$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A29A66FE2F1C11EDA3E29B09C4F9AE02.roa File: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (raw, json) Hash identifier: pwrQo06SW1WaZHmpSMN3Di6drTMadsg0IhrZWaRW7r4= Subject key identifier: 06:8F:AF:CA:BA:19:3D:9F:BA:04:30:B9:2F:BC:AC:89:27:A4:F7:1B Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 083F Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A29A66FE2F1C11EDA3E29B09C4F9AE02.roa Signing time: Wed 06 Nov 2024 20:39:34 +0000 ROA not before: Wed 06 Nov 2024 20:39:34 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 132827 IP address blocks: 103.6.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2111 (0x83f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Nov 6 20:39:34 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672bd406-4b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a4:0b:66:75:1b:46:71:1b:cc:0a:c8:be:f6: 5c:aa:a5:99:97:8f:4a:1e:c4:7f:c3:4c:ca:9e:80: a3:11:82:ed:e7:4a:f6:03:c1:05:d7:28:d8:91:ca: b7:ed:d6:8a:a3:ae:fc:0e:4b:b0:3d:e1:78:35:fd: 62:8f:7d:9a:91:37:f7:9a:10:cf:a8:65:9e:e3:65: 47:3b:e3:c2:d0:fa:8e:9b:5c:08:2b:d9:c5:27:bf: a1:c7:b9:9a:66:94:58:d0:60:72:1f:05:59:f3:0c: 95:a0:17:16:ae:d9:68:96:ba:a4:01:0d:f9:83:c1: b3:92:81:a0:c3:35:39:ec:d2:5b:c5:48:0c:24:10: 5e:58:44:72:6f:db:fd:e7:47:89:79:a6:c6:5c:8d: a0:f0:b5:7b:b0:48:e8:6f:b7:0a:1b:2a:d4:dd:df: 74:91:c2:a7:12:17:a1:e5:ac:e1:3a:34:24:43:38: e7:d4:2b:99:31:31:41:5e:74:57:03:76:38:27:63: 41:f2:5f:76:30:da:67:4b:13:68:b7:61:d0:5d:c6: 80:c2:f8:59:b9:63:37:6d:24:02:0d:06:c0:7e:42: 00:0b:cf:2a:c9:5f:64:0f:8c:27:ac:fc:8f:cf:be: 1e:93:9a:1a:22:16:79:d3:85:51:dd:2a:31:c6:fa: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8F:AF:CA:BA:19:3D:9F:BA:04:30:B9:2F:BC:AC:89:27:A4:F7:1B X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A29A66FE2F1C11EDA3E29B09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.6.240.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:c3:a6:f1:3b:65:61:b1:d7:ae:e9:e4:d3:c0:9a:6d:c6:7f: 23:56:5d:42:27:18:69:be:55:bf:28:0e:f7:7f:a9:31:73:b6: cb:ea:c9:d9:c6:17:15:90:0a:ec:b8:81:a1:09:69:05:00:d4: b2:3c:cf:7c:30:10:ef:b2:66:9b:39:31:c9:24:b0:ed:3e:47: ba:44:a5:1f:c6:53:88:36:b6:4a:9e:03:b5:1d:cd:24:54:f1: 01:b7:89:43:03:9d:cc:e0:d8:18:7e:af:8c:09:69:b1:d5:2a: d9:f9:97:2e:70:b1:c2:be:73:c5:09:72:23:7e:63:67:ad:86: a9:57:e0:6e:aa:87:65:fa:ab:09:83:66:c6:e8:13:35:6b:ff: ab:e7:7c:3d:fc:47:82:34:83:43:09:91:66:a8:55:21:8c:f6: 48:2a:80:e2:e4:f2:bb:42:b1:e5:62:d6:08:3f:f8:18:6f:0a: 91:13:85:c9:1c:49:68:13:65:70:58:bd:39:38:d8:a0:24:fc: 19:5c:db:4f:7f:dd:37:97:c4:8d:fd:e2:a7:7c:31:10:46:be: 04:98:da:7b:5a:6d:5d:ac:70:a0:50:b4:79:10:70:19:3c:9e: 2d:08:ce:b3:cf:05:53:d4:3f:01:82:5f:54:c3:81:15:26:08: 0c:a3:28:54 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjQxMTA2MjAzOTM0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiZDQwNi00YjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36QLZnUbRnEbzArIvvZcqqWZl49KHsR/w0zKnoCjEYLt50r2A8EF1yjYkcq3 7daKo678DkuwPeF4Nf1ij32akTf3mhDPqGWe42VHO+PC0PqOm1wIK9nFJ7+hx7ma ZpRY0GByHwVZ8wyVoBcWrtlolrqkAQ35g8GzkoGgwzU57NJbxUgMJBBeWERyb9v9 50eJeabGXI2g8LV7sEjob7cKGyrU3d90kcKnEheh5azhOjQkQzjn1CuZMTFBXnRX A3Y4J2NB8l92MNpnSxNot2HQXcaAwvhZuWM3bSQCDQbAfkIAC88qyV9kD4wnrPyP z74ek5oaIhZ504VR3Soxxvr09QIDAQABo4IClTCCApEwHQYDVR0OBBYEFAaPr8q6 GT2fugQwuS+8rIknpPcbMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjUyRjcvN0NDNDVGQUVCQUFGMTFFQUE2REQxQTNEQzRGOUFFMDIvQTI5QTY2RkUy RjFDMTFFREEzRTI5QjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnBvAwDQYJKoZIhvcNAQELBQADggEBAD7DpvE7ZWGx167p 5NPAmm3GfyNWXUInGGm+Vb8oDvd/qTFztsvqydnGFxWQCuy4gaEJaQUA1LI8z3ww EO+yZps5MckksO0+R7pEpR/GU4g2tkqeA7UdzSRU8QG3iUMDnczg2Bh+r4wJabHV Ktn5ly5wscK+c8UJciN+Y2ethqlX4G6qh2X6qwmDZsboEzVr/6vnfD38R4I0g0MJ kWaoVSGM9kgqgOLk8rtCseVi1gg/+BhvCpEThckcSWgTZXBYvTk42KAk/Blc209/ 3TeXxI394qd8MRBGvgSY2ntabV2scKBQtHkQcBk8ni0IzrPPBVPUPwGCX1TDgRUm CAyjKFQ= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org