$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/2F3F56C42BB411EF8D887F3AC4F9AE02.roa File: 2F3F56C42BB411EF8D887F3AC4F9AE02.roa (raw, json) Hash identifier: 8dWJdqagBMUOot+C6YedKPZtvdD4vKLY57BrncTckSs= Subject key identifier: 3F:51:2D:6D:4E:E4:DC:25:8C:BE:7E:0A:2A:35:36:68:BD:09:53:2B Certificate issuer: /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Certificate serial: 0468 Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/2F3F56C42BB411EF8D887F3AC4F9AE02.roa Signing time: Sun 30 Jun 2024 12:50:54 +0000 ROA not before: Sun 30 Jun 2024 12:50:54 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 151952 IP address blocks: 103.172.142.0/23 maxlen: 23 103.172.142.0/24 maxlen: 24 103.172.143.0/24 maxlen: 24 2001:df0:6a40::/48 maxlen: 48 2001:df0:6a40::/49 maxlen: 49 2001:df0:6a40:8000::/49 maxlen: 49 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Oct 2024 23:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1128 (0x468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Validity Not Before: Jun 30 12:50:54 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=668154ae-e068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6d:b0:7c:f4:d2:4b:da:0b:3f:b6:73:8c:82: f4:6e:8e:c9:52:63:ec:de:83:29:da:00:99:ff:5f: d1:b2:a7:06:84:4b:18:37:11:94:48:dd:4a:61:e1: 16:bc:ae:66:76:1c:e9:8a:d8:f9:c4:72:17:7c:a2: f9:4a:7d:90:7a:74:e3:b8:8b:c3:47:ab:e4:35:b4: 1d:7e:a1:8d:f0:d9:a6:9d:78:6e:a6:07:5f:3b:fb: a3:7b:d5:f9:ac:04:5d:0f:d2:7a:f6:64:fc:6e:a1: 76:0e:94:a4:ad:94:93:71:25:c9:b6:96:65:4c:63: 4b:da:e7:7c:d8:cf:e6:86:7e:54:97:dd:5f:83:07: d2:37:88:ea:0b:7e:24:e5:15:87:c3:e0:3f:05:b9: 02:d5:ab:8e:12:42:f9:59:8a:21:85:b1:8f:d1:91: 9f:f2:48:87:01:75:24:c5:f9:88:9e:63:be:23:b0: a2:ae:c5:aa:1b:72:82:1c:71:1e:17:b3:59:44:3e: 88:59:08:46:5d:b6:4e:a7:45:b9:dd:f4:fe:a9:c9: 53:e6:43:95:83:ca:42:b3:f2:ac:bf:68:a5:c0:06: 15:48:c5:85:98:25:79:c1:0b:94:96:81:8c:41:08: a0:b5:c5:c8:75:32:38:45:2b:4c:a5:3f:b6:9f:52: bb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:51:2D:6D:4E:E4:DC:25:8C:BE:7E:0A:2A:35:36:68:BD:09:53:2B X509v3 Authority Key Identifier: keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/2F3F56C42BB411EF8D887F3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.142.0/23 IPv6: 2001:df0:6a40::/48 Signature Algorithm: sha256WithRSAEncryption 3c:2c:d8:84:89:88:2d:5b:66:47:a5:21:21:d5:9d:99:56:4e: 53:c7:bd:47:b3:71:ab:31:44:2a:2f:49:ae:16:20:18:16:cd: 4e:66:f9:20:b7:a0:a5:98:e5:bf:2c:49:d4:70:c1:3b:3a:ad: de:4c:8d:e5:1e:52:d4:a0:bb:93:a9:67:cc:4a:fe:8a:7e:bb: e6:e8:bc:03:9d:ff:fb:31:b6:58:88:29:1c:29:87:e3:47:3f: 35:55:9a:dd:cf:c9:d3:9f:59:65:cf:73:64:d0:87:69:9f:09: 35:61:09:75:c4:7f:1a:2d:4c:4f:89:d9:34:22:52:a5:13:82: 5f:d1:23:d8:26:69:7e:2f:d8:07:8f:25:3d:88:16:74:33:16: 2e:fd:01:f9:6a:eb:e9:d7:08:fe:15:c8:fb:d9:62:8b:f3:05: 3b:f6:69:a8:0f:58:10:61:ca:97:21:18:52:6a:94:dd:be:07: d5:c0:e5:56:44:21:48:f2:a7:be:5b:6a:68:89:25:7d:50:46: 61:86:5e:ff:91:49:10:af:5d:43:66:37:c4:83:d0:17:68:bd: 76:86:af:9d:78:6c:e2:67:88:cf:3b:ad:33:fa:21:7b:13:a4: 0e:39:04:0d:c1:e3:b1:a5:92:6f:cd:c1:ab:04:0d:3f:60:d8: 39:34:69:6f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1NkMxMTAvBgNVBAUTKDUxMkQ5QkRFODEzQ0I3QkM3NzE5MEE4NEY5QjE4REI4 RUI0RTIyNUYwHhcNMjQwNjMwMTI1MDU0WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjgxNTRhZS1lMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv22wfPTSS9oLP7ZzjIL0bo7JUmPs3oMp2gCZ/1/RsqcGhEsYNxGUSN1KYeEW vK5mdhzpitj5xHIXfKL5Sn2QenTjuIvDR6vkNbQdfqGN8NmmnXhupgdfO/uje9X5 rARdD9J69mT8bqF2DpSkrZSTcSXJtpZlTGNL2ud82M/mhn5Ul91fgwfSN4jqC34k 5RWHw+A/BbkC1auOEkL5WYohhbGP0ZGf8kiHAXUkxfmInmO+I7CirsWqG3KCHHEe F7NZRD6IWQhGXbZOp0W53fT+qclT5kOVg8pCs/Ksv2ilwAYVSMWFmCV5wQuUloGM QQigtcXIdTI4RStMpT+2n1K7VQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFD9RLW1O 5NwljL5+Cio1Nmi9CVMrMB8GA1UdIwQYMBaAFFEtm96BPLe8dxkKhPmxjbjrTiJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2Qy9GQjMwNUE1RTBD OEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3eDNHUXFFLWJHTnVPdE9J bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTMmIzb0U4dDd4M0dRcUUtYkdOdU90T0lsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk1NkMvRkIzMDVBNUUwQzhBMTFFQ0EzMTkxQjBDQzRGOUFFMDIvMkYzRjU2QzQy QkI0MTFFRjhEODg3RjNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrI4wDwQCAAIwCQMHACABDfBqQDANBgkqhkiG9w0BAQsF AAOCAQEAPCzYhImILVtmR6UhIdWdmVZOU8e9R7NxqzFEKi9JrhYgGBbNTmb5ILeg pZjlvyxJ1HDBOzqt3kyN5R5S1KC7k6lnzEr+in675ui8A53/+zG2WIgpHCmH40c/ NVWa3c/J059ZZc9zZNCHaZ8JNWEJdcR/Gi1MT4nZNCJSpROCX9Ej2CZpfi/YB48l PYgWdDMWLv0B+Wrr6dcI/hXI+9lii/MFO/ZpqA9YEGHKlyEYUmqU3b4H1cDlVkQh SPKnvltqaIklfVBGYYZe/5FJEK9dQ2Y3xIPQF2i9doavnXhs4meIzzutM/ohexOk DjkEDcHjsaWSb83BqwQNP2DYOTRpbw== -----END CERTIFICATE-----Generated at Fri Sep 27 01:18:01 2024 by rpki-client on console-ams.rpki-client.org