$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa File: A99E5658488011EE8113A766C4F9AE02.roa (raw, json) Hash identifier: E13lbyCe1pFntvaZ0/XCP2JTKYjD9ZQaJQDpf4OhMJA= Subject key identifier: 6F:0E:AA:F4:A0:77:E5:18:30:87:E1:1B:9B:A6:33:72:B2:CB:6C:A1 Certificate issuer: /CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1 Certificate serial: D3 Authority key identifier: F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa Signing time: Wed 09 Oct 2024 04:19:02 +0000 ROA not before: Wed 09 Oct 2024 04:19:02 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 141047 IP address blocks: 103.155.68.0/23 maxlen: 23 103.155.68.0/24 maxlen: 24 103.155.69.0/24 maxlen: 24 2406:6940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1 Validity Not Before: Oct 9 04:19:02 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67060436-5c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:87:0f:c2:94:9a:13:a8:e2:26:ed:78:6b:70: ab:76:23:e2:55:49:03:ce:71:17:c7:34:f2:6c:18: cf:d7:a6:3c:45:3d:f3:01:25:19:6a:0b:35:b0:bb: 01:1a:9d:8f:f0:8a:55:13:fb:de:c5:d9:f4:69:57: 33:e9:f2:de:f7:6e:3e:90:44:a6:5e:ba:44:be:5d: 30:d0:1f:e9:05:c1:c2:0d:d5:fd:7c:2c:f0:70:e7: b6:d6:ad:3d:65:0f:0e:05:4b:30:74:a2:8b:f5:20: 7e:fa:ff:91:5a:29:f1:0e:64:fa:60:39:ea:e7:fe: 41:3d:86:1b:9e:1d:68:44:04:f0:f3:9d:23:0d:ad: 81:6d:11:a5:5b:7f:7d:73:a4:68:7c:63:4b:e7:b4: ea:90:e4:b0:a8:1d:38:38:0d:88:50:a9:45:15:aa: 29:e0:2f:e7:54:6e:45:4b:12:80:c8:ad:35:4d:e2: f7:68:30:b0:1d:7e:7f:1b:79:88:93:16:09:9a:2b: 03:e0:38:2c:37:8a:b9:6f:f2:48:cc:a6:ad:c3:ec: 22:9c:f1:85:d0:a5:da:8e:07:ce:aa:83:c5:cb:27: f8:86:dc:6c:c5:06:a4:96:19:94:96:65:f2:9a:e2: 15:43:f1:28:0a:2e:8c:58:cf:41:5e:02:0f:76:1a: a9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0E:AA:F4:A0:77:E5:18:30:87:E1:1B:9B:A6:33:72:B2:CB:6C:A1 X509v3 Authority Key Identifier: keyid:F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.68.0/23 IPv6: 2406:6940::/32 Signature Algorithm: sha256WithRSAEncryption 54:74:0a:3a:11:5f:ff:f3:2a:0b:c6:07:80:3d:1c:2c:9e:01: f7:cf:a9:15:d5:3b:fc:e4:48:99:f0:15:7d:d1:aa:04:42:05: bc:b4:4e:d2:09:20:72:d2:9f:76:18:c6:62:1d:60:80:a7:1a: da:30:0f:bc:18:01:a6:cb:b7:f4:a7:07:11:a6:2d:2f:7e:21: b2:fd:39:ed:1d:3d:d7:b3:a1:97:d2:ec:16:a5:01:66:18:e1: 2e:dd:44:c8:7f:16:2c:f4:89:e9:12:12:fe:c2:3a:5f:40:77: 84:97:5f:e0:0e:7a:09:d9:74:b1:ad:29:9c:e6:bb:54:05:41: 54:15:da:cf:a6:44:46:8d:7d:22:20:2b:01:53:a0:c1:4c:96: b0:ec:d6:88:5b:1f:48:6d:49:fe:3c:01:86:f3:d3:cd:45:9c: 9e:b6:1c:39:ec:07:f8:d4:ee:ec:8f:42:d1:27:1a:19:6a:45: db:db:ae:13:b4:27:e1:c8:4f:ca:b6:6e:0b:4a:82:32:d1:a7: c8:05:8d:bc:9e:bb:84:95:74:70:57:c1:35:07:87:d2:f1:ca: 68:64:ab:18:2d:43:2e:c0:a6:64:39:04:08:08:d4:5a:2c:4b: 7b:c7:d0:01:e9:92:e0:64:39:89:f8:e2:14:2b:36:0a:8b:03: 82:45:1a:da -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTczNjkxMTAvBgNVBAUTKEY5MEUyMTBGQ0U3QzY3QTJGMkIzMkRFMTRFRUIwNUEw NEIwRDEwRTEwHhcNMjQxMDA5MDQxOTAyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA2MDQzNi01YzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYcPwpSaE6jiJu14a3CrdiPiVUkDznEXxzTybBjP16Y8RT3zASUZags1sLsB Gp2P8IpVE/vexdn0aVcz6fLe924+kESmXrpEvl0w0B/pBcHCDdX9fCzwcOe21q09 ZQ8OBUswdKKL9SB++v+RWinxDmT6YDnq5/5BPYYbnh1oRATw850jDa2BbRGlW399 c6RofGNL57TqkOSwqB04OA2IUKlFFaop4C/nVG5FSxKAyK01TeL3aDCwHX5/G3mI kxYJmisD4DgsN4q5b/JIzKatw+winPGF0KXajgfOqoPFyyf4htxsxQaklhmUlmXy muIVQ/EoCi6MWM9BXgIPdhqpGwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFG8OqvSg d+UYMIfhG5umM3Kyy2yhMB8GA1UdIwQYMBaAFPkOIQ/OfGei8rMt4U7rBaBLDRDh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzM2OS9CMUQ2MTk0MjQ4 N0YxMUVFQTgwQTAyNENDNEY5QUUwMi8tUTRoRDg1OFo2THlzeTNoVHVzRm9Fc05F T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1RNGhEODU4WjZMeXN5M2hUdXNGb0VzTkVPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTczNjkvQjFENjE5NDI0ODdGMTFFRUE4MEEwMjRDQzRGOUFFMDIvQTk5RTU2NTg0 ODgwMTFFRTgxMTNBNzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnm0QwDQQCAAIwBwMFACQGaUAwDQYJKoZIhvcNAQELBQAD ggEBAFR0CjoRX//zKgvGB4A9HCyeAffPqRXVO/zkSJnwFX3RqgRCBby0TtIJIHLS n3YYxmIdYICnGtowD7wYAabLt/SnBxGmLS9+IbL9Oe0dPdezoZfS7BalAWYY4S7d RMh/Fiz0iekSEv7COl9Ad4SXX+AOegnZdLGtKZzmu1QFQVQV2s+mREaNfSIgKwFT oMFMlrDs1ohbH0htSf48AYbz081FnJ62HDnsB/jU7uyPQtEnGhlqRdvbrhO0J+HI T8q2bgtKgjLRp8gFjbyeu4SVdHBXwTUHh9LxymhkqxgtQy7ApmQ5BAgI1FosS3vH 0AHpkuBkOYn44hQrNgqLA4JFGto= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org