$ rpki-client -vvf rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/BF21361ECAAE11EBA95C5E64C4F9AE02.roa File: BF21361ECAAE11EBA95C5E64C4F9AE02.roa (raw, json) Hash identifier: uCBRJFoBq1WgaHIXlS/hexuhDmlnktAKMA5Xe9WsCx4= Subject key identifier: 75:A1:7C:19:52:CE:59:01:C9:E2:BD:1E:72:A3:23:27:F0:7D:9E:E8 Certificate issuer: /CN=A91883AD/serialNumber=0ADA8A7658C749BCA9004786959BC686207BAA9E Certificate serial: 053A Authority key identifier: 0A:DA:8A:76:58:C7:49:BC:A9:00:47:86:95:9B:C6:86:20:7B:AA:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CtqKdljHSbypAEeGlZvGhiB7qp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/BF21361ECAAE11EBA95C5E64C4F9AE02.roa Signing time: Wed 02 Oct 2024 23:32:58 +0000 ROA not before: Wed 02 Oct 2024 23:32:58 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 140966 IP address blocks: 103.153.232.0/23 maxlen: 23 103.153.232.0/24 maxlen: 24 103.153.233.0/24 maxlen: 24 2406:4e40::/32 maxlen: 32 2406:4e40:5::/48 maxlen: 48 2406:4e40:100::/48 maxlen: 48 2406:4e40:200::/48 maxlen: 48 2406:4e40:300::/48 maxlen: 48 2406:4e40:400::/48 maxlen: 48 2406:4e40:500::/48 maxlen: 48 2406:4e40:600::/48 maxlen: 48 2406:4e40:fce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/CtqKdljHSbypAEeGlZvGhiB7qp4.crl rsync://rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/CtqKdljHSbypAEeGlZvGhiB7qp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CtqKdljHSbypAEeGlZvGhiB7qp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1338 (0x53a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91883AD/serialNumber=0ADA8A7658C749BCA9004786959BC686207BAA9E Validity Not Before: Oct 2 23:32:58 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66fdd82a-3aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:4b:a5:e4:a2:0b:00:d9:59:51:c9:21:27: 5b:50:90:be:65:b8:fe:55:d2:32:78:2f:82:18:8e: fa:24:68:71:7b:ec:05:c5:21:32:72:d3:6e:92:bc: 1d:76:6f:3c:8f:ce:a2:0d:03:79:26:35:e3:ec:9e: a2:ef:29:cb:42:50:c3:17:25:b3:3a:d0:4b:e5:be: 5a:da:58:0d:a9:af:57:6d:8c:22:cb:b6:4f:b4:43: e4:2b:4e:88:61:4c:76:47:45:da:08:e4:35:5d:17: 7e:53:e9:ac:29:0d:6b:28:cf:d6:ba:30:50:9a:1c: ba:e5:b5:a0:46:25:e3:65:9b:5f:14:03:f9:c1:bc: 50:a6:c3:5b:75:27:9d:92:80:06:91:bc:e9:86:b8: 38:72:c7:4d:38:90:89:f6:48:f7:f5:ae:44:e3:96: 76:5f:b5:49:47:4b:c4:d5:17:9a:93:fe:d1:e3:90: a4:c5:d6:24:f4:b7:06:56:c7:62:1a:91:53:bd:5b: 35:b7:d8:8d:c3:b4:82:a6:44:23:94:39:e0:30:26: 01:a8:6a:a2:65:14:45:c1:79:6d:bd:84:2b:30:21: 41:55:f3:41:79:ed:72:a4:83:12:70:fd:6d:72:5b: 9a:a7:d0:f4:d4:3e:30:ac:3e:e8:62:2b:83:a5:99: 26:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A1:7C:19:52:CE:59:01:C9:E2:BD:1E:72:A3:23:27:F0:7D:9E:E8 X509v3 Authority Key Identifier: