$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/6E1BCBC495BD11EB89199F37C4F9AE02.roa File: 6E1BCBC495BD11EB89199F37C4F9AE02.roa (raw, json) Hash identifier: 6VtKNEIG9FeALH3s40nNCwARNeebdE67fF6D4UlnLsE= Subject key identifier: 5E:CC:5F:D5:CA:19:E2:95:6E:90:4C:F7:AA:86:89:A3:3C:CF:37:A0 Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B Certificate serial: 05A8 Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/6E1BCBC495BD11EB89199F37C4F9AE02.roa Signing time: Wed 14 Aug 2024 23:41:55 +0000 ROA not before: Wed 14 Aug 2024 23:41:55 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 136933 IP address blocks: 103.141.130.0/23 maxlen: 23 103.141.130.0/24 maxlen: 24 103.141.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1448 (0x5a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B Validity Not Before: Aug 14 23:41:55 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66bd40c3-f30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:aa:ec:99:4b:1e:4f:de:f0:e4:96:4a:54: 8d:5f:e1:9d:eb:88:5b:58:42:d5:3b:c6:d6:c7:b4: e3:c9:58:ac:68:7a:c5:7c:c7:40:34:42:4c:1a:87: eb:13:e5:93:f2:1a:26:9d:ea:a2:00:7a:4e:ac:8f: d9:f3:ff:60:1d:9c:0c:ac:a9:01:14:56:02:3d:b5: 81:72:55:f6:dc:0f:37:a6:0b:1d:16:2a:1e:e8:74: 88:5c:99:87:43:e7:8e:57:9e:de:3a:0b:c7:03:02: 22:de:96:9b:e7:4f:9b:2e:f1:b8:f2:54:31:60:47: dc:24:ea:ed:5f:d7:3f:4b:08:07:67:29:b4:26:6b: 8f:7c:fe:f2:cb:b3:64:f0:59:b8:76:b6:05:1a:38: 97:be:f1:a0:69:3b:df:52:42:40:48:59:07:0d:fe: 16:ec:e9:f1:52:9d:9d:5a:2c:bd:6d:85:01:f0:95: 21:0e:02:d8:d2:d6:ee:a7:b1:b8:be:41:d7:7e:71: 5e:8b:8e:3a:21:48:45:a7:70:59:6a:80:1d:89:04: 98:d0:04:aa:27:30:bf:e9:30:3f:16:e2:e6:e9:29: 6f:08:e8:64:88:d0:67:64:ef:b3:df:01:d2:7d:c6: f8:7c:a4:a5:3a:42:12:61:2c:e3:eb:5a:b8:8f:35: b5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CC:5F:D5:CA:19:E2:95:6E:90:4C:F7:AA:86:89:A3:3C:CF:37:A0 X509v3 Authority Key Identifier: keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/6E1BCBC495BD11EB89199F37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.130.0/23 Signature Algorithm: sha256WithRSAEncryption 36:f1:e5:38:d8:ec:f2:fc:76:e6:40:84:b1:c9:4e:22:dd:1e: 4e:07:54:b7:c0:89:7e:47:43:c8:c0:1d:62:9c:88:47:54:70: 90:db:96:1d:68:a6:17:24:37:e7:db:86:fa:46:a6:87:75:23: 1b:9f:a3:f8:d1:78:8f:e8:50:f9:08:44:2a:49:5e:04:da:38: ba:aa:5e:56:c3:8f:67:4c:f0:b0:cd:4a:8a:5d:05:db:da:d5: 68:1d:8f:0d:5e:53:af:39:fe:d1:ea:53:01:56:e9:0a:08:ae: ce:2f:11:8b:e2:ba:12:82:74:e5:0a:77:c3:84:85:8a:5f:fe: 27:78:7e:80:f2:b4:48:11:43:ee:88:64:fd:62:88:53:19:5e: 6b:6a:a8:0e:8a:8b:3f:27:94:fd:c4:76:2d:fb:ba:98:8d:b4: b1:18:db:5c:6c:80:28:42:3e:5f:fd:76:f8:ae:5a:e2:40:e4: 23:1b:16:7a:5c:b5:53:a9:48:1c:de:10:80:83:64:b6:28:7e: 39:e4:b1:bb:0b:43:46:57:58:86:97:76:9a:4b:7e:39:fa:f2: 12:44:8a:8b:cd:7e:70:77:ca:92:ef:e9:f1:ca:f3:ee:f2:4a: 14:48:13:f9:af:90:58:3e:e6:24:6f:0d:04:66:66:72:ed:5e: a6:8f:41:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJBNEUxMTAvBgNVBAUTKDdENzNFRjExNUIwMkM1RTAxMDIzODQ3QTkxQjBCMEYw NzhCNUYwMkIwHhcNMjQwODE0MjM0MTU1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJkNDBjMy1mMzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQGq7JlLHk/e8OSWSlSNX+Gd64hbWELVO8bWx7TjyVisaHrFfMdANEJMGofr E+WT8homneqiAHpOrI/Z8/9gHZwMrKkBFFYCPbWBclX23A83pgsdFioe6HSIXJmH Q+eOV57eOgvHAwIi3pab50+bLvG48lQxYEfcJOrtX9c/SwgHZym0JmuPfP7yy7Nk 8Fm4drYFGjiXvvGgaTvfUkJASFkHDf4W7OnxUp2dWiy9bYUB8JUhDgLY0tbup7G4 vkHXfnFei446IUhFp3BZaoAdiQSY0ASqJzC/6TA/FuLm6SlvCOhkiNBnZO+z3wHS fcb4fKSlOkISYSzj61q4jzW1TQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF7MX9XK GeKVbpBM96qGiaM8zzegMB8GA1UdIwQYMBaAFH1z7xFbAsXgECOEepGwsPB4tfAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkE0RS9FM0UwODQ2NDk1 QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hlQVFJNFI2a2JDdzhIaTE4 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZYUHZFVnNDeGVBUUk0UjZrYkN3OEhpMThDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJBNEUvRTNFMDg0NjQ5NUJCMTFFQjk0OUZFNTM1QzRGOUFFMDIvNkUxQkNCQzQ5 NUJEMTFFQjg5MTk5RjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjYIwDQYJKoZIhvcNAQELBQADggEBADbx5TjY7PL8duZA hLHJTiLdHk4HVLfAiX5HQ8jAHWKciEdUcJDblh1ophckN+fbhvpGpod1Ixufo/jR eI/oUPkIRCpJXgTaOLqqXlbDj2dM8LDNSopdBdva1Wgdjw1eU685/tHqUwFW6QoI rs4vEYviuhKCdOUKd8OEhYpf/id4foDytEgRQ+6IZP1iiFMZXmtqqA6Kiz8nlP3E di37upiNtLEY21xsgChCPl/9dviuWuJA5CMbFnpctVOpSBzeEICDZLYofjnksbsL Q0ZXWIaXdppLfjn68hJEiovNfnB3ypLv6fHK8+7yShRIE/mvkFg+5iRvDQRmZnLt XqaPQc8= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:25 2024 by rpki-client on console-fra.rpki-client.org