$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/630BCB6E1A1D11EC99B84C20C4F9AE02.roa File: 630BCB6E1A1D11EC99B84C20C4F9AE02.roa (raw, json) Hash identifier: DgUDwmkN0T0UntF7QmQLHNafJtdHs9vt+l0U9HNHmvY= Subject key identifier: 08:27:1A:56:61:22:2A:F4:EE:AA:9D:17:F6:08:2B:46:42:75:6E:DD Certificate issuer: /CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF Certificate serial: 0481 Authority key identifier: 09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/630BCB6E1A1D11EC99B84C20C4F9AE02.roa Signing time: Sat 02 Nov 2024 23:42:58 +0000 ROA not before: Sat 02 Nov 2024 23:42:58 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 147042 IP address blocks: 103.173.110.0/23 maxlen: 23 103.173.110.0/24 maxlen: 24 103.173.111.0/24 maxlen: 24 2407:e640::/32 maxlen: 32 2407:e640::/36 maxlen: 36 2407:e640:1000::/36 maxlen: 36 2407:e640:2000::/36 maxlen: 36 2407:e640:3000::/36 maxlen: 36 2407:e640:4000::/36 maxlen: 36 2407:e640:5000::/36 maxlen: 36 2407:e640:6000::/36 maxlen: 36 2407:e640:7000::/36 maxlen: 36 2407:e640:8000::/36 maxlen: 36 2407:e640:9000::/36 maxlen: 36 2407:e640:a000::/36 maxlen: 36 2407:e640:b000::/36 maxlen: 36 2407:e640:c000::/36 maxlen: 36 2407:e640:d000::/36 maxlen: 36 2407:e640:e000::/36 maxlen: 36 2407:e640:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF Validity Not Before: Nov 2 23:42:58 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6726b902-685f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:22:06:b3:b7:a8:2f:48:ab:3f:f5:31:3c: a8:a5:2b:17:b6:24:09:b8:3e:f8:48:5a:14:9e:5c: c9:92:ba:a0:0b:2e:b8:94:1e:f7:19:89:85:a8:83: 96:9f:dd:76:85:ba:b2:37:09:b7:bf:0f:81:94:b2: f3:8b:3f:55:63:39:a8:a0:53:d9:39:a9:b2:13:8d: 6a:a6:b8:32:5a:e3:84:40:85:57:db:45:4e:a6:ba: c3:d7:60:9c:c1:9c:9c:97:51:fe:62:e7:d9:0a:06: ea:e4:94:ee:69:a9:85:e1:71:18:21:3d:4c:42:ec: f4:25:21:94:c9:09:40:e0:b0:33:2c:4d:10:00:63: 8d:d9:32:c4:ed:13:c7:4c:ef:a4:32:f4:6b:fd:53: 74:65:3d:08:67:0f:29:0c:a0:81:c2:7c:f3:fd:d7: 8c:ea:f9:dc:57:18:7c:ab:e1:a6:85:9d:fd:62:95: 8f:77:b6:17:ab:cf:96:f7:be:a0:bc:9d:5d:2f:f1: dd:da:66:f4:1d:2f:ee:ec:1e:6b:f4:a0:db:29:a2: 6b:a1:e0:9d:ca:24:b1:1c:76:36:e6:fa:4d:d2:f0: 27:4b:45:5f:23:9b:5b:76:00:7e:32:14:eb:f8:ba: 69:b0:c3:2e:80:8a:58:85:77:a8:52:92:8b:b7:24: f0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:27:1A:56:61:22:2A:F4:EE:AA:9D:17:F6:08:2B:46:42:75:6E:DD X509v3 Authority Key Identifier: keyid:09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/630BCB6E1A1D11EC99B84C20C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.110.0/23 