$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/68C425FC1BBF11ED9F87C083C4F9AE02.roa File: 68C425FC1BBF11ED9F87C083C4F9AE02.roa (raw, json) Hash identifier: Zxoh9Ofh0OWLZ5oXPc2RuTae5hFatyn/nJ6RPctUa3I= Subject key identifier: 2D:ED:62:F7:15:6A:CA:A1:45:74:F9:BD:98:07:83:B9:9F:86:BF:63 Certificate issuer: /CN=A91F5753/serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA Certificate serial: 01CB Authority key identifier: 2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/68C425FC1BBF11ED9F87C083C4F9AE02.roa Signing time: Thu 29 Aug 2024 03:16:25 +0000 ROA not before: Thu 29 Aug 2024 03:16:25 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150152 IP address blocks: 103.95.108.0/23 maxlen: 23 103.95.108.0/24 maxlen: 24 103.95.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5753/serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA Validity Not Before: Aug 29 03:16:25 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66cfe808-3100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:02:ac:50:b3:7d:7c:a5:c4:5f:85:fc:44: 4c:89:1c:ec:48:41:f7:45:5c:c7:0f:f2:0c:6f:00: 10:20:2a:0f:29:4e:d8:01:79:08:e7:a9:39:d1:90: f4:22:88:13:79:d9:9a:da:d7:b7:e6:3c:06:62:c8: c4:06:eb:3b:3e:ab:db:ae:a6:fd:96:93:98:2c:0b: c2:88:d2:e5:0c:61:a4:45:0a:b6:6e:3e:a9:26:db: 36:fe:4f:7e:c7:dc:9c:35:95:3e:1d:e6:9a:7c:d2: 19:ca:e4:50:ac:61:0e:f4:fc:48:e8:df:81:50:86: 3b:b1:57:b9:3f:44:a2:63:89:12:04:c2:18:ed:6a: ff:6b:78:48:53:ca:0b:71:93:86:2f:86:d2:1f:13: 8c:0e:b2:16:d8:c3:ab:99:8a:b9:15:60:b0:b1:35: de:0a:10:e6:de:91:7d:5c:26:a4:6a:a6:87:43:53: 3d:1e:e6:60:8b:3c:42:4d:fb:45:1d:30:7a:0c:04: d6:10:08:39:ae:fe:b0:90:7d:4f:88:55:09:f7:13: 78:b3:ca:1b:ef:8d:b9:83:7c:d1:fb:69:1b:0c:44: ed:f8:2c:82:27:54:9c:17:9c:45:13:1b:62:97:ba: da:ed:38:64:59:ed:cd:e2:fb:b1:3b:5f:2d:b7:35: 94:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:ED:62:F7:15:6A:CA:A1:45:74:F9:BD:98:07:83:B9:9F:86:BF:63 X509v3 Authority Key Identifier: keyid:2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/68C425FC1BBF11ED9F87C083C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.95.108.0/23 Signature Algorithm: sha256WithRSAEncryption 64:50:94:8e:f1:ed:89:db:07:cb:2d:b0:d3:95:70:96:3a:df: 59:7f:c7:57:85:9f:52:e3:e5:89:5d:48:09:9f:05:84:b6:96: b7:41:bc:10:b2:90:40:bc:b4:5d:94:07:0e:bd:db:8d:ae:99: ea:cb:9d:60:fa:0c:cf:24:3a:13:92:e8:f1:3c:e9:f4:88:25: c4:f6:28:da:02:90:36:a6:f9:15:39:b1:09:97:e6:86:27:43: 55:98:18:d7:9c:91:a4:2e:23:2a:3f:13:ce:70:e2:6a:77:df: c0:3e:ca:64:9c:8a:64:c4:c4:d8:0d:a8:78:ad:63:dc:76:0f: d8:df:c9:2a:84:96:35:1b:b5:99:8b:d8:23:84:12:25:c5:fd: af:00:23:4f:fc:66:63:dc:e7:54:49:08:f2:56:58:64:4e:cd: 60:ef:49:70:15:f3:4f:32:11:4c:70:a6:a4:bf:d4:56:d2:de: 64:29:92:1e:83:5f:0d:b5:f3:fa:9c:97:d5:d2:3c:fa:99:b2: 27:84:e7:19:f2:02:e1:9d:1e:df:f6:8e:2c:49:31:67:89:d2: b2:3a:86:c4:cb:70:16:5d:fc:9a:b9:e5:ae:72:6e:87:32:a5: 7e:61:c7:e0:63:59:99:24:35:87:d1:a0:67:8e:b5:67:d7:c0: 90:d2:76:f6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3NTMxMTAvBgNVBAUTKDJFNzM3MUUyMDY1Mzg0QUQxMUQ0MzM3RDBEMkVDRDFG NjZEMjE5Q0EwHhcNMjQwODI5MDMxNjI1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNmZTgwOC0zMTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswwCrFCzfXylxF+F/ERMiRzsSEH3RVzHD/IMbwAQICoPKU7YAXkI56k50ZD0 IogTedma2te35jwGYsjEBus7Pqvbrqb9lpOYLAvCiNLlDGGkRQq2bj6pJts2/k9+ x9ycNZU+HeaafNIZyuRQrGEO9PxI6N+BUIY7sVe5P0SiY4kSBMIY7Wr/a3hIU8oL cZOGL4bSHxOMDrIW2MOrmYq5FWCwsTXeChDm3pF9XCakaqaHQ1M9HuZgizxCTftF HTB6DATWEAg5rv6wkH1PiFUJ9xN4s8ob7425g3zR+2kbDETt+CyCJ1ScF5xFExti l7ra7ThkWe3N4vuxO18ttzWUaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC3tYvcV asqhRXT5vZgHg7mfhr9jMB8GA1UdIwQYMBaAFC5zceIGU4StEdQzfQ0uzR9m0hnK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc1My83QjU2MjQ0NDFC QkIxMUVEQTg3RjZFNjdDNEY5QUUwMi9Mbk54NGdaVGhLMFIxRE45RFM3TkgyYlNH Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuTng0Z1pUaEswUjFETjlEUzdOSDJiU0djby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU3NTMvN0I1NjI0NDQxQkJCMTFFREE4N0Y2RTY3QzRGOUFFMDIvNjhDNDI1RkMx QkJGMTFFRDlGODdDMDgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnX2wwDQYJKoZIhvcNAQELBQADggEBAGRQlI7x7YnbB8st sNOVcJY631l/x1eFn1Lj5YldSAmfBYS2lrdBvBCykEC8tF2UBw69242umerLnWD6 DM8kOhOS6PE86fSIJcT2KNoCkDam+RU5sQmX5oYnQ1WYGNeckaQuIyo/E85w4mp3 38A+ymScimTExNgNqHitY9x2D9jfySqEljUbtZmL2COEEiXF/a8AI0/8ZmPc51RJ CPJWWGROzWDvSXAV808yEUxwpqS/1FbS3mQpkh6DXw218/qcl9XSPPqZsieE5xny AuGdHt/2jixJMWeJ0rI6hsTLcBZd/Jq55a5ybocypX5hx+BjWZkkNYfRoGeOtWfX wJDSdvY= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:51 2024 by rpki-client on console-fra.rpki-client.org