$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/153A3AE86A9111EF905C3C37C4F9AE02.roa File: 153A3AE86A9111EF905C3C37C4F9AE02.roa (raw, json) Hash identifier: kBSFKLz8LnjDZ6O+bwDGlGgZ5ZDFmw7Q4gOGItD96sE= Subject key identifier: 4E:90:3C:F4:E5:F1:82:D5:81:EF:67:87:D2:FF:26:01:04:4F:B0:52 Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Certificate serial: 07CC Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/153A3AE86A9111EF905C3C37C4F9AE02.roa Signing time: Wed 04 Sep 2024 07:41:23 +0000 ROA not before: Wed 04 Sep 2024 07:41:23 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 136552 IP address blocks: 103.92.148.0/23 maxlen: 23 103.92.148.0/24 maxlen: 24 103.92.149.0/24 maxlen: 24 2402:36c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Validity Not Before: Sep 4 07:41:23 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66d80f23-9073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:17:97:67:89:76:88:0c:9e:53:29:15:c9:8d: 55:90:76:8d:e5:3c:f2:ea:76:11:20:e4:ef:70:50: ed:91:70:1b:86:8f:e9:3c:09:7b:37:78:ca:44:5e: 61:06:cb:93:e0:4d:a1:44:13:46:da:c1:27:76:f5: a1:35:f2:98:31:51:1a:7a:29:e8:67:76:4a:88:ac: a4:1f:92:53:b5:74:4b:27:f3:f3:e1:7e:5f:8f:74: 59:7c:d4:80:11:93:d0:70:67:6a:61:da:a1:66:38: d3:af:66:87:57:22:f5:97:d0:16:d6:60:88:d9:e6: 24:5c:c2:b7:07:1c:3b:57:4a:3b:f7:d4:04:86:f0: 65:d2:f1:9d:42:91:33:17:dd:08:8b:a7:50:a0:60: 35:d1:8f:89:82:a1:85:e0:01:89:07:6f:04:78:4d: 8e:af:2e:7e:7b:8d:6d:5f:92:a0:8d:ba:2f:09:e6: 44:5d:2d:86:0b:ad:39:a7:c2:46:fd:d3:b4:f9:18: 27:83:8a:15:b1:42:03:3f:4d:44:1c:1b:1f:f2:96: 30:ca:81:c0:7d:27:be:5f:19:ec:2a:56:04:37:3b: 5b:ad:3f:69:8e:ff:50:4d:57:b1:ac:dc:d0:0d:79: 08:5d:de:ce:04:3c:b0:42:d8:53:46:21:8d:a2:3a: 45:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:90:3C:F4:E5:F1:82:D5:81:EF:67:87:D2:FF:26:01:04:4F:B0:52 X509v3 Authority Key Identifier: keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/153A3AE86A9111EF905C3C37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.92.148.0/23 IPv6: 2402:36c0::/32 Signature Algorithm: sha256WithRSAEncryption ba:72:03:e0:7b:8d:a9:5c:10:8c:7a:22:00:dd:39:70:65:e6: 00:d1:c7:d3:94:5c:e2:04:c0:c1:be:d4:06:07:3a:03:84:44: b0:83:cb:aa:27:ce:f7:24:47:e7:a2:b4:52:84:ed:53:9c:0e: 9f:91:c5:eb:3b:69:c1:67:58:ef:4e:c6:0c:6b:5f:45:d6:96: cd:1d:c7:a8:db:b8:a7:63:8c:45:50:fd:06:96:59:f9:d8:c7: cc:aa:a8:46:0b:99:05:bd:e6:f8:29:42:35:1f:48:d2:da:98: a1:2e:6b:3e:81:c1:f5:84:18:6c:2b:e7:df:d3:c0:5b:52:b9: 9f:46:44:a5:79:2d:1f:29:b7:51:d3:c8:8d:f0:f8:a2:c8:d4: 55:25:6e:1c:c0:33:1d:1e:3e:36:9b:8b:68:8b:35:54:62:80: d9:5c:20:95:d0:2c:dc:b7:55:2a:d6:bf:11:6f:df:a8:28:ae: 80:bf:7b:a2:c3:14:12:f8:86:c3:80:45:23:cf:06:0b:c2:e4: 22:49:86:0b:03:bd:1f:00:1b:5a:8a:a5:10:8b:58:e2:e9:e6: b6:db:62:42:ac:57:d1:f6:a1:34:8c:72:20:12:31:20:06:38: b1:15:8f:af:d6:8e:49:d0:76:5d:f0:dc:75:c9:b5:7c:d9:93: a9:45:c3:db -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5M0ExMTAvBgNVBAUTKEExNzkyQzc4RDMwRTEwNzMwQTNDNDQ1NjFDN0U1ODIy RTdGMUMyRjgwHhcNMjQwOTA0MDc0MTIzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4MGYyMy05MDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8BeXZ4l2iAyeUykVyY1VkHaN5Tzy6nYRIOTvcFDtkXAbho/pPAl7N3jKRF5h BsuT4E2hRBNG2sEndvWhNfKYMVEaeinoZ3ZKiKykH5JTtXRLJ/Pz4X5fj3RZfNSA EZPQcGdqYdqhZjjTr2aHVyL1l9AW1mCI2eYkXMK3Bxw7V0o799QEhvBl0vGdQpEz F90Ii6dQoGA10Y+JgqGF4AGJB28EeE2Ory5+e41tX5KgjbovCeZEXS2GC605p8JG /dO0+Rgng4oVsUIDP01EHBsf8pYwyoHAfSe+XxnsKlYENztbrT9pjv9QTVexrNzQ DXkIXd7OBDywQthTRiGNojpFGwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFE6QPPTl 8YLVge9nh9L/JgEET7BSMB8GA1UdIwQYMBaAFKF5LHjTDhBzCjxEVhx+WCLn8cL4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkzQS9FQkEzNTMxRUNC RDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VITUtQRVJXSEg1WUl1Znh3 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Ya3NlTk1PRUhNS1BFUldISDVZSXVmeHd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA5M0EvRUJBMzUzMUVDQkQ4MTFFQTg2N0FGQjRGQzRGOUFFMDIvMTUzQTNBRTg2 QTkxMTFFRjkwNUMzQzM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnXJQwDQQCAAIwBwMFACQCNsAwDQYJKoZIhvcNAQELBQAD ggEBALpyA+B7jalcEIx6IgDdOXBl5gDRx9OUXOIEwMG+1AYHOgOERLCDy6onzvck R+eitFKE7VOcDp+Rxes7acFnWO9OxgxrX0XWls0dx6jbuKdjjEVQ/QaWWfnYx8yq qEYLmQW95vgpQjUfSNLamKEuaz6BwfWEGGwr59/TwFtSuZ9GRKV5LR8pt1HTyI3w +KLI1FUlbhzAMx0ePjabi2iLNVRigNlcIJXQLNy3VSrWvxFv36goroC/e6LDFBL4 hsOARSPPBgvC5CJJhgsDvR8AG1qKpRCLWOLp5rbbYkKsV9H2oTSMciASMSAGOLEV j6/WjknQdl3w3HXJtXzZk6lFw9s= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:36 2024 by rpki-client on console-ams.rpki-client.org