$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa File: 3046CBE2C4E811EAB607D255C4F9AE02.roa (raw, json) Hash identifier: cbktrrt4RsOUs9FstYccY602a8M1M48rOaYFq7f84Xg= Subject key identifier: 88:93:28:36:A0:79:FA:21:D8:6B:6A:35:5B:8A:B5:FF:3A:6E:35:64 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 07E3 Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa Signing time: Wed 04 Sep 2024 21:29:44 +0000 ROA not before: Wed 04 Sep 2024 21:29:44 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 140905 IP address blocks: 103.153.54.0/24 maxlen: 24 2001:df4:3480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Sep 4 21:29:44 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d8d148-5451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:84:c8:2a:a2:8e:33:fb:93:1a:0a:52:da: 93:23:9b:a8:8c:42:24:95:2c:ca:47:f0:c2:7f:0b: e4:48:9f:fa:a2:c9:33:c0:cc:a2:c8:a2:52:96:0d: a5:b6:42:15:5c:cd:6b:ba:39:f1:db:3b:6e:fc:08: 1e:c7:5c:fd:cb:fd:c4:19:50:c0:43:5f:79:21:a0: 36:70:b8:37:bd:40:1d:a1:83:08:e0:85:be:76:b3: 36:0b:e1:ea:e0:e7:47:08:c1:5e:24:48:71:a2:70: 85:01:a3:52:ac:cb:05:6d:6b:59:ed:33:b0:a0:14: c4:80:b2:c7:02:cb:f0:73:42:a1:0f:2a:82:90:68: 70:d8:a7:cc:b7:28:a4:f8:97:f0:6d:8b:b9:3d:5a: ec:74:5e:7b:7a:76:78:28:6e:be:dd:8b:e7:a2:a6: 77:1b:0b:fc:6e:26:9f:5a:38:34:87:35:1f:c5:13: 56:3a:0c:81:7f:b7:8f:9f:7d:35:28:6d:cd:fb:bd: 00:c7:67:b0:2a:76:73:32:00:88:eb:86:93:32:10: 7d:25:b8:85:d3:4d:c5:9e:00:7b:c7:75:19:4f:45: 70:47:82:a7:61:60:e3:1a:aa:06:d6:c7:8f:25:14: 53:2c:ea:d7:8f:a5:7c:f1:12:5c:09:53:e0:28:9f: 41:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:93:28:36:A0:79:FA:21:D8:6B:6A:35:5B:8A:B5:FF:3A:6E:35:64 X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.54.0/24 IPv6: 2001:df4:3480::/48 Signature Algorithm: sha256WithRSAEncryption 1a:8a:a4:60:be:4c:22:47:75:58:04:01:f9:39:cc:01:6f:38: 51:17:ff:04:3f:8b:d1:cd:06:1a:9e:a0:a5:47:b1:a1:fd:55: ad:83:da:04:17:6a:de:0a:d1:dc:7a:50:4c:3f:52:26:b0:33: 48:65:77:0b:c5:fd:3b:c9:f5:e9:40:6b:13:ae:bc:84:0b:67: 28:3c:ae:14:16:ea:85:54:03:99:0f:12:e7:14:58:af:a9:f8: 25:3e:9f:30:40:70:db:fa:8b:44:0e:1c:87:a8:8c:90:63:0b: 4d:c6:99:ef:70:16:48:11:8d:60:c7:da:6f:d0:3e:34:f4:2b: fc:87:c0:84:3f:b8:da:a4:28:84:74:da:32:77:1b:33:24:24: 18:a6:83:fd:93:ac:b1:21:4d:08:21:56:52:71:99:a1:06:d3: 30:93:98:bc:06:48:c9:98:1b:c5:ee:dc:b6:19:c0:5d:0a:9e: 63:d8:25:1a:cf:27:a8:83:e0:96:48:db:22:cb:cc:01:0a:7e: fd:41:4c:3d:b5:84:42:0b:77:eb:ed:ca:ef:eb:0d:5b:af:14: 46:94:31:a5:91:c2:b3:6f:4e:62:9e:8a:c7:d6:18:3a:af:c3: 6e:3a:49:eb:e3:19:0c:21:c5:cb:86:24:98:67:c7:d2:91:66: 1e:4a:d1:55 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjQwOTA0MjEyOTQ0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4ZDE0OC01NDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMqEyCqijjP7kxoKUtqTI5uojEIklSzKR/DCfwvkSJ/6oskzwMyiyKJSlg2l tkIVXM1rujnx2ztu/Agex1z9y/3EGVDAQ195IaA2cLg3vUAdoYMI4IW+drM2C+Hq 4OdHCMFeJEhxonCFAaNSrMsFbWtZ7TOwoBTEgLLHAsvwc0KhDyqCkGhw2KfMtyik +JfwbYu5PVrsdF57enZ4KG6+3YvnoqZ3Gwv8biafWjg0hzUfxRNWOgyBf7ePn301 KG3N+70Ax2ewKnZzMgCI64aTMhB9JbiF003FngB7x3UZT0VwR4KnYWDjGqoG1seP JRRTLOrXj6V88RJcCVPgKJ9BZQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIiTKDag efoh2GtqNVuKtf86bjVkMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkE1MjEvQzlGQUU3Q0FDNEU2MTFFQUE2NDU0RjU0QzRGOUFFMDIvMzA0NkNCRTJD NEU4MTFFQUI2MDdEMjU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnmTYwDwQCAAIwCQMHACABDfQ0gDANBgkqhkiG9w0BAQsF AAOCAQEAGoqkYL5MIkd1WAQB+TnMAW84URf/BD+L0c0GGp6gpUexof1VrYPaBBdq 3grR3HpQTD9SJrAzSGV3C8X9O8n16UBrE668hAtnKDyuFBbqhVQDmQ8S5xRYr6n4 JT6fMEBw2/qLRA4ch6iMkGMLTcaZ73AWSBGNYMfab9A+NPQr/IfAhD+42qQohHTa MncbMyQkGKaD/ZOssSFNCCFWUnGZoQbTMJOYvAZIyZgbxe7cthnAXQqeY9glGs8n qIPglkjbIsvMAQp+/UFMPbWEQgt36+3K7+sNW68URpQxpZHCs29OYp6Kx9YYOq/D bjpJ6+MZDCHFy4YkmGfH0pFmHkrRVQ== -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org