$ rpki-client -vvf rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/4D7F18D69F8911EC8270CE39C4F9AE02.roa File: 4D7F18D69F8911EC8270CE39C4F9AE02.roa (raw, json) Hash identifier: DvvVhTWHCUbaFBHxMQ8UUW6nZ5VH6Qlov4BUrN8E2sA= Subject key identifier: C8:E9:15:CC:3A:87:AE:00:83:8D:75:CC:53:35:02:D0:BB:02:03:2B Certificate issuer: /CN=A91A81F7/serialNumber=933AED7C3A064226A7144B7478C7403DACDD8005 Certificate serial: 02E5 Authority key identifier: 93:3A:ED:7C:3A:06:42:26:A7:14:4B:74:78:C7:40:3D:AC:DD:80:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrtfDoGQianFEt0eMdAPazdgAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/4D7F18D69F8911EC8270CE39C4F9AE02.roa Signing time: Fri 21 Jun 2024 02:33:34 +0000 ROA not before: Fri 21 Jun 2024 02:33:34 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 45102 IP address blocks: 103.151.206.0/23 maxlen: 23 103.151.206.0/24 maxlen: 24 103.151.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/kzrtfDoGQianFEt0eMdAPazdgAU.crl rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/kzrtfDoGQianFEt0eMdAPazdgAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrtfDoGQianFEt0eMdAPazdgAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A81F7/serialNumber=933AED7C3A064226A7144B7478C7403DACDD8005 Validity Not Before: Jun 21 02:33:34 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6674e67e-c86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:79:b4:fc:7e:70:13:f3:dc:cd:f1:9c:15:a1: 50:ae:52:1c:7a:a4:e0:2c:8e:32:85:d1:ba:40:be: d6:6b:aa:13:88:e3:27:3b:aa:a3:b8:35:7d:67:f9: 3d:18:da:72:d2:f6:ca:f1:6b:65:d8:89:39:d0:a2: bf:f3:db:75:4a:6d:1e:32:9a:d5:f0:fe:d4:bf:31: df:00:8e:2d:ea:21:99:61:25:8d:d6:bf:25:41:20: c5:46:66:25:f7:cf:58:80:6a:e6:08:f5:10:38:ad: 5e:f1:a9:64:68:35:ab:81:ca:c1:d1:e5:b5:c0:35: 35:11:c3:86:b6:9b:1b:c6:44:25:50:99:57:42:36: 97:ee:a3:a8:8a:d1:0a:9a:37:46:08:3d:e7:e5:41: 4f:5f:58:fe:54:0e:ca:4d:3d:b7:78:62:f2:b7:6d: aa:f5:7f:39:1a:84:82:62:46:38:57:a0:5d:e3:5a: 7d:76:42:0b:e7:c6:74:4c:5d:bc:a6:1e:58:b7:ff: 86:ba:88:5c:88:64:9a:7a:7c:0c:6a:a2:b9:08:99: fb:9c:6a:f1:96:91:80:51:b9:29:42:5f:83:25:12: da:aa:03:86:74:57:51:d6:a7:e4:50:ed:21:66:f4: b2:21:ae:85:92:b0:19:e6:ac:60:b3:72:3c:9f:41: 46:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E9:15:CC:3A:87:AE:00:83:8D:75:CC:53:35:02:D0:BB:02:03:2B X509v3 Authority Key Identifier: keyid:93:3A:ED:7C:3A:06:42:26:A7:14:4B:74:78:C7:40:3D:AC:DD:80:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/kzrtfDoGQianFEt0eMdAPazdgAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrtfDoGQianFEt0eMdAPazdgAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/4D7F18D69F8911EC8270CE39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.206.0/23 