$ rpki-client -vvf rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/2611C806D1AA11EA82C4313FC4F9AE02.roa File: 2611C806D1AA11EA82C4313FC4F9AE02.roa (raw, json) Hash identifier: BTpWw7F/XbdMRveGgpGDkDR4BmkxDYTL8O9GDvpyiEg= Subject key identifier: E1:6D:A1:AF:23:94:85:3E:34:92:99:76:BB:1D:57:F6:97:1D:2F:3D Certificate issuer: /CN=A91177D4/serialNumber=8653329A51DBC679F1BF17D791D83EC7689BE7AE Certificate serial: 079F Authority key identifier: 86:53:32:9A:51:DB:C6:79:F1:BF:17:D7:91:D8:3E:C7:68:9B:E7:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/2611C806D1AA11EA82C4313FC4F9AE02.roa Signing time: Wed 28 Aug 2024 21:40:08 +0000 ROA not before: Wed 28 Aug 2024 21:40:08 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 133938 IP address blocks: 103.153.240.0/24 maxlen: 24 103.153.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.crl rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91177D4/serialNumber=8653329A51DBC679F1BF17D791D83EC7689BE7AE Validity Not Before: Aug 28 21:40:08 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66cf9938-022f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7d:f0:81:bf:7c:85:3b:ff:83:80:7b:1d:83: 1b:5f:84:45:e4:3d:76:2b:ef:1e:93:ea:ab:bf:d8: cb:5a:2e:79:ec:a1:aa:c9:d2:44:21:f0:5f:ba:92: 92:28:88:3f:8c:d0:b2:ae:7a:87:27:24:e2:45:e7: 8c:d4:c0:a8:c4:f0:6d:71:29:78:ca:7a:55:f3:90: 28:f9:86:fd:6a:8a:e9:06:5d:a0:9e:92:ae:0c:43: 98:a5:d5:c2:88:25:d1:c9:c0:b4:ad:bc:c5:38:9a: 8b:60:09:16:8d:07:1c:6c:7d:3c:c1:b4:76:68:2f: c1:15:f8:54:95:e4:43:64:1b:ab:3c:d0:4b:06:ed: e3:c0:0e:d4:a0:65:19:97:f2:25:2a:32:88:d9:12: fc:84:78:6f:a0:0d:cb:a9:9e:cc:63:9c:fc:d0:b3: 17:27:d9:ae:d4:0a:c5:34:62:8d:cd:5b:6c:85:6f: 1f:3f:ae:2b:e1:e0:77:2a:a4:d0:a1:51:b7:ab:c6: 8b:44:3f:de:e8:07:f1:70:de:6f:b6:ea:74:88:8f: 59:b7:89:c6:c6:e6:aa:d5:e5:51:99:83:1e:75:d6: 34:30:f3:34:31:a2:57:e6:82:94:f6:14:c0:a3:9c: f1:ef:23:5a:62:cd:d0:1c:e5:3e:7e:f0:e7:81:d9: f0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6D:A1:AF:23:94:85:3E:34:92:99:76:BB:1D:57:F6:97:1D:2F:3D X509v3 Authority Key Identifier: keyid:86:53:32:9A:51:DB:C6:79:F1:BF:17:D7:91:D8:3E:C7:68:9B:E7:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/2611C806D1AA11EA82C4313FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.240.