$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/0BAA4608297211EB99ECF956C4F9AE02.roa File: 0BAA4608297211EB99ECF956C4F9AE02.roa (raw, json) Hash identifier: Pzy/lWlyEAOnnToKQdX1gv5KRRU1QsPgl9JiMWq4wxE= Subject key identifier: 47:11:5B:0E:8D:F7:1C:4E:F1:CE:0F:CD:BC:3F:5E:A7:3A:FA:17:0C Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 06D4 Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/0BAA4608297211EB99ECF956C4F9AE02.roa Signing time: Tue 08 Oct 2024 22:01:12 +0000 ROA not before: Tue 08 Oct 2024 22:01:12 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 141203 IP address blocks: 103.156.76.0/23 maxlen: 23 103.156.76.0/24 maxlen: 24 103.156.77.0/24 maxlen: 24 2406:81c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1748 (0x6d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: Oct 8 22:01:12 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6705aba8-c20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:91:a6:ce:ae:79:12:14:89:39:15:8c:bf:f2: de:8a:c8:32:cb:18:57:a1:0d:f4:3a:42:02:76:f3: b3:d8:6f:9f:3b:de:9d:b8:f8:6b:46:1a:e5:8b:2f: 3d:63:ce:60:47:e7:7a:15:dd:9f:f2:f7:ff:09:7a: 8e:bb:a5:92:b6:fa:1d:e2:14:f6:29:26:62:7e:fd: e3:c7:ac:64:61:78:07:83:54:d8:06:75:6e:26:b5: c4:6f:51:4c:7f:ea:91:4e:07:8b:46:84:14:1d:08: 88:9e:20:0e:d7:a5:18:a9:aa:73:7a:7c:46:45:b7: b1:34:03:b2:fb:5b:f2:2f:da:87:dd:e2:86:9b:3c: 4e:cb:26:09:15:52:d2:2d:d1:c4:59:06:ae:06:d3: 5c:d1:3f:a9:e8:8c:6d:d7:b7:8f:bf:ec:04:61:1c: 47:b4:af:fc:3f:e0:e0:e5:8e:f1:5f:f6:a1:04:bb: 05:66:dd:4f:56:0e:62:ff:08:d9:d8:47:39:5f:7a: 53:ea:7e:72:bd:8d:2c:a5:e0:eb:dd:df:2a:34:0c: a6:5b:73:e6:3d:f1:29:6b:0e:87:b9:ef:15:a2:8f: 26:80:49:40:11:93:4c:32:50:c1:33:c5:00:91:cc: 9d:59:8e:f4:3a:8f:8a:08:7c:99:f2:ca:a4:de:ec: 66:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:11:5B:0E:8D:F7:1C:4E:F1:CE:0F:CD:BC:3F:5E:A7:3A:FA:17:0C X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/0BAA4608297211EB99ECF956C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.76.0/23 IPv6: 2406:81c0::/32 Signature Algorithm: sha256WithRSAEncryption 0c:49:b0:89:85:dc:38:e8:ae:c4:6c:ea:44:52:19:3b:65:66: 79:5d:ae:4b:45:6e:db:ad:67:6c:f3:21:b9:eb:74:b4:a2:c3: 30:65:8a:64:7d:d3:33:79:76:da:9f:2a:18:f4:f7:46:57:8c: 6a:2d:7b:87:aa:b1:4a:e3:1b:7a:9e:e4:85:9b:74:55:b0:99: 08:4d:cd:04:ba:b2:01:1e:ae:40:9d:29:43:99:d9:76:88:01: 0a:43:d8:a3:ba:6b:ff:1f:e3:89:75:b0:2f:7d:62:30:65:20: 2c:d7:a4:f1:9a:36:ff:fe:8f:4a:fa:40:95:51:b7:ce:f6:56: 4b:93:5c:0d:c9:7f:53:40:47:0c:2c:31:55:6b:91:b4:2d:22: ea:cf:e9:06:32:7f:b9:9c:9d:cb:dd:27:23:93:b0:3c:74:00: 4c:70:23:25:c7:2a:3c:32:be:d8:6f:cf:62:d8:2d:4d:f8:e0: cc:91:4a:af:80:ee:05:4e:88:ce:dc:b8:8f:dc:75:7b:d8:e1: 49:ab:c3:60:4c:cc:6e:ad:bf:2b:eb:d0:19:f8:4c:7f:a2:45: ca:1c:0d:ac:48:be:2f:e6:7b:40:f7:c9:25:7d:c1:5b:17:01: 58:37:33:75:c2:d2:4d:a0:70:96:a7:39:47:44:b4:06:38:88: 6b:0b:09:4a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjQxMDA4MjIwMTEyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA1YWJhOC1jMjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5Gmzq55EhSJORWMv/LeisgyyxhXoQ30OkICdvOz2G+fO96duPhrRhrliy89 Y85gR+d6Fd2f8vf/CXqOu6WStvod4hT2KSZifv3jx6xkYXgHg1TYBnVuJrXEb1FM f+qRTgeLRoQUHQiIniAO16UYqapzenxGRbexNAOy+1vyL9qH3eKGmzxOyyYJFVLS LdHEWQauBtNc0T+p6Ixt17ePv+wEYRxHtK/8P+Dg5Y7xX/ahBLsFZt1PVg5i/wjZ 2Ec5X3pT6n5yvY0speDr3d8qNAymW3PmPfEpaw6Hue8Voo8mgElAEZNMMlDBM8UA kcydWY70Oo+KCHyZ8sqk3uxmmwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEcRWw6N 9xxO8c4Pzbw/Xqc6+hcMMB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzYwNjQvNTJGRUY3M0EyOTcwMTFFQjkxRTlERTU0QzRGOUFFMDIvMEJBQTQ2MDgy OTcyMTFFQjk5RUNGOTU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnnEwwDQQCAAIwBwMFACQGgcAwDQYJKoZIhvcNAQELBQAD ggEBAAxJsImF3DjorsRs6kRSGTtlZnldrktFbtutZ2zzIbnrdLSiwzBlimR90zN5 dtqfKhj090ZXjGote4eqsUrjG3qe5IWbdFWwmQhNzQS6sgEerkCdKUOZ2XaIAQpD 2KO6a/8f44l1sC99YjBlICzXpPGaNv/+j0r6QJVRt872VkuTXA3Jf1NARwwsMVVr kbQtIurP6QYyf7mcncvdJyOTsDx0AExwIyXHKjwyvthvz2LYLU344MyRSq+A7gVO iM7cuI/cdXvY4Umrw2BMzG6tvyvr0Bn4TH+iRcocDaxIvi/me0D3ySV9wVsXAVg3 M3XC0k2gcJanOUdEtAY4iGsLCUo= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org