$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/6821943494DD11EE8738E129C4F9AE02.roa File: 6821943494DD11EE8738E129C4F9AE02.roa (raw, json) Hash identifier: a1Z7YTra89HP7R/iP45GOM/C5JH0hGn0Qq0e0eUVYYc= Subject key identifier: 4C:BE:2D:5A:16:AE:09:24:79:9C:94:BF:AE:4B:92:DD:9E:8B:83:61 Certificate issuer: /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04 Certificate serial: 8D Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/6821943494DD11EE8738E129C4F9AE02.roa Signing time: Fri 30 Aug 2024 21:59:39 +0000 ROA not before: Fri 30 Aug 2024 21:59:39 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 140712 IP address blocks: 103.152.26.0/23 maxlen: 23 103.152.26.0/24 maxlen: 24 103.152.27.0/24 maxlen: 24 2001:df3:f280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 22:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04 Validity Not Before: Aug 30 21:59:39 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=66d240cb-5de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:14:83:b1:5f:90:80:9e:77:ed:02:1f:dd: e6:39:d2:73:38:52:9d:5c:dc:47:ec:51:68:27:3f: 09:79:a9:bd:01:69:68:b3:fe:76:a1:37:b5:bf:0d: 55:e6:88:0b:ab:36:a4:ec:b8:12:53:ab:e8:be:05: d7:79:f5:16:b3:3a:5d:fe:a7:1c:6a:3b:1f:ba:ef: 1a:bd:5c:0c:cb:bb:32:f0:cc:48:fd:b3:0e:30:9e: b8:20:1b:3f:19:36:5d:16:3b:e5:03:d9:14:bc:9f: 7a:64:a9:9b:99:9e:5c:c4:6f:c8:c1:1c:29:ab:51: b6:ed:8e:9e:d3:3c:cc:29:fc:11:77:53:52:0c:ce: 54:96:ce:d0:97:7e:db:5f:ef:1d:04:2d:bd:d9:83: 8b:cc:eb:fe:48:de:e8:ef:bd:a5:f3:59:e7:e0:16: 8b:c9:fc:85:b4:2c:98:2a:f6:4d:4d:c5:75:df:df: de:98:3f:78:fd:53:0b:34:be:a0:23:9e:12:70:58: 06:a6:1e:f8:73:5b:ef:ff:cf:6a:7a:52:c9:af:3b: f0:08:f8:86:cb:06:cb:d2:8d:fc:f6:08:70:fb:90: 72:73:a2:fa:6d:d2:0d:f5:1a:2a:d2:46:5e:0c:ae: 4e:43:06:15:9c:9d:2b:c5:52:75:32:cc:09:9b:91: 45:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BE:2D:5A:16:AE:09:24:79:9C:94:BF:AE:4B:92:DD:9E:8B:83:61 X509v3 Authority Key Identifier: keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/6821943494DD11EE8738E129C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.26.0/23 IPv6: 2001:df3:f280::/48 Signature Algorithm: sha256WithRSAEncryption 25:46:6f:4b:0e:6f:b0:8e:fc:62:7d:1e:0a:81:cc:cd:bd:27: f9:b0:82:af:46:4e:1b:be:45:84:69:bd:2c:b5:a9:85:5c:38: 1a:02:45:fe:a6:44:cd:26:5e:93:06:bc:1b:6a:85:32:57:42: 49:1c:4d:f3:53:df:af:a8:76:97:41:f9:27:44:13:f5:eb:54: c1:70:6f:56:bc:d5:db:3c:27:4e:6a:b3:86:68:af:22:df:78: b8:91:f1:03:a9:5a:15:6d:a1:b6:95:4b:c4:3a:41:92:ed:31: e2:9d:98:e2:ea:53:2b:62:38:59:ff:66:c3:a4:b0:2d:c1:6e: 05:e0:f0:e9:b6:03:a5:c9:5c:98:f3:a3:14:b7:2c:97:17:18: d6:e6:18:bd:38:55:7d:08:58:a9:82:18:30:ba:60:f0:25:3c: 8e:8a:1f:02:87:07:98:d3:62:06:49:51:1d:c1:cf:5c:de:d5: eb:64:cf:38:4b:db:54:24:5a:f5:4f:95:e2:0a:30:96:54:c5: 46:1a:d5:26:e4:ad:8d:49:38:c4:63:a0:8d:ee:92:51:17:8e: e8:55:ae:26:39:99:7a:85:22:76:29:b3:83:7a:41:cc:62:41: ea:d7:e7:cb:1d:e0:59:04:78:cb:3c:d7:7c:3f:d2:dc:62:fa: 61:ab:df:d6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE3RTYxMTAvBgNVBAUTKDYwNzYyOEJFNDU1RUYzNzlCRTY2QUY5RDZDQTlCQThF Q0RFRDNGMDQwHhcNMjQwODMwMjE1OTM5WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQyNDBjYi01ZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gcUg7FfkICed+0CH93mOdJzOFKdXNxH7FFoJz8Jeam9AWlos/52oTe1vw1V 5ogLqzak7LgSU6vovgXXefUWszpd/qccajsfuu8avVwMy7sy8MxI/bMOMJ64IBs/ GTZdFjvlA9kUvJ96ZKmbmZ5cxG/IwRwpq1G27Y6e0zzMKfwRd1NSDM5Uls7Ql37b X+8dBC292YOLzOv+SN7o772l81nn4BaLyfyFtCyYKvZNTcV139/emD94/VMLNL6g I54ScFgGph74c1vv/89qelLJrzvwCPiGywbL0o389ghw+5Byc6L6bdIN9Roq0kZe DK5OQwYVnJ0rxVJ1MswJm5FFuQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEy+LVoW rgkkeZyUv65Lkt2ei4NhMB8GA1UdIwQYMBaAFGB2KL5FXvN5vmavnWypuo7N7T8E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz QjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgzbS1acS1kYkttNmpzM3RQ d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIWW92a1ZlODNtLVpxLWRiS202anMzdFB3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODE3RTYvNTU3NDBFNzBCM0IzMTFFQUIxOThDRTBEQzRGOUFFMDIvNjgyMTk0MzQ5 NEREMTFFRTg3MzhFMTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmBowDwQCAAIwCQMHACABDfPygDANBgkqhkiG9w0BAQsF AAOCAQEAJUZvSw5vsI78Yn0eCoHMzb0n+bCCr0ZOG75FhGm9LLWphVw4GgJF/qZE zSZekwa8G2qFMldCSRxN81Pfr6h2l0H5J0QT9etUwXBvVrzV2zwnTmqzhmivIt94 uJHxA6laFW2htpVLxDpBku0x4p2Y4upTK2I4Wf9mw6SwLcFuBeDw6bYDpclcmPOj FLcslxcY1uYYvThVfQhYqYIYMLpg8CU8joofAocHmNNiBklRHcHPXN7V62TPOEvb VCRa9U+V4gowllTFRhrVJuStjUk4xGOgje6SUReO6FWuJjmZeoUidimzg3pBzGJB 6tfnyx3gWQR4yzzXfD/S3GL6Yavf1g== -----END CERTIFICATE-----Generated at Tue Nov 19 00:48:05 2024 by rpki-client on console-fra.rpki-client.org