$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/6F1612BE562511EB9470B150C4F9AE02.roa File: 6F1612BE562511EB9470B150C4F9AE02.roa (raw, json) Hash identifier: JsgxM7O87UBNAKRhO7z2ipB7o5ZRGqkbp9Qr0swNUZI= Subject key identifier: AF:48:79:78:D6:48:7E:C9:30:AD:76:95:E3:86:27:0B:E4:C1:7E:EE Certificate issuer: /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Certificate serial: 34E1 Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/6F1612BE562511EB9470B150C4F9AE02.roa Signing time: Mon 30 Sep 2024 14:51:06 +0000 ROA not before: Mon 30 Sep 2024 14:51:06 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 137412 IP address blocks: 118.103.138.0/24 maxlen: 24 2405:ec01::/32 maxlen: 32 2405:ec01:1000::/36 maxlen: 36 2405:ec01:1000::/40 maxlen: 40 2405:ec01:1000::/44 maxlen: 44 2405:ec01:9000::/36 maxlen: 36 2405:ec01:a000::/36 maxlen: 36 2405:ec01:a000::/40 maxlen: 40 2405:ec01:a000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13537 (0x34e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Validity Not Before: Sep 30 14:51:06 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fabad9-6ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:91:75:ac:96:6e:6f:88:6f:8b:b0:c7:85: ec:bc:29:b9:7e:ba:54:32:12:7d:c0:5b:92:e7:f9: 70:2d:e1:b2:01:b3:e3:d7:ac:a0:46:c3:34:e3:17: 9b:83:a0:c4:65:8f:e3:bb:73:a7:b7:3a:ad:11:82: 9c:51:a0:71:7a:d7:ae:c5:db:e8:e8:1c:26:75:0d: 90:a5:f5:1d:83:d8:26:17:06:73:c3:ea:10:8c:3e: 7c:52:83:59:0b:3f:ed:72:e0:7f:01:7e:ea:9d:ef: 9d:f6:54:9b:eb:bd:e5:3f:34:5f:77:b3:77:d5:6c: 5a:9f:4d:f5:9e:3d:ba:ea:c6:0d:e9:ac:43:04:7e: aa:92:88:92:b7:cf:02:81:69:ed:35:80:b6:e3:ff: 78:9d:ac:cc:2f:0d:a7:7c:4e:8c:14:6f:22:11:f6: fa:0e:2c:e8:4f:e2:86:0a:0e:41:ed:53:47:f4:e8: bc:e3:6c:cd:6a:b8:02:2e:5c:87:f9:b0:d7:dc:4d: 76:ad:d9:7c:b6:6c:37:80:31:20:3f:e8:e6:6c:98: 33:90:b3:b5:7a:31:b2:4f:e3:dd:b9:ad:3d:9c:98: 09:cb:2d:9e:b3:6d:dd:7e:fc:62:ec:e2:75:8f:6e: 25:65:b3:bb:b7:ac:96:b7:00:fe:e6:05:c5:e7:ae: e3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:48:79:78:D6:48:7E:C9:30:AD:76:95:E3:86:27:0B:E4:C1:7E:EE X509v3 Authority Key Identifier: keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/6F1612BE562511EB9470B150C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.103.138.0/24 IPv6: 2405:ec01::/32 Signature Algorithm: sha256WithRSAEncryption 69:70:21:cd:53:75:fc:39:9d:5a:29:ec:b7:69:89:98:01:db: 0f:27:43:89:8e:df:18:56:4e:85:78:7e:4f:e5:8c:42:83:6c: 23:ca:8d:6e:cb:60:8b:b3:d3:6f:b1:33:df:29:87:e5:35:14: 55:4b:49:10:04:ad:6f:94:62:0c:4a:b5:e1:2c:da:03:07:39: 16:81:1b:6e:29:61:9d:87:ac:69:1d:f3:89:d6:74:fb:d3:97: b8:69:8a:2a:66:8b:c9:99:5a:15:70:a7:f6:19:79:bd:f8:e9: f1:b6:8b:0f:aa:4e:dd:f4:21:63:33:35:27:1a:87:c1:61:04: b3:e0:96:fd:10:f3:fe:26:4e:0d:32:b8:88:3e:4e:cc:95:c6: 09:41:bc:7d:ed:dc:25:05:e9:9a:44:45:d4:34:8a:ca:44:ae: 1f:c6:70:0c:28:6f:e3:a2:ea:97:4f:3d:f8:ab:98:62:07:e9: 88:40:08:d2:4a:f5:55:f5:fa:ea:28:82:81:07:28:5f:88:88: bf:06:7b:ee:72:ae:97:20:6f:35:90:96:ac:92:ba:f5:42:e8: 79:dd:55:88:01:0e:fa:74:96:e2:5e:53:02:45:3f:fa:1f:2a: c7:27:b0:0d:44:57:bb:4f:ec:36:61:c9:f4:b6:18:e9:ec:f3: 21:7f:af:3e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICNOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMDYxMTAvBgNVBAUTKDNBQUY4MEVBOTdFOTlCOTUyNUIzM0JDMTMzNUJCMDk1 QzJEMjc4QTcwHhcNMjQwOTMwMTQ1MTA2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZhYmFkOS02ZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnCRdayWbm+Ib4uwx4XsvCm5frpUMhJ9wFuS5/lwLeGyAbPj16ygRsM04xeb g6DEZY/ju3OntzqtEYKcUaBxeteuxdvo6BwmdQ2QpfUdg9gmFwZzw+oQjD58UoNZ Cz/tcuB/AX7qne+d9lSb673lPzRfd7N31Wxan031nj266sYN6axDBH6qkoiSt88C gWntNYC24/94nazMLw2nfE6MFG8iEfb6DizoT+KGCg5B7VNH9Oi842zNargCLlyH +bDX3E12rdl8tmw3gDEgP+jmbJgzkLO1ejGyT+Pdua09nJgJyy2es23dfvxi7OJ1 j24lZbO7t6yWtwD+5gXF567jNQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFK9IeXjW SH7JMK12leOGJwvkwX7uMB8GA1UdIwQYMBaAFDqvgOqX6ZuVJbM7wTNbsJXC0nin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYwNi83NkUxQzQ3RTFE OTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01VWxzenZCTTF1d2xjTFNl S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xLUE2cGZwbTVVbHN6dkJNMXV3bGNMU2VLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRGMDYvNzZFMUM0N0UxRDk1MTFFMkJFNTk1RTdEMDhCMDJDRDIvNkYxNjEyQkU1 NjI1MTFFQjk0NzBCMTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAB2Z4owDQQCAAIwBwMFACQF7AEwDQYJKoZIhvcNAQELBQAD ggEBAGlwIc1Tdfw5nVop7LdpiZgB2w8nQ4mO3xhWToV4fk/ljEKDbCPKjW7LYIuz 02+xM98ph+U1FFVLSRAErW+UYgxKteEs2gMHORaBG24pYZ2HrGkd84nWdPvTl7hp iipmi8mZWhVwp/YZeb346fG2iw+qTt30IWMzNScah8FhBLPglv0Q8/4mTg0yuIg+ TsyVxglBvH3t3CUF6ZpERdQ0ispErh/GcAwob+Oi6pdPPfirmGIH6YhACNJK9VX1 +uoogoEHKF+IiL8Ge+5yrpcgbzWQlqySuvVC6HndVYgBDvp0luJeUwJFP/ofKscn sA1EV7tP7DZhyfS2GOns8yF/rz4= -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:51 2024 by rpki-client on console-fra.rpki-client.org