$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/AB9480A6BB6811E69E8D1212C4F9AE02.roa File: AB9480A6BB6811E69E8D1212C4F9AE02.roa (raw, json) Hash identifier: rrxARAVhnCadOERHFV09VWaepwpZuOKaQNvTjpcjpF8= Subject key identifier: 91:BC:28:F0:4D:AB:96:48:80:A8:63:B8:5B:9C:C4:C8:AD:B6:E0:31 Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Certificate serial: 1BD9 Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/AB9480A6BB6811E69E8D1212C4F9AE02.roa Signing time: Sat 30 Sep 2023 16:33:40 +0000 ROA not before: Sat 30 Sep 2023 16:33:40 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 132148 IP address blocks: 103.70.249.0/24 maxlen: 24 103.81.113.0/24 maxlen: 24 103.81.114.0/24 maxlen: 24 103.81.115.0/24 maxlen: 24 2001:df3:ce00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 16:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7129 (0x1bd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Validity Not Before: Sep 30 16:33:40 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65184de4-03c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6c:45:ec:a1:a5:49:66:e4:ef:9f:0c:ce:37: 86:53:42:55:3c:b2:f2:8c:eb:70:23:3a:fb:f4:cb: d3:0e:e2:d1:67:8d:84:61:9c:83:65:95:2a:5a:80: d4:ad:c3:57:28:1b:ea:af:75:f3:c6:06:a1:5d:b3: ef:bf:25:c6:46:67:26:e0:c2:f4:a7:67:e4:36:f4: e0:a4:a2:10:ba:cf:22:8c:28:f5:ce:e4:0c:d7:29: 4c:f2:0d:27:f3:11:59:fc:81:9f:90:d5:bd:2b:5a: aa:bd:9c:2c:b4:ee:e2:78:2c:ff:80:06:70:1e:e3: 17:71:d6:bc:a4:17:ed:21:12:8f:49:2e:06:7b:93: 04:ec:31:93:bb:96:45:b3:ea:15:f4:0e:d0:f1:bb: e2:a3:62:82:25:2d:4d:16:52:9a:ce:de:4f:65:74: 2b:83:78:8b:ed:eb:cf:f3:c2:df:7a:3d:32:af:45: 77:55:37:f0:1c:9d:80:c8:7f:97:91:50:86:13:f0: db:e3:5a:b6:eb:44:ec:3e:99:b1:b0:44:2c:7a:9c: 45:4c:cf:7d:6e:d8:8d:23:e5:df:23:12:2e:29:b0: bd:65:62:d8:85:4f:fa:1a:ac:ef:61:29:0f:44:9d: ec:1c:ba:d4:39:b7:56:c6:f6:a1:9c:29:7e:7e:81: 9c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BC:28:F0:4D:AB:96:48:80:A8:63:B8:5B:9C:C4:C8:AD:B6:E0:31 X509v3 Authority Key Identifier: keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/AB9480A6BB6811E69E8D1212C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.70.249.0/24 103.81.113.0-103.81.115.255 IPv6: 2001:df3:ce00::/48 Signature Algorithm: sha256WithRSAEncryption 8e:86:56:e6:14:ff:ba:73:c9:6a:39:3f:0e:e4:11:59:26:2f: df:e5:0b:1d:3f:99:e0:c9:a6:72:f8:5f:8c:24:17:ce:86:63: d0:e9:5a:8e:d1:7e:1c:b1:8e:ad:90:df:27:6a:e2:56:2e:a8: 63:3d:e4:a7:0c:72:29:c3:45:82:2f:ff:0f:a4:46:4b:16:f8: 8c:c0:81:b3:d6:fc:44:3f:18:24:cf:dd:e6:52:4a:da:69:df: e9:0d:c6:57:3a:a6:b6:ef:d8:28:68:3c:ac:6c:27:28:8a:cf: e9:77:62:36:47:31:f8:81:ad:bf:45:e1:1a:05:2c:50:57:95: d4:26:0c:33:ae:0d:dd:b8:5e:68:8d:d4:33:ab:d2:35:61:cf: 7c:1a:04:60:70:00:53:39:14:52:31:11:f9:9a:64:d1:3a:a9: 77:e2:47:f0:75:ef:43:9f:c8:cf:90:4b:2f:69:ff:67:24:31: 8b:5f:ce:d0:d3:d9:19:6c:50:b2:7f:67:4a:76:b1:2a:87:83: 55:a0:e6:61:25:67:89:00:94:1b:01:c0:2d:2c:47:68:88:d2: 6f:81:8f:7f:e3:ab:37:03:d4:bd:d9:d2:09:d1:42:fa:3b:66: 21:4d:98:cb:de:4e:3e:d1:17:05:91:d1:db:73:9c:10:41:a1: 53:3b:9d:b1 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICG9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJENUIxMTAvBgNVBAUTKERCOTJCODNGNEMxODc4MzkwRDZBNDRFNkFFRDU3QTc3 NTIyNjM1MTIwHhcNMjMwOTMwMTYzMzQwWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE4NGRlNC0wM2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmxF7KGlSWbk758MzjeGU0JVPLLyjOtwIzr79MvTDuLRZ42EYZyDZZUqWoDU rcNXKBvqr3XzxgahXbPvvyXGRmcm4ML0p2fkNvTgpKIQus8ijCj1zuQM1ylM8g0n 8xFZ/IGfkNW9K1qqvZwstO7ieCz/gAZwHuMXcda8pBftIRKPSS4Ge5ME7DGTu5ZF s+oV9A7Q8bvio2KCJS1NFlKazt5PZXQrg3iL7evP88Lfej0yr0V3VTfwHJ2AyH+X kVCGE/Db41q260TsPpmxsEQsepxFTM99btiNI+XfIxIuKbC9ZWLYhU/6GqzvYSkP RJ3sHLrUObdWxvahnCl+foGckwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJG8KPBN q5ZIgKhjuFucxMittuAxMB8GA1UdIwQYMBaAFNuSuD9MGHg5DWpE5q7VendSJjUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ1Qi8xNzAyRkMzRUJC NjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVEa05ha1RtcnRWNmQxSW1O UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1SzRQMHdZZURrTmFrVG1ydFY2ZDFJbU5SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkJENUIvMTcwMkZDM0VCQjY3MTFFNkFFMjQwNDBGQzRGOUFFMDIvQUI5NDgwQTZC QjY4MTFFNjlFOEQxMjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPgYIKwYBBQUHAQcBAf8E LzAtMBoEAgABMBQDBABnRvkwDAMEAGdRcQMEAmdRcDAPBAIAAjAJAwcAIAEN884A MA0GCSqGSIb3DQEBCwUAA4IBAQCOhlbmFP+6c8lqOT8O5BFZJi/f5QsdP5ngyaZy +F+MJBfOhmPQ6VqO0X4csY6tkN8nauJWLqhjPeSnDHIpw0WCL/8PpEZLFviMwIGz 1vxEPxgkz93mUkraad/pDcZXOqa279goaDysbCcois/pd2I2RzH4ga2/ReEaBSxQ V5XUJgwzrg3duF5ojdQzq9I1Yc98GgRgcABTORRSMRH5mmTROql34kfwde9Dn8jP kEsvaf9nJDGLX87Q09kZbFCyf2dKdrEqh4NVoOZhJWeJAJQbAcAtLEdoiNJvgY9/ 46s3A9S92dIJ0UL6O2YhTZjL3k4+0RcFkdHbc5wQQaFTO52x -----END CERTIFICATE-----Generated at Tue Jun 18 18:37:51 2024 by rpki-client on console-fra.rpki-client.org