$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/39E6B6BE137011EF984EE96BC4F9AE02.roa File: 39E6B6BE137011EF984EE96BC4F9AE02.roa (raw, json) Hash identifier: IJBVRCtWOw+FsLOo5ZwRYxsh/T25QRZC0qKEusLAigQ= Subject key identifier: 53:DD:2A:58:5D:D1:41:D5:DC:8B:24:AF:2B:93:A0:0C:0D:AC:86:B5 Certificate issuer: /CN=A91C5021/serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902 Certificate serial: 066C Authority key identifier: 28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/39E6B6BE137011EF984EE96BC4F9AE02.roa Signing time: Thu 16 May 2024 10:48:06 +0000 ROA not before: Thu 16 May 2024 10:48:06 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 137274 IP address blocks: 103.106.164.0/22 maxlen: 22 103.106.164.0/23 maxlen: 23 103.106.164.0/24 maxlen: 24 103.106.165.0/24 maxlen: 24 103.106.166.0/23 maxlen: 23 103.106.166.0/24 maxlen: 24 103.106.167.0/24 maxlen: 24 2406:e340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5021/serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902 Validity Not Before: May 16 10:48:06 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=6645e466-a257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:77:92:86:91:40:79:e3:4a:d3:7f:e0:9b:54: 20:08:ef:4a:f7:48:1e:b6:e2:50:07:60:ec:13:54: 16:e8:0f:1e:1d:da:ad:d4:75:a7:e6:83:16:80:ec: 4d:22:81:aa:fa:19:25:c1:a3:30:a8:27:44:86:47: 35:ab:72:b3:a5:8c:a4:3e:0b:cb:eb:0c:26:19:6b: c7:f1:4b:f8:59:d6:b1:51:67:95:fd:76:21:a7:0c: 9a:fd:bb:c7:15:0e:f1:a8:76:f7:03:5d:8f:8b:93: da:6d:64:a9:1e:22:80:ac:9a:0f:16:0f:c5:ee:dc: e1:22:7a:95:3b:a2:76:e7:5e:61:12:20:b9:a3:d8: 14:b0:cb:0b:3f:c4:69:ee:0e:51:30:44:f3:77:3a: 9d:53:d4:46:af:7b:33:50:80:d8:d7:69:9f:b8:88: 4e:36:70:43:f0:e4:ad:37:87:4e:99:8d:e3:96:76: cd:62:c0:9b:f3:17:1a:ce:36:5d:26:5b:33:e9:0f: f5:87:aa:11:a2:30:48:d2:59:fb:b5:0e:a8:54:53: 7f:64:57:70:ae:76:65:b2:89:f1:cb:d2:f5:01:41: 22:dd:c2:50:ba:2b:48:61:fc:ef:1b:0b:a1:c6:18: 9f:ca:12:42:24:49:7e:6c:6e:b3:b6:83:a6:df:cd: 2c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DD:2A:58:5D:D1:41:D5:DC:8B:24:AF:2B:93:A0:0C:0D:AC:86:B5 X509v3 Authority Key Identifier: keyid:28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/39E6B6BE137011EF984EE96BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.164.0/22 IPv6: 2406:e340::/32 Signature Algorithm: sha256WithRSAEncryption 5d:98:73:af:ad:51:3a:ef:2f:b5:94:a9:96:54:3e:29:3b:f7: b9:8b:14:32:cc:4a:c3:cd:84:0a:7b:d2:b7:62:af:2a:59:91: fb:3b:c4:c3:b9:92:ff:f5:42:ee:58:0a:17:c2:f2:43:53:3c: 27:90:6f:5d:85:a5:d1:cd:f8:d0:db:f7:f3:7c:b8:99:cd:5a: 55:dd:3f:44:44:1e:48:74:e6:7d:9d:5a:bc:8e:dc:d4:63:0d: cd:ee:4f:1a:11:94:7e:30:2a:f5:99:d8:be:0d:67:45:9c:02: 7c:7e:77:c4:21:19:83:fe:07:88:0a:04:20:3c:0b:2b:80:41: db:6f:52:56:3a:88:6d:06:bd:a2:08:52:f4:68:32:44:c2:11: bf:32:3d:b6:25:e5:83:14:0d:24:26:c7:9f:0e:9c:e7:30:67: 4d:37:05:87:09:88:ae:29:55:7c:ce:1f:e0:dd:53:a9:97:99: 9c:8b:23:48:db:a6:bd:39:ae:7e:0a:15:d3:b3:e7:6a:e8:24: 60:77:38:9c:be:e3:57:95:56:c5:1e:14:66:60:f3:0d:0b:8e: e6:8a:99:df:0c:d6:11:54:0e:b3:92:1c:5b:39:bf:fe:5c:34: 1b:a3:02:a0:39:d5:ea:65:d1:96:62:18:07:8a:89:da:65:ad: 88:e3:7a:e7 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUwMjExMTAvBgNVBAUTKDI4RjA3MTEwRTQzNTg0QTNCQTZBM0E0QTg3RDY4RTlF QjdEM0U5MDIwHhcNMjQwNTE2MTA0ODA2WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ1ZTQ2Ni1hMjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXeShpFAeeNK03/gm1QgCO9K90getuJQB2DsE1QW6A8eHdqt1HWn5oMWgOxN IoGq+hklwaMwqCdEhkc1q3KzpYykPgvL6wwmGWvH8Uv4WdaxUWeV/XYhpwya/bvH FQ7xqHb3A12Pi5PabWSpHiKArJoPFg/F7tzhInqVO6J2515hEiC5o9gUsMsLP8Rp 7g5RMETzdzqdU9RGr3szUIDY12mfuIhONnBD8OStN4dOmY3jlnbNYsCb8xcazjZd Jlsz6Q/1h6oRojBI0ln7tQ6oVFN/ZFdwrnZlsonxy9L1AUEi3cJQuitIYfzvGwuh xhifyhJCJEl+bG6ztoOm380sMwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFPdKlhd 0UHV3IskryuToAwNrIa1MB8GA1UdIwQYMBaAFCjwcRDkNYSjumo6SofWjp630+kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTAyMS85QUZENDg2QzNC QkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhLTzZhanBLaDlhT25yZlQ2 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQQnhFT1ExaEtPNmFqcEtoOWFPbnJmVDZRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzUwMjEvOUFGRDQ4NkMzQkJDMTFFQkE3NzZGMTYxQzRGOUFFMDIvMzlFNkI2QkUx MzcwMTFFRjk4NEVFOTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnaqQwDQQCAAIwBwMFACQG40AwDQYJKoZIhvcNAQELBQAD ggEBAF2Yc6+tUTrvL7WUqZZUPik797mLFDLMSsPNhAp70rdirypZkfs7xMO5kv/1 Qu5YChfC8kNTPCeQb12FpdHN+NDb9/N8uJnNWlXdP0REHkh05n2dWryO3NRjDc3u TxoRlH4wKvWZ2L4NZ0WcAnx+d8QhGYP+B4gKBCA8CyuAQdtvUlY6iG0GvaIIUvRo MkTCEb8yPbYl5YMUDSQmx58OnOcwZ003BYcJiK4pVXzOH+DdU6mXmZyLI0jbpr05 rn4KFdOz52roJGB3OJy+41eVVsUeFGZg8w0LjuaKmd8M1hFUDrOSHFs5v/5cNBuj AqA51epl0ZZiGAeKidplrYjjeuc= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org