$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/237306724C5611ED8D5DDD70C4F9AE02.roa File: 237306724C5611ED8D5DDD70C4F9AE02.roa (raw, json) Hash identifier: M5APD5jLzCTS+EqF5L/kaW7FUXSVgVVwOlYb/pQ9rq4= Subject key identifier: 1A:25:CD:87:05:46:B0:27:1C:CD:F7:5A:2B:D5:DE:71:98:98:60:0E Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Certificate serial: 017F Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/237306724C5611ED8D5DDD70C4F9AE02.roa Signing time: Fri 25 Oct 2024 02:47:08 +0000 ROA not before: Fri 25 Oct 2024 02:47:08 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150352 IP address blocks: 103.17.176.0/23 maxlen: 23 103.17.176.0/24 maxlen: 24 103.17.177.0/24 maxlen: 24 2400:b5e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Validity Not Before: Oct 25 02:47:08 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671b06ab-4b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:52:c8:c6:cc:f5:47:9d:61:5b:e0:91:63: 9a:a7:6e:78:23:53:14:e6:d3:70:94:8f:06:d0:07: 79:99:79:6b:26:b8:6d:ef:2d:12:13:5b:06:4f:fb: 25:0f:33:53:a4:6e:ac:ee:cd:7b:e7:45:01:f5:f3: bd:1b:f8:cb:e8:ea:a8:5b:94:6c:78:69:fc:b2:62: 29:8b:1d:c6:c0:b6:e3:a6:11:41:27:d1:60:d9:c6: 56:7e:b5:5d:cb:66:15:f5:51:a6:96:74:47:d7:43: c5:61:d6:0d:b1:30:05:fe:10:01:e4:b3:bc:c0:2d: 29:90:21:d1:46:6e:fa:78:a4:37:c4:e9:ec:c3:be: fe:81:8e:4d:49:55:f8:ec:6e:db:65:df:fd:8a:03: a6:c6:01:f8:b1:7b:95:5f:9e:de:64:d3:45:8b:0f: e3:5b:24:87:73:25:8a:6a:7c:96:4a:cb:97:e6:45: ea:88:5a:79:e6:8e:3f:ff:c0:40:fd:99:24:ee:97: ae:b2:6c:a3:88:8d:44:42:68:16:15:d9:ff:60:90: 93:2e:5d:62:44:32:14:33:13:73:a2:9d:d6:be:3b: 28:29:c9:d5:de:11:93:44:63:1e:a1:37:e5:40:28: bf:4e:37:6d:d1:ab:3a:c2:fc:e2:66:62:97:43:92: d0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:25:CD:87:05:46:B0:27:1C:CD:F7:5A:2B:D5:DE:71:98:98:60:0E X509v3 Authority Key Identifier: keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/237306724C5611ED8D5DDD70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.17.176.0/23 IPv6: 2400:b5e0::/32 Signature Algorithm: sha256WithRSAEncryption a6:01:89:af:c6:32:a6:9a:62:72:fe:fa:99:c8:06:a9:d2:21: 19:aa:ad:ba:17:74:85:2b:3c:e4:00:19:8d:2d:af:ff:86:cc: ff:bb:f0:4e:c9:46:6f:c4:61:d5:c4:39:9e:f4:5b:91:8b:0d: ea:c5:50:77:44:24:23:f7:3e:ee:0b:79:8d:e6:f4:c8:3a:63: 37:2a:a6:33:8a:f5:76:b7:7a:98:78:03:16:e6:b5:b6:45:0b: 30:ef:c9:41:77:87:96:e4:d8:69:de:ea:39:95:78:d9:36:11: 4c:84:63:75:8b:0e:07:0c:12:31:d3:53:e4:bd:77:58:b5:0a: a1:4c:d6:26:2b:c3:59:1d:8f:ea:f4:fe:45:19:f5:8b:65:af: 64:27:f8:bb:80:df:f9:5b:11:fe:0e:4c:32:32:b3:5a:91:af: c9:d3:73:26:dd:64:d5:3d:08:4c:61:d5:c1:57:e6:53:51:42: a3:e2:9e:af:da:65:b3:d1:33:bc:ee:25:5d:7c:f7:12:dc:5f: 58:88:a3:54:f0:e0:7e:08:bc:df:52:44:44:68:92:83:cc:6e: 83:6b:6c:ad:e3:fb:1f:2d:41:4d:7a:c2:c0:fe:32:ec:07:59: de:2c:22:52:bc:8a:8f:c1:3b:da:57:2d:1e:22:ae:18:f2:ba: b2:f7:96:45 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1MTQxMTAvBgNVBAUTKDgyNTIzNDA0MDc2OTNGOEJDN0MxMzIyNTNGNDA2QzA0 RTQ2Nzc2RjYwHhcNMjQxMDI1MDI0NzA4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFiMDZhYi00YjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvENSyMbM9UedYVvgkWOap254I1MU5tNwlI8G0Ad5mXlrJrht7y0SE1sGT/sl DzNTpG6s7s1750UB9fO9G/jL6OqoW5RseGn8smIpix3GwLbjphFBJ9Fg2cZWfrVd y2YV9VGmlnRH10PFYdYNsTAF/hAB5LO8wC0pkCHRRm76eKQ3xOnsw77+gY5NSVX4 7G7bZd/9igOmxgH4sXuVX57eZNNFiw/jWySHcyWKanyWSsuX5kXqiFp55o4//8BA /Zkk7peusmyjiI1EQmgWFdn/YJCTLl1iRDIUMxNzop3WvjsoKcnV3hGTRGMeoTfl QCi/Tjdt0as6wvziZmKXQ5LQQwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBolzYcF RrAnHM33WivV3nGYmGAOMB8GA1UdIwQYMBaAFIJSNAQHaT+Lx8EyJT9AbATkZ3b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDUxNC9FRjBBMzUyRTRD NTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0dkh3VElsUDBCc0JPUm5k dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dsSTBCQWRwUDR2SHdUSWxQMEJzQk9SbmR2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA1MTQvRUYwQTM1MkU0QzUzMTFFRDhBQzA1MDcwQzRGOUFFMDIvMjM3MzA2NzI0 QzU2MTFFRDhENURERDcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnEbAwDQQCAAIwBwMFACQAteAwDQYJKoZIhvcNAQELBQAD ggEBAKYBia/GMqaaYnL++pnIBqnSIRmqrboXdIUrPOQAGY0tr/+GzP+78E7JRm/E YdXEOZ70W5GLDerFUHdEJCP3Pu4LeY3m9Mg6YzcqpjOK9Xa3eph4AxbmtbZFCzDv yUF3h5bk2Gne6jmVeNk2EUyEY3WLDgcMEjHTU+S9d1i1CqFM1iYrw1kdj+r0/kUZ 9Ytlr2Qn+LuA3/lbEf4OTDIys1qRr8nTcybdZNU9CExh1cFX5lNRQqPinq/aZbPR M7zuJV189xLcX1iIo1Tw4H4IvN9SRERokoPMboNrbK3j+x8tQU16wsD+MuwHWd4s IlK8io/BO9pXLR4irhjyurL3lkU= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org