$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/41A8950C272F11EF9D0A0C5CC4F9AE02.roa File: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (raw, json) Hash identifier: sqQN0/UW0uCQkGk8Z/Opr00dIdnWMw+4VliAO+ZDuvU= Subject key identifier: 6D:D0:55:F6:53:B0:7C:0A:73:B7:8B:31:1C:3B:BA:46:FB:0F:CF:72 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: 0F Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/41A8950C272F11EF9D0A0C5CC4F9AE02.roa Signing time: Mon 10 Jun 2024 13:42:19 +0000 ROA not before: Mon 10 Jun 2024 13:42:19 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 32787 IP address blocks: 103.37.228.0/24 maxlen: 24 103.55.52.0/24 maxlen: 24 103.55.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Jun 10 13:42:19 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=666702bb-962f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:01:3d:00:6f:32:06:42:54:00:e2:37:84: 38:f4:1d:a9:16:c6:a1:90:76:bb:13:f0:b5:86:22: 11:16:35:9a:e3:82:90:cc:61:e1:e7:49:32:28:67: 6b:79:16:8f:9d:b6:5e:43:b1:e0:b2:b0:3e:60:08: 09:14:9d:95:db:4b:3e:55:cc:82:4f:9b:fd:0b:39: aa:5b:f8:21:b5:f3:6d:af:cc:95:7b:a7:e9:d2:27: bb:db:f9:f7:d5:f1:ca:f0:52:13:0d:00:3d:2e:c8: 05:55:c8:ca:e5:bd:74:0c:27:e4:16:7d:19:7a:36: cb:71:4e:af:b0:63:5e:12:29:fc:4f:5c:d1:e2:a1: 85:ab:56:21:fc:51:a8:ac:8b:31:57:33:ed:41:09: 12:3d:f2:8c:f7:31:68:88:34:90:46:39:59:60:da: ec:c9:a3:1d:31:ce:f3:24:d9:11:56:d3:9e:15:95: 55:c2:1f:0c:39:b7:16:e5:01:8d:dd:2b:38:aa:a8: b6:2b:fc:1e:9b:a0:c4:a2:4c:7a:2e:bd:41:b7:3d: 4c:13:2d:8e:43:65:37:af:94:22:c5:b0:2f:21:42: 1e:54:fb:6d:f7:bf:5c:a1:df:51:e5:e6:2e:a9:90: fb:cb:e7:01:3c:7d:6d:c4:55:e6:e4:d5:84:ea:a2: a0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D0:55:F6:53:B0:7C:0A:73:B7:8B:31:1C:3B:BA:46:FB:0F:CF:72 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/41A8950C272F11EF9D0A0C5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.37.228.0/24 103.55.52.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:c8:f6:1e:b8:5b:46:f7:43:9d:90:d1:03:03:db:62:7c:b8: 0a:a6:3e:b7:08:9e:9f:60:84:b8:82:30:d8:b4:c8:91:13:67: 78:f8:3a:fa:fa:e0:fe:df:8c:99:bf:b2:79:89:32:8c:b9:eb: 04:ce:af:a5:ef:46:7e:f6:7f:73:7e:c0:e8:cd:3d:17:81:b9: 20:e3:15:dc:f1:67:f2:b9:ac:1d:d2:3b:e3:4b:e3:a0:f9:c1: e2:44:ce:1c:41:86:8d:85:72:72:2d:02:58:87:71:2b:76:17: 7b:94:75:6d:35:e8:39:61:5b:ff:fa:c5:3c:65:47:1f:f2:45: 74:ed:25:18:59:4a:7a:8f:b1:da:ce:8d:a3:e1:47:a6:5d:10: 3c:24:8d:b8:65:24:d6:d0:53:ac:ab:0e:32:db:b2:cd:bb:ff: 77:b7:d5:84:b6:b7:aa:52:10:20:dc:d6:d7:2a:2e:13:d7:42: dc:fc:db:2e:83:d3:e3:f3:45:f8:80:6c:28:f2:9a:2e:75:64: b7:35:cc:e9:8b:b0:0f:ff:3e:73:73:7d:4d:af:df:94:6b:bc: a5:08:b5:9a:7c:0a:45:80:e4:16:5e:4d:3c:2c:87:9f:ab:9a: 85:f6:cd:2a:38:30:66:dd:b9:52:50:7a:08:2f:fc:60:b2:94: 21:19:ca:47 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkM4QTExMC8GA1UEBRMoNkNFN0I1NzUwRTZFMTdEM0QzOUVCNUIwODdGRDNGQUQ1 OTU5RjMyNTAeFw0yNDA2MTAxMzQyMTlaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NjcwMmJiLTk2MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvhwE9AG8yBkJUAOI3hDj0HakWxqGQdrsT8LWGIhEWNZrjgpDMYeHnSTIoZ2t5 Fo+dtl5DseCysD5gCAkUnZXbSz5VzIJPm/0LOapb+CG1822vzJV7p+nSJ7vb+ffV 8crwUhMNAD0uyAVVyMrlvXQMJ+QWfRl6NstxTq+wY14SKfxPXNHioYWrViH8Uais izFXM+1BCRI98oz3MWiINJBGOVlg2uzJox0xzvMk2RFW054VlVXCHww5txblAY3d KziqqLYr/B6boMSiTHouvUG3PUwTLY5DZTevlCLFsC8hQh5U+233v1yh31Hl5i6p kPvL5wE8fW3EVebk1YTqoqDrAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUbdBV9lOw fApzt4sxHDu6RvsPz3IwHwYDVR0jBBgwFoAUbOe1dQ5uF9PTnrWwh/0/rVlZ8yUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyQzhBLzYxRUM0OTE2MjRD OTExRUY5QzhDNjI1OUM0RjlBRTAyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYk9lMWRRNXVGOVBUbnJXd2hfMF9yVmxaOHlVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi80MUE4OTUwQzI3 MkYxMUVGOUQwQTBDNUNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAGcl5AMEAWc3NDANBgkqhkiG9w0BAQsFAAOCAQEAPMj2Hrhb RvdDnZDRAwPbYny4CqY+twien2CEuIIw2LTIkRNnePg6+vrg/t+Mmb+yeYkyjLnr BM6vpe9GfvZ/c37A6M09F4G5IOMV3PFn8rmsHdI740vjoPnB4kTOHEGGjYVyci0C WIdxK3YXe5R1bTXoOWFb//rFPGVHH/JFdO0lGFlKeo+x2s6No+FHpl0QPCSNuGUk 1tBTrKsOMtuyzbv/d7fVhLa3qlIQINzW1youE9dC3PzbLoPT4/NF+IBsKPKaLnVk tzXM6YuwD/8+c3N9Ta/flGu8pQi1mnwKRYDkFl5NPCyHn6uahfbNKjgwZt25UlB6 CC/8YLKUIRnKRw== -----END CERTIFICATE-----Generated at Tue Sep 17 06:07:32 2024 by rpki-client on console-fra.rpki-client.org