$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/1B2E0738BB7011EA93F7DE4EC4F9AE02.roa File: 1B2E0738BB7011EA93F7DE4EC4F9AE02.roa (raw, json) Hash identifier: Kkq3FSGMJtrxAckL14K8lEjZBbSHWGV4MxpopXgePZY= Subject key identifier: F7:26:7E:1F:86:48:3E:27:34:C5:97:03:72:3D:41:FB:6C:69:75:04 Certificate issuer: /CN=A91E4743/serialNumber=65542CEC28111FC54BA3D2AEE33F4CE87B7F90AD Certificate serial: 0849 Authority key identifier: 65:54:2C:EC:28:11:1F:C5:4B:A3:D2:AE:E3:3F:4C:E8:7B:7F:90:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/1B2E0738BB7011EA93F7DE4EC4F9AE02.roa Signing time: Fri 22 Nov 2024 20:39:27 +0000 ROA not before: Fri 22 Nov 2024 20:39:27 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 140865 IP address blocks: 103.152.154.0/23 maxlen: 24 2001:df4:1380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2121 (0x849) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4743/serialNumber=65542CEC28111FC54BA3D2AEE33F4CE87B7F90AD Validity Not Before: Nov 22 20:39:27 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6740ebff-6277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:85:52:ed:63:e7:6f:7e:a4:d2:5c:23:04: 5a:cd:8d:e2:a3:ab:c1:ef:07:61:3e:7b:d0:b6:00: c1:28:24:48:e8:ba:69:86:3d:be:91:27:43:05:4d: 12:57:b3:17:fc:5f:ae:66:20:96:2b:cd:46:59:14: 45:2b:b7:17:3c:d9:4f:d3:48:e4:c6:1e:c8:b1:f8: 5f:61:5c:ec:69:c0:5d:f9:37:64:35:15:a8:45:07: df:94:f1:fb:59:de:73:04:ba:04:49:2e:9e:db:8a: 84:23:f1:f4:b8:d7:b0:b6:e1:84:51:61:cb:33:55: ac:92:7b:2e:f6:d3:29:be:d4:c1:71:78:44:13:ed: 9f:5b:02:d1:ea:b3:f2:a8:e9:3f:45:57:5a:c6:ce: 83:ce:aa:6d:cc:9f:c0:1b:06:3c:79:9d:4c:1b:c4: 0d:20:03:96:3c:f7:3b:01:fc:7f:42:fb:84:ea:eb: e1:f3:2b:06:a8:37:e7:9a:cd:16:e9:76:8a:28:13: 77:6f:41:6c:06:ef:79:10:f5:51:44:40:25:c8:e1: 44:18:31:60:28:5a:2b:69:7d:1b:2e:b0:c5:4e:f2: 95:97:77:3c:97:23:a2:d1:ea:1a:4c:66:a1:4a:df: 83:03:ba:75:d8:ef:61:ed:8e:43:5a:f3:66:31:d7: fb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:26:7E:1F:86:48:3E:27:34:C5:97:03:72:3D:41:FB:6C:69:75:04 X509v3 Authority Key Identifier: keyid:65:54:2C:EC:28:11:1F:C5:4B:A3:D2:AE:E3:3F:4C:E8:7B:7F:90:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/1B2E0738BB7011EA93F7DE4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.154.0/23 IPv6: 2001:df4:1380::/48 Signature Algorithm: sha256WithRSAEncryption 85:d9:d6:b7:eb:0f:b9:cf:bb:b2:98:c6:b6:04:3f:07:65:c9: 