$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/D45022C8CEC211EE80F08B36C4F9AE02.roa File: D45022C8CEC211EE80F08B36C4F9AE02.roa (raw, json) Hash identifier: 7EFmQDZlzQkxykslosHAE0tEX7xAgoH8WsMXOqdO+RA= Subject key identifier: 1B:C2:B1:E8:6C:83:08:08:DC:88:B1:58:8D:E1:94:EF:81:A6:53:93 Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Certificate serial: 64 Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/D45022C8CEC211EE80F08B36C4F9AE02.roa Signing time: Thu 29 Aug 2024 06:49:40 +0000 ROA not before: Thu 29 Aug 2024 06:49:40 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 24225 IP address blocks: 103.67.240.0/23 maxlen: 24 103.67.242.0/24 maxlen: 24 103.67.243.0/24 maxlen: 24 203.160.48.0/24 maxlen: 24 203.160.50.0/23 maxlen: 24 2405:da80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Dec 2024 04:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Validity Not Before: Aug 29 06:49:40 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66d01a04-13d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:3b:b3:ff:2f:72:30:c8:9d:2f:c3:8d:8d: e1:5f:0c:c3:94:81:09:0b:4d:fd:bf:e0:dc:87:2f: ca:3f:4f:62:d5:0f:a0:37:6d:1d:1f:7f:80:31:ba: 20:8c:96:91:dc:90:f3:08:49:41:67:74:94:6f:52: 3e:7d:2e:51:70:a8:cf:81:95:90:3d:78:58:68:47: c0:40:53:74:73:f5:e9:a2:a2:87:6f:ce:0d:f3:a5: b4:d2:88:c9:e4:50:4f:4a:31:c7:f1:c2:32:7d:35: 3d:0f:b9:64:9e:a8:68:41:cc:cb:8b:dd:e2:60:99: 06:c0:e6:ad:0e:f4:56:f9:15:4e:0b:f9:cd:72:bf: 6c:70:a5:f1:00:b9:4b:57:fa:a2:46:fb:ef:ab:54: 36:84:34:37:18:67:d3:11:4a:1d:32:10:99:db:bc: 7c:ae:ba:8a:81:cb:cb:26:6f:c9:1a:54:23:72:7f: 76:99:58:e2:0c:35:71:0e:22:11:51:28:71:b2:f0: 2e:79:dc:9f:91:23:66:e7:b7:c2:0e:d8:2a:c6:74: b0:41:ae:7e:dd:c2:4b:25:0e:a7:0a:7e:12:ea:2c: c9:56:e5:45:b3:34:c0:0d:95:f2:2f:84:b3:b8:b7: 06:88:7e:b6:db:31:a7:a8:f6:c5:26:e8:f2:06:f0: cb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C2:B1:E8:6C:83:08:08:DC:88:B1:58:8D:E1:94:EF:81:A6:53:93 X509v3 Authority Key Identifier: keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/D45022C8CEC211EE80F08B36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.240.0/22 203.160.48.0/24 203.160.50.0/23 IPv6: 2405:da80::/32 Signature Algorithm: sha256WithRSAEncryption 65:1b:09:f4:2a:69:e1:d6:5f:b1:00:6b:7b:3e:a2:c6:9b:01: 19:78:9f:9d:8e:cf:dc:7a:38:16:92:ab:8e:55:5f:67:db:e4: 84:71:2d:50:82:4c:e6:e2:fb:ff:bb:52:de:e5:72:1b:c1:d0: 