$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa File: 6897097E6C6311EDBCFA073FC4F9AE02.roa (raw, json) Hash identifier: LMAVU6IlMpA/ZKPM4+7tcXj9rbVtGqoDvGA31wXa8Bk= Subject key identifier: 58:EA:3D:30:52:3B:C8:12:63:65:10:8C:16:B3:D9:3A:E1:2C:72:FB Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Certificate serial: 8C Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa Signing time: Fri 18 Aug 2023 21:39:00 +0000 ROA not before: Fri 18 Aug 2023 21:39:00 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 140917 IP address blocks: 103.153.110.0/23 maxlen: 23 103.153.110.0/24 maxlen: 24 103.153.111.0/24 maxlen: 24 2001:df4:4180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Validity Not Before: Aug 18 21:39:00 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64dfe4f4-03a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:84:26:75:c8:32:07:e5:5b:a7:35:cc:ee:6c: 77:03:31:93:74:1d:52:af:36:d7:2d:69:e9:ce:c8: cb:28:31:8b:68:9a:50:75:e0:f5:76:df:15:89:dc: 04:28:49:98:b6:73:9d:2d:d4:7e:1b:2d:f9:3a:8c: 73:41:36:2e:55:ed:9a:f5:80:9e:06:63:a0:7c:28: d1:57:5d:15:9f:97:7a:02:b6:f3:60:9a:ee:ea:0e: 36:6b:14:a3:1b:12:1f:c8:65:88:fa:2d:b0:a8:1c: 76:f4:3a:6c:ef:05:7e:b5:d1:77:e9:e3:b6:96:ca: 86:2a:7c:8e:a3:78:28:3a:c2:5a:35:9d:be:e6:25: b4:53:47:5d:96:92:88:4d:19:75:01:8d:3c:26:e6: 27:3d:c2:24:7e:a8:57:51:79:64:6c:3f:dd:d0:3a: 89:88:1a:80:b5:bd:83:d8:c3:16:3e:db:bc:05:61: 25:08:0b:11:14:53:43:61:d0:25:b8:70:77:8d:07: 2e:20:d9:24:2c:e8:c4:5b:44:3a:de:84:1c:1b:82: 23:83:c2:2b:d3:eb:4e:91:39:96:17:c9:50:8d:36: 8a:ad:7c:92:34:ef:55:e0:db:6f:67:c9:eb:0f:26: ab:f3:46:ef:a2:22:8f:f2:fe:de:3a:ab:0c:81:53: c5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EA:3D:30:52:3B:C8:12:63:65:10:8C:16:B3:D9:3A:E1:2C:72:FB X509v3 Authority Key Identifier: keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.110.0/23 IPv6: 2001:df4:4180::/48 Signature Algorithm: sha256WithRSAEncryption 90:44:4e:13:73:1a:c4:b9:48:9b:c8:af:0a:45:6d:3d:d0:13: 23:6a:f4:74:d3:b4:fe:23:7f:4e:ad:9b:1d:e2:22:48:2d:ee: 2b:4d:97:93:bb:7f:f9:69:7f:c3:91:8b:96:2b:de:35:b3:5f: 7f:f5:fd:38:95:12:79:5a:0e:b0:3d:ff:24:b7:ea:3b:1d:a4: 7e:fd:c4:6b:3c:e4:b1:b4:74:65:eb:e3:26:4f:31:5e:a9:a4: 88:e8:db:27:7d:bf:3f:30:c1:39:7d:ae:ad:74:f2:77:5d:36: 77:01:0d:1e:20:a2:07:9a:1b:58:23:a4:bd:a6:da:88:ab:14: 50:c6:fc:78:b2:e4:10:d1:a6:ce:cc:14:21:61:6d:fe:dc:91: f5:8f:85:64:b0:5e:8f:6a:d3:cb:d9:b3:e1:45:78:9e:78:c4: e4:7f:8f:57:cb:4f:3f:d0:0c:8e:f2:a7:10:89:e4:62:d6:37: 0c:8b:11:ac:c1:29:ae:df:ed:a8:d4:1f:75:14:56:f5:cd:a5: 5b:8d:15:ff:70:3c:a7:50:31:c6:ba:af:bc:fa:fb:6d:f4:19: d7:17:1e:1e:14:50:57:3c:6f:e8:c0:2c:9a:a4:a7:8b:8f:b1: d4:4d:35:2e:b2:dd:ba:16:0a:47:9f:92:60:ca:45:79:7b:e0: 9d:2e:ef:30 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4 NkE4RDFFM0UwHhcNMjMwODE4MjEzOTAwWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRmZTRmNC0wM2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YQmdcgyB+VbpzXM7mx3AzGTdB1SrzbXLWnpzsjLKDGLaJpQdeD1dt8VidwE KEmYtnOdLdR+Gy35OoxzQTYuVe2a9YCeBmOgfCjRV10Vn5d6ArbzYJru6g42axSj GxIfyGWI+i2wqBx29Dps7wV+tdF36eO2lsqGKnyOo3goOsJaNZ2+5iW0U0ddlpKI TRl1AY08JuYnPcIkfqhXUXlkbD/d0DqJiBqAtb2D2MMWPtu8BWElCAsRFFNDYdAl uHB3jQcuINkkLOjEW0Q63oQcG4Ijg8Ir0+tOkTmWF8lQjTaKrXySNO9V4NtvZ8nr Dyar80bvoiKP8v7eOqsMgVPFFQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFjqPTBS O8gSY2UQjBaz2TrhLHL7MB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkEwQUUvMzdFQjBDNjZDOTY0MTFFQUExMDZFODU5QzRGOUFFMDIvNjg5NzA5N0U2 QzYzMTFFREJDRkEwNzNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmW4wDwQCAAIwCQMHACABDfRBgDANBgkqhkiG9w0BAQsF AAOCAQEAkEROE3MaxLlIm8ivCkVtPdATI2r0dNO0/iN/Tq2bHeIiSC3uK02Xk7t/ +Wl/w5GLliveNbNff/X9OJUSeVoOsD3/JLfqOx2kfv3EazzksbR0ZevjJk8xXqmk iOjbJ32/PzDBOX2urXTyd102dwENHiCiB5obWCOkvabaiKsUUMb8eLLkENGmzswU IWFt/tyR9Y+FZLBej2rTy9mz4UV4nnjE5H+PV8tPP9AMjvKnEInkYtY3DIsRrMEp rt/tqNQfdRRW9c2lW40V/3A8p1AxxrqvvPr7bfQZ1xceHhRQVzxv6MAsmqSni4+x 1E01LrLduhYKR5+SYMpFeXvgnS7vMA== -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:26 2024 by rpki-client on console-ams.rpki-client.org