$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/DF1E2FEA97D611EB8BEF8223C4F9AE02.roa File: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (raw, json) Hash identifier: +Z1f48sI1Kz7JI6qJ55JG0SRXt9VC0MvWpOU7eCKqS8= Subject key identifier: 5D:57:01:62:D3:56:B1:D0:B4:7A:08:40:BF:74:F5:15:7D:D8:74:E7 Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0BBB Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/DF1E2FEA97D611EB8BEF8223C4F9AE02.roa Signing time: Thu 10 Oct 2024 19:27:35 +0000 ROA not before: Thu 10 Oct 2024 19:27:34 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 133547 IP address blocks: 103.100.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3003 (0xbbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Validity Not Before: Oct 10 19:27:34 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67082aa6-9ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:30:e5:53:c2:37:3c:6a:5e:0e:89:a5:82:06: 1e:ba:79:7d:ac:05:23:6b:84:e3:7b:c8:96:81:ba: 68:bc:bf:ab:46:29:04:aa:e6:9c:24:34:6d:c6:72: 22:a3:60:ac:2c:ce:db:13:da:07:f4:f7:9e:b8:7b: 3f:a2:5b:c3:26:c2:51:ac:ef:ed:8a:e7:8a:6e:2e: 6e:fc:f6:c5:18:52:f0:92:3e:29:34:e0:bf:33:af: eb:b1:c2:24:76:44:84:33:b1:93:06:0f:95:bc:fa: 29:3c:45:7a:35:1a:08:63:a3:33:1b:57:a2:50:8f: 17:22:a2:a0:d3:ad:10:34:00:c4:45:b5:80:87:90: a7:a0:a1:de:08:de:95:d4:80:2b:fc:5d:ba:84:db: e9:ac:cd:16:08:46:8a:59:a7:f1:39:bf:ad:fa:c1: c2:77:e2:dc:08:bd:1a:c4:02:e1:58:d4:6d:1b:72: 4c:57:de:78:d3:b1:df:ac:1c:91:aa:5b:25:93:21: 2e:68:6d:86:af:73:97:33:f6:89:c1:4c:3b:bc:29: 4a:00:16:a7:61:c0:1a:f8:13:8f:e1:98:eb:92:df: ee:39:e2:7a:72:49:fc:ca:93:cc:c7:39:8b:df:e8: 8b:39:90:3a:22:6d:76:5e:a9:07:88:53:2f:2b:56: 9e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:57:01:62:D3:56:B1:D0:B4:7A:08:40:BF:74:F5:15:7D:D8:74:E7 X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/DF1E2FEA97D611EB8BEF8223C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.100.235.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:3d:ae:cb:a1:55:b1:e4:c3:59:07:4b:f4:3a:61:a2:0d:ca: 3f:f2:cb:c2:7d:51:33:24:c5:4c:a0:76:cc:ad:46:07:f2:98: dc:26:3f:d2:c6:89:25:3d:43:32:02:65:2d:c7:7c:04:8a:3f: b9:47:0d:77:d7:12:02:0c:71:6e:da:e0:e7:ef:2a:3f:2e:ed: 1b:86:b6:1b:2e:9c:9d:01:35:af:b9:7a:37:f2:6c:ec:34:c4: 84:84:e5:24:30:06:b4:15:9f:f4:51:37:97:44:4e:b1:f0:0b: b3:a2:67:3d:0b:fe:ff:f0:6b:ca:83:ca:56:fb:fa:d3:1e:24: 56:0e:6d:56:57:95:7b:f6:5f:76:a3:1e:09:ef:38:84:3a:80: b1:ad:3b:d0:9a:66:77:e8:91:78:85:93:fd:e3:f2:b9:da:85: 39:cd:7a:58:bd:6d:e4:c1:95:13:70:79:e5:f3:76:12:99:18: 36:4d:7e:9f:45:64:b7:01:02:22:f0:40:8d:c0:18:56:c1:02: b2:7c:e6:2a:ae:1e:f7:34:25:56:44:88:f6:6c:eb:17:ad:da: 14:15:41:d3:60:01:84:b5:ac:18:e9:c6:58:c3:a8:cd:1c:ab: e6:4d:7d:e3:9f:30:9d:b0:c7:50:1c:3e:50:7a:7d:ae:6b:f8: 0a:d3:51:31 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjQxMDEwMTkyNzM0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA4MmFhNi05ZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DDlU8I3PGpeDomlggYeunl9rAUja4Tje8iWgbpovL+rRikEquacJDRtxnIi o2CsLM7bE9oH9PeeuHs/olvDJsJRrO/tiueKbi5u/PbFGFLwkj4pNOC/M6/rscIk dkSEM7GTBg+VvPopPEV6NRoIY6MzG1eiUI8XIqKg060QNADERbWAh5CnoKHeCN6V 1IAr/F26hNvprM0WCEaKWafxOb+t+sHCd+LcCL0axALhWNRtG3JMV95407HfrByR qlslkyEuaG2Gr3OXM/aJwUw7vClKABanYcAa+BOP4Zjrkt/uOeJ6ckn8ypPMxzmL 3+iLOZA6Im12XqkHiFMvK1aeIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF1XAWLT VrHQtHoIQL909RV92HTnMB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ1RTAvMjNCRjJGMjYxMTNFMTFFQTg4RTg3ODc2QzRGOUFFMDIvREYxRTJGRUE5 N0Q2MTFFQjhCRUY4MjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnZOswDQYJKoZIhvcNAQELBQADggEBAHw9rsuhVbHkw1kH S/Q6YaINyj/yy8J9UTMkxUygdsytRgfymNwmP9LGiSU9QzICZS3HfASKP7lHDXfX EgIMcW7a4OfvKj8u7RuGthsunJ0BNa+5ejfybOw0xISE5SQwBrQVn/RRN5dETrHw C7OiZz0L/v/wa8qDylb7+tMeJFYObVZXlXv2X3ajHgnvOIQ6gLGtO9CaZnfokXiF k/3j8rnahTnNeli9beTBlRNweeXzdhKZGDZNfp9FZLcBAiLwQI3AGFbBArJ85iqu Hvc0JVZEiPZs6xet2hQVQdNgAYS1rBjpxljDqM0cq+ZNfeOfMJ2wx1AcPlB6fa5r +ArTUTE= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org