26:7d:28:42:5b:ea:76:a3:8a:1b:e1:3d:5e:f9:af:15:2c:e8: 5a:24:3a:1b:02:91:34:f2:96:c6:af:9f:01:3b:be:29:bf:03: 99:ae:d0:7c:1c:b4:5c:d9:54:ea:9a:41:7d:74:eb:bc:46:70: 1e:66:69:24:ac:2c:0f:50:3b:f1:c0:b9:13:ea:3d:5d:07:51: e6:ee:ac:2f:d2:ba:a4:39:b6:65:bd:f5:96:b9:5e:ce:13:73: ed:17:a6:81:51:b7:7d:6f:63:b7:f8:d2:e6:c6:9d:ae:90:bf: 00:d5:f8:2d:4c:8c:26:6d:f1:47:29:f2:e6:b7:56:11:c2:29: 96:d7:0d:35:31:27:1f:53:d7:37:fc:2b:b5:15:fb:46:99:c1: 5b:b7:d2:87:04:28:a6:68:6f:28:04:71:f3:e9:24:e3:1a:9a: ac:cb:7e:db:b7:e4:37:05:d1:b2:b7:00:a8:15:0e:4e:a8:f0: e4:5e:98:70:e2:b8:7f:d5:16:2e:6d:af:48:52:e4:a2:d1:ca: dc:53:b7:fb -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDdCNjExMC8GA1UEBRMoMENEOTA0QzdFQjM5MEFEMUE1NURCQUY0RkM1MDA1NEMw ODU0NkUyQjAeFw0yNDA4MjkwNjQ5NDBaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZDAxYTA0LTEzZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEOzuz/y9yMMidL8ONjeFfDMOUgQkLTf2/4NyHL8o/T2LVD6A3bR0ff4AxuiCM lpHckPMISUFndJRvUj59LlFwqM+BlZA9eFhoR8BAU3Rz9emioodvzg3zpbTSiMnk UE9KMcfxwjJ9NT0PuWSeqGhBzMuL3eJgmQbA5q0O9Fb5FU4L+c1yv2xwpfEAuUtX +qJG+++rVDaENDcYZ9MRSh0yEJnbvHyuuoqBy8smb8kaVCNyf3aZWOIMNXEOIhFR KHGy8C553J+RI2bnt8IO2CrGdLBBrn7dwkslDqcKfhLqLMlW5UWzNMANlfIvhLO4 twaIfrbbMaeo9sUm6PIG8Mt3AgMBAAGjggKwMIICrDAdBgNVHQ4EFgQUG8Kx6GyD CAjciLFYjeGU74GmU5MwHwYDVR0jBBgwFoAUDNkEx+s5CtGlXbr0/FAFTAhUbisw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0N0I2LzkwNUQ3RkVFQ0VD MTExRUU4Q0YwMTc0MEM0RjlBRTAyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJp cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRE5rRXgtczVDdEdsWGJyMF9GQUZUQWhVYmlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDdCNi85MDVEN0ZFRUNFQzExMUVFOENGMDE3NDBDNEY5QUUwMi9ENDUwMjJDOENF QzIxMUVFODBGMDhCMzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA6BggrBgEFBQcBBwEB/wQr MCkwGAQCAAEwEgMEAmdD8AMEAMugMAMEAcugMjANBAIAAjAHAwUAJAXagDANBgkq hkiG9w0BAQsFAAOCAQEAZRsJ9Cpp4dZfsQBrez6ixpsBGXifnY7P3Ho4FpKrjlVf Z9vkhHEtUIJM5uL7/7tS3uVyG8HQJn0oQlvqdqOKG+E9XvmvFSzoWiQ6GwKRNPKW xq+fATu+Kb8Dma7QfBy0XNlU6ppBfXTrvEZwHmZpJKwsD1A78cC5E+o9XQdR5u6s L9K6pDm2Zb31lrlezhNz7RemgVG3fW9jt/jS5sadrpC/ANX4LUyMJm3xRyny5rdW EcIpltcNNTEnH1PXN/wrtRX7RpnBW7fShwQopmhvKARx8+kk4xqarMt+27fkNwXR srcAqBUOTqjw5F6YcOK4f9UWLm2vSFLkotHK3FO3+w== -----END CERTIFICATE-----Generated at Wed Nov 27 05:56:31 2024 by rpki-client on console-fra.rpki-client.org