$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/910A49AAB5CC11ECAE337E78C4F9AE02.roa File: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (raw, json) Hash identifier: 3it6MgHyhXt2fOxKVzUm+aEDZP71P1ra3Nfl+4bBlR4= Subject key identifier: F7:53:B5:35:DE:87:9C:D0:9F:18:AD:96:4F:6A:DA:F5:C7:1A:8B:86 Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Certificate serial: 06AE Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/910A49AAB5CC11ECAE337E78C4F9AE02.roa Signing time: Mon 02 Sep 2024 23:21:34 +0000 ROA not before: Mon 02 Sep 2024 23:21:34 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 139270 IP address blocks: 103.140.166.0/23 maxlen: 23 103.140.167.0/24 maxlen: 24 2001:df0:ca80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1710 (0x6ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Validity Not Before: Sep 2 23:21:34 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66d6487e-9146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:94:82:c7:8d:2f:28:14:bb:6b:3b:a3:c7: eb:b1:21:40:19:5c:e4:c3:1f:b0:21:64:40:4d:88: 4d:67:25:17:50:24:0f:9c:61:44:63:88:26:78:3f: 0a:3b:82:f5:0f:21:25:62:a0:2e:b9:5e:cb:2f:8a: e9:62:4d:7f:d8:78:ca:3f:62:54:31:ec:10:69:fd: 00:18:f8:b7:e8:d3:66:6e:25:37:cd:8f:00:0d:82: c0:ef:a6:3e:43:54:b0:3e:bc:05:59:9d:6f:68:de: 16:18:82:07:b1:ed:42:cb:16:42:65:62:19:bb:97: ac:07:04:5c:36:29:70:2a:51:99:59:f8:77:1f:5a: 47:c9:3c:3e:82:bb:68:6f:3f:75:89:9a:ca:06:f1: f4:44:10:37:59:04:f7:a3:11:97:58:00:28:84:5d: 0e:af:38:76:42:c5:aa:0e:98:02:4c:87:36:60:00: 22:74:a4:a6:7f:b8:b5:2c:09:18:55:9f:10:16:28: c6:dc:07:d7:94:07:7e:c9:a5:7b:91:32:f6:7c:52: 94:25:52:27:82:f2:41:cb:40:ec:40:2e:b5:6e:a2: 5c:0f:e1:37:aa:06:79:3c:9a:03:0c:ee:95:6b:9f: a2:29:1e:aa:75:02:f8:37:f9:8c:e6:5b:a2:cf:48: 4c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:53:B5:35:DE:87:9C:D0:9F:18:AD:96:4F:6A:DA:F5:C7:1A:8B:86 X509v3 Authority Key Identifier: keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/910A49AAB5CC11ECAE337E78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.166.0/23 IPv6: 2001:df0:ca80::/48 Signature Algorithm: sha256WithRSAEncryption a7:41:2b:8b:91:50:5d:0d:45:6a:2e:39:e2:1c:f2:e8:ee:0a: 79:0a:88:31:40:7c:4f:66:1d:82:e4:8e:6a:fb:de:4e:e1:c6: 52:e5:02:6f:95:7f:75:17:82:ca:56:a0:75:1e:ab:bf:c4:91: 4d:c3:9d:74:9d:c0:59:ff:a0:aa:dd:c9:65:71:73:af:77:45: 03:9c:56:d0:a6:78:ba:62:b6:29:ec:a9:db:8e:d6:8d:79:c1: 2f:03:6a:31:67:94:c1:6b:e8:52:d7:8b:06:38:55:17:57:73: ff:37:7c:72:c8:9a:9c:f0:25:c5:f9:f5:85:03:c5:04:61:c8: 9d:82:74:3e:24:78:62:fb:c8:5b:5d:56:43:e8:2a:4c:b8:6e: e7:96:0b:f6:35:14:61:76:a1:2c:5d:c2:f8:f9:0c:33:7c:37: cd:66:cc:94:33:02:97:b7:f6:07:f9:4e:a8:eb:dc:67:fe:14: 33:45:d5:22:03:9e:f1:98:ca:4a:6f:a2:85:e8:fc:4d:d2:0d: fe:f1:95:05:bc:2d:59:ee:13:14:3d:9b:cc:a6:f1:62:a7:d7: 40:86:6a:72:d3:1b:02:e8:7c:fe:42:00:17:cc:1c:f3:ec:67: 41:07:14:00:8c:8f:0b:fa:ac:d8:8e:6c:45:ed:bb:eb:7d:50: 94:f2:88:0d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy Qjk1NkNGRDcwHhcNMjQwOTAyMjMyMTM0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2NDg3ZS05MTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnCUgseNLygUu2s7o8frsSFAGVzkwx+wIWRATYhNZyUXUCQPnGFEY4gmeD8K O4L1DyElYqAuuV7LL4rpYk1/2HjKP2JUMewQaf0AGPi36NNmbiU3zY8ADYLA76Y+ Q1SwPrwFWZ1vaN4WGIIHse1CyxZCZWIZu5esBwRcNilwKlGZWfh3H1pHyTw+grto bz91iZrKBvH0RBA3WQT3oxGXWAAohF0Orzh2QsWqDpgCTIc2YAAidKSmf7i1LAkY VZ8QFijG3AfXlAd+yaV7kTL2fFKUJVIngvJBy0DsQC61bqJcD+E3qgZ5PJoDDO6V a5+iKR6qdQL4N/mM5luiz0hMuwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPdTtTXe h5zQnxitlk9q2vXHGouGMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6 OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ExQTYvMzhEOTNFMUUzRDMwMTFFQkIzQjJENjZFQzRGOUFFMDIvOTEwQTQ5QUFC NUNDMTFFQ0FFMzM3RTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjKYwDwQCAAIwCQMHACABDfDKgDANBgkqhkiG9w0BAQsF AAOCAQEAp0Eri5FQXQ1Fai454hzy6O4KeQqIMUB8T2YdguSOavveTuHGUuUCb5V/ dReCylagdR6rv8SRTcOddJ3AWf+gqt3JZXFzr3dFA5xW0KZ4umK2Keyp247WjXnB LwNqMWeUwWvoUteLBjhVF1dz/zd8csianPAlxfn1hQPFBGHInYJ0PiR4YvvIW11W Q+gqTLhu55YL9jUUYXahLF3C+PkMM3w3zWbMlDMCl7f2B/lOqOvcZ/4UM0XVIgOe 8ZjKSm+ihej8TdIN/vGVBbwtWe4TFD2bzKbxYqfXQIZqctMbAuh8/kIAF8wc8+xn QQcUAIyPC/qs2I5sRe27631QlPKIDQ== -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org