$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/5FC8538AE7D811ECB3E05318C4F9AE02.roa File: 5FC8538AE7D811ECB3E05318C4F9AE02.roa (raw, json) Hash identifier: 5o54TJ7CvBWY2lPEbb8bfTWNjpq8SWQjpNjv9BAXw6o= Subject key identifier: 43:6B:6D:9D:57:EA:3C:6E:D9:44:F4:E3:A6:57:88:44:7F:30:E0:CA Certificate issuer: /CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Certificate serial: 0242 Authority key identifier: C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/5FC8538AE7D811ECB3E05318C4F9AE02.roa Signing time: Sat 27 Jul 2024 03:26:16 +0000 ROA not before: Sat 27 Jul 2024 03:26:16 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 149860 IP address blocks: 103.189.66.0/24 maxlen: 24 103.189.67.0/24 maxlen: 24 2001:df0:ccc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Validity Not Before: Jul 27 03:26:16 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a468d8-f357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:c8:1f:3d:27:66:2c:37:ab:ef:df:c0:a3: 75:4c:ad:71:ef:8f:9c:73:d1:25:24:de:f4:30:ce: 33:99:97:6b:a7:0a:f6:87:a0:be:5a:48:2b:46:b8: c8:67:14:ad:42:fd:a3:be:e6:76:70:11:83:3b:78: bd:18:6c:6c:8d:67:94:6b:ef:4c:21:fc:e3:e9:d5: c1:a0:9a:4d:92:d8:42:47:ca:64:97:84:ec:0d:66: ee:b3:39:ad:91:13:57:02:97:49:6c:d6:28:05:24: 63:d0:29:5c:1e:30:fc:be:0e:93:b4:d3:70:7f:c5: d9:a1:81:8b:68:b4:d5:6a:92:62:44:b0:ff:fa:f3: fe:af:9b:2e:1a:d4:e6:3d:f2:94:4e:65:00:58:f9: df:6b:b6:15:fa:ba:fc:ed:70:2c:8b:2c:0a:1b:18: a3:0d:2a:7e:93:8f:55:45:01:e3:c0:70:ec:9d:a6: 96:9d:17:f6:b2:73:21:2f:b4:24:77:3f:4f:5f:1a: 95:93:f7:31:22:07:f2:83:ef:c3:a1:d5:ad:ce:ae: ad:e5:28:5c:95:67:b1:a9:fb:76:71:0c:09:22:30: 52:3c:32:57:89:75:11:27:2f:cc:9b:0b:5f:b8:ff: 45:1c:31:c6:69:1b:98:3d:4e:08:91:7d:60:28:4e: fd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6B:6D:9D:57:EA:3C:6E:D9:44:F4:E3:A6:57:88:44:7F:30:E0:CA X509v3 Authority Key Identifier: keyid:C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/5FC8538AE7D811ECB3E05318C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.66.0/23 IPv6: 2001:df0:ccc0::/48 Signature Algorithm: sha256WithRSAEncryption 06:6e:0e:65:af:80:d0:c4:7b:8e:5f:cc:aa:45:b9:ad:65:13: 88:ab:36:02:38:8e:ca:2c:c8:d3:13:90:49:82:e9:b2:7d:cd: 83:85:b9:cb:50:7b:18:5a:10:20:4d:4f:82:b1:ed:91:1d:a1: 4a:95:f8:c4:43:bc:18:19:de:22:95:1b:1a:21:cb:cc:ba:4d: de:b7:7e:54:74:5e:52:43:c6:02:4b:2e:43:06:d3:b9:b4:96: 40:6f:3b:19:a9:70:ec:ca:b0:b9:0a:15:1b:1a:b8:34:00:8c: a5:b7:39:b3:4c:b1:5e:0d:a4:03:66:9e:10:ec:2d:ed:dd:b2: 55:d2:9c:46:58:3f:47:52:98:f4:31:75:f1:2b:b2:8d:08:e1: 59:8f:24:4d:d3:09:67:56:2a:66:11:f5:96:c1:1e:a8:26:a0: ca:48:a7:7e:0e:23:f9:b5:c3:86:33:6d:df:1e:ca:6e:43:49: 62:71:3e:e2:30:a6:d3:42:59:70:9b:ea:d4:23:f9:de:b8:af: 54:7d:23:e1:88:84:fe:e8:15:2c:d6:6a:90:46:af:e9:fd:d2: 5c:db:67:30:2e:93:1d:e0:df:80:de:05:c0:0c:f6:de:23:3e: 76:f0:1b:51:0d:51:46:2f:54:67:68:1e:cd:fd:9c:d3:d0:08: 72:70:da:71 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNkYxMTAvBgNVBAUTKEM5NDVCNzc3MkNDQzI3NDEzODY1QTkyQ0I4OTJERkQy N0NBQTlGNzcwHhcNMjQwNzI3MDMyNjE2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE0NjhkOC1mMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyXIHz0nZiw3q+/fwKN1TK1x74+cc9ElJN70MM4zmZdrpwr2h6C+WkgrRrjI ZxStQv2jvuZ2cBGDO3i9GGxsjWeUa+9MIfzj6dXBoJpNkthCR8pkl4TsDWbuszmt kRNXApdJbNYoBSRj0ClcHjD8vg6TtNNwf8XZoYGLaLTVapJiRLD/+vP+r5suGtTm PfKUTmUAWPnfa7YV+rr87XAsiywKGxijDSp+k49VRQHjwHDsnaaWnRf2snMhL7Qk dz9PXxqVk/cxIgfyg+/DodWtzq6t5ShclWexqft2cQwJIjBSPDJXiXURJy/Mmwtf uP9FHDHGaRuYPU4IkX1gKE79awIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFENrbZ1X 6jxu2UT046ZXiER/MODKMB8GA1UdIwQYMBaAFMlFt3cszCdBOGWpLLiS39J8qp93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2Ri8xMkYzMDIxMkU3 MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUowRTRaYWtzdUpMZjBueXFu M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVVzNkeXpNSjBFNFpha3N1SkxmMG55cW4zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0IwNkYvMTJGMzAyMTJFNzM4MTFFQzg4RjExNjQxQzRGOUFFMDIvNUZDODUzOEFF N0Q4MTFFQ0IzRTA1MzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnvUIwDwQCAAIwCQMHACABDfDMwDANBgkqhkiG9w0BAQsF AAOCAQEABm4OZa+A0MR7jl/MqkW5rWUTiKs2AjiOyizI0xOQSYLpsn3Ng4W5y1B7 GFoQIE1PgrHtkR2hSpX4xEO8GBneIpUbGiHLzLpN3rd+VHReUkPGAksuQwbTubSW QG87Galw7MqwuQoVGxq4NACMpbc5s0yxXg2kA2aeEOwt7d2yVdKcRlg/R1KY9DF1 8SuyjQjhWY8kTdMJZ1YqZhH1lsEeqCagykinfg4j+bXDhjNt3x7KbkNJYnE+4jCm 00JZcJvq1CP53rivVH0j4YiE/ugVLNZqkEav6f3SXNtnMC6THeDfgN4FwAz23iM+ dvAbUQ1RRi9UZ2gezf2c09AIcnDacQ== -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:46 2024 by rpki-client on console-fra.rpki-client.org