$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa File: 6897097E6C6311EDBCFA073FC4F9AE02.roa (raw, json) Hash identifier: iM1WPBGRU8kyt2wtZ44xuEtw5kiXcIfrSzUOCPpEqtg= Subject key identifier: 62:89:BC:1D:E2:56:5E:AE:13:93:DF:44:49:97:E0:33:3E:1B:EA:80 Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Certificate serial: 014C Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa Signing time: Thu 22 Aug 2024 21:19:32 +0000 ROA not before: Thu 22 Aug 2024 21:19:32 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 140917 IP address blocks: 103.153.110.0/23 maxlen: 23 103.153.110.0/24 maxlen: 24 103.153.111.0/24 maxlen: 24 2001:df4:4180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Validity Not Before: Aug 22 21:19:32 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c7ab63-8972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b8:a0:6b:85:01:16:34:f8:4a:b4:97:da:27: e8:3b:af:b7:5b:06:05:90:46:9c:aa:b8:8e:7f:7d: 87:a7:b0:fe:d4:7c:a4:bc:8e:eb:46:05:ed:96:f4: 5a:ed:9c:65:9c:c5:e2:2b:7e:33:19:16:a4:aa:8a: 2e:d4:db:e6:aa:8b:84:20:b5:90:ee:0a:6b:81:b8: 56:4d:28:1f:47:69:cd:63:e8:08:7c:50:4c:c6:6c: 29:3c:68:e7:20:5d:a8:bd:00:b7:5f:8d:a6:11:80: 08:c9:b6:c6:7a:80:7e:63:ca:ae:fc:20:5b:01:42: dd:43:0a:4e:12:c4:a0:85:ff:91:85:27:30:d6:ea: 8a:de:3b:49:2e:13:78:0d:4a:d8:19:03:6b:08:25: c6:0d:47:3f:f5:61:32:3b:3e:bd:f3:4a:f3:38:f8: 5f:aa:50:36:a0:d9:29:46:f9:40:ab:3c:61:da:e5: ba:97:69:6c:f5:86:69:9e:ea:2c:0a:35:8b:5e:1a: 86:90:c2:24:3d:82:41:54:4b:e7:f5:51:48:53:0b: 0a:e8:f8:fd:73:70:cc:a2:18:f1:83:ed:96:89:3f: bf:4f:62:36:2e:f2:cb:b7:c0:29:8e:73:af:cf:59: af:cf:18:b5:12:1a:8f:88:44:72:09:ea:63:6a:cf: 3f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:89:BC:1D:E2:56:5E:AE:13:93:DF:44:49:97:E0:33:3E:1B:EA:80 X509v3 Authority Key Identifier: keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.110.0/23 IPv6: 2001:df4:4180::/48 Signature Algorithm: sha256WithRSAEncryption 95:85:2f:5b:4c:11:0b:fd:5b:b6:7a:00:1d:09:89:93:8a:14: 6c:11:b0:ab:29:b7:50:d0:07:1a:5c:6d:b5:21:41:ee:d2:73: 5e:e0:c5:a0:3c:c3:41:9a:c5:92:0b:5d:a1:7d:e5:ef:4d:04: 94:81:91:9d:c3:f5:e9:76:fe:06:e7:4b:38:a1:01:61:70:d8: 15:70:15:97:b1:4e:e8:cf:89:98:e9:fa:63:c0:75:43:7d:2d: b4:45:54:58:34:8d:2c:be:c5:8d:08:63:8e:6d:a5:70:16:f5: fd:c8:52:4b:b3:1f:3d:c0:92:72:3b:42:1d:bd:e7:86:f1:35: 9a:9e:74:cd:74:a3:68:90:68:10:41:bf:5a:b0:cc:6f:2f:86: 18:81:10:72:3c:f2:74:ca:41:5e:21:05:1d:d3:fd:19:18:ab: 0a:19:97:3f:a7:88:42:11:48:40:de:eb:7b:18:5e:02:57:66: 6f:aa:12:57:87:e1:28:78:62:b3:cc:12:78:8a:5a:fc:7d:84: 62:64:08:68:e7:6c:06:89:36:90:e1:af:30:d3:95:a2:22:0f: b6:cb:4c:1c:e3:11:af:4d:7a:89:07:3d:98:ac:6b:8f:04:e7: a5:28:3e:df:f1:d5:0c:17:f6:25:a0:fd:33:ae:10:5b:66:f2: 11:00:fb:b7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4 NkE4RDFFM0UwHhcNMjQwODIyMjExOTMyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM3YWI2My04OTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17iga4UBFjT4SrSX2ifoO6+3WwYFkEacqriOf32Hp7D+1HykvI7rRgXtlvRa 7ZxlnMXiK34zGRakqoou1NvmqouEILWQ7gprgbhWTSgfR2nNY+gIfFBMxmwpPGjn IF2ovQC3X42mEYAIybbGeoB+Y8qu/CBbAULdQwpOEsSghf+RhScw1uqK3jtJLhN4 DUrYGQNrCCXGDUc/9WEyOz6980rzOPhfqlA2oNkpRvlAqzxh2uW6l2ls9YZpnuos CjWLXhqGkMIkPYJBVEvn9VFIUwsK6Pj9c3DMohjxg+2WiT+/T2I2LvLLt8ApjnOv z1mvzxi1EhqPiERyCepjas8/KQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGKJvB3i Vl6uE5PfREmX4DM+G+qAMB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkEwQUUvMzdFQjBDNjZDOTY0MTFFQUExMDZFODU5QzRGOUFFMDIvNjg5NzA5N0U2 QzYzMTFFREJDRkEwNzNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmW4wDwQCAAIwCQMHACABDfRBgDANBgkqhkiG9w0BAQsF AAOCAQEAlYUvW0wRC/1btnoAHQmJk4oUbBGwqym3UNAHGlxttSFB7tJzXuDFoDzD QZrFkgtdoX3l700ElIGRncP16Xb+BudLOKEBYXDYFXAVl7FO6M+JmOn6Y8B1Q30t tEVUWDSNLL7FjQhjjm2lcBb1/chSS7MfPcCScjtCHb3nhvE1mp50zXSjaJBoEEG/ WrDMby+GGIEQcjzydMpBXiEFHdP9GRirChmXP6eIQhFIQN7rexheAldmb6oSV4fh KHhis8wSeIpa/H2EYmQIaOdsBok2kOGvMNOVoiIPtstMHOMRr016iQc9mKxrjwTn pSg+3/HVDBf2JaD9M64QW2byEQD7tw== -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org