$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/05C6C85CF3C211ED8B9B1450C4F9AE02.roa File: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (raw, json) Hash identifier: nYA6dKLF7hZ2252OSmbcet0fM3uQj9FqvEVTxCVbcwo= Subject key identifier: E3:A8:B0:15:40:EC:A9:EE:53:EA:5F:00:1D:60:B0:3A:1F:25:09:8F Certificate issuer: /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Certificate serial: D9 Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/05C6C85CF3C211ED8B9B1450C4F9AE02.roa Signing time: Mon 01 Jul 2024 05:46:28 +0000 ROA not before: Mon 01 Jul 2024 05:46:28 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 151327 IP address blocks: 103.137.46.0/23 maxlen: 23 103.137.46.0/24 maxlen: 24 103.137.47.0/24 maxlen: 24 2001:df2:6640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Validity Not Before: Jul 1 05:46:28 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=668242b4-32de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:8e:9c:d3:9c:12:b9:75:54:e1:eb:84:5a: ee:19:82:f0:89:91:25:f4:ee:f8:2d:1e:f7:48:c2: 13:15:dc:4f:f6:23:92:2b:8a:52:b7:2a:36:cd:dd: 5b:4d:8b:2c:6d:ef:79:77:c5:91:d1:1c:33:98:4e: ad:6f:c9:3f:6e:97:54:7a:aa:83:e1:12:a6:88:00: 75:0c:24:93:41:d0:90:72:86:c1:ba:ec:e6:22:c0: 23:e0:9f:19:22:36:83:b6:12:f2:d5:9f:c7:58:bd: a4:07:7e:c5:89:72:f9:e7:01:46:bd:5f:ad:29:5f: 5e:48:cd:ba:7d:17:00:43:0d:ba:a5:07:86:37:bf: 83:13:4e:9d:0e:f4:c1:43:5e:bf:b3:47:dd:1f:30: 15:07:36:84:1a:e1:09:e5:fb:5d:88:98:01:5b:9a: bc:3e:5a:47:21:46:a2:24:d9:be:84:dd:af:f6:9c: c6:d1:14:33:76:0f:61:0f:18:51:73:0a:98:74:4c: b6:26:b2:93:cb:92:20:a7:22:2e:f6:3f:1b:20:f3: d6:5b:df:ca:94:98:24:ca:c3:a7:ea:57:57:6d:eb: 16:08:12:43:ac:7d:58:41:43:4f:7e:33:57:2c:8c: 3a:5a:25:af:26:b7:9a:90:24:82:e1:60:5f:11:cd: 28:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A8:B0:15:40:EC:A9:EE:53:EA:5F:00:1D:60:B0:3A:1F:25:09:8F X509v3 Authority Key Identifier: keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/05C6C85CF3C211ED8B9B1450C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.46.0/23 IPv6: 2001:df2:6640::/48 Signature Algorithm: sha256WithRSAEncryption 99:3c:b2:75:83:e7:a0:db:c1:a0:9f:fd:b0:5f:7b:89:95:96: 31:6d:f7:51:d9:55:80:1b:eb:3e:3a:87:89:a6:4e:f9:30:73: 52:84:1b:f8:01:27:a3:fa:9b:21:3f:33:c3:7b:c6:34:b6:b9: 05:71:bf:f8:a6:33:d7:3a:77:c3:db:a7:db:f9:d3:29:2d:50: 27:52:77:14:7a:d5:9c:b7:d5:d8:f4:47:c0:45:b1:91:3e:ea: dc:69:f6:13:d5:14:f4:84:f5:68:3f:01:0c:68:7d:1f:eb:0a: ba:21:ba:41:0c:52:56:3c:85:35:8e:57:b3:8a:70:5b:3e:93: ca:11:59:57:13:ff:29:aa:3f:f3:13:6b:e2:6b:15:44:7f:8e: d7:81:2d:a6:4c:b3:ac:61:b8:3c:b3:93:8f:aa:82:bc:28:2d: 89:da:78:5b:18:08:12:37:7a:59:3a:20:55:51:f4:49:18:5e: e7:6e:d3:9b:fe:53:d0:a0:1d:56:8f:e9:da:6d:0a:e3:c7:50: de:ed:55:15:6a:20:94:66:03:2b:d4:18:7a:4c:a4:f6:fc:19: ad:65:86:45:dc:71:f3:04:2b:18:a3:c2:ec:29:73:04:8e:4d: e9:22:be:bf:0a:02:29:c9:2b:93:f4:f4:32:90:70:9e:2e:66: f4:f4:de:cf -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMkExMTAvBgNVBAUTKEZBRTIxNDE0RDExM0RCNzhENTRGRUFCQTFCNjA2Rjg1 NEEyNDBCRDEwHhcNMjQwNzAxMDU0NjI4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjgyNDJiNC0zMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwReOnNOcErl1VOHrhFruGYLwiZEl9O74LR73SMITFdxP9iOSK4pStyo2zd1b TYssbe95d8WR0RwzmE6tb8k/bpdUeqqD4RKmiAB1DCSTQdCQcobBuuzmIsAj4J8Z IjaDthLy1Z/HWL2kB37FiXL55wFGvV+tKV9eSM26fRcAQw26pQeGN7+DE06dDvTB Q16/s0fdHzAVBzaEGuEJ5ftdiJgBW5q8PlpHIUaiJNm+hN2v9pzG0RQzdg9hDxhR cwqYdEy2JrKTy5IgpyIu9j8bIPPWW9/KlJgkysOn6ldXbesWCBJDrH1YQUNPfjNX LIw6WiWvJreakCSC4WBfEc0o0wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOOosBVA 7KnuU+pfAB1gsDofJQmPMB8GA1UdIwQYMBaAFPriFBTRE9t41U/quhtgb4VKJAvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEyQS8xNDc3MTFCMkYz QkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIzalZULXE2RzJCdmhVb2tD OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11SVVGTkVUMjNqVlQtcTZHMkJ2aFVva0M5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkRBMkEvMTQ3NzExQjJGM0JFMTFFRDlBOUFDNjRGQzRGOUFFMDIvMDVDNkM4NUNG M0MyMTFFRDhCOUIxNDUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFniS4wDwQCAAIwCQMHACABDfJmQDANBgkqhkiG9w0BAQsF AAOCAQEAmTyydYPnoNvBoJ/9sF97iZWWMW33UdlVgBvrPjqHiaZO+TBzUoQb+AEn o/qbIT8zw3vGNLa5BXG/+KYz1zp3w9un2/nTKS1QJ1J3FHrVnLfV2PRHwEWxkT7q 3Gn2E9UU9IT1aD8BDGh9H+sKuiG6QQxSVjyFNY5Xs4pwWz6TyhFZVxP/Kao/8xNr 4msVRH+O14EtpkyzrGG4PLOTj6qCvCgtidp4WxgIEjd6WTogVVH0SRhe527Tm/5T 0KAdVo/p2m0K48dQ3u1VFWoglGYDK9QYekyk9vwZrWWGRdxx8wQrGKPC7ClzBI5N 6SK+vwoCKckrk/T0MpBwni5m9PTezw== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org