$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/AB68CE76346511EDAC41E081C4F9AE02.roa File: AB68CE76346511EDAC41E081C4F9AE02.roa (raw, json) Hash identifier: me5m52MXo4l0JWieAZh5/5JLHzGNaxm9iecnfymMcU4= Subject key identifier: 3A:9F:A0:35:96:42:30:08:6A:A6:E6:EE:0A:90:43:0E:D9:8B:E8:F2 Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 01BC Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/AB68CE76346511EDAC41E081C4F9AE02.roa Signing time: Thu 03 Oct 2024 02:36:33 +0000 ROA not before: Thu 03 Oct 2024 02:36:33 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 21734 IP address blocks: 103.99.4.0/24 maxlen: 24 103.99.5.0/24 maxlen: 24 103.99.6.0/24 maxlen: 24 103.99.7.0/24 maxlen: 24 103.196.140.0/24 maxlen: 24 103.196.141.0/24 maxlen: 24 103.196.142.0/24 maxlen: 24 103.196.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Oct 3 02:36:33 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66fe0330-7bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:09:43:f7:d6:ec:c5:84:03:aa:79:7d:d6: a1:74:3a:91:5b:8c:2d:86:65:2f:7e:ca:82:90:46: 03:24:45:49:d0:30:7b:ce:81:18:51:da:50:b9:52: 43:a7:05:96:d8:04:3b:f4:05:c5:c0:87:25:f4:c1: 8d:77:85:a5:a2:75:c9:82:5c:55:c3:da:9c:28:84: e1:d9:ef:5d:e2:3d:cb:cb:0d:a2:7c:ff:4d:08:9e: 90:cc:43:95:c3:d6:20:22:e4:6b:7f:98:58:69:ac: 9f:a0:07:b4:0d:4a:d7:6a:61:1b:18:e4:45:dc:e1: 8b:16:b4:e4:a3:ce:0e:31:f0:36:5f:78:55:3c:71: ad:86:57:e9:e7:10:dc:b9:1b:81:86:0a:7e:15:47: 01:80:08:4c:13:bf:fe:d7:a2:d0:74:fc:31:39:eb: 39:d3:d9:0f:47:c8:b7:0a:89:be:3c:8a:6f:29:3d: 22:5b:69:51:9f:a0:a4:c4:97:58:87:94:74:12:69: cb:e3:3c:7d:77:0b:ed:46:ae:79:43:3b:01:46:f3: 30:8c:d0:75:0e:17:0a:dd:05:4d:6a:7a:01:72:53: 31:74:63:8d:87:b6:97:58:f3:fa:7d:a1:dd:bd:86: a0:af:68:4c:d4:96:df:18:35:45:97:6d:a7:48:30: 05:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9F:A0:35:96:42:30:08:6A:A6:E6:EE:0A:90:43:0E:D9:8B:E8:F2 X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/AB68CE76346511EDAC41E081C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.4.0/22 103.196.140.0/22 Signature Algorithm: sha256WithRSAEncryption c9:7f:91:8d:be:89:05:50:c6:32:3b:50:37:66:e6:d4:c8:fd: 92:19:2c:03:18:39:92:25:82:fb:e4:b7:ad:af:54:d7:6e:3c: 1f:f7:5f:fe:19:22:fa:9e:60:7a:11:96:dc:ba:49:93:06:bc: 9d:b0:51:cd:50:75:48:33:fc:a8:c9:10:25:bd:b0:32:56:0c: c6:0b:35:f7:52:d7:d5:6a:e2:90:25:50:a2:ee:02:18:cf:0b: b7:b7:f1:13:11:9c:29:52:5d:95:94:43:63:48:17:cb:67:21: eb:c3:64:60:92:5f:76:47:a2:3d:d5:b1:f0:a7:bb:75:59:50: 56:a0:4f:99:2a:6d:40:fa:e5:03:a9:c3:52:f9:61:c6:a6:8e: cf:76:29:7a:8f:9b:23:d6:e9:3d:ac:bc:c8:56:c3:d4:a8:af: 70:40:86:3e:6d:1d:41:74:f9:0d:70:f5:d0:46:6a:5f:8f:4c: 28:b5:06:6f:ec:ec:54:56:09:58:46:45:4d:d0:c8:12:56:7c: 92:fa:75:0c:19:d4:c1:17:66:2d:6c:3d:c0:85:88:5c:99:df: 19:cb:eb:b3:2e:68:c2:31:da:c6:86:98:13:83:07:07:76:f7: e1:35:01:8b:ea:3d:b0:04:99:41:60:e3:54:4e:01:24:89:73: 55:d6:e3:f4 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjQxMDAzMDIzNjMzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZlMDMzMC03YmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQcJQ/fW7MWEA6p5fdahdDqRW4wthmUvfsqCkEYDJEVJ0DB7zoEYUdpQuVJD pwWW2AQ79AXFwIcl9MGNd4WlonXJglxVw9qcKITh2e9d4j3Lyw2ifP9NCJ6QzEOV w9YgIuRrf5hYaayfoAe0DUrXamEbGORF3OGLFrTko84OMfA2X3hVPHGthlfp5xDc uRuBhgp+FUcBgAhME7/+16LQdPwxOes509kPR8i3Com+PIpvKT0iW2lRn6CkxJdY h5R0EmnL4zx9dwvtRq55QzsBRvMwjNB1DhcK3QVNanoBclMxdGONh7aXWPP6faHd vYagr2hM1JbfGDVFl22nSDAF0wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDqfoDWW QjAIaqbm7gqQQw7Zi+jyMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkQ0N0YvRDVDRTYyNkEzNDYxMTFFRDlERUU4RTdBQzRGOUFFMDIvQUI2OENFNzYz NDY1MTFFREFDNDFFMDgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnYwQDBAJnxIwwDQYJKoZIhvcNAQELBQADggEBAMl/kY2+ iQVQxjI7UDdm5tTI/ZIZLAMYOZIlgvvkt62vVNduPB/3X/4ZIvqeYHoRlty6SZMG vJ2wUc1QdUgz/KjJECW9sDJWDMYLNfdS19Vq4pAlUKLuAhjPC7e38RMRnClSXZWU Q2NIF8tnIevDZGCSX3ZHoj3VsfCnu3VZUFagT5kqbUD65QOpw1L5Ycamjs92KXqP myPW6T2svMhWw9Sor3BAhj5tHUF0+Q1w9dBGal+PTCi1Bm/s7FRWCVhGRU3QyBJW fJL6dQwZ1MEXZi1sPcCFiFyZ3xnL67MuaMIx2saGmBODBwd29+E1AYvqPbAEmUFg 41ROASSJc1XW4/Q= -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:57 2024 by rpki-client on console-ams.rpki-client.org