$ rpki-client -vvf rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/841585749B1211EFBFBF913CC4F9AE02.roa File: 841585749B1211EFBFBF913CC4F9AE02.roa (raw, json) Hash identifier: NvVW1egmPiHSwj4KXew0q649a1yhcF9ppuNr/Hl7yDs= Subject key identifier: FD:EE:CA:6C:DF:67:B9:65:80:8B:D4:F1:7F:68:A3:92:42:A1:0D:B1 Certificate issuer: /CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Certificate serial: 02 Authority key identifier: 64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/841585749B1211EFBFBF913CC4F9AE02.roa Signing time: Tue 05 Nov 2024 01:08:50 +0000 ROA not before: Tue 05 Nov 2024 01:08:50 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 138976 IP address blocks: 103.137.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Validity Not Before: Nov 5 01:08:50 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67297022-09bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:8a:b1:42:c2:d7:c3:9f:89:7d:2d:05:99: 09:3b:22:a9:83:ee:fe:b1:2a:24:22:60:d1:98:96: 87:34:b5:90:30:79:91:88:d1:0e:cb:7f:b5:76:d5: 3c:21:ad:7e:82:cd:82:44:b1:1b:dd:ab:e4:a8:94: 48:0b:c8:b6:db:7d:21:e4:90:5d:fb:fa:d5:93:f2: 2a:b3:9f:fe:25:65:26:cc:66:04:2d:7b:ce:15:5d: c3:24:6c:ee:21:7f:37:ac:1a:1b:0a:fd:d4:a3:82: 77:83:ba:b1:aa:f7:2d:ab:45:b6:f1:f9:ac:c2:02: 6f:e3:23:ff:c9:a8:ad:d4:85:0f:31:a2:82:f0:58: 4c:4b:53:5a:01:b1:b0:21:4e:ba:08:d5:29:92:e5: 24:1d:04:bb:65:cb:50:d9:10:87:a7:fd:41:b1:a2: 6d:20:26:fa:e4:2b:43:51:ca:b3:8b:84:a7:bb:07: c6:c4:d2:4a:31:38:be:4f:85:cb:b3:29:78:aa:11: e4:b3:f1:58:79:22:48:31:a4:54:90:c1:22:5d:b8: 75:3f:07:ed:30:0e:54:f5:48:37:e4:38:0a:5e:d6: eb:77:b4:3f:e6:b5:c1:3a:79:8c:3a:8f:5a:b7:43: fa:c8:0d:88:e6:b8:b9:20:5e:04:ff:fa:b0:88:51: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EE:CA:6C:DF:67:B9:65:80:8B:D4:F1:7F:68:A3:92:42:A1:0D:B1 X509v3 Authority Key Identifier: keyid:64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/841585749B1211EFBFBF913CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.253.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:05:7b:33:2e:1d:d0:a3:a1:d2:9f:cb:00:52:b8:56:f1:71: ef:ce:7a:55:ab:07:69:b1:fa:d9:65:d4:aa:fc:b7:f0:f8:19: 77:81:2e:f0:46:55:ad:19:b0:15:57:c9:7d:1c:6f:c3:36:77: d4:9b:0d:40:6a:b8:e1:29:94:73:83:96:c7:1e:2e:79:f5:a7: 77:b5:06:cd:06:e7:45:ba:b6:64:0b:a7:32:67:a9:f4:d0:09: d0:a4:db:c2:04:49:f3:38:10:04:93:da:c6:d2:f9:1d:a6:30: b0:83:5e:00:37:3e:e3:08:06:2f:67:66:26:b7:d2:7e:92:2b: b1:7c:0e:1f:c8:ae:33:e3:26:60:8d:50:46:f9:9c:b9:60:d0: 3e:02:d9:75:e5:50:88:a5:72:04:70:6b:0d:ab:f0:94:94:3d: 34:01:b7:6a:bf:65:f9:df:a5:9d:cd:01:86:58:36:a1:7f:29: 80:78:0f:73:58:aa:63:e1:05:73:33:c3:8f:b9:3b:fe:b8:6e: 03:43:5f:5f:66:22:af:00:ec:d0:67:36:f4:1c:6c:51:da:2d: 86:6e:88:0a:35:ef:66:b9:d4:45:26:40:71:d2:59:ff:3c:9e: b4:75:8a:44:c9:9a:d1:0f:40:f5:c6:6c:d3:e7:fc:97:d1:22: 93:ff:f9:f5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDlGRTExMC8GA1UEBRMoNjRDQ0MxNjZDNThDMzhGRThDQzE5NzZGNUNGMDdDMURE MDZGNjgxNDAeFw0yNDExMDUwMTA4NTBaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Mjk3MDIyLTA5YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2LIqxQsLXw5+JfS0FmQk7IqmD7v6xKiQiYNGYloc0tZAweZGI0Q7Lf7V21Twh rX6CzYJEsRvdq+SolEgLyLbbfSHkkF37+tWT8iqzn/4lZSbMZgQte84VXcMkbO4h fzesGhsK/dSjgneDurGq9y2rRbbx+azCAm/jI//JqK3UhQ8xooLwWExLU1oBsbAh TroI1SmS5SQdBLtly1DZEIen/UGxom0gJvrkK0NRyrOLhKe7B8bE0koxOL5Phcuz KXiqEeSz8Vh5IkgxpFSQwSJduHU/B+0wDlT1SDfkOApe1ut3tD/mtcE6eYw6j1q3 Q/rIDYjmuLkgXgT/+rCIUQm7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU/e7KbN9n uWWAi9Txf2ijkkKhDbEwHwYDVR0jBBgwFoAUZMzBZsWMOP6MwZdvXPB8HdBvaBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOUZFLzM4MDNBQTFDOUIx MjExRUZBODdCQjQzQkM0RjlBRTAyL1pNekJac1dNT1A2TXdaZHZYUEI4SGRCdmFC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk16QlpzV01PUDZNd1pkdlhQQjhIZEJ2YUJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDlGRS8zODAzQUExQzlCMTIxMUVGQTg3QkI0M0JDNEY5QUUwMi84NDE1ODU3NDlC MTIxMUVGQkZCRjkxM0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeJ/TANBgkqhkiG9w0BAQsFAAOCAQEAjQV7My4d0KOh0p/L AFK4VvFx7856VasHabH62WXUqvy38PgZd4Eu8EZVrRmwFVfJfRxvwzZ31JsNQGq4 4SmUc4OWxx4uefWnd7UGzQbnRbq2ZAunMmep9NAJ0KTbwgRJ8zgQBJPaxtL5HaYw sINeADc+4wgGL2dmJrfSfpIrsXwOH8iuM+MmYI1QRvmcuWDQPgLZdeVQiKVyBHBr DavwlJQ9NAG3ar9l+d+lnc0Bhlg2oX8pgHgPc1iqY+EFczPDj7k7/rhuA0NfX2Yi rwDs0Gc29BxsUdothm6ICjXvZrnURSZAcdJZ/zyetHWKRMma0Q9A9cZs0+f8l9Ei k//59Q== -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org