$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/02F863F6C09211EC8950E57AC4F9AE02.roa File: 02F863F6C09211EC8950E57AC4F9AE02.roa (raw, json) Hash identifier: YNUo90dPfw7aNa6aT24Mb69b4ZpufKscErkIIX/bwoA= Subject key identifier: 7C:F1:DC:9C:1C:50:A5:90:CB:6A:55:B2:62:64:43:CB:01:47:4C:95 Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Certificate serial: 0782 Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/02F863F6C09211EC8950E57AC4F9AE02.roa Signing time: Fri 30 Aug 2024 22:31:45 +0000 ROA not before: Fri 30 Aug 2024 22:31:45 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 141003 IP address blocks: 103.154.188.0/23 maxlen: 23 103.154.188.0/24 maxlen: 24 103.154.189.0/24 maxlen: 24 2001:df6:f680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1922 (0x782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Validity Not Before: Aug 30 22:31:45 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d24851-ac2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:1a:8f:e8:91:b2:5e:4c:54:1e:37:f5:e6: 33:df:f1:55:f0:d7:74:d1:55:ef:bf:9f:60:a2:4e: 84:64:65:a1:a5:85:b7:92:ca:ac:d0:49:ff:91:0b: 58:c9:de:c3:4c:0a:4c:60:50:a2:6f:06:61:51:25: d3:5a:4c:25:b5:9a:07:46:2f:66:47:40:f5:0c:13: 3a:e4:42:a9:f6:ce:fd:10:5f:df:b8:a8:52:0b:b3: 90:7b:79:c8:0c:05:72:a3:8c:7c:30:b9:cc:a0:1e: f7:3d:9b:9d:da:a3:4d:23:ed:c7:8d:36:11:eb:c7: 26:99:b4:a1:9b:9b:8d:75:5d:0f:f6:fa:80:d1:04: e7:1e:af:f8:a5:69:df:a2:a1:36:4c:80:5a:42:c7: 78:02:e3:92:67:2b:2d:d5:65:b0:66:68:6f:b1:0b: b2:a3:13:b0:aa:da:13:9d:17:b6:59:18:9e:d4:27: 3d:b3:c6:84:e3:06:d0:2b:9b:38:31:de:4b:02:9c: 4e:5c:11:62:56:cf:c8:03:02:80:f4:6d:73:6f:f6: e0:4f:0b:c7:45:be:8d:8b:83:7b:6a:6c:6b:84:94: d1:93:52:1d:59:49:ec:7b:13:b6:fd:de:17:19:3a: 43:3f:71:b7:7c:1f:02:73:32:54:e1:fc:b8:d4:3f: 50:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F1:DC:9C:1C:50:A5:90:CB:6A:55:B2:62:64:43:CB:01:47:4C:95 X509v3 Authority Key Identifier: keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/02F863F6C09211EC8950E57AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.188.0/23 IPv6: 2001:df6:f680::/48 Signature Algorithm: sha256WithRSAEncryption 4d:af:f1:69:bc:ab:bb:a6:62:e0:6c:7e:83:19:2a:be:15:28: 2d:6f:15:a2:6e:68:90:9d:a6:a4:ed:14:48:3b:4e:c8:97:62: d2:b3:13:d8:bf:cc:46:6e:c4:92:04:c9:27:d8:50:a9:d9:52: f9:d1:cc:57:c1:e4:c6:48:83:ca:6d:b9:bf:40:c3:91:d5:2d: 50:b0:ad:cc:bf:c6:30:ba:85:86:d9:6a:a8:bc:d5:2d:fd:24: b8:89:ce:48:2f:d4:f1:4f:e7:72:5d:0c:d7:b3:9c:6e:9e:81: 99:6d:7c:81:02:11:d8:06:e5:ba:87:67:c5:dd:19:9b:73:49: 2a:10:63:69:18:27:cb:d8:5a:83:ef:c8:10:18:49:66:bc:7b: 19:68:d1:9a:a6:a1:fc:cd:84:52:5d:b8:bd:1e:66:b8:af:0b: 85:07:e4:64:10:52:a0:e5:34:6f:28:00:84:5c:77:dd:85:49: 3d:59:8f:c2:ec:fb:e5:0a:6b:18:1a:9e:32:5b:f9:da:f7:6e: fe:5e:91:1a:a9:c6:d2:f6:fd:be:af:cd:61:85:78:ec:3c:ad: 57:20:f0:d8:40:97:40:a1:e3:d7:8b:20:1c:c2:85:61:8d:92: 96:bc:ad:32:64:53:76:a5:f6:2b:fd:9b:f8:60:bd:69:59:14: 74:b1:6f:65 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRBQTAxMTAvBgNVBAUTKDA0Q0Y1N0YyQTdGRkNBNzJDMDc0NjhBOEM2RDVGMjQ1 MTdGRjQ2QjkwHhcNMjQwODMwMjIzMTQ1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQyNDg1MS1hYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkMaj+iRsl5MVB439eYz3/FV8Nd00VXvv59gok6EZGWhpYW3ksqs0En/kQtY yd7DTApMYFCibwZhUSXTWkwltZoHRi9mR0D1DBM65EKp9s79EF/fuKhSC7OQe3nI DAVyo4x8MLnMoB73PZud2qNNI+3HjTYR68cmmbShm5uNdV0P9vqA0QTnHq/4pWnf oqE2TIBaQsd4AuOSZyst1WWwZmhvsQuyoxOwqtoTnRe2WRie1Cc9s8aE4wbQK5s4 Md5LApxOXBFiVs/IAwKA9G1zb/bgTwvHRb6Ni4N7amxrhJTRk1IdWUnsexO2/d4X GTpDP3G3fB8CczJU4fy41D9QlwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHzx3Jwc UKWQy2pVsmJkQ8sBR0yVMB8GA1UdIwQYMBaAFATPV/Kn/8pywHRoqMbV8kUX/0a5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEFBMC8xMDQxRTVFQUUy QzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3luTEFkR2lveHRYeVJSZl9S cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JNOVg4cWZfeW5MQWRHaW94dFh5UlJmX1Jyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjRBQTAvMTA0MUU1RUFFMkMzMTFFQUI4MThEMTdGQzRGOUFFMDIvMDJGODYzRjZD MDkyMTFFQzg5NTBFNTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmrwwDwQCAAIwCQMHACABDfb2gDANBgkqhkiG9w0BAQsF AAOCAQEATa/xabyru6Zi4Gx+gxkqvhUoLW8Vom5okJ2mpO0USDtOyJdi0rMT2L/M Rm7EkgTJJ9hQqdlS+dHMV8HkxkiDym25v0DDkdUtULCtzL/GMLqFhtlqqLzVLf0k uInOSC/U8U/ncl0M17Ocbp6BmW18gQIR2Abluodnxd0Zm3NJKhBjaRgny9hag+/I EBhJZrx7GWjRmqah/M2EUl24vR5muK8LhQfkZBBSoOU0bygAhFx33YVJPVmPwuz7 5QprGBqeMlv52vdu/l6RGqnG0vb9vq/NYYV47DytVyDw2ECXQKHj14sgHMKFYY2S lrytMmRTdqX2K/2b+GC9aVkUdLFvZQ== -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org