$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa File: 03EE880413F511EA8D120C65C4F9AE02.roa (raw, json) Hash identifier: S5y331WliNZqXWWjOJuv3YKexz/b1+CG8n24v9FOM+4= Subject key identifier: 83:3C:80:D0:80:E8:91:C1:7B:54:98:3E:A4:5B:DF:18:3C:38:6E:EE Certificate issuer: /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Certificate serial: 0AE9 Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa Signing time: Fri 08 Dec 2023 19:46:44 +0000 ROA not before: Fri 08 Dec 2023 19:46:44 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 136007 IP address blocks: 103.78.248.0/24 maxlen: 24 103.78.249.0/24 maxlen: 24 103.78.250.0/24 maxlen: 24 103.78.251.0/24 maxlen: 24 2400:10c0::/32 maxlen: 32 2400:10c0::/35 maxlen: 35 2400:10c0:2000::/35 maxlen: 35 2400:10c0:4000::/35 maxlen: 35 2400:10c0:6000::/35 maxlen: 35 2400:10c0:8000::/35 maxlen: 35 2400:10c0:a000::/35 maxlen: 35 2400:10c0:c000::/35 maxlen: 35 2400:10c0:e000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2793 (0xae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Validity Not Before: Dec 8 19:46:44 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=657372a3-6b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:2b:cd:b8:77:3e:22:c4:a4:12:70:f6:76: f5:d3:c8:e1:e6:4c:af:17:a0:a0:cd:92:6c:61:f1: d9:57:d8:de:49:e8:96:a8:2d:5d:ae:c6:59:ba:1f: b3:e4:d9:02:fb:c8:96:2c:6e:cd:ec:bd:6c:50:58: a9:05:60:af:76:22:63:03:6d:37:7c:38:87:d4:d4: b7:f5:79:04:a3:71:82:3e:28:95:b0:52:35:04:fd: a3:3a:44:e4:02:56:dc:b0:a3:cc:b7:40:ce:a0:f5: 61:53:44:38:3f:48:42:bd:4a:d2:c4:a2:b9:87:ce: 7f:37:b1:9f:23:c7:57:f2:b8:24:cb:a3:0a:d6:5a: 37:76:d0:e6:24:c6:ca:f1:a9:1e:a7:28:f1:e6:26: c8:67:51:15:1d:9a:32:5e:8f:ed:22:61:5e:a3:c1: 67:d5:55:92:7c:92:c8:60:a8:d9:13:cc:db:95:20: 1a:6a:d1:cb:b1:1f:f7:f5:e6:f3:20:72:76:50:bd: 9d:49:18:a4:8f:3a:e5:d5:ef:32:b7:57:36:54:47: 6f:77:88:b5:84:58:22:41:f7:81:f3:ab:6f:7c:4c: cd:45:8f:fd:bc:f3:9d:fc:98:17:e7:36:35:6b:af: 58:28:ed:f6:5e:6d:c6:d4:35:01:d4:95:51:c0:c2: 62:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3C:80:D0:80:E8:91:C1:7B:54:98:3E:A4:5B:DF:18:3C:38:6E:EE X509v3 Authority Key Identifier: keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.78.248.0/22 IPv6: 2400:10c0::/32 Signature Algorithm: sha256WithRSAEncryption 87:c8:ca:eb:38:b4:7b:fe:ed:4c:56:8e:dd:7d:b1:07:54:83: 80:a0:8f:bc:aa:45:00:52:7a:ae:60:39:8f:66:b9:e3:ee:94: 34:fa:cf:1c:e0:1b:17:3b:c5:4f:37:03:f0:59:bc:50:9f:86: fa:24:a6:b2:b8:94:a3:0c:46:ba:ba:e7:61:6d:f1:6f:21:f6: ba:ad:e8:0a:f7:e9:01:bb:a8:cd:87:1b:de:4f:90:99:d9:05: b8:4a:e8:16:b3:5f:4a:0b:a8:9f:09:f1:04:60:2e:76:01:a7: 6e:93:23:0f:06:72:f0:2f:97:ae:9f:65:a3:9c:ce:af:a0:10: 9a:af:0c:8d:78:42:73:d1:30:10:e4:0c:e1:e8:3b:e2:a8:0f: 49:78:db:a7:26:3b:76:59:63:19:fa:5b:77:6b:3b:4d:71:1c: 5b:22:f7:59:c1:c6:69:6f:ce:f6:20:70:54:4f:d8:4f:b4:6a: 71:ac:0a:2c:5c:72:aa:1c:81:39:63:25:28:64:8a:71:e4:e4: 82:92:b9:53:d5:16:96:a9:1d:10:25:bb:7e:9a:82:2f:e4:53: 5c:75:de:4e:63:2b:2a:33:25:92:5b:f9:24:a7:3a:f3:6b:4c: 45:b8:73:6b:07:a2:3c:2d:b0:8b:13:c4:fc:80:3a:b5:19:c8: ef:4e:73:0b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCRjUxMTAvBgNVBAUTKDNFODQ1RUE4NEUxMTAzMEJDMkExMDYxMzA4OTc5Rjc5 OEExMjExM0YwHhcNMjMxMjA4MTk0NjQ0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczNzJhMy02YjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1i4rzbh3PiLEpBJw9nb108jh5kyvF6CgzZJsYfHZV9jeSeiWqC1drsZZuh+z 5NkC+8iWLG7N7L1sUFipBWCvdiJjA203fDiH1NS39XkEo3GCPiiVsFI1BP2jOkTk AlbcsKPMt0DOoPVhU0Q4P0hCvUrSxKK5h85/N7GfI8dX8rgky6MK1lo3dtDmJMbK 8akepyjx5ibIZ1EVHZoyXo/tImFeo8Fn1VWSfJLIYKjZE8zblSAaatHLsR/39ebz IHJ2UL2dSRikjzrl1e8yt1c2VEdvd4i1hFgiQfeB86tvfEzNRY/9vPOd/JgX5zY1 a69YKO32Xm3G1DUB1JVRwMJi0wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIM8gNCA 6JHBe1SYPqRb3xg8OG7uMB8GA1UdIwQYMBaAFD6EXqhOEQMLwqEGEwiXn3mKEhE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJGNS85RDBCNDIyMjEz RjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3dkNvUVlUQ0plZmVZb1NF VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BvUmVxRTRSQXd2Q29RWVRDSmVmZVlvU0VUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTZCRjUvOUQwQjQyMjIxM0YzMTFFQTgwQjM3NDVGQzRGOUFFMDIvMDNFRTg4MDQx M0Y1MTFFQThEMTIwQzY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnTvgwDQQCAAIwBwMFACQAEMAwDQYJKoZIhvcNAQELBQAD ggEBAIfIyus4tHv+7UxWjt19sQdUg4Cgj7yqRQBSeq5gOY9muePulDT6zxzgGxc7 xU83A/BZvFCfhvokprK4lKMMRrq652Ft8W8h9rqt6Ar36QG7qM2HG95PkJnZBbhK 6BazX0oLqJ8J8QRgLnYBp26TIw8GcvAvl66fZaOczq+gEJqvDI14QnPRMBDkDOHo O+KoD0l426cmO3ZZYxn6W3drO01xHFsi91nBxmlvzvYgcFRP2E+0anGsCixccqoc gTljJShkinHk5IKSuVPVFpapHRAlu36agi/kU1x13k5jKyozJZJb+SSnOvNrTEW4 c2sHojwtsIsTxPyAOrUZyO9Ocws= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org