$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/691C2F48169211EFBBB5BD6CC4F9AE02.roa File: 691C2F48169211EFBBB5BD6CC4F9AE02.roa (raw, json) Hash identifier: JFnoGlMQvx0rfghWguqYEQOafVm5KcUTywblwtb1T0Y= Subject key identifier: D0:3F:60:19:50:92:AF:A5:37:2E:6D:05:2B:22:45:76:EF:A6:82:67 Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE Certificate serial: 05 Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/691C2F48169211EFBBB5BD6CC4F9AE02.roa Signing time: Mon 20 May 2024 10:19:16 +0000 ROA not before: Mon 20 May 2024 10:19:16 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 132384 IP address blocks: 103.76.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 04:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE Validity Not Before: May 20 10:19:16 2024 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=664b23a3-076b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:44:1e:b7:cd:c1:6b:fa:54:6c:75:d2:77:1f: db:85:14:7d:12:07:89:bd:0b:6a:c8:36:af:b5:5f: 29:dc:44:4a:30:4e:e6:29:3b:33:c7:6e:49:f2:58: 0d:9a:aa:40:c9:86:b3:5f:7f:1e:56:d8:1c:b8:19: 8e:2c:ce:4b:97:f6:e1:03:e6:bd:21:d5:30:e5:77: e8:f9:cd:ff:a1:3f:0a:cf:88:e1:7e:4d:f9:56:11: 3b:65:6d:3b:bd:a6:9b:fd:79:f2:0f:dc:bf:35:d1: d3:c4:8a:8e:fb:b1:b4:3f:8c:ca:d5:c4:0e:68:65: 1f:de:ae:a6:fd:73:d1:a9:29:5c:8c:73:c3:dc:aa: 14:32:23:2c:76:bd:37:80:51:0d:20:4e:90:d7:2e: 2e:94:20:12:c7:07:d5:28:10:59:64:6b:27:0e:63: 2b:c4:65:2b:c7:8e:56:3e:87:d3:17:9a:86:67:09: 4b:52:c5:56:84:fc:1c:f8:b9:f5:a3:b3:e3:d6:ff: 76:6d:ea:1a:3c:1b:5e:f0:20:79:5c:7b:46:6a:53: 4b:46:4a:e5:52:59:10:86:ed:f3:da:4d:69:46:be: fe:33:b5:00:a2:42:ab:3f:f4:db:f3:96:50:af:11: 74:56:1d:0d:3b:88:4d:12:8b:57:3e:bb:26:26:e7: a0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3F:60:19:50:92:AF:A5:37:2E:6D:05:2B:22:45:76:EF:A6:82:67 X509v3 Authority Key Identifier: keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/691C2F48169211EFBBB5BD6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.232.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:88:f5:a8:ed:96:20:93:9d:8a:30:97:bd:df:ec:a2:40:bb: ce:c9:09:8d:b0:6f:11:91:f4:77:b2:05:07:af:24:d4:8b:f5: 7b:13:34:a2:cc:6d:a8:8d:d6:1a:73:72:1e:81:66:17:04:6a: e2:bd:cd:40:a3:cd:d1:57:27:ce:4a:0a:5f:22:eb:fe:c5:7d: 9b:55:b2:92:cd:c7:37:d3:1b:8c:ba:90:2e:56:06:cf:f7:c2: 84:13:aa:4b:ee:b1:f5:83:06:20:d9:49:b0:d8:8d:b9:67:ed: 8f:b2:e8:ca:6d:fe:a0:92:b8:44:a8:6e:38:86:78:30:95:e7: b7:f4:c6:d1:27:e6:b7:a5:35:ec:ca:1c:f4:c3:ac:06:3f:31: 12:13:53:ce:0b:62:93:a2:e1:2e:dd:57:2a:0a:be:e9:04:74: 89:32:02:a1:79:14:63:9f:2f:2b:7a:78:43:0c:64:9e:7b:e9: fc:e0:ed:85:e0:b7:63:e3:81:f1:4b:08:21:d7:fa:6a:a9:0d: 55:24:a8:ea:9b:de:6a:f3:3a:92:cf:27:0d:89:63:7e:a1:ae: 99:4f:4c:52:04:73:30:8f:96:97:bc:8a:9b:63:85:8c:d1:ba: 96:b5:dc:0f:22:a8:34:f2:b1:7f:52:31:39:86:25:ba:25:1f: 98:99:ef:bb -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB REQ2NDExMC8GA1UEBRMoNDBCNTVDMUFDNzQwNENDMDVGMTc3NjNBOTlCQkIyMzg5 QkQyRUFCRTAeFw0yNDA1MjAxMDE5MTZaFw0yNzEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NGIyM2EzLTA3NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCRB63zcFr+lRsddJ3H9uFFH0SB4m9C2rINq+1XyncREowTuYpOzPHbknyWA2a qkDJhrNffx5W2By4GY4szkuX9uED5r0h1TDld+j5zf+hPwrPiOF+TflWETtlbTu9 ppv9efIP3L810dPEio77sbQ/jMrVxA5oZR/erqb9c9GpKVyMc8PcqhQyIyx2vTeA UQ0gTpDXLi6UIBLHB9UoEFlkaycOYyvEZSvHjlY+h9MXmoZnCUtSxVaE/Bz4ufWj s+PW/3Zt6ho8G17wIHlce0ZqU0tGSuVSWRCG7fPaTWlGvv4ztQCiQqs/9NvzllCv EXRWHQ07iE0Si1c+uyYm56AJAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU0D9gGVCS r6U3Lm0FKyJFdu+mgmcwHwYDVR0jBBgwFoAUQLVcGsdATMBfF3Y6mbuyOJvS6r4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFERDY0LzU4NDBBMDdDMTM0 QjExRUY5NDQyNEQzREM0RjlBRTAyL1FMVmNHc2RBVE1CZkYzWTZtYnV5T0p2UzZy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUxWY0dzZEFUTUJmRjNZNm1idXlPSnZTNnI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REQ2NC81ODQwQTA3QzEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi82OTFDMkY0ODE2 OTIxMUVGQkJCNUJENkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmdM6DANBgkqhkiG9w0BAQsFAAOCAQEADYj1qO2WIJOdijCX vd/sokC7zskJjbBvEZH0d7IFB68k1Iv1exM0osxtqI3WGnNyHoFmFwRq4r3NQKPN 0VcnzkoKXyLr/sV9m1Wyks3HN9MbjLqQLlYGz/fChBOqS+6x9YMGINlJsNiNuWft j7Loym3+oJK4RKhuOIZ4MJXnt/TG0Sfmt6U17Moc9MOsBj8xEhNTzgtik6LhLt1X Kgq+6QR0iTICoXkUY58vK3p4Qwxknnvp/ODtheC3Y+OB8UsIIdf6aqkNVSSo6pve avM6ks8nDYljfqGumU9MUgRzMI+Wl7yKm2OFjNG6lrXcDyKoNPKxf1IxOYYluiUf mJnvuw== -----END CERTIFICATE-----Generated at Fri Nov 15 06:55:26 2024 by rpki-client on console-fra.rpki-client.org