$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/C6671418A37A11EFBED1AE3BC4F9AE02.roa File: C6671418A37A11EFBED1AE3BC4F9AE02.roa (raw, json) Hash identifier: t7QLTmlrwRSdzxwkZ3ICKVh+ifH3BRpvn3KoSgjF9OI= Subject key identifier: 56:90:7E:57:4A:9A:97:D4:EE:E3:E8:32:B9:B0:6D:9B:3D:75:C6:47 Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Certificate serial: 09E6 Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/C6671418A37A11EFBED1AE3BC4F9AE02.roa Signing time: Fri 15 Nov 2024 17:57:27 +0000 ROA not before: Fri 15 Nov 2024 17:57:27 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 58895 IP address blocks: 103.203.44.0/24 maxlen: 24 116.213.32.0/24 maxlen: 24 116.213.33.0/24 maxlen: 24 116.213.34.0/24 maxlen: 24 116.213.35.0/24 maxlen: 24 123.253.92.0/24 maxlen: 24 123.253.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 19:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2534 (0x9e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Validity Not Before: Nov 15 17:57:27 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67378b87-2841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:90:ac:23:9b:ba:11:86:a3:52:e9:0f:2f:18: 29:6a:54:42:77:d3:47:be:0f:9a:02:d1:03:91:c2: ea:b7:9f:84:03:a7:d4:b6:9c:88:0c:1a:b9:98:71: 1e:eb:5e:6a:3e:da:96:c2:8d:fd:a3:f1:01:c2:f2: 83:5d:a8:7f:da:11:06:55:fb:ec:f3:33:05:85:4c: 82:cb:72:27:96:9c:9c:bd:07:79:c2:d1:e9:bd:57: bb:90:ef:aa:86:82:b7:b5:a5:e6:0e:19:cf:03:82: d6:87:14:49:82:8b:f4:46:78:1b:57:7a:32:39:b4: 1e:cc:31:86:7d:2b:b8:bd:7f:33:b9:46:cb:a0:92: 4c:be:bd:43:d3:33:c4:f5:5d:62:4a:b5:6a:ed:68: f6:8d:40:4e:f8:58:34:77:f0:01:fd:0a:49:b3:b1: bb:9c:52:2a:56:97:5e:a6:06:72:5e:56:56:58:4c: bb:cf:b5:50:d7:33:c6:62:13:cb:7e:e4:c6:b5:a7: 84:bb:94:16:4e:08:e0:94:cc:0b:b9:c1:5b:19:70: 72:54:9c:64:d0:bf:5d:3a:6c:3c:99:10:7e:f1:86: 0e:7a:e2:97:4a:c1:2c:52:fd:dd:49:1d:43:55:66: cf:1d:4b:41:40:27:72:bd:8a:a7:3b:c4:b0:88:71: 06:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:90:7E:57:4A:9A:97:D4:EE:E3:E8:32:B9:B0:6D:9B:3D:75:C6:47 X509v3 Authority Key Identifier: keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/C6671418A37A11EFBED1AE3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.203.44.0/24 116.213.32.0/22 123.253.92.0/24 123.253.94.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:c9:6f:1a:50:5f:7b:f3:3d:2a:19:d2:92:bb:82:ba:2a:c3: 58:28:5a:b9:4b:7f:3b:2b:b5:e2:dd:73:ef:a9:58:f1:a2:36: 80:87:a3:51:a7:a5:28:c2:c0:53:cb:50:49:8f:39:fc:4c:f8: b0:6f:b7:2b:d2:0a:1b:b5:41:ce:a7:77:14:fb:38:96:72:72: 02:4a:02:f8:70:95:e7:be:25:d2:f2:e4:16:2f:c2:73:cc:90: 65:6c:ce:75:d0:70:ad:bb:75:f3:ab:bf:22:ba:a6:6f:04:e3: 70:2a:24:6c:03:35:2a:04:22:3a:52:86:f7:e9:53:37:ec:17: a1:bb:8f:64:63:43:db:0e:17:ac:e7:b3:64:ee:83:15:61:0b: 5c:35:16:46:55:0a:bc:e0:3f:3e:4c:f4:15:f5:83:a7:c5:1e: e5:ae:86:b8:86:08:11:22:68:32:03:89:42:b1:4b:d5:db:e9: b9:b9:be:c2:4b:4e:32:44:e6:35:ad:6b:f9:43:3c:3b:86:bd: be:72:06:ca:c6:12:ac:14:51:ed:fc:9b:9c:c2:1a:f6:d7:b9: cb:76:39:08:f7:4a:23:94:bb:92:76:cc:fe:8e:9e:6d:d9:0a: 76:45:17:49:2a:8c:36:14:ba:5e:a5:29:f5:ba:67:76:4c:23: 47:70:87:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy QTM2OTE3QkQwHhcNMjQxMTE1MTc1NzI3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM3OGI4Ny0yODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA85CsI5u6EYajUukPLxgpalRCd9NHvg+aAtEDkcLqt5+EA6fUtpyIDBq5mHEe 615qPtqWwo39o/EBwvKDXah/2hEGVfvs8zMFhUyCy3InlpycvQd5wtHpvVe7kO+q hoK3taXmDhnPA4LWhxRJgov0RngbV3oyObQezDGGfSu4vX8zuUbLoJJMvr1D0zPE 9V1iSrVq7Wj2jUBO+Fg0d/AB/QpJs7G7nFIqVpdepgZyXlZWWEy7z7VQ1zPGYhPL fuTGtaeEu5QWTgjglMwLucFbGXByVJxk0L9dOmw8mRB+8YYOeuKXSsEsUv3dSR1D VWbPHUtBQCdyvYqnO8SwiHEGdQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFFaQfldK mpfU7uPoMrmwbZs9dcZHMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFGQ0MvQ0RCQzU5ODY3MzA5MTFFQUE4ODIwMDMwQzRGOUFFMDIvQzY2NzE0MThB MzdBMTFFRkJFRDFBRTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnyywDBAJ01SADBAB7/VwDBAB7/V4wDQYJKoZIhvcNAQEL BQADggEBAHvJbxpQX3vzPSoZ0pK7groqw1goWrlLfzsrteLdc++pWPGiNoCHo1Gn pSjCwFPLUEmPOfxM+LBvtyvSChu1Qc6ndxT7OJZycgJKAvhwlee+JdLy5BYvwnPM kGVsznXQcK27dfOrvyK6pm8E43AqJGwDNSoEIjpShvfpUzfsF6G7j2RjQ9sOF6zn s2TugxVhC1w1FkZVCrzgPz5M9BX1g6fFHuWuhriGCBEiaDIDiUKxS9Xb6bm5vsJL TjJE5jWta/lDPDuGvb5yBsrGEqwUUe38m5zCGvbXuct2OQj3SiOUu5J2zP6Onm3Z CnZFF0kqjDYUul6lKfW6Z3ZMI0dwh/Q= -----END CERTIFICATE-----Generated at Tue Nov 26 20:53:14 2024 by rpki-client on console-fra.rpki-client.org