$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/67030B7889F111EFB3186A7BC4F9AE02.roa File: 67030B7889F111EFB3186A7BC4F9AE02.roa (raw, json) Hash identifier: mvhi+IiloRrqCatLOZAFHngd1MYdVM4fTREmQVB/RXo= Subject key identifier: 9B:99:FB:25:8C:4A:CB:8D:ED:19:91:06:9F:99:9B:D4:9D:6C:4E:EC Certificate issuer: /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Certificate serial: 02 Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/67030B7889F111EFB3186A7BC4F9AE02.roa Signing time: Mon 14 Oct 2024 05:58:58 +0000 ROA not before: Mon 14 Oct 2024 05:58:58 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 150399 IP address blocks: 103.30.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Validity Not Before: Oct 14 05:58:58 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=670cb322-fbf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7a:72:41:3a:c4:f6:d0:bf:14:78:be:1b:a4: c1:a3:41:28:9f:4e:0b:7b:1b:98:b9:c2:27:92:91: 05:1f:49:92:cb:a1:7b:7f:7f:10:67:c0:6f:fe:51: 2f:fc:06:df:f6:aa:08:d8:5c:a6:c3:4d:10:cb:ac: 46:c8:00:4c:38:c4:e6:17:87:31:32:3a:71:8f:00: f2:08:12:3e:c3:7e:fb:b5:34:f5:ca:cb:2b:b8:03: 5a:e6:56:eb:69:e2:f4:4c:17:6b:f1:d3:1c:1b:46: 2d:0d:24:b5:d1:c0:ac:f0:77:bb:21:c6:b1:c2:1b: 9d:5d:c2:6e:e5:39:ea:48:2d:34:0c:74:99:ce:73: a5:21:13:98:3f:b3:ea:c8:69:71:57:25:67:d4:3a: db:9d:47:f3:13:e4:51:4b:d7:d1:fe:ca:0c:33:fa: be:29:a2:48:00:25:5a:7c:ae:01:3a:75:dd:2f:3a: 3e:6c:30:29:16:59:84:42:59:85:cd:a3:d9:ab:77: 77:04:6f:f7:4b:30:79:db:b7:48:a3:98:47:00:13: 48:0b:64:96:9b:9a:11:b1:6a:21:c1:9d:92:b9:20: b5:4b:de:da:33:73:40:c6:75:cb:18:0c:18:2c:1d: 50:cf:66:25:ad:85:03:2e:60:a6:d5:c7:f5:b4:ef: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:99:FB:25:8C:4A:CB:8D:ED:19:91:06:9F:99:9B:D4:9D:6C:4E:EC X509v3 Authority Key Identifier: keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/67030B7889F111EFB3186A7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.30.60.0/23 Signature Algorithm: sha256WithRSAEncryption 08:60:47:9c:b3:83:10:23:0a:26:65:33:4c:6b:ea:87:78:21: 68:82:82:15:e3:b1:e4:38:9f:a4:53:d7:13:c9:da:0a:bb:bf: 9a:65:9e:28:5e:c0:b9:4f:a1:92:ff:27:bb:36:e6:df:b8:3b: 9f:4b:f6:21:8d:da:97:6c:c5:4b:8e:d4:1d:8f:00:6f:dd:2b: e5:79:eb:81:b9:1a:85:15:53:ad:8c:f3:96:02:5d:7b:22:03: e1:8f:a7:07:74:07:58:13:03:9f:d5:bd:64:0b:7d:e9:76:ca: b1:73:26:bf:67:02:ce:07:76:d0:44:31:bb:93:2a:b6:14:86: b8:c1:ad:ce:0c:eb:12:99:ab:a9:71:49:bb:56:aa:44:99:bf: 11:01:9b:74:ba:c8:02:17:9d:c9:db:ec:78:d3:21:5f:30:a4: 98:5a:73:ac:8c:3c:40:54:e5:a2:a2:66:b4:d4:ca:30:cf:33: 6c:83:32:97:a7:cc:5f:26:fe:b5:e1:58:ee:8b:e7:36:c0:99: d7:78:43:10:48:52:32:a3:a8:17:e6:42:3f:b8:40:70:7b:71: ec:81:dc:42:9c:86:e1:cd:bb:7a:92:33:00:d6:45:85:34:63: e9:be:d9:f1:78:bf:ae:b7:35:2b:97:27:d6:de:21:36:0e:4b: 09:96:64:39 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzFDQjExMC8GA1UEBRMoREZFNEFDRENBMEE2MjI0MzY1NEJEMjA5MzY4MjA1NzhF OTJEMjUyNDAeFw0yNDEwMTQwNTU4NThaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MGNiMzIyLWZiZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZenJBOsT20L8UeL4bpMGjQSifTgt7G5i5wieSkQUfSZLLoXt/fxBnwG/+US/8 Bt/2qgjYXKbDTRDLrEbIAEw4xOYXhzEyOnGPAPIIEj7Dfvu1NPXKyyu4A1rmVutp 4vRMF2vx0xwbRi0NJLXRwKzwd7shxrHCG51dwm7lOepILTQMdJnOc6UhE5g/s+rI aXFXJWfUOtudR/MT5FFL19H+ygwz+r4pokgAJVp8rgE6dd0vOj5sMCkWWYRCWYXN o9mrd3cEb/dLMHnbt0ijmEcAE0gLZJabmhGxaiHBnZK5ILVL3tozc0DGdcsYDBgs HVDPZiWthQMuYKbVx/W07xVLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUm5n7JYxK y43tGZEGn5mb1J1sTuwwHwYDVR0jBBgwFoAU3+Ss3KCmIkNlS9IJNoIFeOktJSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMUNCL0Y0NENDRjdFODlG MDExRUZBRDI2Qjk3QUM0RjlBRTAyLzMtU3MzS0NtSWtObFM5SUpOb0lGZU9rdEpT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMy1TczNLQ21Ja05sUzlJSk5vSUZlT2t0SlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzFDQi9GNDRDQ0Y3RTg5RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi82NzAzMEI3ODg5 RjExMUVGQjMxODZBN0JDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWcePDANBgkqhkiG9w0BAQsFAAOCAQEACGBHnLODECMKJmUz TGvqh3ghaIKCFeOx5DifpFPXE8naCru/mmWeKF7AuU+hkv8nuzbm37g7n0v2IY3a l2zFS47UHY8Ab90r5XnrgbkahRVTrYzzlgJdeyID4Y+nB3QHWBMDn9W9ZAt96XbK sXMmv2cCzgd20EQxu5MqthSGuMGtzgzrEpmrqXFJu1aqRJm/EQGbdLrIAhedydvs eNMhXzCkmFpzrIw8QFTloqJmtNTKMM8zbIMyl6fMXyb+teFY7ovnNsCZ13hDEEhS MqOoF+ZCP7hAcHtx7IHcQpyG4c27epIzANZFhTRj6b7Z8Xi/rrc1K5cn1t4hNg5L CZZkOQ== -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org