$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/FE4992F25C3411EBA2B9004DC4F9AE02.roa File: FE4992F25C3411EBA2B9004DC4F9AE02.roa (raw, json) Hash identifier: WLTZjRNFNOpt4obFHZLuXm6PcfO8k1Rl/GXdIhTWuLo= Subject key identifier: 6B:42:6C:47:5D:DA:1B:FE:B4:FC:F6:C4:E4:25:0B:29:AC:AA:3E:8F Certificate issuer: /CN=A91F5FA2/serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79 Certificate serial: 0647 Authority key identifier: 79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/FE4992F25C3411EBA2B9004DC4F9AE02.roa Signing time: Wed 11 Sep 2024 00:32:11 +0000 ROA not before: Wed 11 Sep 2024 00:32:11 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131292 IP address blocks: 103.68.208.0/22 maxlen: 24 2405:e680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5FA2/serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79 Validity Not Before: Sep 11 00:32:11 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66e0e50b-da2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:fe:35:09:6d:1f:77:6d:c3:ae:55:ab:94: a3:d8:cd:76:43:0f:24:8b:0b:11:b9:36:bf:91:98: 29:e0:2b:92:91:48:7b:9c:7a:fe:58:9e:1b:4e:dc: 97:e5:e6:58:6d:89:95:75:46:70:3f:5a:6a:f1:3a: 45:5d:8d:e4:f1:3a:31:b4:62:23:50:60:d7:c8:9e: 1a:7d:d6:ee:33:9a:5e:84:4d:e4:95:92:68:d3:16: 46:b8:1e:4e:6c:f4:15:ba:90:ac:d4:b8:b0:21:fc: c1:70:a4:2a:37:b5:8a:10:68:9e:d9:c4:ca:f9:e6: 82:da:2f:10:c9:2e:aa:4d:c3:16:30:1a:94:84:d4: 15:cc:a9:9a:3f:e6:09:a6:53:73:dd:f2:b1:dd:e1: 08:90:83:19:0f:b8:15:04:00:82:ba:f2:d1:ad:0f: 2e:16:5d:ee:73:4c:5c:7a:40:d5:1c:5c:6e:f2:cc: e1:28:08:b1:d2:31:20:77:c0:8c:40:0b:d0:29:4b: 55:87:18:9f:d0:06:8d:38:56:13:cd:b9:7d:19:20: 9a:38:f8:89:19:b8:60:ff:be:90:2d:fe:e2:82:66: ea:63:96:6e:2b:5f:a9:0c:f3:60:c1:12:98:bb:cf: 62:12:04:e0:89:cd:3f:32:39:76:56:11:cf:10:cc: c0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:42:6C:47:5D:DA:1B:FE:B4:FC:F6:C4:E4:25:0B:29:AC:AA:3E:8F X509v3 Authority Key Identifier: keyid:79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/FE4992F25C3411EBA2B9004DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.208.0/22 IPv6: 2405:e680::/32 Signature Algorithm: sha256WithRSAEncryption 75:60:04:b6:2f:18:62:95:9b:d7:9a:12:d6:e2:0f:d7:7a:1e: 32:64:ea:98:43:07:fa:87:a1:7a:3c:3f:50:a8:c2:72:49:11: a6:60:4d:66:8e:d8:35:d7:34:67:23:e8:80:7c:5f:c5:37:98: cd:d2:23:98:de:ca:72:29:0b:68:72:15:8e:26:d3:ad:14:e2: d7:bd:84:56:15:b4:56:10:9f:41:21:20:0e:52:26:6d:2d:7d: e8:48:97:ed:73:b2:13:27:1a:c9:99:cf:f8:a3:02:f5:dd:dd: ea:e7:d8:bd:03:dd:38:a1:f0:bb:06:2a:db:6e:fd:de:8d:65: e2:e3:d5:9e:af:82:a3:29:6d:f7:05:4c:06:b3:42:64:c8:9e: 70:d1:2c:6f:be:84:c0:59:3f:c3:5a:ce:69:ae:ab:c4:1a:01: 6d:d6:c9:73:39:4c:6e:b7:de:d8:dc:82:fe:a6:6b:d5:33:89: f7:e9:b4:ae:72:2a:e6:bf:42:3d:8c:e6:d1:e4:cd:96:ec:99: ec:21:77:60:ce:e4:bd:7c:ee:a9:25:39:30:ab:d0:9b:c3:54: 1b:6a:44:9c:ca:9b:1e:cf:56:6f:fd:f4:55:37:27:0e:d5:61: e0:5e:93:77:c9:c5:57:b4:e0:0a:48:78:1e:31:b4:32:11:df: 61:c7:42:8c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVGQTIxMTAvBgNVBAUTKDc5QTk0RDI4RTU0MjQ3MzgwOTEzODNENUY0OTc1QkZE QkNFQUFFNzkwHhcNMjQwOTExMDAzMjExWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUwZTUwYi1kYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAv+NQltH3dtw65Vq5Sj2M12Qw8kiwsRuTa/kZgp4CuSkUh7nHr+WJ4bTtyX 5eZYbYmVdUZwP1pq8TpFXY3k8ToxtGIjUGDXyJ4afdbuM5pehE3klZJo0xZGuB5O bPQVupCs1LiwIfzBcKQqN7WKEGie2cTK+eaC2i8QyS6qTcMWMBqUhNQVzKmaP+YJ plNz3fKx3eEIkIMZD7gVBACCuvLRrQ8uFl3uc0xcekDVHFxu8szhKAix0jEgd8CM QAvQKUtVhxif0AaNOFYTzbl9GSCaOPiJGbhg/76QLf7igmbqY5ZuK1+pDPNgwRKY u89iEgTgic0/Mjl2VhHPEMzAywIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGtCbEdd 2hv+tPz2xOQlCymsqj6PMB8GA1UdIwQYMBaAFHmpTSjlQkc4CROD1fSXW/286q55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUZBMi8wMzI1NDQ0MDVD MzIxMUVCOTdCRjdDNDVDNEY5QUUwMi9lYWxOS09WQ1J6Z0pFNFBWOUpkYl9ienFy bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VhbE5LT1ZDUnpnSkU0UFY5SmRiX2J6cXJuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjVGQTIvMDMyNTQ0NDA1QzMyMTFFQjk3QkY3QzQ1QzRGOUFFMDIvRkU0OTkyRjI1 QzM0MTFFQkEyQjkwMDREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnRNAwDQQCAAIwBwMFACQF5oAwDQYJKoZIhvcNAQELBQAD ggEBAHVgBLYvGGKVm9eaEtbiD9d6HjJk6phDB/qHoXo8P1CownJJEaZgTWaO2DXX NGcj6IB8X8U3mM3SI5jeynIpC2hyFY4m060U4te9hFYVtFYQn0EhIA5SJm0tfehI l+1zshMnGsmZz/ijAvXd3ern2L0D3Tih8LsGKttu/d6NZeLj1Z6vgqMpbfcFTAaz QmTInnDRLG++hMBZP8Nazmmuq8QaAW3WyXM5TG633tjcgv6ma9UziffptK5yKua/ Qj2M5tHkzZbsmewhd2DO5L187qklOTCr0JvDVBtqRJzKmx7PVm/99FU3Jw7VYeBe k3fJxVe04ApIeB4xtDIR32HHQow= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:37 2024 by rpki-client on console-fra.rpki-client.org