$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa File: C9763EB431D811EE89285A41C4F9AE02.roa (raw, json) Hash identifier: +03LMs4GrIEKMr4AUS8THT/+aKHBZJZQJL5qDyXGi38= Subject key identifier: B4:74:C3:F4:82:C8:8C:A1:2F:DC:8A:3E:CA:35:A1:AF:92:24:98:90 Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Certificate serial: CA Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa Signing time: Fri 23 Aug 2024 05:27:17 +0000 ROA not before: Fri 23 Aug 2024 05:27:17 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135404 IP address blocks: 103.154.22.0/23 maxlen: 23 2406:5140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Validity Not Before: Aug 23 05:27:17 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c81db5-f61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3e:4d:fb:5e:fd:ee:f6:b0:de:28:96:d7:93: 33:dc:fb:a1:25:78:d5:2e:ee:73:62:22:12:37:5f: bc:30:6f:c8:89:56:5b:42:e4:a4:f9:9d:eb:e9:c7: f7:33:53:12:35:ac:e3:f7:aa:81:ed:68:41:e6:6b: 7a:15:18:c8:68:26:e4:93:5f:d5:d3:f5:67:54:93: eb:ef:b6:89:08:03:24:0d:47:4b:fa:01:31:3d:a8: 24:d6:25:41:2c:b3:92:be:7f:92:84:a7:13:50:b7: 8b:ce:cb:fe:6c:a4:6a:1f:58:ad:38:82:e1:aa:a4: 3a:32:66:69:38:1a:e6:91:43:97:b1:97:ab:91:e9: a8:8c:a2:b7:49:1a:ec:77:85:6d:f6:1e:34:a5:6a: ad:6f:0b:23:50:50:ed:78:fb:fc:8e:70:6a:54:78: 0d:22:57:8c:84:8f:09:d5:4b:5c:a5:fb:03:de:af: 69:5c:0b:f5:f2:dd:01:21:b0:04:1f:3f:1c:8b:0c: 82:5e:0c:cf:49:18:28:4c:ba:ab:e8:62:1f:57:39: 69:72:9c:20:00:92:d4:e0:49:d4:02:e4:b1:91:84: 54:cb:81:69:38:ff:e4:d9:86:6e:06:d9:59:26:60: ab:c3:5c:52:96:55:7c:2a:b8:7b:35:7d:f4:ab:a8: 48:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:74:C3:F4:82:C8:8C:A1:2F:DC:8A:3E:CA:35:A1:AF:92:24:98:90 X509v3 Authority Key Identifier: keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.22.0/23 IPv6: 2406:5140::/32 Signature Algorithm: sha256WithRSAEncryption 92:85:ba:c6:cc:7a:1b:73:87:2a:de:ad:7f:75:e5:77:40:12: 15:69:5d:41:3b:57:12:dd:d9:05:56:63:78:07:5b:ad:dc:4e: 48:f1:bd:31:5c:74:27:f2:d8:d3:cd:4b:8b:c0:42:d2:57:64: fa:1f:96:7b:4f:74:24:f8:61:1a:2c:7d:ca:de:68:34:e1:9e: 66:dc:8b:ec:4b:32:7a:82:e7:bb:41:43:ff:65:6d:66:e0:13: e6:29:30:5a:e6:73:26:67:f4:6b:66:94:de:97:ac:b3:c4:03: 7b:84:5f:f2:ca:ca:fb:15:c9:9a:b8:61:ba:6e:97:5e:32:2b: 26:02:c8:16:15:29:63:34:50:c8:1e:2f:9b:c4:62:68:88:7f: 0e:0f:6d:42:3c:88:b6:e6:df:6b:21:a6:69:83:b8:c5:81:b9: 47:33:b1:b8:27:7b:35:1f:8d:b7:89:1b:b6:3f:a6:f8:b4:99: 12:70:88:3a:7c:87:f8:33:08:1e:14:72:30:b9:58:1d:52:56: 6c:14:07:1e:7f:81:e1:d6:58:28:55:8c:e5:72:66:1f:22:ce: d9:80:91:0b:31:58:9b:c5:b0:01:08:d5:4b:13:66:a4:10:71: ba:fc:bb:68:93:13:58:24:22:1e:ed:fb:84:79:92:47:ee:00: 74:fc:ed:e5 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4 MURBNEIzMUMwHhcNMjQwODIzMDUyNzE3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM4MWRiNS1mNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D5N+1797vaw3iiW15Mz3PuhJXjVLu5zYiISN1+8MG/IiVZbQuSk+Z3r6cf3 M1MSNazj96qB7WhB5mt6FRjIaCbkk1/V0/VnVJPr77aJCAMkDUdL+gExPagk1iVB LLOSvn+ShKcTULeLzsv+bKRqH1itOILhqqQ6MmZpOBrmkUOXsZerkemojKK3SRrs d4Vt9h40pWqtbwsjUFDtePv8jnBqVHgNIleMhI8J1UtcpfsD3q9pXAv18t0BIbAE Hz8ciwyCXgzPSRgoTLqr6GIfVzlpcpwgAJLU4EnUAuSxkYRUy4FpOP/k2YZuBtlZ JmCrw1xSllV8Krh7NX30q6hIYQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLR0w/SC yIyhL9yKPso1oa+SJJiQMB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkNCM0IvODYyOUM0MzIzMUQ4MTFFRThCRTlDNDQwQzRGOUFFMDIvQzk3NjNFQjQz MUQ4MTFFRTg5Mjg1QTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnmhYwDQQCAAIwBwMFACQGUUAwDQYJKoZIhvcNAQELBQAD ggEBAJKFusbMehtzhyrerX915XdAEhVpXUE7VxLd2QVWY3gHW63cTkjxvTFcdCfy 2NPNS4vAQtJXZPoflntPdCT4YRosfcreaDThnmbci+xLMnqC57tBQ/9lbWbgE+Yp MFrmcyZn9GtmlN6XrLPEA3uEX/LKyvsVyZq4Ybpul14yKyYCyBYVKWM0UMgeL5vE YmiIfw4PbUI8iLbm32shpmmDuMWBuUczsbgnezUfjbeJG7Y/pvi0mRJwiDp8h/gz CB4UcjC5WB1SVmwUBx5/geHWWChVjOVyZh8iztmAkQsxWJvFsAEI1UsTZqQQcbr8 u2iTE1gkIh7t+4R5kkfuAHT87eU= -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:01 2024 by rpki-client on console-fra.rpki-client.org