$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa File: 42823846037411EEB6D5D751C4F9AE02.roa (raw, json) Hash identifier: FnOFiZa70/k2Gg7sWSyAD0MxmWDWw3sQofIOHOm2m/4= Subject key identifier: 34:D5:8A:0D:5E:8A:CF:0D:A5:84:A7:37:13:D8:6A:C0:57:A3:B0:A1 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 474C Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa Signing time: Fri 11 Oct 2024 07:10:06 +0000 ROA not before: Fri 11 Oct 2024 07:10:06 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 149105 IP address blocks: 103.145.2.0/23 maxlen: 24 103.188.80.0/23 maxlen: 24 2400:8160::/48 maxlen: 48 2405:73c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18252 (0x474c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 11 07:10:06 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6708cf4e-0284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:79:94:25:81:94:0c:6a:0c:e3:9a:a2:a7: 63:87:ec:df:66:9c:e1:1b:48:b5:5a:bd:9b:93:9e: e6:32:8a:27:be:f4:86:72:9e:58:bc:d1:03:6b:5e: fa:ec:2a:ec:9a:b4:13:c7:79:0b:a8:c9:c2:6d:c7: 01:d1:ad:b0:48:c3:b9:bd:11:5c:71:d5:cc:e1:87: 38:72:ae:4a:23:1c:64:47:d2:ed:df:d6:b9:cc:f7: 38:23:fa:bd:a0:4d:50:6f:8b:b2:d1:e3:ca:6d:a3: b3:9e:df:16:7c:ac:62:fe:94:a3:84:a8:3c:b8:78: 61:ee:56:5b:32:fd:ab:4d:ab:d0:4c:52:1e:39:2e: 0f:7e:f3:98:fe:b6:02:82:7a:22:48:60:81:cf:0d: a7:3c:06:cb:85:a5:32:08:be:17:0b:53:5c:d4:4d: 11:6d:d6:10:4b:07:73:22:f9:13:5b:86:da:25:a8: 33:6e:fb:65:05:bb:4f:bc:16:61:e0:25:90:10:c7: e2:d3:66:ab:4b:24:69:f2:2c:cc:4b:a3:31:dd:74: 02:eb:47:1d:e1:6f:8e:12:f5:62:a0:38:cc:70:be: 74:12:08:60:0a:f6:1a:6c:36:86:68:a4:eb:6a:fe: 00:0f:85:70:b9:dd:3f:9d:f2:04:b9:7f:d8:49:24: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D5:8A:0D:5E:8A:CF:0D:A5:84:A7:37:13:D8:6A:C0:57:A3:B0:A1 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.2.0/23 103.188.80.0/23 IPv6: 2400:8160::/48 2405:73c0::/48 Signature Algorithm: sha256WithRSAEncryption ba:c7:a9:ad:98:af:94:2f:8b:2c:b1:26:fd:03:c8:12:f2:49: 32:31:8a:5b:79:d2:b5:bd:25:60:f6:63:35:f0:e6:55:09:63: 9b:0d:1b:ee:58:8b:22:a3:b5:11:1a:ff:b5:cd:6c:61:2d:e9: 4e:c4:8c:80:a6:c2:55:b8:ca:da:9c:26:0b:22:bd:45:d7:b0: c4:7a:4e:18:ba:e1:0c:ac:df:87:2f:60:5b:be:dd:05:ec:41: b8:c9:ce:6d:bf:48:f5:03:e2:ce:82:22:1d:f6:66:65:1c:75: b6:dc:06:43:ef:47:f9:da:3f:17:a6:b5:9e:1d:01:60:3b:cc: ba:aa:70:d1:55:a3:ce:24:b2:a3:33:93:e5:3c:8a:2d:82:3a: 82:b6:34:a6:b9:f0:0f:09:0a:53:dd:5f:d5:c4:e0:29:90:41: 18:73:e0:ea:9b:a1:8c:05:06:84:6f:83:e7:46:24:a9:d8:93: 96:c7:b2:f7:5a:5a:8d:91:93:02:0b:65:e2:03:62:74:15:e7: 20:89:a4:87:05:f1:92:ac:df:bb:05:7f:98:bf:ae:e5:9b:ff: dc:90:5a:d4:96:7d:0f:8b:b3:70:bd:66:b7:f9:ed:bc:d3:63: bf:ec:8a:90:82:ec:a3:7f:ac:32:68:51:f5:9e:43:5b:4d:0a: 08:7f:1c:d6 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICR0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQxMDExMDcxMDA2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA4Y2Y0ZS0wMjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9h5lCWBlAxqDOOaoqdjh+zfZpzhG0i1Wr2bk57mMoonvvSGcp5YvNEDa176 7CrsmrQTx3kLqMnCbccB0a2wSMO5vRFccdXM4Yc4cq5KIxxkR9Lt39a5zPc4I/q9 oE1Qb4uy0ePKbaOznt8WfKxi/pSjhKg8uHhh7lZbMv2rTavQTFIeOS4PfvOY/rYC gnoiSGCBzw2nPAbLhaUyCL4XC1Nc1E0RbdYQSwdzIvkTW4baJagzbvtlBbtPvBZh 4CWQEMfi02arSyRp8izMS6Mx3XQC60cd4W+OEvVioDjMcL50EghgCvYabDaGaKTr av4AD4Vwud0/nfIEuX/YSST6zQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFDTVig1e is8NpYSnNxPYasBXo7ChMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDI4MjM4NDYw Mzc0MTFFRUI2RDVENzUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBAFnkQIDBAFnvFAwGAQCAAIwEgMHACQAgWAAAAMHACQFc8AA ADANBgkqhkiG9w0BAQsFAAOCAQEAuseprZivlC+LLLEm/QPIEvJJMjGKW3nStb0l YPZjNfDmVQljmw0b7liLIqO1ERr/tc1sYS3pTsSMgKbCVbjK2pwmCyK9RdewxHpO GLrhDKzfhy9gW77dBexBuMnObb9I9QPizoIiHfZmZRx1ttwGQ+9H+do/F6a1nh0B YDvMuqpw0VWjziSyozOT5TyKLYI6grY0prnwDwkKU91f1cTgKZBBGHPg6puhjAUG hG+D50YkqdiTlsey91pajZGTAgtl4gNidBXnIImkhwXxkqzfuwV/mL+u5Zv/3JBa 1JZ9D4uzcL1mt/ntvNNjv+yKkILso3+sMmhR9Z5DW00KCH8c1g== -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org