$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/4155ABCE725111ED82867F40C4F9AE02.roa File: 4155ABCE725111ED82867F40C4F9AE02.roa (raw, json) Hash identifier: oCKdsU3aoxN4ZJq4VlPybOXmRN+jsoto/3GeO2+L5/c= Subject key identifier: D9:94:D3:AE:2B:12:8C:85:DE:09:E4:13:2E:65:71:F6:7F:1D:67:F8 Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: CB Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/4155ABCE725111ED82867F40C4F9AE02.roa Signing time: Sun 17 Dec 2023 04:55:32 +0000 ROA not before: Sun 17 Dec 2023 04:55:32 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 140690 IP address blocks: 103.48.20.0/23 maxlen: 24 2001:df1:a0c0::/48 maxlen: 48 2001:df1:a0c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Dec 17 04:55:32 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=657e7f44-d403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:12:22:f5:d4:fe:3d:a0:32:e8:9e:6f:42: db:6b:91:35:cc:8f:28:43:ce:5d:9c:80:f8:14:9e: b8:9e:d0:9c:93:22:b5:8e:75:57:dc:54:ee:ae:ed: 54:c1:ed:ef:30:bc:68:06:14:89:aa:43:76:21:19: 5a:e7:05:fd:80:f7:3f:a6:f5:6d:47:b0:1d:f2:3a: 8e:df:6f:04:0d:88:bf:53:1c:4b:e9:8e:23:39:e6: 20:40:d3:73:29:06:5f:b2:51:9e:e4:77:8f:d9:eb: e7:64:57:d4:6f:cc:95:bd:06:91:b3:ef:63:1c:5a: bf:9d:60:51:a5:01:3f:cc:2f:ec:7d:5d:79:a2:78: c5:bc:00:1b:31:19:4d:e5:69:dc:b5:43:b1:19:d4: 91:4d:c3:b3:1c:7e:47:65:60:c9:c5:cf:b6:f3:c5: f2:59:7f:cb:83:83:a9:f4:53:d2:fb:ae:64:69:0d: 79:86:eb:8f:60:f9:7c:ce:0c:19:89:07:27:86:3e: 4d:b7:47:b8:86:4f:5a:a3:e8:67:1c:5a:d4:c3:f2: b2:ce:cf:6d:b7:d1:9b:5d:cd:68:ee:0e:65:5d:5e: 97:31:6d:96:e6:53:5a:db:0f:32:04:f7:66:67:c3: 1f:b1:f0:39:be:bc:9b:e6:38:9c:30:56:5b:cf:28: da:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:94:D3:AE:2B:12:8C:85:DE:09:E4:13:2E:65:71:F6:7F:1D:67:F8 X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/4155ABCE725111ED82867F40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.20.0/23 IPv6: 2001:df1:a0c0::/47 Signature Algorithm: sha256WithRSAEncryption 3c:54:95:03:69:cc:a9:4d:3f:89:79:58:a4:00:71:89:98:df: ca:c5:87:3e:6b:4e:eb:96:d6:87:41:4e:97:7d:b7:4f:b5:07: e6:83:a5:c5:71:6f:fc:0b:c3:ac:be:06:65:7d:64:17:2f:97: cc:38:98:16:2f:a2:00:e9:01:47:05:4c:2d:93:a9:9a:1f:ae: a8:2e:9a:1f:4c:63:6b:9f:c7:13:59:22:78:6c:02:6a:6a:0b: 6e:8d:f1:6f:f4:de:7f:fb:21:de:16:bc:c1:0c:9a:df:1f:2e: 96:5c:68:f5:62:92:3f:37:e4:ee:1c:97:ec:d9:e5:95:f3:9b: ab:2f:c9:30:83:83:16:98:95:b4:cf:d9:eb:6a:cc:74:02:c7: 11:bb:af:72:e6:68:8d:a4:79:b0:ba:97:de:93:8a:ae:54:36: aa:b1:03:92:50:e9:25:26:89:f9:42:d0:c8:eb:15:58:5d:f5: 27:07:6a:91:57:f3:46:ba:49:c2:ef:d5:e4:32:db:69:93:24: 3c:b3:bd:03:b4:37:d1:aa:93:c3:39:5d:24:45:b1:84:9e:50: b0:2d:21:f2:a1:b7:db:a1:b6:d0:3a:dd:15:8e:4e:30:38:54: a6:e8:13:1f:6d:cc:ec:8f:71:1c:a2:cc:4b:74:22:50:13:9a: 7b:13:39:c2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjMxMjE3MDQ1NTMyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTdlN2Y0NC1kNDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymcSIvXU/j2gMuieb0Lba5E1zI8oQ85dnID4FJ64ntCckyK1jnVX3FTuru1U we3vMLxoBhSJqkN2IRla5wX9gPc/pvVtR7Ad8jqO328EDYi/UxxL6Y4jOeYgQNNz KQZfslGe5HeP2evnZFfUb8yVvQaRs+9jHFq/nWBRpQE/zC/sfV15onjFvAAbMRlN 5WnctUOxGdSRTcOzHH5HZWDJxc+288XyWX/Lg4Op9FPS+65kaQ15huuPYPl8zgwZ iQcnhj5Nt0e4hk9ao+hnHFrUw/Kyzs9tt9GbXc1o7g5lXV6XMW2W5lNa2w8yBPdm Z8MfsfA5vryb5jicMFZbzyjaqQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNmU064r EoyF3gnkEy5lcfZ/HWf4MB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI2RjgvNTYyQzNDQjQ3MjRFMTFFRDhFMjA2NzNFQzRGOUFFMDIvNDE1NUFCQ0U3 MjUxMTFFRDgyODY3RjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnMBQwDwQCAAIwCQMHASABDfGgwDANBgkqhkiG9w0BAQsF AAOCAQEAPFSVA2nMqU0/iXlYpABxiZjfysWHPmtO65bWh0FOl323T7UH5oOlxXFv /AvDrL4GZX1kFy+XzDiYFi+iAOkBRwVMLZOpmh+uqC6aH0xja5/HE1kieGwCamoL bo3xb/Tef/sh3ha8wQya3x8ullxo9WKSPzfk7hyX7NnllfObqy/JMIODFpiVtM/Z 62rMdALHEbuvcuZojaR5sLqX3pOKrlQ2qrEDklDpJSaJ+ULQyOsVWF31JwdqkVfz RrpJwu/V5DLbaZMkPLO9A7Q30aqTwzldJEWxhJ5QsC0h8qG326G20DrdFY5OMDhU pugTH23M7I9xHKLMS3QiUBOaexM5wg== -----END CERTIFICATE-----Generated at Sat Jun 1 07:09:21 2024 by rpki-client on console-fra.rpki-client.org