$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/BFA10A96FA8911EB8122C53FC4F9AE02.roa File: BFA10A96FA8911EB8122C53FC4F9AE02.roa (raw, json) Hash identifier: 9X0FABgF4N/aMCwLf/2Sir07UctuAOlwN446kkP4Osg= Subject key identifier: 0D:17:0C:3E:78:BB:B8:DF:E1:79:EC:3B:16:F8:84:EF:8A:02:F5:BA Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Certificate serial: 04AC Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/BFA10A96FA8911EB8122C53FC4F9AE02.roa Signing time: Wed 11 Sep 2024 02:03:38 +0000 ROA not before: Wed 11 Sep 2024 02:03:38 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 142627 IP address blocks: 103.171.68.0/23 maxlen: 23 103.171.68.0/24 maxlen: 24 103.171.69.0/24 maxlen: 24 2001:df7:3b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1196 (0x4ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Validity Not Before: Sep 11 02:03:38 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e0fa7a-985c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:03:5d:9f:66:5f:6a:e0:b7:e3:02:47:36:d1: e3:b9:63:7a:fe:87:34:6d:d2:08:c2:a6:f4:a9:77: d4:15:7c:8d:2f:5b:55:b5:ab:35:d5:c8:f5:36:ef: 94:5b:30:a9:2e:3e:5a:b9:dd:b9:52:c5:0f:40:2e: 77:23:81:32:4a:0a:a3:f4:4a:8d:c6:f0:7f:84:be: 74:5c:24:6d:9e:ac:f4:bd:8c:17:96:a4:53:b6:12: 46:78:85:ea:98:11:06:e4:53:95:83:9f:7d:30:c1: 3d:2a:71:f6:11:5a:01:e6:0e:9a:c7:3f:8d:2b:61: 4e:90:e0:7d:20:24:6a:de:53:aa:bc:85:f8:19:83: 5d:cc:b3:8e:2b:0d:d2:09:03:f9:11:dd:7d:ae:5c: ee:96:5a:25:22:e4:ed:7b:88:fb:66:1e:15:84:ea: 39:cc:35:88:99:3e:0d:ee:8c:1e:9a:00:8e:94:58: cf:72:d2:0a:b6:f5:63:02:a5:65:fa:ce:f1:d8:17: 68:2d:fd:2e:5b:b4:0a:b2:3f:ae:1e:55:83:bd:db: fe:0b:3a:40:11:ed:4b:c4:e3:61:a1:b2:14:3b:5c: 34:e3:78:30:c0:75:12:bc:21:77:99:02:42:07:4f: ac:57:dd:99:40:bd:32:32:dc:e9:a3:81:4b:e2:fd: dc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:17:0C:3E:78:BB:B8:DF:E1:79:EC:3B:16:F8:84:EF:8A:02:F5:BA X509v3 Authority Key Identifier: keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/BFA10A96FA8911EB8122C53FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.68.0/23 IPv6: 2001:df7:3b80::/48 Signature Algorithm: sha256WithRSAEncryption 12:e6:ea:74:5b:70:d5:89:79:33:9d:18:6e:f0:78:e5:b8:b0: e7:5a:51:e0:df:02:33:87:b1:b5:92:f6:3a:35:fb:3d:6e:0b: 13:c7:21:95:74:df:01:e8:97:98:ef:4f:dd:51:49:1c:08:5d: 28:55:62:bc:e7:6b:7b:a5:33:9e:dd:e2:97:60:32:3b:c1:61: 09:a7:ae:bd:5b:c7:8a:0c:a4:f3:4d:19:26:dd:73:cf:ea:7c: ce:0f:5a:e2:ec:9a:fd:a5:fb:c4:6d:9f:f0:6e:f9:5a:97:fd: 5c:02:bc:e0:bd:0f:d0:89:8d:37:f3:fc:51:a0:26:32:3a:17: 06:ad:0c:6c:96:cb:9a:8b:2c:c9:49:3d:c5:1e:da:91:08:46: 9b:f4:3a:e5:21:a6:99:da:0e:61:b3:6e:04:de:d8:c3:0e:4b: b6:cc:c4:31:80:21:94:c5:06:03:5c:c6:82:a7:21:91:aa:97: 95:04:c6:81:cc:40:ec:ff:ad:ba:00:de:e2:0f:7c:ce:f9:e2: 96:68:d0:4a:12:80:71:65:9e:10:1d:9e:66:f5:ad:ca:b7:42: 57:59:e1:95:e4:54:81:9a:ff:c7:5c:9e:06:e8:e0:51:6d:61: cd:f6:06:d2:cb:70:f3:a5:a0:56:43:f2:ae:3d:a6:23:cb:dd: 6e:47:98:c3 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG NzAxN0RDQjgwHhcNMjQwOTExMDIwMzM4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUwZmE3YS05ODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgNdn2ZfauC34wJHNtHjuWN6/oc0bdIIwqb0qXfUFXyNL1tVtas11cj1Nu+U WzCpLj5aud25UsUPQC53I4EySgqj9EqNxvB/hL50XCRtnqz0vYwXlqRTthJGeIXq mBEG5FOVg599MME9KnH2EVoB5g6axz+NK2FOkOB9ICRq3lOqvIX4GYNdzLOOKw3S CQP5Ed19rlzullolIuTte4j7Zh4VhOo5zDWImT4N7owemgCOlFjPctIKtvVjAqVl +s7x2BdoLf0uW7QKsj+uHlWDvdv+CzpAEe1LxONhobIUO1w043gwwHUSvCF3mQJC B0+sV92ZQL0yMtzpo4FL4v3c6wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFA0XDD54 u7jf4XnsOxb4hO+KAvW6MB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjIyRkEvRTgwREFBMkVGQTg1MTFFQkI2NjgyRjM3QzRGOUFFMDIvQkZBMTBBOTZG QTg5MTFFQjgxMjJDNTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnq0QwDwQCAAIwCQMHACABDfc7gDANBgkqhkiG9w0BAQsF AAOCAQEAEubqdFtw1Yl5M50YbvB45biw51pR4N8CM4extZL2OjX7PW4LE8chlXTf AeiXmO9P3VFJHAhdKFVivOdre6Uznt3il2AyO8FhCaeuvVvHigyk800ZJt1zz+p8 zg9a4uya/aX7xG2f8G75Wpf9XAK84L0P0ImNN/P8UaAmMjoXBq0MbJbLmossyUk9 xR7akQhGm/Q65SGmmdoOYbNuBN7Yww5LtszEMYAhlMUGA1zGgqchkaqXlQTGgcxA 7P+tugDe4g98zvnilmjQShKAcWWeEB2eZvWtyrdCV1nhleRUgZr/x1yeBujgUW1h zfYG0stw86WgVkPyrj2mI8vdbkeYww== -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org