$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa File: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (raw, json) Hash identifier: 7fCnTjBep84sk9XgkMrT6eykdpGaMDHQzEZtybjm0AA= Subject key identifier: 38:D9:C3:DE:3A:62:27:E7:0E:A7:6D:CC:9E:33:D7:97:A3:A4:BC:BF Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Certificate serial: 0CB9 Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa Signing time: Tue 06 Aug 2024 18:36:45 +0000 ROA not before: Tue 06 Aug 2024 18:36:45 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 137828 IP address blocks: 103.115.72.0/22 maxlen: 22 103.115.72.0/23 maxlen: 23 103.115.72.0/24 maxlen: 24 103.115.73.0/24 maxlen: 24 103.115.74.0/23 maxlen: 23 103.115.74.0/24 maxlen: 24 103.115.75.0/24 maxlen: 24 2402:e1c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Validity Not Before: Aug 6 18:36:45 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66b26d3d-b7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:58:cc:55:b7:04:9c:68:9b:60:8a:72:ec:8b: 07:65:ce:36:a0:03:aa:89:90:f2:31:1b:8e:5e:d4: 42:3c:a2:e1:4d:c1:10:b7:60:3b:7b:0b:60:08:49: 6b:88:ac:f5:a7:2d:e8:f2:69:24:78:3e:43:40:d6: 47:d0:a4:34:ae:c9:f4:82:f1:9d:80:65:c9:0f:fc: d9:a0:73:3c:7b:04:30:19:bc:38:44:4c:21:cc:ef: e0:ef:20:5f:ae:74:3a:88:ad:e5:0f:88:93:4b:0b: d4:ca:32:8f:56:e1:cb:a4:53:de:8c:96:ff:6b:6e: e4:e0:23:ef:13:e0:40:df:fa:79:52:bf:73:ee:42: 50:28:aa:6e:5d:45:ef:35:7f:95:8e:a4:ca:db:d0: c6:a9:bc:71:1d:b2:99:cd:e9:47:73:c2:f3:1a:ea: c0:83:a8:2f:3a:7f:36:de:84:e3:46:02:c6:42:f2: 44:87:57:43:00:24:6a:bb:40:56:90:7d:0f:99:96: 27:27:53:3f:cd:10:68:08:19:ca:1a:fb:dc:6e:76: ce:68:6a:e1:84:e3:c2:06:2f:46:d3:a6:bd:27:1f: 9f:51:14:71:53:9c:9a:49:02:35:c9:75:b2:02:fd: 48:a7:fe:f2:a0:3b:92:89:fc:cd:db:f9:67:d6:80: 62:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D9:C3:DE:3A:62:27:E7:0E:A7:6D:CC:9E:33:D7:97:A3:A4:BC:BF X509v3 Authority Key Identifier: keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.72.0/22 IPv6: 2402:e1c0::/32 Signature Algorithm: sha256WithRSAEncryption a7:4f:ea:ec:0a:8d:cc:1d:46:84:88:2f:6b:c8:42:89:8b:40: 01:88:15:84:da:4b:c1:a0:f7:f3:69:74:d1:2f:7f:44:51:82: dc:5a:f3:67:5d:23:40:34:ee:ae:b1:16:7f:31:21:2e:fa:35: b6:45:24:be:d5:fb:67:bb:28:f2:66:24:69:8a:34:59:4f:ac: 71:25:3f:75:12:cf:25:12:f1:7d:0d:b8:cf:69:20:1e:94:24: fc:06:a8:eb:4e:fe:f9:f1:37:21:d4:a8:b1:22:9a:30:ef:c0: eb:c8:be:68:a3:0b:4d:49:3e:fd:ae:fe:52:8e:e6:c5:82:44: 06:32:07:60:86:6e:e8:59:cb:76:cb:50:94:f7:82:40:03:11: 87:0a:20:0d:78:bf:bb:58:64:9b:90:ef:b3:7a:36:d4:e4:a9: c5:ed:33:d3:27:ef:70:2c:8d:48:d5:4b:d8:ac:e9:2d:68:20: ca:cf:81:89:35:5e:53:a6:32:04:3b:f4:78:2c:2d:86:8f:04: ad:0d:56:36:7a:61:79:ea:dc:78:f4:6a:4f:df:25:15:26:51: c6:6b:68:0e:f9:c5:cf:1b:77:3d:40:48:20:e2:a1:ea:a9:bc: f0:a6:63:33:c5:35:9e:7e:e7:1a:7a:24:34:a3:8d:e0:70:78: 7b:06:3d:6a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY5QTExMTAvBgNVBAUTKEE3RjlBRjI4RDI0QTQzMjQ5M0I0QjJCQTlCNTU3MjlC QzA5NzdDQzgwHhcNMjQwODA2MTgzNjQ1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIyNmQzZC1iN2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmljMVbcEnGibYIpy7IsHZc42oAOqiZDyMRuOXtRCPKLhTcEQt2A7ewtgCElr iKz1py3o8mkkeD5DQNZH0KQ0rsn0gvGdgGXJD/zZoHM8ewQwGbw4REwhzO/g7yBf rnQ6iK3lD4iTSwvUyjKPVuHLpFPejJb/a27k4CPvE+BA3/p5Ur9z7kJQKKpuXUXv NX+VjqTK29DGqbxxHbKZzelHc8LzGurAg6gvOn823oTjRgLGQvJEh1dDACRqu0BW kH0PmZYnJ1M/zRBoCBnKGvvcbnbOaGrhhOPCBi9G06a9Jx+fURRxU5yaSQI1yXWy Av1Ip/7yoDuSifzN2/ln1oBiKQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDjZw946 YifnDqdtzJ4z15ejpLy/MB8GA1UdIwQYMBaAFKf5ryjSSkMkk7SyuptVcpvAl3zI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjlBMS9EMjYwMTVDQUQz N0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5U1R0TEs2bTFWeW04Q1hm TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfbXZLTkpLUXlTVHRMSzZtMVZ5bThDWGZNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUY5QTEvRDI2MDE1Q0FEMzdFMTFFOThBMTk2QjY3QzRGOUFFMDIvNkREQUJGQjI2 Q0Q1MTFFRDlFQzlDRjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnc0gwDQQCAAIwBwMFACQC4cAwDQYJKoZIhvcNAQELBQAD ggEBAKdP6uwKjcwdRoSIL2vIQomLQAGIFYTaS8Gg9/NpdNEvf0RRgtxa82ddI0A0 7q6xFn8xIS76NbZFJL7V+2e7KPJmJGmKNFlPrHElP3USzyUS8X0NuM9pIB6UJPwG qOtO/vnxNyHUqLEimjDvwOvIvmijC01JPv2u/lKO5sWCRAYyB2CGbuhZy3bLUJT3 gkADEYcKIA14v7tYZJuQ77N6NtTkqcXtM9Mn73AsjUjVS9is6S1oIMrPgYk1XlOm MgQ79HgsLYaPBK0NVjZ6YXnq3Hj0ak/fJRUmUcZraA75xc8bdz1ASCDioeqpvPCm YzPFNZ5+5xp6JDSjjeBweHsGPWo= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org