keyid:0A:DA:8A:76:58:C7:49:BC:A9:00:47:86:95:9B:C6:86:20:7B:AA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/CtqKdljHSbypAEeGlZvGhiB7qp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CtqKdljHSbypAEeGlZvGhiB7qp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/BF21361ECAAE11EBA95C5E64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.232.0/23 IPv6: 2406:4e40::/32 Signature Algorithm: sha256WithRSAEncryption 26:e9:df:17:43:a2:70:94:24:60:3c:de:e9:9c:23:5c:12:13: b3:de:f7:09:ba:fa:6e:bc:41:07:4a:ee:62:58:be:96:ea:88: 62:fd:b8:d4:a7:a8:f4:d0:d4:c1:72:71:58:89:9d:35:1e:5e: a6:e5:e1:a2:6e:4e:c9:91:ac:a2:64:e6:d6:f9:87:68:06:11: 5f:2d:1c:36:14:b2:f3:b6:cc:f4:ae:8c:95:03:ca:65:9c:9b: 8b:9c:e0:ee:21:66:dd:35:a9:03:db:dc:14:7d:b6:27:96:92: 0b:6a:ce:63:22:d8:b8:fd:63:f4:37:95:2e:c7:78:18:4d:37: e2:b9:ff:eb:cd:bc:f1:0a:b1:d6:55:49:8f:9e:2c:ab:3a:85: cf:90:40:bd:63:ae:4c:ab:23:74:c6:d2:95:8e:60:f2:65:cb: 60:1f:7b:dc:e3:4d:3b:2e:09:5d:4f:9c:9b:0f:dc:06:7c:64: 9c:e5:dc:83:d0:f5:2f:2b:eb:04:60:a0:da:a9:11:c8:ab:ca: 1e:5c:17:ba:05:3f:89:2f:a9:61:36:bf:e8:3e:f5:ce:ff:aa: 2d:9a:c1:8a:45:ea:b4:99:79:a0:e2:9f:62:6b:74:ff:8f:a4: b9:46:b4:84:bc:25:00:7e:26:21:fe:1c:0d:83:81:91:a4:1e: 23:1b:ba:ca -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgzQUQxMTAvBgNVBAUTKDBBREE4QTc2NThDNzQ5QkNBOTAwNDc4Njk1OUJDNjg2 MjA3QkFBOUUwHhcNMjQxMDAyMjMzMjU4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkZDgyYS0zYWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvodLpeSiCwDZWVHJISdbUJC+Zbj+VdIyeC+CGI76JGhxe+wFxSEyctNukrwd dm88j86iDQN5JjXj7J6i7ynLQlDDFyWzOtBL5b5a2lgNqa9XbYwiy7ZPtEPkK06I YUx2R0XaCOQ1XRd+U+msKQ1rKM/WujBQmhy65bWgRiXjZZtfFAP5wbxQpsNbdSed koAGkbzphrg4csdNOJCJ9kj39a5E45Z2X7VJR0vE1Reak/7R45CkxdYk9LcGVsdi GpFTvVs1t9iNw7SCpkQjlDngMCYBqGqiZRRFwXltvYQrMCFBVfNBee1ypIMScP1t cluap9D01D4wrD7oYiuDpZkmWwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHWhfBlS zlkByeK9HnKjIyfwfZ7oMB8GA1UdIwQYMBaAFArainZYx0m8qQBHhpWbxoYge6qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNBRC9CQTBCMDkzOENB QUExMUVCOTNDRTIxNUNDNEY5QUUwMi9DdHFLZGxqSFNieXBBRWVHbFp2R2hpQjdx cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N0cUtkbGpIU2J5cEFFZUdsWnZHaGlCN3FwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODgzQUQvQkEwQjA5MzhDQUFBMTFFQjkzQ0UyMTVDQzRGOUFFMDIvQkYyMTM2MUVD QUFFMTFFQkE5NUM1RTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnmegwDQQCAAIwBwMFACQGTkAwDQYJKoZIhvcNAQELBQAD ggEBACbp3xdDonCUJGA83umcI1wSE7Pe9wm6+m68QQdK7mJYvpbqiGL9uNSnqPTQ 1MFycViJnTUeXqbl4aJuTsmRrKJk5tb5h2gGEV8tHDYUsvO2zPSujJUDymWcm4uc 4O4hZt01qQPb3BR9tieWkgtqzmMi2Lj9Y/Q3lS7HeBhNN+K5/+vNvPEKsdZVSY+e LKs6hc+QQL1jrkyrI3TG0pWOYPJly2Afe9zjTTsuCV1PnJsP3AZ8ZJzl3IPQ9S8r 6wRgoNqpEciryh5cF7oFP4kvqWE2v+g+9c7/qi2awYpF6rSZeaDin2JrdP+PpLlG tIS8JQB+JiH+HA2DgZGkHiMbuso= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org