$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/B966D678C0C611EE8F5F0458C4F9AE02.roa File: B966D678C0C611EE8F5F0458C4F9AE02.roa (raw, json) Hash identifier: TqG7R4Q3a4wcn9CqVt9B0ue++RWLw1qZwpwj8h3vDBY= Subject key identifier: 66:19:BE:2E:EB:EB:34:5B:85:49:54:75:96:42:FD:D9:79:DA:B6:B5 Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Certificate serial: D4 Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/B966D678C0C611EE8F5F0458C4F9AE02.roa Signing time: Tue 13 Feb 2024 05:17:10 +0000 ROA not before: Tue 13 Feb 2024 05:17:10 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 150715 IP address blocks: 103.66.230.0/23 maxlen: 23 103.66.230.0/24 maxlen: 24 103.66.231.0/24 maxlen: 24 2001:df1:ce40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Validity Not Before: Feb 13 05:17:10 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65cafb56-bfff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:79:bd:7a:9e:0d:28:bb:36:96:be:79:3e: b0:d6:7f:79:bb:c4:75:ac:2b:26:96:84:ca:82:3a: 91:c0:a0:74:47:c6:0d:45:bf:28:74:7b:0b:3a:ed: f0:aa:18:da:d7:4d:a9:af:e1:2d:bb:0e:6b:d4:01: 39:f1:b1:69:6e:9a:74:8e:ec:71:07:96:af:44:b0: a0:00:a7:7f:aa:5f:a5:08:6a:3a:ee:f1:5c:5e:f8: ce:5b:bb:ee:cd:55:6a:00:c0:7c:15:f4:89:ac:ed: a7:67:f7:6d:39:87:0f:40:e0:58:94:68:3e:79:20: c0:06:0f:fa:9c:9c:97:4a:cf:51:5c:f8:1f:37:9e: b5:cd:d1:b1:ae:3f:e3:dc:b1:3d:db:50:1d:8d:c2: 72:78:b6:8d:e7:42:eb:b1:dd:29:cc:c1:36:47:bd: 17:68:fb:91:03:3b:92:39:8d:9d:3b:f4:d2:52:bd: b9:74:40:6c:dc:fd:7b:a1:2b:94:b3:a5:cc:c8:1d: 25:b5:98:c8:a7:14:46:d1:05:8a:ae:f7:21:7b:a2: 27:3b:37:40:97:39:8c:78:5d:31:13:f9:5a:60:2c: db:e6:f4:da:5c:2a:5a:7d:8f:37:56:73:70:63:e4: 00:e6:ea:65:6e:99:5c:49:d3:4e:f2:9a:61:ba:d3: 92:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:19:BE:2E:EB:EB:34:5B:85:49:54:75:96:42:FD:D9:79:DA:B6:B5 X509v3 Authority Key Identifier: keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/B966D678C0C611EE8F5F0458C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.230.0/23 IPv6: 2001:df1:ce40::/48 Signature Algorithm: sha256WithRSAEncryption 20:a8:d6:f1:cd:af:38:7d:5e:4b:29:71:b2:8e:1f:21:52:f6: 67:a9:1c:e8:f8:27:4a:8a:cf:85:a3:58:5b:0a:71:be:7b:d8: 1a:ac:89:db:e8:d7:cc:a9:a8:ea:7a:a4:d6:e6:20:a4:6d:29: 24:a7:c4:40:f8:91:de:e8:2c:18:f2:b9:25:e1:1a:cc:1f:89: 11:1b:f4:55:83:a2:41:fd:4a:c5:23:a3:2c:44:29:ee:dc:f2: 9f:f3:09:ae:20:e5:ed:fe:6f:a3:48:45:57:9e:bd:20:56:b2: 22:39:a6:f5:8f:c4:bb:ac:9c:05:df:a0:2a:75:37:80:32:42: ac:36:bf:29:ce:90:9e:14:1c:c6:59:72:97:3b:3b:5a:ff:d0: eb:75:a5:ae:6f:54:0c:a6:0f:13:74:b3:98:5a:19:18:94:60: 91:3a:fd:37:11:58:bb:08:14:29:ec:c1:17:b5:06:09:95:12: eb:23:0e:eb:33:58:b7:6b:67:00:a8:0c:23:70:d5:4b:2b:05: b4:17:bf:22:c8:7f:c3:4c:a5:c1:ea:84:be:f3:f6:a2:5a:71: 22:2a:d9:42:6c:c6:91:77:a5:25:49:42:1c:a4:30:9f:a9:60: 81:07:cf:10:51:df:d8:f0:57:47:25:f0:de:10:70:cf:b6:b8: e5:fe:7e:de -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwQjgxMTAvBgNVBAUTKEZCQkFCNjkwQURGRTEwRUY0MzRCNzE4OTU0RjE3Mzg3 RDYzODQ2NjgwHhcNMjQwMjEzMDUxNzEwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWNhZmI1Ni1iZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSR5vXqeDSi7Npa+eT6w1n95u8R1rCsmloTKgjqRwKB0R8YNRb8odHsLOu3w qhja102pr+Etuw5r1AE58bFpbpp0juxxB5avRLCgAKd/ql+lCGo67vFcXvjOW7vu zVVqAMB8FfSJrO2nZ/dtOYcPQOBYlGg+eSDABg/6nJyXSs9RXPgfN561zdGxrj/j 3LE921AdjcJyeLaN50Lrsd0pzME2R70XaPuRAzuSOY2dO/TSUr25dEBs3P17oSuU s6XMyB0ltZjIpxRG0QWKrvche6InOzdAlzmMeF0xE/laYCzb5vTaXCpafY83VnNw Y+QA5uplbplcSdNO8pphutOSuQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGYZvi7r 6zRbhUlUdZZC/dl52ra1MB8GA1UdIwQYMBaAFPu6tpCt/hDvQ0txiVTxc4fWOEZo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBCOC9GMUY4OTBGMDk2 NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVPOURTM0dKVlBGemg5WTRS bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cTJrSzMtRU85RFMzR0pWUEZ6aDlZNFJtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjMwQjgvRjFGODkwRjA5NjU5MTFFRDhDQzc4QTYwQzRGOUFFMDIvQjk2NkQ2NzhD MEM2MTFFRThGNUYwNDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnQuYwDwQCAAIwCQMHACABDfHOQDANBgkqhkiG9w0BAQsF AAOCAQEAIKjW8c2vOH1eSylxso4fIVL2Z6kc6PgnSorPhaNYWwpxvnvYGqyJ2+jX zKmo6nqk1uYgpG0pJKfEQPiR3ugsGPK5JeEazB+JERv0VYOiQf1KxSOjLEQp7tzy n/MJriDl7f5vo0hFV569IFayIjmm9Y/Eu6ycBd+gKnU3gDJCrDa/Kc6QnhQcxlly lzs7Wv/Q63Wlrm9UDKYPE3SzmFoZGJRgkTr9NxFYuwgUKezBF7UGCZUS6yMO6zNY t2tnAKgMI3DVSysFtBe/Ish/w0ylweqEvvP2olpxIirZQmzGkXelJUlCHKQwn6lg gQfPEFHf2PBXRyXw3hBwz7a45f5+3g== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org