb:78:ef:a6:58:a6:da:e1: 9e:e7:7e:96:a4:b5:bd:ca:2d:7d:56:55:8c:86:81: 03:d1:97:46:c5:ef:13:dc:bd:0b:2b:b2:44:37:c0: c7:9a:40:2d:ac:30:ab:99:cc:f6:f9:92:0c:6a:6b: 87:3d:d0:be:6a:86:7b:d9:50:d9:93:a6:c7:f1:66: 06:50:e6:53:8e:f8:8a:5e:61:70:b2:65:72:2a:cc: 47:de:9e:1c:bf:fa:e6:c2:f9:28:33:2b:bf:79:2c: 8e:b7:e3:2d:27:f5:22:14:7c:99:dc:c1:c1:6b:02: ed:79:80:e5:6f:4d:d3:24:00:1c:69:28:94:82:c9: 56:f2:15:5e:fd:62:76:48:ed:2b:40:d9:54:c5:7b: fd:b0:0d:9b:29:d6:86:87:bb:9e:2e:d0:17:6a:07: f0:98:5a:ca:c9:45:53:14:81:4e:fe:c6:2c:e6:f9: 2d:d5:97:f6:7f:c2:08:40:28:7b:3f:8e:77:22:19: 14:0e:54:cb:fb:8b:d6:da:2a:c3:db:bc:4d:27:bd: 37:16:90:df:97:d7:da:6f:cf:e3:c5:26:15:dc:89: a5:4e:52:69:ce:3c:94:0d:5b:34:d5:f5:8c:82:a9: 7d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B8:10:70:6B:5B:8F:E6:B0:46:B1:0E:7D:0F:A6:F7:6B:2F:0E:17 X509v3 Authority Key Identifier: keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/001209082A2111EAB1BF9C2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.146.0/24 Signature Algorithm: sha256WithRSAEncryption 03:02:82:c5:7b:ae:54:8b:6a:93:b7:61:4d:09:7a:2e:1d:46: 35:9e:53:99:cb:18:64:fb:be:2e:63:35:32:3d:e5:d8:29:c1: 36:6a:61:0e:b2:ca:c8:9b:5b:ce:1e:19:ef:8f:b5:26:8d:87: 1e:ad:7d:da:e2:fb:ce:78:b1:f6:ff:65:ac:02:a6:00:dc:ac: 07:7c:cb:9f:59:ae:fe:03:03:3e:fe:2f:37:b6:c1:33:51:0d: 1e:36:b9:e9:e2:6b:1e:81:59:00:91:a9:8c:1a:04:17:93:c9: cd:48:a8:93:7d:a6:f5:56:27:56:2c:05:15:23:90:0d:db:b0: b6:d6:6c:e1:6f:94:62:d7:21:9e:6e:ab:41:ce:1b:0f:25:f8: 48:3d:d3:f8:19:d4:26:55:e4:ea:a1:58:f3:1a:75:4a:85:de: b5:98:f4:bd:54:a0:bf:ba:89:f6:fd:0d:74:e6:be:01:64:f2: eb:1f:ee:c8:b6:d2:52:de:da:48:89:30:72:52:f8:3c:dd:0b: 3f:90:3d:cd:64:06:29:7b:83:61:05:d5:de:d4:36:c0:34:66: bb:4c:54:91:6f:4a:0f:cb:f3:5d:af:7a:4e:9f:44:95:7a:f7: b1:30:28:ed:3d:dd:4e:61:74:d3:b3:d2:e0:ab:c4:e3:ee:a0: e7:13:4e:57 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5 RDkwOThDMUMwHhcNMjMxMjIyMjAwODA2WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTg1ZWNhNi0xZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DwxsDx8/I/Ss85p8ni5jwFa+B/cu3jvplim2uGe536WpLW9yi19VlWMhoED 0ZdGxe8T3L0LK7JEN8DHmkAtrDCrmcz2+ZIMamuHPdC+aoZ72VDZk6bH8WYGUOZT jviKXmFwsmVyKsxH3p4cv/rmwvkoMyu/eSyOt+MtJ/UiFHyZ3MHBawLteYDlb03T JAAcaSiUgslW8hVe/WJ2SO0rQNlUxXv9sA2bKdaGh7ueLtAXagfwmFrKyUVTFIFO /sYs5vkt1Zf2f8IIQCh7P453IhkUDlTL+4vW2irD27xNJ703FpDfl9fab8/jxSYV 3ImlTlJpzjyUDVs01fWMgql9CwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIu4EHBr W4/msEaxDn0PpvdrLw4XMB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjlGODcvNzAyN0MyOUMyQTIwMTFFQUExMTUyQzJFQzRGOUFFMDIvMDAxMjA5MDgy QTIxMTFFQUIxQkY5QzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkpIwDQYJKoZIhvcNAQELBQADggEBAAMCgsV7rlSLapO3 YU0Jei4dRjWeU5nLGGT7vi5jNTI95dgpwTZqYQ6yysibW84eGe+PtSaNhx6tfdri +854sfb/ZawCpgDcrAd8y59Zrv4DAz7+Lze2wTNRDR42ueniax6BWQCRqYwaBBeT yc1IqJN9pvVWJ1YsBRUjkA3bsLbWbOFvlGLXIZ5uq0HOGw8l+Eg90/gZ1CZV5Oqh WPMadUqF3rWY9L1UoL+6ifb9DXTmvgFk8usf7si20lLe2kiJMHJS+DzdCz+QPc1k Bil7g2EF1d7UNsA0ZrtMVJFvSg/L812vek6fRJV697EwKO093U5hdNOz0uCrxOPu oOcTTlc= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org