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:82:2e:b3:48:1a:ad:69:f5:69:df:f0:dc:5e:30:a4:0b:ac: 30:bd:2e:28:5f:ae:b1:a9:e2:8f:80:6e:73:07:84:10:31:4b: 28:51:60:96:20:7a:24:83:76:bd:0d:a2:3a:5f:3b:7a:8f:0c: 6f:74:0e:e6:79:29:75:2e:9f:59:10:1a:44:3c:07:7c:5c:9e: 6a:ec:52:96:c7:e2:23:6b:f8:de:0e:14:6f:1b:48:8c:b6:12: a5:1a:ef:52:da:8c:62:e2:5f:87:4e:f2:dc:6f:1d:e2:da:b2: ee:ff:83:1b:d9:06:fb:c8:be:67:9c:8b:48:a1:5e:6e:ff:d9: d4:85:ee:7a:6b:6a:65:ed:91:b1:3a:b5:ce:97:a1:a7:cf:42: 29:5d:ab:08:6d:67:61:08:f4:43:ae:cb:88:c8:64:e8:bb:8a: f6:30:26:2a:c2:36:ca:b5:3f:87:55:84:e7:2a:6a:15:a3:d6: 98:02:46:27:ce:ac:ea:23:d1:f7:e6:87:95:ed:7c:f7:d8:44: 2f:0d:c5:25:72:39:15:c0:3d:50:8b:05:5c:3b:69:36:7b:35: 5b:13:22:a0:6e:e3:60:a7:c2:10:aa:d8:b3:f4:23:a6:aa:0b: f7:87:1c:3a:4c:7c:f0:50:60:b7:8f:68:e2:6f:3c:61:9b:0d: 00:d3:4e:94 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3RDQxMTAvBgNVBAUTKDg2NTMzMjlBNTFEQkM2NzlGMUJGMTdENzkxRDgzRUM3 Njg5QkU3QUUwHhcNMjQwODI4MjE0MDA4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNmOTkzOC0wMjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzn3wgb98hTv/g4B7HYMbX4RF5D12K+8ek+qrv9jLWi557KGqydJEIfBfupKS KIg/jNCyrnqHJyTiReeM1MCoxPBtcSl4ynpV85Ao+Yb9aorpBl2gnpKuDEOYpdXC iCXRycC0rbzFOJqLYAkWjQccbH08wbR2aC/BFfhUleRDZBurPNBLBu3jwA7UoGUZ l/IlKjKI2RL8hHhvoA3LqZ7MY5z80LMXJ9mu1ArFNGKNzVtshW8fP64r4eB3KqTQ oVG3q8aLRD/e6AfxcN5vtup0iI9Zt4nGxuaq1eVRmYMeddY0MPM0MaJX5oKU9hTA o5zx7yNaYs3QHOU+fvDngdnw1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFOFtoa8j lIU+NJKZdrsdV/aXHS89MB8GA1UdIwQYMBaAFIZTMppR28Z58b8X15HYPsdom+eu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzdENC8yQ0VFRkUzNEQx QTgxMUVBOEM1ODM3M0JDNEY5QUUwMi9obE15bWxIYnhubnh2eGZYa2RnLXgyaWI1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hsTXltbEhieG5ueHZ4ZlhrZGcteDJpYjU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTc3RDQvMkNFRUZFMzREMUE4MTFFQThDNTgzNzNCQzRGOUFFMDIvMjYxMUM4MDZE MUFBMTFFQTgyQzQzMTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmfAwDQYJKoZIhvcNAQELBQADggEBAFuCLrNIGq1p9Wnf 8NxeMKQLrDC9LihfrrGp4o+AbnMHhBAxSyhRYJYgeiSDdr0NojpfO3qPDG90DuZ5 KXUun1kQGkQ8B3xcnmrsUpbH4iNr+N4OFG8bSIy2EqUa71LajGLiX4dO8txvHeLa su7/gxvZBvvIvmeci0ihXm7/2dSF7npramXtkbE6tc6XoafPQildqwhtZ2EI9EOu y4jIZOi7ivYwJirCNsq1P4dVhOcqahWj1pgCRifOrOoj0ffmh5XtfPfYRC8NxSVy ORXAPVCLBVw7aTZ7NVsTIqBu42CnwhCq2LP0I6aqC/eHHDpMfPBQYLePaOJvPGGb DQDTTpQ= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:05 2024 by rpki-client on console-fra.rpki-client.org