$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa File: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (raw, json) Hash identifier: Cl2JaY88mauo4BKktJ82jCMe+bwqB6SwX6Xz69ru0z0= Subject key identifier: 46:3F:E1:84:01:BA:99:CB:EE:56:81:24:CB:94:DF:C0:60:74:E0:41 Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Certificate serial: 0564 Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa Signing time: Mon 16 Sep 2024 23:22:10 +0000 ROA not before: Mon 16 Sep 2024 23:22:10 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 11158 IP address blocks: 117.103.120.0/24 maxlen: 24 117.103.121.0/24 maxlen: 24 117.103.122.0/24 maxlen: 24 117.103.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1380 (0x564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Validity Not Before: Sep 16 23:22:10 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e8bda2-557c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:28:c7:24:5b:40:c9:b7:2c:d9:23:05:ff: 7f:32:4a:da:e7:4d:cf:fa:d8:fa:d4:25:81:67:30: 03:3b:2b:09:6a:5a:28:f6:69:ad:d4:a2:79:69:91: 62:65:7c:92:5e:87:ef:88:30:5b:61:97:b8:43:87: 37:cf:1d:cb:70:f8:19:10:ae:3d:34:52:c6:ee:89: 79:76:9d:8d:5b:db:ed:a9:ad:e2:2e:b3:20:cd:ef: 91:e9:6f:ca:67:76:88:f0:74:2e:ab:d5:9b:3b:04: c1:90:a7:fb:22:b9:d2:9a:84:e1:43:a2:38:9f:f8: 18:58:e8:9f:d1:20:d3:8a:36:78:ad:c9:45:9c:8a: 9b:3d:c8:44:3a:44:2b:52:85:27:1b:65:ac:a4:f5: ac:44:6e:b1:46:c9:97:64:97:dc:6d:83:c2:22:22: 66:e0:81:71:fa:05:8a:58:e2:01:1b:46:1e:33:1c: 60:ce:0e:fe:6a:eb:3e:44:e3:65:2a:78:a1:90:04: 98:dd:dc:c6:a6:e7:07:f4:c7:ab:6f:18:1f:f6:82: 53:51:df:19:c8:34:79:d2:a8:9c:0a:ad:94:d3:4a: bd:b4:ae:06:6b:0f:62:87:5a:de:e5:17:c1:cb:7d: 5f:fe:53:28:e6:36:c4:51:5b:af:77:29:7c:04:54: 11:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3F:E1:84:01:BA:99:CB:EE:56:81:24:CB:94:DF:C0:60:74:E0:41 X509v3 Authority Key Identifier: keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.103.120.0/22 Signature Algorithm: sha256WithRSAEncryption dd:fc:4d:f3:13:ed:e8:d3:56:3b:6c:de:75:b3:65:ba:63:9d: 39:13:0e:5d:68:d6:83:9e:d7:60:dd:4f:69:99:c9:55:aa:9a: 10:fc:ae:a7:0c:a7:e7:b7:f9:37:19:29:f8:ec:a3:dd:d5:55: 4b:77:49:45:95:6e:ae:b2:36:76:10:c8:5d:45:3b:70:56:bc: ac:00:0c:59:f5:f7:a4:6a:6b:8b:3e:1f:f8:99:6e:9c:e8:b4: 06:a4:4d:e6:ba:45:6d:df:48:31:ea:b4:5b:6d:e7:cd:b1:bf: 4c:f4:9b:e2:36:1b:b0:43:86:2d:3b:e7:a7:ca:6e:a7:be:77: bf:8c:d7:3e:12:0f:92:60:7e:b2:a1:d6:5d:9c:3b:39:b4:c9: 09:41:b7:a5:ec:44:69:7e:2e:22:84:8d:8b:ed:48:65:71:d7: 53:5a:93:4e:6c:4c:8d:10:db:e6:12:29:9e:f7:e6:bf:d1:a2: cc:3b:d7:c6:95:f0:fd:cb:c0:93:40:b0:73:48:6d:fc:42:29: ad:e3:17:c0:fb:7d:cb:ff:70:d4:86:14:e5:c9:eb:cc:8f:a6: 5f:dd:d5:a7:99:60:a8:28:b3:31:b4:01:b0:96:81:78:94:00: ed:2c:b6:ed:04:ab:c7:63:84:e4:8a:76:0d:d5:3e:5e:58:d6: 71:18:25:27 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw NzZFODhDMDgwHhcNMjQwOTE2MjMyMjEwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU4YmRhMi01NTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsX8oxyRbQMm3LNkjBf9/Mkra503P+tj61CWBZzADOysJaloo9mmt1KJ5aZFi ZXySXofviDBbYZe4Q4c3zx3LcPgZEK49NFLG7ol5dp2NW9vtqa3iLrMgze+R6W/K Z3aI8HQuq9WbOwTBkKf7IrnSmoThQ6I4n/gYWOif0SDTijZ4rclFnIqbPchEOkQr UoUnG2WspPWsRG6xRsmXZJfcbYPCIiJm4IFx+gWKWOIBG0YeMxxgzg7+aus+RONl KnihkASY3dzGpucH9Merbxgf9oJTUd8ZyDR50qicCq2U00q9tK4Gaw9ih1re5RfB y31f/lMo5jbEUVuvdyl8BFQRkwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEY/4YQB upnL7laBJMuU38BgdOBBMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkUxNDYvRTQxQUI0MkFCRDMxMTFFQkJGQzNGOTIxQzRGOUFFMDIvREQ0NkJCOTJF REFCMTFFREJFOTFCQjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJ1Z3gwDQYJKoZIhvcNAQELBQADggEBAN38TfMT7ejTVjts 3nWzZbpjnTkTDl1o1oOe12DdT2mZyVWqmhD8rqcMp+e3+TcZKfjso93VVUt3SUWV bq6yNnYQyF1FO3BWvKwADFn196Rqa4s+H/iZbpzotAakTea6RW3fSDHqtFtt582x v0z0m+I2G7BDhi0756fKbqe+d7+M1z4SD5JgfrKh1l2cOzm0yQlBt6XsRGl+LiKE jYvtSGVx11Nak05sTI0Q2+YSKZ735r/Rosw718aV8P3LwJNAsHNIbfxCKa3jF8D7 fcv/cNSGFOXJ68yPpl/d1aeZYKgoszG0AbCWgXiUAO0stu0Eq8djhOSKdg3VPl5Y 1nEYJSc= -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:24 2024 by rpki-client on console-fra.rpki-client.org