$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/0BEE202087BA11EBBBA56067C4F9AE02.roa File: 0BEE202087BA11EBBBA56067C4F9AE02.roa (raw, json) Hash identifier: RcqGn4DlzkrU8iX9c04+ABUEIkZSxXOe2ZYW/HJVZ60= Subject key identifier: A4:78:F3:9F:CB:F5:70:32:71:FB:95:EC:68:6A:61:2D:24:0A:85:45 Certificate issuer: /CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Certificate serial: 05BA Authority key identifier: D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/0BEE202087BA11EBBBA56067C4F9AE02.roa Signing time: Fri 31 May 2024 15:17:25 +0000 ROA not before: Fri 31 May 2024 15:17:25 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141995 IP address blocks: 103.164.54.0/23 maxlen: 23 2400:d320::/32 maxlen: 32 2400:d321::/32 maxlen: 32 2407:3640::/32 maxlen: 32 2407:3641::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1466 (0x5ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Validity Not Before: May 31 15:17:25 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6659ea05-bbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2b:3d:b2:f1:3f:70:47:b5:ff:ed:e2:a3:df: ee:ea:ae:75:b5:cc:6b:dc:bc:d6:5f:2b:f3:27:c9: 0e:80:6b:bf:01:99:e2:a5:d6:50:bc:99:ed:8c:0d: 60:e5:7a:e2:4b:44:4a:89:a8:c0:16:3e:47:76:06: 05:11:18:ee:3c:df:c7:14:51:19:dd:20:91:f0:e0: bc:cd:a0:31:d8:82:c4:39:1b:64:3f:c3:37:86:5d: bd:f2:5e:b5:6e:95:e2:de:80:e7:fe:16:aa:89:4a: a0:60:e3:9a:a2:b1:23:5b:7c:38:47:69:0f:e4:01: 9b:66:49:d4:43:95:47:e4:94:28:cd:58:f7:3d:05: 9e:52:cf:ee:eb:6a:83:2e:4a:a1:07:19:1b:2e:ad: 0c:3b:f4:2a:c7:08:19:32:a3:d6:7d:1c:71:2f:72: ec:9e:20:d6:d5:90:64:82:9e:92:21:2d:73:64:c3: c1:1b:bc:f1:95:81:82:11:06:3e:62:f8:ab:ba:59: 60:f5:5b:a3:40:ae:7d:bb:25:d2:53:76:70:8d:01: 36:24:86:7d:6a:06:5e:80:42:06:ba:9f:29:40:e4: 26:0e:59:bd:dd:c3:e6:ae:7a:e5:15:f7:6e:75:2b: 91:59:01:04:13:20:bc:6f:d4:ec:2f:4b:63:11:21: de:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:78:F3:9F:CB:F5:70:32:71:FB:95:EC:68:6A:61:2D:24:0A:85:45 X509v3 Authority Key Identifier: keyid:D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/0BEE202087BA11EBBBA56067C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.54.0/23 IPv6: 2400:d320::/31 2407:3640::/31 Signature Algorithm: sha256WithRSAEncryption 75:9f:c2:43:86:65:1f:d4:5d:f4:e3:f9:32:ce:62:e8:da:9f: c6:41:af:68:5f:7d:66:50:a7:03:dd:88:15:d4:52:e8:39:e1: ec:4c:c7:50:71:af:37:5d:68:23:88:28:58:a8:67:49:cf:e1: 4d:bd:67:dd:38:dd:b0:eb:b5:66:8b:2d:b6:6b:79:78:fa:ae: 51:23:c0:16:58:a6:7f:ec:ba:0f:b3:e0:e2:b6:4e:b4:55:2a: 21:65:e0:33:3f:8d:b8:76:e8:3a:c3:63:b5:e0:7d:79:4c:12: 46:ce:47:3b:03:db:a0:e2:86:64:b4:2e:99:12:42:b6:16:82: fa:95:fe:b4:9d:f1:fd:a6:89:57:0e:a5:1d:a8:68:19:00:96: 75:a9:87:1d:1c:58:a7:8c:1a:fe:9c:dc:ed:72:ce:e2:10:6a: 9c:17:0f:12:0d:48:7a:2c:d5:62:7b:68:f5:fa:b7:4d:b7:43: 5d:12:fc:02:e3:1b:ae:23:2f:45:b6:e0:df:42:3f:99:a8:e2: b8:2f:ca:2d:49:6c:d0:46:d8:70:f3:11:3c:07:d0:60:7e:ef: 9e:45:c2:5e:e6:b7:1b:55:49:93:bd:ae:06:9f:b4:d2:bb:fd: 88:cf:6a:8d:c8:d2:e0:62:4e:ae:48:41:6a:3a:85:e1:57:0b: 39:a1:8f:81 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICBbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1Q0ExMTAvBgNVBAUTKEQ5NUNFNUZCMzY5MTVDM0Q4Q0RCMTBEQjg2NEE0Qzcx OTMzQ0RBNDEwHhcNMjQwNTMxMTUxNzI1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU5ZWEwNS1iYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Ss9svE/cEe1/+3io9/u6q51tcxr3LzWXyvzJ8kOgGu/AZnipdZQvJntjA1g 5XriS0RKiajAFj5HdgYFERjuPN/HFFEZ3SCR8OC8zaAx2ILEORtkP8M3hl298l61 bpXi3oDn/haqiUqgYOOaorEjW3w4R2kP5AGbZknUQ5VH5JQozVj3PQWeUs/u62qD LkqhBxkbLq0MO/QqxwgZMqPWfRxxL3LsniDW1ZBkgp6SIS1zZMPBG7zxlYGCEQY+ Yvirullg9VujQK59uyXSU3ZwjQE2JIZ9agZegEIGup8pQOQmDlm93cPmrnrlFfdu dSuRWQEEEyC8b9TsL0tjESHe4QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFKR485/L 9XAycfuV7GhqYS0kCoVFMB8GA1UdIwQYMBaAFNlc5fs2kVw9jNsQ24ZKTHGTPNpB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS9GMzY0M0IxMDgz MDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhEMk0yeERiaGtwTWNaTTgy a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWemwtemFSWEQyTTJ4RGJoa3BNY1pNODJrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk1Q0EvRjM2NDNCMTA4MzA1MTFFQjk3MTg5QjM5QzRGOUFFMDIvMEJFRTIwMjA4 N0JBMTFFQkJCQTU2MDY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMAwEAgABMAYDBAFnpDYwFAQCAAIwDgMFASQA0yADBQEkBzZAMA0GCSqGSIb3 DQEBCwUAA4IBAQB1n8JDhmUf1F304/kyzmLo2p/GQa9oX31mUKcD3YgV1FLoOeHs TMdQca83XWgjiChYqGdJz+FNvWfdON2w67Vmiy22a3l4+q5RI8AWWKZ/7LoPs+Di tk60VSohZeAzP424dug6w2O14H15TBJGzkc7A9ug4oZktC6ZEkK2FoL6lf60nfH9 polXDqUdqGgZAJZ1qYcdHFinjBr+nNztcs7iEGqcFw8SDUh6LNVie2j1+rdNt0Nd EvwC4xuuIy9FtuDfQj+ZqOK4L8otSWzQRthw8xE8B9Bgfu+eRcJe5rcbVUmTva4G n7TSu/2Iz2qNyNLgYk6uSEFqOoXhVws5oY+B -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:29 2024 by rpki-client on console-fra.rpki-client.org