$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/BBAF872C113E11EA8C481077C4F9AE02.roa File: BBAF872C113E11EA8C481077C4F9AE02.roa (raw, json) Hash identifier: N6gsigaV+jIBOu8StnwHgdUyD0fY+sbCLKJLFXj0k0E= Subject key identifier: EC:A7:77:88:C0:F5:F2:AA:B6:2E:28:F9:E0:32:97:6C:C7:0E:C2:7D Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0BBD Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/BBAF872C113E11EA8C481077C4F9AE02.roa Signing time: Thu 10 Oct 2024 19:27:36 +0000 ROA not before: Thu 10 Oct 2024 19:27:36 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139013 IP address blocks: 103.100.232.0/22 maxlen: 22 103.100.232.0/23 maxlen: 23 103.100.232.0/24 maxlen: 24 103.100.233.0/24 maxlen: 24 103.100.234.0/23 maxlen: 23 103.100.234.0/24 maxlen: 24 103.100.235.0/24 maxlen: 24 2404:cec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3005 (0xbbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Validity Not Before: Oct 10 19:27:36 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67082aa8-292c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:20:5e:9d:02:09:a1:1f:c5:40:49:7d:2f: e4:77:b7:8b:a8:f3:2e:ce:87:8b:22:d6:fa:bb:76: 07:36:a8:2b:31:c7:fa:0f:b7:4d:f5:b2:18:24:e8: 4f:48:96:4e:35:ce:ea:e3:ff:c8:7e:e3:ae:84:2d: 15:55:24:9c:12:00:43:71:42:a5:39:66:b3:05:a2: 6c:1b:50:66:db:13:86:7a:63:10:98:4a:10:a1:ef: 3f:87:f2:d8:19:74:1a:ce:84:ea:58:f6:56:da:07: 13:68:44:a8:52:a5:ce:fa:a4:5b:d7:49:87:e1:a4: c7:b8:3d:7b:56:9d:23:a0:50:17:21:ad:25:86:6c: 2b:03:b4:16:2f:bf:a0:34:f3:bf:8d:d2:ce:ae:0b: c6:f1:27:ff:89:20:d0:e1:88:5a:9b:99:ee:19:d9: f6:1a:15:a3:3b:32:10:ef:f9:9b:06:10:a3:2f:cf: da:bc:8a:f0:fa:2a:a3:2c:a2:b2:3f:8f:54:e3:f9: ab:a7:8f:e4:60:e5:31:60:4d:ab:bd:6b:50:05:cf: a8:30:6f:0f:91:59:dc:90:a6:61:90:9e:ac:ee:d8: 02:0e:3f:f6:b1:db:66:0d:b1:2a:b4:98:f1:6f:0b: 73:21:6b:d9:97:35:11:24:2d:bf:92:5a:89:28:0a: 70:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A7:77:88:C0:F5:F2:AA:B6:2E:28:F9:E0:32:97:6C:C7:0E:C2:7D X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/BBAF872C113E11EA8C481077C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.100.232.0/22 IPv6: 2404:cec0::/32 Signature Algorithm: sha256WithRSAEncryption 93:7b:6e:86:9e:97:68:be:0b:d5:71:05:0e:3f:5f:d3:5f:a6: cc:00:3a:0f:bb:a9:84:97:e2:e6:f8:b8:8a:3f:7b:2b:a1:75: 58:d8:12:ea:43:9a:b6:a5:f8:8e:b7:70:c4:bb:7d:be:10:7e: f4:26:47:99:97:35:98:68:91:2f:ca:43:da:44:f3:44:95:fa: 8d:28:7f:2f:96:6d:b6:4e:c1:84:cf:ea:47:94:e5:e0:53:f9: 37:16:6a:ff:af:68:5f:81:5b:8f:f7:36:37:b5:c4:b3:6c:d8: 5f:b6:3a:27:6e:3b:05:13:b4:9c:80:6c:24:55:1e:08:b3:ad: 1f:f3:6e:82:d4:c1:1c:00:9e:75:f1:41:97:71:22:a7:ea:62: 93:e8:3f:b4:19:1d:0b:44:af:db:4c:81:6e:b9:b2:9f:c3:6e: f7:0a:84:2d:24:af:cd:27:db:74:c3:11:7d:65:c7:ac:10:6d: 0c:18:29:1a:7b:bc:33:e8:89:3e:e8:fc:50:7d:20:c5:db:6b: 61:7a:ce:a7:58:4a:d4:a4:c2:4a:3b:87:bb:95:f1:22:75:ae: f5:f2:13:48:28:4d:4f:8c:03:68:e9:8e:3f:93:cd:fa:d8:ae: e9:e5:be:b7:8b:65:b8:e3:da:10:42:cb:39:de:a7:23:e1:07: 55:36:a6:e2 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjQxMDEwMTkyNzM2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA4MmFhOC0yOTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAve0gXp0CCaEfxUBJfS/kd7eLqPMuzoeLItb6u3YHNqgrMcf6D7dN9bIYJOhP SJZONc7q4//IfuOuhC0VVSScEgBDcUKlOWazBaJsG1Bm2xOGemMQmEoQoe8/h/LY GXQazoTqWPZW2gcTaESoUqXO+qRb10mH4aTHuD17Vp0joFAXIa0lhmwrA7QWL7+g NPO/jdLOrgvG8Sf/iSDQ4Yham5nuGdn2GhWjOzIQ7/mbBhCjL8/avIrw+iqjLKKy P49U4/mrp4/kYOUxYE2rvWtQBc+oMG8PkVnckKZhkJ6s7tgCDj/2sdtmDbEqtJjx bwtzIWvZlzURJC2/klqJKApwUwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOynd4jA 9fKqti4o+eAyl2zHDsJ9MB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ1RTAvMjNCRjJGMjYxMTNFMTFFQTg4RTg3ODc2QzRGOUFFMDIvQkJBRjg3MkMx MTNFMTFFQThDNDgxMDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnZOgwDQQCAAIwBwMFACQEzsAwDQYJKoZIhvcNAQELBQAD ggEBAJN7boael2i+C9VxBQ4/X9NfpswAOg+7qYSX4ub4uIo/eyuhdVjYEupDmral +I63cMS7fb4QfvQmR5mXNZhokS/KQ9pE80SV+o0ofy+WbbZOwYTP6keU5eBT+TcW av+vaF+BW4/3Nje1xLNs2F+2OiduOwUTtJyAbCRVHgizrR/zboLUwRwAnnXxQZdx IqfqYpPoP7QZHQtEr9tMgW65sp/DbvcKhC0kr80n23TDEX1lx6wQbQwYKRp7vDPo iT7o/FB9IMXba2F6zqdYStSkwko7h7uV8SJ1rvXyE0goTU+MA2jpjj+TzfrYrunl vreLZbjj2hBCyznepyPhB1U2puI= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org