$ rpki-client -vvf rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/6FEF33E05C2B11EAAE63403FC4F9AE02.roa File: 6FEF33E05C2B11EAAE63403FC4F9AE02.roa (raw, json) Hash identifier: 2P+gDOnDDa6VcxpUk48B+SHGopeR5rQDNhRbAWvssIg= Subject key identifier: 13:DC:09:7C:67:95:EE:84:08:70:9F:12:C4:84:3F:A3:3B:9C:D7:ED Certificate issuer: /CN=A91867F1/serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A Certificate serial: 09AD Authority key identifier: B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/6FEF33E05C2B11EAAE63403FC4F9AE02.roa Signing time: Thu 29 Feb 2024 21:09:22 +0000 ROA not before: Thu 29 Feb 2024 21:09:22 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 132054 IP address blocks: 103.148.224.0/23 maxlen: 23 103.148.224.0/24 maxlen: 24 103.148.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2477 (0x9ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91867F1/serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A Validity Not Before: Feb 29 21:09:22 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65e0f281-cce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:65:1e:ee:46:7b:0a:75:cb:51:df:15:4f:ca: 95:36:ca:37:34:de:51:5a:97:21:4f:67:63:5e:f8: b0:61:eb:52:dc:7c:d3:93:ac:4b:78:55:51:5a:77: c4:bb:39:cc:1d:88:53:e1:29:9e:74:27:61:ce:0f: 24:33:a1:3e:17:f7:01:80:8a:41:8b:74:b5:cf:70: 23:80:d3:dd:9d:f3:22:b5:b9:eb:25:85:ee:d2:e5: 53:17:7c:ff:33:75:91:3a:de:ff:2d:dd:6e:32:d1: 0b:e2:ba:15:bd:33:fd:f8:ac:b9:dd:c1:ed:97:b7: a9:e7:a4:dc:49:a0:99:60:e6:b4:cb:21:8f:2b:d1: d7:27:6a:5a:29:c9:70:d7:4d:e2:a2:7e:93:0d:ca: 0f:15:91:dd:d4:29:49:a4:80:57:40:b4:74:b1:d9: 97:7a:20:a2:75:17:6c:19:39:03:15:f5:6d:88:ea: 95:2a:be:7e:00:77:79:5b:c2:d1:50:bc:28:b7:84: 8b:25:36:b7:ba:2b:94:8c:eb:89:a6:a7:d2:c9:fe: 98:71:f9:7e:cb:15:1b:81:94:f6:a4:d1:86:ff:25: 02:fb:76:9c:75:57:40:c8:c8:d5:75:8f:d5:ec:20: b5:25:8c:1f:37:36:e2:78:f4:33:6a:73:d2:d4:ba: d9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DC:09:7C:67:95:EE:84:08:70:9F:12:C4:84:3F:A3:3B:9C:D7:ED X509v3 Authority Key Identifier: keyid:B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/6FEF33E05C2B11EAAE63403FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.224.0/23 Signature Algorithm: sha256WithRSAEncryption 49:3a:f3:a4:c1:ef:9b:05:24:18:2b:a5:a9:83:06:12:d4:36: f0:91:78:9a:ad:ca:b8:df:e1:d7:02:e4:52:be:87:29:60:c3: b7:c4:d9:3a:94:79:53:b1:21:13:5b:a7:8b:53:1e:fb:80:86: 33:c6:26:28:e7:69:65:0c:c0:f2:a0:36:1b:46:0e:d9:bb:07: 76:17:e4:8f:bb:a6:ba:21:75:76:86:cf:da:1c:da:b5:07:3d: 0a:2d:06:8f:82:bc:55:6e:09:9f:d7:9d:c5:b5:0c:e5:de:1f: 5d:44:96:54:9e:bd:25:e4:fe:3b:4e:be:5f:49:44:c4:5c:2b: ee:36:ca:d6:19:86:07:35:15:f3:b9:3c:bd:3e:6e:72:6d:5a: 5d:bc:38:17:3b:a4:4b:6d:95:78:f9:b2:77:8a:0d:e4:39:ee: 98:ba:d0:0d:c4:c2:8c:52:18:6c:74:67:99:f9:8c:47:ff:b4: 4b:51:88:0d:29:05:b3:a2:1d:aa:9d:39:39:46:c1:0b:c6:91: 92:17:f3:77:c8:93:a9:83:01:aa:c2:85:ff:38:cc:63:b8:ac: 99:6a:4b:72:ff:6c:b7:57:15:06:fc:b0:79:f8:51:e4:d6:7a: 72:cc:e0:54:e2:c4:90:03:9d:b6:cd:2f:ab:6f:bc:56:a3:fa: df:07:63:f9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY3RjExMTAvBgNVBAUTKEIzOTMxQjU2OEYyRUI5RDJFRDJDQTRENjRCRUJDMDg2 RkI5REI4OUEwHhcNMjQwMjI5MjEwOTIyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWUwZjI4MS1jY2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2Ue7kZ7CnXLUd8VT8qVNso3NN5RWpchT2djXviwYetS3HzTk6xLeFVRWnfE uznMHYhT4SmedCdhzg8kM6E+F/cBgIpBi3S1z3AjgNPdnfMitbnrJYXu0uVTF3z/ M3WROt7/Ld1uMtEL4roVvTP9+Ky53cHtl7ep56TcSaCZYOa0yyGPK9HXJ2paKclw 103ion6TDcoPFZHd1ClJpIBXQLR0sdmXeiCidRdsGTkDFfVtiOqVKr5+AHd5W8LR ULwot4SLJTa3uiuUjOuJpqfSyf6Ycfl+yxUbgZT2pNGG/yUC+3acdVdAyMjVdY/V 7CC1JYwfNzbiePQzanPS1LrZRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBPcCXxn le6ECHCfEsSEP6M7nNftMB8GA1UdIwQYMBaAFLOTG1aPLrnS7Syk1kvrwIb7nbia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjdGMS84MDlENzE1QzU5 MUExMUVBOTY5MkFBM0NDNEY5QUUwMi9zNU1iVm84dXVkTHRMS1RXUy12QWh2dWR1 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1TWJWbzh1dWRMdExLVFdTLXZBaHZ1ZHVKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODY3RjEvODA5RDcxNUM1OTFBMTFFQTk2OTJBQTNDQzRGOUFFMDIvNkZFRjMzRTA1 QzJCMTFFQUFFNjM0MDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlOAwDQYJKoZIhvcNAQELBQADggEBAEk686TB75sFJBgr pamDBhLUNvCReJqtyrjf4dcC5FK+hylgw7fE2TqUeVOxIRNbp4tTHvuAhjPGJijn aWUMwPKgNhtGDtm7B3YX5I+7prohdXaGz9oc2rUHPQotBo+CvFVuCZ/XncW1DOXe H11EllSevSXk/jtOvl9JRMRcK+42ytYZhgc1FfO5PL0+bnJtWl28OBc7pEttlXj5 sneKDeQ57pi60A3EwoxSGGx0Z5n5jEf/tEtRiA0pBbOiHaqdOTlGwQvGkZIX83fI k6mDAarChf84zGO4rJlqS3L/bLdXFQb8sHn4UeTWenLM4FTixJADnbbNL6tvvFaj +t8HY/k= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:33 2024 by rpki-client on console-ams.rpki-client.org