$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/1709C2B8168A11EF9AB3AC81C4F9AE02.roa File: 1709C2B8168A11EF9AB3AC81C4F9AE02.roa (raw, json) Hash identifier: 6ukVhtJE+bKZARPHEUWUBvLoTn8fZc7n+h9SK3WSSeA= Subject key identifier: 64:F9:97:B3:6C:CC:CD:CE:C4:CE:74:94:51:D9:F2:A2:62:8A:BD:4B Certificate issuer: /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Certificate serial: 06C2 Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/1709C2B8168A11EF9AB3AC81C4F9AE02.roa Signing time: Sat 15 Jun 2024 20:24:33 +0000 ROA not before: Sat 15 Jun 2024 20:24:33 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 134712 IP address blocks: 103.158.4.0/23 maxlen: 23 103.158.4.0/24 maxlen: 24 103.158.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1730 (0x6c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Validity Not Before: Jun 15 20:24:33 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=666df881-3431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c0:74:c6:ca:9d:39:7f:0d:db:be:88:e1:cd: a8:24:63:89:c0:e8:72:fc:5b:c4:c0:d4:1d:af:5c: 34:f1:4d:44:21:97:b9:26:58:a1:67:f8:ca:d8:e2: 55:b4:cf:ea:f1:2c:f7:df:de:fd:39:21:5c:6c:b0: 26:b0:e9:cb:23:1c:16:db:c3:aa:32:06:a8:fc:86: 18:6d:f1:c2:bb:cc:b1:fc:df:47:06:0d:73:5d:bb: ef:a1:b0:b6:b3:61:8e:52:bc:91:6b:28:14:47:d7: 2f:a8:9c:dc:80:ce:c4:f4:62:15:a8:e4:b3:23:18: 86:5f:91:30:2e:92:3a:8c:ec:d7:4f:5b:62:fc:d1: 85:74:5e:53:06:6f:e8:25:6f:c2:ef:a8:bf:cf:c0: 12:b4:e5:cc:5d:a6:38:dc:1c:a9:52:40:6a:cc:9f: c5:25:36:89:49:ad:72:a4:30:fb:87:9e:a3:74:b9: ae:0d:34:ea:b6:96:26:58:2c:3c:5a:5f:08:33:b1: ee:c1:1f:8f:52:d4:53:28:12:3f:f2:0b:34:ff:11: 4d:cd:78:5b:c7:bf:f8:90:a7:1c:f8:8c:a1:2e:61: c3:2f:61:ea:a4:83:7b:e2:24:98:2d:34:fa:ae:a8: dc:6b:10:fa:cc:78:6b:01:ec:30:1e:c6:46:a0:14: f9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F9:97:B3:6C:CC:CD:CE:C4:CE:74:94:51:D9:F2:A2:62:8A:BD:4B X509v3 Authority Key Identifier: keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/1709C2B8168A11EF9AB3AC81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.4.0/23 Signature Algorithm: sha256WithRSAEncryption 51:8d:4c:87:85:52:2a:6c:5e:09:d9:8d:aa:89:c3:56:3e:1a: 5b:4f:dc:c6:84:62:ef:6e:79:8e:fb:cb:58:42:1a:00:6d:8d: e8:c3:6f:74:4e:d1:fa:83:c4:78:70:5e:3a:3e:87:52:cb:63: 12:c5:33:2e:f9:b3:05:33:eb:38:9e:97:98:b4:1f:d4:13:29: 1e:3f:62:86:51:50:f9:41:32:cb:32:1d:1b:41:17:fe:fc:b0: ef:4e:4b:8b:b0:56:78:8e:9e:e0:d0:19:24:f8:2d:48:f3:e5: ce:b6:15:8a:dc:7a:38:69:b4:ed:e3:c5:7e:14:80:90:ab:0c: d4:3c:a3:65:90:63:34:1a:d3:fc:57:83:be:ba:47:f8:0b:fc: 56:d7:01:1b:18:48:1f:c9:28:04:0b:0d:43:fe:7b:b4:5c:90: bb:b8:07:6b:63:dd:21:44:41:49:fd:0f:02:9d:aa:f9:a5:1e: c3:3a:d1:52:99:5d:49:70:66:6f:3c:07:d8:ea:6a:fd:46:72: 04:25:5f:23:89:b8:3a:fa:77:ed:d6:b8:c4:af:de:26:26:11: b9:a5:6e:d5:dd:f1:9e:e1:c6:76:1c:b0:24:a0:31:12:c8:d6: 63:62:0d:ef:54:4d:76:0e:f0:bf:1c:da:46:e3:28:b6:ae:5e: 0f:59:db:94 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBMDAxMTAvBgNVBAUTKEIxRUVDNTlFRDU2MUEwREIzRDdENDBDMzBBRjJBQjZG RUQyOTdBOTgwHhcNMjQwNjE1MjAyNDMzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjZkZjg4MS0zNDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8B0xsqdOX8N276I4c2oJGOJwOhy/FvEwNQdr1w08U1EIZe5JlihZ/jK2OJV tM/q8Sz33979OSFcbLAmsOnLIxwW28OqMgao/IYYbfHCu8yx/N9HBg1zXbvvobC2 s2GOUryRaygUR9cvqJzcgM7E9GIVqOSzIxiGX5EwLpI6jOzXT1ti/NGFdF5TBm/o JW/C76i/z8AStOXMXaY43BypUkBqzJ/FJTaJSa1ypDD7h56jdLmuDTTqtpYmWCw8 Wl8IM7HuwR+PUtRTKBI/8gs0/xFNzXhbx7/4kKcc+IyhLmHDL2HqpIN74iSYLTT6 rqjcaxD6zHhrAewwHsZGoBT5wQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGT5l7Ns zM3OxM50lFHZ8qJiir1LMB8GA1UdIwQYMBaAFLHuxZ7VYaDbPX1Awwryq2/tKXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREEwMC83REQ3NTBEQzFD RTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9OczlmVUREQ3ZLcmItMHBl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlN0ZudFZob05zOWZVRERDdktyYi0wcGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRBMDAvN0RENzUwREMxQ0UyMTFFQjlBQUI0OTc3QzRGOUFFMDIvMTcwOUMyQjgx NjhBMTFFRjlBQjNBQzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnngQwDQYJKoZIhvcNAQELBQADggEBAFGNTIeFUipsXgnZ jaqJw1Y+GltP3MaEYu9ueY77y1hCGgBtjejDb3RO0fqDxHhwXjo+h1LLYxLFMy75 swUz6ziel5i0H9QTKR4/YoZRUPlBMssyHRtBF/78sO9OS4uwVniOnuDQGST4LUjz 5c62FYrcejhptO3jxX4UgJCrDNQ8o2WQYzQa0/xXg766R/gL/FbXARsYSB/JKAQL DUP+e7RckLu4B2tj3SFEQUn9DwKdqvmlHsM60VKZXUlwZm88B9jqav1GcgQlXyOJ uDr6d+3WuMSv3iYmEbmlbtXd8Z7hxnYcsCSgMRLI1mNiDe9UTXYO8L8c2kbjKLau Xg9Z25Q= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:15 2024 by rpki-client on console-fra.rpki-client.org