Signature Algorithm: sha256WithRSAEncryption b2:cb:8a:27:40:b1:2b:0a:87:e5:49:20:e2:95:7a:68:7a:19: d0:b4:6b:9c:07:c7:0e:97:09:8d:57:88:4b:88:ff:0a:0a:c7: 23:6d:5c:25:18:13:11:6b:0e:69:59:5c:54:8f:43:b1:89:06: 9d:5c:95:8f:45:37:c4:12:38:6b:2d:e8:7d:23:58:9b:1b:ed: f0:0d:5e:39:e5:60:f7:54:35:fa:28:e7:d1:83:04:7b:10:bc: 6c:12:b4:ad:60:58:f1:da:d5:83:ef:2a:bd:46:64:41:ae:14: 50:a6:17:0c:52:31:f0:e0:0c:ea:e9:94:9f:62:e2:3b:c7:6a: ed:48:8e:8b:d4:df:28:94:ac:b8:4d:d5:e2:5c:6c:5a:eb:05: 4a:4e:79:a1:01:2e:3c:ef:cb:c9:fe:fe:92:73:5b:7c:a5:f3: 0a:f2:81:2c:d1:da:14:da:f6:4c:80:51:77:5c:13:b0:a1:31: 3f:e1:1f:da:4a:f5:db:9f:3f:83:5d:60:73:b3:67:96:be:ba: ad:9f:96:26:18:4d:92:8f:20:e8:f6:9f:ad:4f:d8:15:83:16: 32:b8:36:81:c2:95:c1:5a:39:71:dc:04:bf:ed:a3:18:40:32: a9:b1:ce:b0:da:6f:3a:7f:c5:80:40:9b:19:72:31:11:f9:ae: 5e:22:35:76 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgxRjcxMTAvBgNVBAUTKDkzM0FFRDdDM0EwNjQyMjZBNzE0NEI3NDc4Qzc0MDNE QUNERDgwMDUwHhcNMjQwNjIxMDIzMzM0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc0ZTY3ZS1jODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Hm0/H5wE/PczfGcFaFQrlIceqTgLI4yhdG6QL7Wa6oTiOMnO6qjuDV9Z/k9 GNpy0vbK8Wtl2Ik50KK/89t1Sm0eMprV8P7UvzHfAI4t6iGZYSWN1r8lQSDFRmYl 989YgGrmCPUQOK1e8alkaDWrgcrB0eW1wDU1EcOGtpsbxkQlUJlXQjaX7qOoitEK mjdGCD3n5UFPX1j+VA7KTT23eGLyt22q9X85GoSCYkY4V6Bd41p9dkIL58Z0TF28 ph5Yt/+GuohciGSaenwMaqK5CJn7nGrxlpGAUbkpQl+DJRLaqgOGdFdR1qfkUO0h ZvSyIa6FkrAZ5qxgs3I8n0FGcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMjpFcw6 h64Ag411zFM1AtC7AgMrMB8GA1UdIwQYMBaAFJM67Xw6BkImpxRLdHjHQD2s3YAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODFGNy8zMEY0NkVFRTlG ODYxMUVDOEQ5RjNGMzRDNEY5QUUwMi9renJ0ZkRvR1FpYW5GRXQwZU1kQVBhemRn QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6cnRmRG9HUWlhbkZFdDBlTWRBUGF6ZGdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTgxRjcvMzBGNDZFRUU5Rjg2MTFFQzhEOUYzRjM0QzRGOUFFMDIvNEQ3RjE4RDY5 Rjg5MTFFQzgyNzBDRTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnl84wDQYJKoZIhvcNAQELBQADggEBALLLiidAsSsKh+VJ IOKVemh6GdC0a5wHxw6XCY1XiEuI/woKxyNtXCUYExFrDmlZXFSPQ7GJBp1clY9F N8QSOGst6H0jWJsb7fANXjnlYPdUNfoo59GDBHsQvGwStK1gWPHa1YPvKr1GZEGu FFCmFwxSMfDgDOrplJ9i4jvHau1IjovU3yiUrLhN1eJcbFrrBUpOeaEBLjzvy8n+ /pJzW3yl8wrygSzR2hTa9kyAUXdcE7ChMT/hH9pK9dufP4NdYHOzZ5a+uq2fliYY TZKPIOj2n61P2BWDFjK4NoHClcFaOXHcBL/toxhAMqmxzrDabzp/xYBAmxlyMRH5 rl4iNXY= -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:49 2024 by rpki-client on console-ams.rpki-client.org