8b:70:c6:df:a2:80:e8:46:38:ef:a7:28:16:34:cb:f8:17:2b: 94:68:dd:5b:df:21:e9:fb:ab:12:eb:4f:0b:55:8e:e6:06:cc: 0c:a9:52:4b:9f:72:de:e5:e1:92:48:47:f1:31:40:52:bc:77: 58:d2:08:6e:7e:42:87:ef:95:04:97:13:7e:f7:0a:d5:20:47: fa:2f:68:46:52:09:a8:ee:f5:98:cc:f6:fc:52:9f:a0:23:a5: f9:07:be:7d:90:75:7a:81:48:9d:8b:23:49:2c:1d:93:30:d3: 6a:4e:cb:61:23:10:56:43:5b:9d:56:4d:aa:f3:89:60:69:db: e6:fc:fa:dd:26:e7:05:3c:24:e2:96:7e:c6:51:b9:b3:87:a7: f0:ff:d7:2d:04:26:95:3c:80:b0:2a:c4:2a:a8:ab:cc:a9:42: 98:a6:f7:de:6a:8e:d9:0f:7a:bb:5b:28:39:23:29:ae:b4:ba: 68:47:6e:60:55:ce:5e:3d:72:a9:51:31:a6:cf:d9:bf:f1:c1: 66:59:75:79:72:16:3d:b6:34:d4:11:a9:b8:c9:61:9e:bf:b0: e5:84:b5:8f:32:50:78:de:be:b5:1a:b1:78:93:de:24:b0:9c: 64:3b:23:62 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3NDMxMTAvBgNVBAUTKDY1NTQyQ0VDMjgxMTFGQzU0QkEzRDJBRUUzM0Y0Q0U4 N0I3RjkwQUQwHhcNMjQxMTIyMjAzOTI3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQwZWJmZi02Mjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9qFUu1j529+pNJcIwRazY3io6vB7wdhPnvQtgDBKCRI6Lpphj2+kSdDBU0S V7MX/F+uZiCWK81GWRRFK7cXPNlP00jkxh7IsfhfYVzsacBd+TdkNRWoRQfflPH7 Wd5zBLoESS6e24qEI/H0uNewtuGEUWHLM1Wsknsu9tMpvtTBcXhEE+2fWwLR6rPy qOk/RVdaxs6DzqptzJ/AGwY8eZ1MG8QNIAOWPPc7Afx/QvuE6uvh8ysGqDfnms0W 6XaKKBN3b0FsBu95EPVRREAlyOFEGDFgKForaX0bLrDFTvKVl3c8lyOi0eoaTGah St+DA7p12O9h7Y5DWvNmMdf7LQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPcmfh+G SD4nNMWXA3I9QftsaXUEMB8GA1UdIwQYMBaAFGVULOwoER/FS6PSruM/TOh7f5Ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDc0My82NzBGODA5MkJC NkYxMUVBOTYxRkI4NEVDNEY5QUUwMi9aVlFzN0NnUkg4VkxvOUt1NHo5TTZIdF9r SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWUXM3Q2dSSDhWTG85S3U0ejlNNkh0X2tLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ3NDMvNjcwRjgwOTJCQjZGMTFFQTk2MUZCODRFQzRGOUFFMDIvMUIyRTA3MzhC QjcwMTFFQTkzRjdERTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmJowDwQCAAIwCQMHACABDfQTgDANBgkqhkiG9w0BAQsF AAOCAQEAhdnWt+sPuc+7spjGtgQ/B2XJi3DG36KA6EY476coFjTL+BcrlGjdW98h 6furEutPC1WO5gbMDKlSS59y3uXhkkhH8TFAUrx3WNIIbn5Ch++VBJcTfvcK1SBH +i9oRlIJqO71mMz2/FKfoCOl+Qe+fZB1eoFInYsjSSwdkzDTak7LYSMQVkNbnVZN qvOJYGnb5vz63SbnBTwk4pZ+xlG5s4en8P/XLQQmlTyAsCrEKqirzKlCmKb33mqO 2Q96u1soOSMprrS6aEduYFXOXj1yqVExps/Zv/HBZll1eXIWPbY01BGpuMlhnr+w 5YS1jzJQeN6+tRqxeJPeJLCcZDsjYg== -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:14 2024 by rpki-client on console-fra.rpki-client.org