IPv6: 2407:e640::/32 Signature Algorithm: sha256WithRSAEncryption 63:c3:63:e1:74:df:d5:25:c7:04:7e:89:52:d3:48:33:62:83: 0a:dd:ea:6b:31:47:d4:f3:0e:90:7c:eb:3d:a3:c6:14:9d:e4: 28:e1:d1:ab:80:5f:ed:be:da:d7:4f:59:75:d1:5c:00:3b:a9: 42:22:96:79:39:e4:42:35:3d:21:a1:a1:f0:c7:04:3b:ec:49: 79:09:49:53:7f:b6:52:e6:2c:80:c0:56:ec:3e:e0:6c:3e:79: b0:20:b6:a8:dc:36:9c:ce:07:da:de:01:33:e7:a3:20:1d:9b: 12:8b:18:75:21:fa:04:ca:9f:66:51:4a:fb:7f:48:a0:b2:20: fe:cf:d3:77:d2:09:a3:28:b1:f5:3a:35:2a:8f:d1:fc:69:b9: 22:e1:f7:03:ee:2a:e8:89:ab:00:07:02:0b:ae:33:d8:eb:ad: 8d:8f:1d:79:79:4d:2a:32:29:cd:cd:64:a8:42:0b:99:fd:e8: 93:99:50:04:64:71:55:85:60:4c:a8:ac:87:6a:2f:3d:a5:81: 48:f3:e4:0e:85:6e:b8:4c:44:ec:cf:d1:46:eb:e7:be:b1:35: 74:bd:e1:26:ce:e9:d8:3c:0a:11:d7:bf:7f:dd:5f:a2:98:eb: 94:0a:cf:08:9e:b5:d0:82:02:da:68:4c:5d:eb:11:02:3c:4e: 88:bd:d8:57 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlEMEMxMTAvBgNVBAUTKDA5REUxOTY3RTk1MkVFOEUxQjJERDYwRjg4RjYzQkEy NjA1NzUzRUYwHhcNMjQxMTAyMjM0MjU4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2YjkwMi02ODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtykiBrO3qC9Iqz/1MTyopSsXtiQJuD74SFoUnlzJkrqgCy64lB73GYmFqIOW n912hbqyNwm3vw+BlLLziz9VYzmooFPZOamyE41qprgyWuOEQIVX20VOprrD12Cc wZycl1H+YufZCgbq5JTuaamF4XEYIT1MQuz0JSGUyQlA4LAzLE0QAGON2TLE7RPH TO+kMvRr/VN0ZT0IZw8pDKCBwnzz/deM6vncVxh8q+GmhZ39YpWPd7YXq8+W976g vJ1dL/Hd2mb0HS/u7B5r9KDbKaJroeCdyiSxHHY25vpN0vAnS0VfI5tbdgB+MhTr +LppsMMugIpYhXeoUpKLtyTwhwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAgnGlZh Iir07qqdF/YIK0ZCdW7dMB8GA1UdIwQYMBaAFAneGWfpUu6OGy3WD4j2O6JgV1Pv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQwQy84MTRGNkQwNDFB MUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1sUzdvNGJMZFlQaVBZN29tQlhV LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkNFpaLWxTN280YkxkWVBpUFk3b21CWFUtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlEMEMvODE0RjZEMDQxQTFBMTFFQzlEMUNERjFFQzRGOUFFMDIvNjMwQkNCNkUx QTFEMTFFQzk5Qjg0QzIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnrW4wDQQCAAIwBwMFACQH5kAwDQYJKoZIhvcNAQELBQAD ggEBAGPDY+F039UlxwR+iVLTSDNigwrd6msxR9TzDpB86z2jxhSd5Cjh0auAX+2+ 2tdPWXXRXAA7qUIilnk55EI1PSGhofDHBDvsSXkJSVN/tlLmLIDAVuw+4Gw+ebAg tqjcNpzOB9reATPnoyAdmxKLGHUh+gTKn2ZRSvt/SKCyIP7P03fSCaMosfU6NSqP 0fxpuSLh9wPuKuiJqwAHAguuM9jrrY2PHXl5TSoyKc3NZKhCC5n96JOZUARkcVWF YEyorIdqLz2lgUjz5A6FbrhMROzP0Ubr576xNXS94SbO6dg8ChHXv3/dX6KY65QK zwietdCCAtpoTF3rEQI8Toi92Fc= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org