$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/EA531ACE61C211EF89F25E2CC4F9AE02.roa File: EA531ACE61C211EF89F25E2CC4F9AE02.roa (raw, json) Hash identifier: 3gDyhsfoc7h8TsB43qcrgNiSk/zhPS21fYEZb14h1yE= Subject key identifier: 6C:C7:51:B7:A6:A0:7A:BC:0A:6A:95:7A:16:C5:1B:A4:73:2A:FA:C7 Certificate issuer: /CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Certificate serial: 0B6D Authority key identifier: 91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/EA531ACE61C211EF89F25E2CC4F9AE02.roa Signing time: Sat 24 Aug 2024 02:45:26 +0000 ROA not before: Sat 24 Aug 2024 02:45:26 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 60528 IP address blocks: 103.145.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Validity Not Before: Aug 24 02:45:26 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66c94945-9ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:26:9b:bf:de:08:dc:ae:b3:4a:62:64:25:b8: 9d:0d:f1:7f:2a:bf:38:fe:02:c1:01:fc:98:46:d1: 2f:f8:ca:a9:ad:1d:9e:a4:f3:5e:2d:d0:92:34:ab: 6c:96:43:59:cf:eb:a5:59:9a:26:e2:d9:b0:ed:41: 05:90:cd:1d:61:b1:f6:eb:03:a6:3b:4c:bf:9d:5e: 1d:68:de:b3:ad:70:10:7e:44:44:6b:80:02:26:ce: a7:1c:84:03:70:53:51:8b:bd:38:f3:ad:58:7d:13: 9a:64:6d:4c:c8:b9:21:cc:f4:d0:ea:dc:0a:9e:8e: 41:7f:62:13:17:99:ea:9d:69:50:d0:f5:8c:3f:f8: 00:ce:13:1b:0e:56:76:49:93:08:20:0d:82:16:36: cb:64:ad:d2:ae:9a:83:a7:ed:b0:53:0f:12:b1:a4: 35:5a:55:3d:3d:1c:48:5c:62:e3:9b:67:6a:78:c1: 7a:a4:e5:f0:5d:53:4c:67:89:b3:bd:d6:33:4b:7b: 16:4e:62:30:ce:e1:47:6f:ed:96:7f:2a:47:1e:1e: 06:12:e0:08:54:25:17:b4:52:2f:66:b2:fc:e7:41: 04:bc:d9:04:e0:1d:12:e1:a4:43:5e:c8:69:08:a6: 74:a8:ef:90:58:57:74:65:3f:f5:44:cf:74:0f:4d: ca:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C7:51:B7:A6:A0:7A:BC:0A:6A:95:7A:16:C5:1B:A4:73:2A:FA:C7 X509v3 Authority Key Identifier: keyid:91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/EA531ACE61C211EF89F25E2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.13.0/24 Signature Algorithm: sha256WithRSAEncryption 12:73:05:b5:83:b2:4a:e3:aa:7f:ab:ca:ca:d1:73:16:28:fb: 1e:d0:f7:b3:fb:11:e9:b3:4b:bb:ea:3b:31:cf:f8:aa:bd:28: 26:22:1d:83:7e:15:9b:c5:58:86:6e:c8:de:66:df:dc:17:1a: c1:c7:24:f9:64:81:da:2c:1d:2d:0e:02:3b:45:9a:64:70:bc: 91:60:5d:c9:7b:1e:9a:16:46:96:d9:42:17:b1:cc:5b:4d:a8: 54:5d:e8:37:5e:41:c5:9a:dd:92:9d:77:25:2e:b5:6d:0e:bb: 3e:e2:ad:36:94:2f:7e:7a:4d:93:2a:38:f3:e4:d3:63:4e:28: b4:36:ad:7e:19:ff:ac:5c:4a:23:db:18:49:65:92:81:ce:f1: 89:45:ba:24:f8:67:39:0a:b4:4e:23:d3:ad:a0:5b:30:1f:66: bb:8c:77:c3:57:24:72:d8:28:65:62:56:c1:ae:06:ea:e6:f7: db:13:39:f1:d4:76:f0:c4:5b:05:2f:0e:72:31:81:48:bd:4b: dd:3f:bf:ff:8a:93:15:86:9c:5a:f9:4d:21:a9:33:54:e7:33: 4a:3e:f3:6b:dd:7f:71:39:22:ec:06:bc:bb:0c:bc:7c:8f:ee: 91:5f:74:7c:0a:be:f0:44:eb:8f:9b:df:f6:bb:7d:f9:07:9b: 83:2e:5b:7b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY0NjIxMTAvBgNVBAUTKDkxQTVFNkU1NzZDMzE1QzQzMTlFRUY5RkRBMzI4N0FE MjBDMzgwMzkwHhcNMjQwODI0MDI0NTI2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM5NDk0NS05YWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSabv94I3K6zSmJkJbidDfF/Kr84/gLBAfyYRtEv+MqprR2epPNeLdCSNKts lkNZz+ulWZom4tmw7UEFkM0dYbH26wOmO0y/nV4daN6zrXAQfkREa4ACJs6nHIQD cFNRi704861YfROaZG1MyLkhzPTQ6twKno5Bf2ITF5nqnWlQ0PWMP/gAzhMbDlZ2 SZMIIA2CFjbLZK3SrpqDp+2wUw8SsaQ1WlU9PRxIXGLjm2dqeMF6pOXwXVNMZ4mz vdYzS3sWTmIwzuFHb+2WfypHHh4GEuAIVCUXtFIvZrL850EEvNkE4B0S4aRDXshp CKZ0qO+QWFd0ZT/1RM90D03KnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGzHUbem oHq8CmqVehbFG6RzKvrHMB8GA1UdIwQYMBaAFJGl5uV2wxXEMZ7vn9oyh60gw4A5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjQ2Mi9EQUY0MzVFMDE4 NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZjUXhudS1mMmpLSHJTRERn RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thWG01WGJERmNReG51LWYyaktIclNERGdEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY0NjIvREFGNDM1RTAxODQzMTFFQUIwQUYyMDFEQzRGOUFFMDIvRUE1MzFBQ0U2 MUMyMTFFRjg5RjI1RTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkQ0wDQYJKoZIhvcNAQELBQADggEBABJzBbWDskrjqn+r ysrRcxYo+x7Q97P7EemzS7vqOzHP+Kq9KCYiHYN+FZvFWIZuyN5m39wXGsHHJPlk gdosHS0OAjtFmmRwvJFgXcl7HpoWRpbZQhexzFtNqFRd6DdeQcWa3ZKddyUutW0O uz7irTaUL356TZMqOPPk02NOKLQ2rX4Z/6xcSiPbGEllkoHO8YlFuiT4ZzkKtE4j 062gWzAfZruMd8NXJHLYKGViVsGuBurm99sTOfHUdvDEWwUvDnIxgUi9S90/v/+K kxWGnFr5TSGpM1TnM0o+82vdf3E5IuwGvLsMvHyP7pFfdHwKvvBE64+b3/a7ffkH m4MuW3s= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org