$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa File: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (raw, json) Hash identifier: 8IuCCJrlkn8DX5/stJkD0in4BPYiGVJv0wrZdIEdC4Q= Subject key identifier: 7B:1A:9F:7F:3E:7C:AE:8F:05:35:C5:79:AA:B6:01:12:52:81:C4:F3 Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 0966 Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa Signing time: Thu 02 May 2024 21:10:16 +0000 ROA not before: Thu 02 May 2024 21:10:16 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 140241 IP address blocks: 103.149.106.0/23 maxlen: 23 103.149.106.0/24 maxlen: 24 103.149.107.0/24 maxlen: 24 2001:df3:1f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2406 (0x966) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Validity Not Before: May 2 21:10:16 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66340138-483f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f1:30:d3:33:bc:00:5f:59:e6:b7:07:39:bd: 51:1e:bc:50:98:0f:70:1f:6e:35:ec:4c:13:fc:c9: 77:1f:53:ef:7f:9c:8e:4e:d4:f0:f9:1f:06:5e:58: 6d:1d:28:d6:86:05:4e:0c:b2:49:31:99:fe:20:f1: f1:ed:66:61:78:7f:94:83:4e:f6:31:94:b5:80:2e: c4:f0:54:cd:38:c6:f7:9a:4c:2d:51:4f:96:8f:bf: 97:49:17:00:5e:bc:1a:a7:6b:72:2f:b3:15:92:3f: 9b:f0:09:69:6b:e5:3e:4d:db:ef:48:e2:73:af:69: 25:28:f1:6c:29:21:63:eb:b3:20:56:a9:57:f4:0a: 94:9f:fe:e3:22:0b:51:6e:fb:2c:6f:b1:aa:79:9d: 88:01:21:49:7a:96:bf:cc:64:0e:c5:80:35:de:2e: 2e:b8:8e:2e:03:40:ea:53:81:2e:f8:cd:7e:31:8e: 4a:d7:df:7b:94:4e:63:e3:ce:ca:71:3f:b6:52:5a: 8d:b7:85:4f:7c:9f:21:02:cc:8b:dd:c4:8c:7e:e2: 02:99:f4:1f:16:c8:d9:c7:2c:3f:02:74:0d:dc:15: 1a:27:14:3e:e3:4f:b7:a8:49:37:71:53:14:1d:4a: 9f:f1:97:a2:60:2d:cd:3c:10:49:f3:c3:1b:26:db: 8e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1A:9F:7F:3E:7C:AE:8F:05:35:C5:79:AA:B6:01:12:52:81:C4:F3 X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.106.0/23 IPv6: 2001:df3:1f80::/48 Signature Algorithm: sha256WithRSAEncryption 1f:3f:23:d1:5c:d5:03:c1:11:3d:9f:2d:6d:86:1d:49:19:b7: 24:ff:06:81:1a:3c:50:99:46:e2:80:72:41:66:a0:d5:eb:7c: d6:a1:6f:d3:1e:53:77:65:d8:30:ff:ab:2c:ad:13:a4:22:69: 02:94:d5:5e:e4:b8:96:8e:5a:9d:36:00:f3:c5:88:19:1f:23: 27:fe:ba:7c:69:80:61:a9:6b:d9:db:6a:50:ea:16:f1:61:f4: 0b:45:e8:69:09:20:8a:de:39:f5:da:1c:9b:de:b3:fc:2a:6b: 5d:92:c5:bf:c4:b5:bf:33:d6:73:1f:97:11:27:a2:fd:23:f6: 8d:2c:2e:c9:6c:04:0d:e1:aa:15:33:06:69:8b:6f:8a:82:45: f0:54:3b:76:4f:2b:64:57:b1:03:6f:b4:36:dc:af:af:f6:7a: af:03:8e:23:ea:57:c7:2d:71:b5:18:c0:9c:57:62:91:04:e8: e5:71:e4:ff:cb:47:8e:0b:e5:05:aa:79:30:57:5e:cc:08:09: 2f:86:01:8d:79:6a:98:7a:72:bb:ce:e2:57:dd:89:8f:0e:e7: f4:e2:41:2f:d3:06:2f:18:be:63:1c:56:5c:dd:c6:02:b4:4b: 34:77:28:66:59:96:5e:ec:fb:b7:ed:70:32:59:69:32:e1:41: ab:44:93:59 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjQwNTAyMjExMDE2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM0MDEzOC00ODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPEw0zO8AF9Z5rcHOb1RHrxQmA9wH2417EwT/Ml3H1Pvf5yOTtTw+R8GXlht HSjWhgVODLJJMZn+IPHx7WZheH+Ug072MZS1gC7E8FTNOMb3mkwtUU+Wj7+XSRcA Xrwap2tyL7MVkj+b8Alpa+U+TdvvSOJzr2klKPFsKSFj67MgVqlX9AqUn/7jIgtR bvssb7GqeZ2IASFJepa/zGQOxYA13i4uuI4uA0DqU4Eu+M1+MY5K1997lE5j487K cT+2UlqNt4VPfJ8hAsyL3cSMfuICmfQfFsjZxyw/AnQN3BUaJxQ+40+3qEk3cVMU HUqf8ZeiYC3NPBBJ88MbJtuOfwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHsan38+ fK6PBTXFeaq2ARJSgcTzMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTgzQTIvNjFDMUE1Nzg2REJBMTFFQTk1NjNDQjY1QzRGOUFFMDIvNTdERjk0RkE2 REJDMTFFQUIxMEExRjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlWowDwQCAAIwCQMHACABDfMfgDANBgkqhkiG9w0BAQsF AAOCAQEAHz8j0VzVA8ERPZ8tbYYdSRm3JP8GgRo8UJlG4oByQWag1et81qFv0x5T d2XYMP+rLK0TpCJpApTVXuS4lo5anTYA88WIGR8jJ/66fGmAYalr2dtqUOoW8WH0 C0XoaQkgit459docm96z/CprXZLFv8S1vzPWcx+XESei/SP2jSwuyWwEDeGqFTMG aYtvioJF8FQ7dk8rZFexA2+0Ntyvr/Z6rwOOI+pXxy1xtRjAnFdikQTo5XHk/8tH jgvlBap5MFdezAgJL4YBjXlqmHpyu87iV92Jjw7n9OJBL9MGLxi+YxxWXN3GArRL NHcoZlmWXuz7t+1wMllpMuFBq0STWQ== -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org