$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa File: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (raw, json) Hash identifier: Ofg177dT9U9TbFcWrgETTbW4rQYxs3ewgMOUkLe9Rug= Subject key identifier: 56:62:5E:72:26:7A:69:57:A6:76:D8:7F:BA:66:55:38:B5:A2:51:F6 Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Certificate serial: 0537 Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa Signing time: Sat 13 Jul 2024 01:14:56 +0000 ROA not before: Sat 13 Jul 2024 01:14:56 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 132480 IP address blocks: 103.151.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1335 (0x537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Validity Not Before: Jul 13 01:14:56 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6691d510-de90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:63:03:7d:99:51:ca:fd:0a:61:7c:0c:c0:82: 22:5b:39:70:8f:8e:0a:9f:58:14:3f:a5:07:4a:94: fc:b5:ee:6b:3b:b6:96:34:1a:37:87:79:84:dc:3c: 8b:bb:3d:09:eb:b2:b1:1b:3f:4f:c1:ab:c4:2a:a0: ab:92:1a:ea:ea:e2:6f:53:08:94:90:1b:e1:df:33: ca:c3:6e:67:65:41:3f:0c:3a:27:19:32:97:1e:67: cf:c2:b1:69:1d:09:fe:e9:35:4d:32:8c:d4:3a:c6: 1a:f5:f5:54:20:60:64:2b:e8:e8:d6:a4:83:ca:7e: c1:ef:11:ad:4a:36:6c:13:65:7d:28:ad:b5:41:e5: 9c:b7:04:b4:47:51:ff:84:09:6c:93:1e:15:2b:ed: 85:68:9e:dc:2d:33:e2:5f:d5:15:95:92:15:1a:62: 50:2e:7d:a2:f2:da:04:41:12:93:0f:02:ff:2a:8f: 65:dd:df:8d:b2:f6:42:e9:69:b6:ef:e7:25:69:e4: bd:23:e9:89:5b:ae:95:0e:45:25:e2:1b:c5:cb:f9: 16:c2:4f:55:4f:1b:71:33:f2:2d:8e:2b:fe:ea:39: db:94:e4:cb:e8:1c:ad:85:c4:c8:a1:94:14:70:15: 2b:1c:df:d4:84:45:34:35:bd:08:6d:68:ba:ee:e9: a1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:62:5E:72:26:7A:69:57:A6:76:D8:7F:BA:66:55:38:B5:A2:51:F6 X509v3 Authority Key Identifier: keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.42.0/24 Signature Algorithm: sha256WithRSAEncryption 60:0c:12:79:82:c3:b7:f4:c5:a2:78:49:81:ed:e8:56:95:3b: b1:a9:cb:a9:6f:e2:92:1f:f4:1a:52:25:d8:70:d1:4c:83:7b: 65:a1:84:79:7d:38:0f:2d:08:c9:28:b3:a9:d6:8d:83:04:17: 0b:ba:26:b9:be:42:dd:52:3b:f0:da:e1:4c:2d:4c:9d:ea:8c: 3f:ce:ea:89:d4:61:a1:e4:bc:83:e7:b6:62:7d:52:1e:9f:79: 8b:e3:9a:95:ae:1c:69:15:af:85:97:da:a7:4d:12:45:8c:ad: 61:8f:14:e9:e2:dc:9f:b1:56:d5:4a:c2:9c:c3:d6:96:23:cd: a7:15:43:57:ce:1d:32:4a:7f:16:86:16:00:67:1a:b0:18:eb: e6:55:1a:f3:69:1f:08:0f:64:c6:24:31:16:be:78:94:38:ff: 2f:14:2a:86:e3:66:86:e1:8f:55:ee:db:41:42:be:4f:3c:b4: 44:07:4a:97:a2:cd:b1:dd:8a:c4:5a:9c:ec:ca:fc:a5:4f:86: fb:9c:45:f0:7c:a6:e2:1c:2a:86:04:0d:73:88:6f:cd:1f:a3: b9:1a:f8:d1:3e:1e:5d:55:04:72:2c:01:a3:77:b7:45:58:40: 7f:4a:fa:50:ea:7c:3b:15:a8:40:94:f8:44:41:91:bb:3d:b9: 85:6c:85:84 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyRUIxMTAvBgNVBAUTKDBCNkNERjNGQUNDNjgwQjc4NjkyNkRFMTM5RjFFMEY2 NzQ0NDA2NTQwHhcNMjQwNzEzMDExNDU2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjkxZDUxMC1kZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7mMDfZlRyv0KYXwMwIIiWzlwj44Kn1gUP6UHSpT8te5rO7aWNBo3h3mE3DyL uz0J67KxGz9PwavEKqCrkhrq6uJvUwiUkBvh3zPKw25nZUE/DDonGTKXHmfPwrFp HQn+6TVNMozUOsYa9fVUIGBkK+jo1qSDyn7B7xGtSjZsE2V9KK21QeWctwS0R1H/ hAlskx4VK+2FaJ7cLTPiX9UVlZIVGmJQLn2i8toEQRKTDwL/Ko9l3d+NsvZC6Wm2 7+claeS9I+mJW66VDkUl4hvFy/kWwk9VTxtxM/Itjiv+6jnblOTL6BythcTIoZQU cBUrHN/UhEU0Nb0IbWi67umhQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFZiXnIm emlXpnbYf7pmVTi1olH2MB8GA1UdIwQYMBaAFAts3z+sxoC3hpJt4Tnx4PZ0RAZU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTJFQi9GRDAwODFERUM1 NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dMZUdrbTNoT2ZIZzluUkVC bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyemZQNnpHZ0xlR2ttM2hPZkhnOW5SRUJsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODkyRUIvRkQwMDgxREVDNTY3MTFFQkFGRUE2MDJCQzRGOUFFMDIvRjREQzNDMkFD NTkyMTFFQkFBOUM1QjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnlyowDQYJKoZIhvcNAQELBQADggEBAGAMEnmCw7f0xaJ4 SYHt6FaVO7Gpy6lv4pIf9BpSJdhw0UyDe2WhhHl9OA8tCMkos6nWjYMEFwu6Jrm+ Qt1SO/Da4UwtTJ3qjD/O6onUYaHkvIPntmJ9Uh6feYvjmpWuHGkVr4WX2qdNEkWM rWGPFOni3J+xVtVKwpzD1pYjzacVQ1fOHTJKfxaGFgBnGrAY6+ZVGvNpHwgPZMYk MRa+eJQ4/y8UKobjZobhj1Xu20FCvk88tEQHSpeizbHdisRanOzK/KVPhvucRfB8 puIcKoYEDXOIb80fo7ka+NE+Hl1VBHIsAaN3t0VYQH9K+lDqfDsVqECU+ERBkbs9 uYVshYQ= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:30 2024 by rpki-client on console-fra.rpki-client.org