$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/5A020E1229E011EB80A2FF13C4F9AE02.roa File: 5A020E1229E011EB80A2FF13C4F9AE02.roa (raw, json) Hash identifier: cqbI01oJRPBEH+/wJOlpiaUkORzn2kWmqx1uTWAfIc8= Subject key identifier: 65:2F:8D:38:1F:AC:A8:C7:1B:F8:02:6E:9D:12:3E:BC:8D:02:65:06 Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Certificate serial: 0794 Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/5A020E1229E011EB80A2FF13C4F9AE02.roa Signing time: Sat 31 Aug 2024 21:49:32 +0000 ROA not before: Sat 31 Aug 2024 21:49:32 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 138505 IP address blocks: 103.154.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Validity Not Before: Aug 31 21:49:32 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d38fec-ae6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:d4:38:a2:e2:3f:6a:33:28:3e:51:8b:e7: 05:c2:3a:f9:10:33:1b:65:9f:eb:8e:14:cd:0a:b8: 34:82:d7:c1:1d:5c:1d:1d:41:b3:07:be:65:20:c6: 7a:f8:5f:33:f1:75:a0:07:5a:47:a7:6e:e9:34:c7: 54:37:ef:5c:20:1c:9e:4f:65:09:24:fc:be:3f:d0: e9:0c:e1:15:44:67:ec:60:0a:70:88:e0:6d:43:39: 7d:da:7e:c9:9d:81:8f:c0:78:d5:a6:16:67:af:6a: 03:31:63:53:5f:e6:1b:f4:95:15:c5:59:2e:ec:05: 77:fb:1f:4b:e6:f7:c9:08:13:ca:39:b7:8d:fb:3f: 27:f2:e5:27:52:3a:af:d2:29:9c:d2:75:f3:3e:70: ec:03:98:47:71:f7:0f:bf:b5:fc:2a:38:d7:f2:a8: 39:a9:0e:86:de:2b:86:2a:6f:62:a4:e4:33:63:94: 8b:d6:ae:66:fe:13:0f:b0:4c:41:de:9c:a4:e6:51: c8:3f:45:82:26:01:62:cf:11:c9:a5:23:e7:37:7e: 65:45:13:b3:c2:5d:4d:f5:b2:6c:4f:a0:a6:85:5a: aa:df:68:1c:52:5c:87:eb:fb:72:67:b3:b0:2d:89: 02:2a:3d:bb:37:41:86:5f:38:cb:22:2b:ab:de:94: 91:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2F:8D:38:1F:AC:A8:C7:1B:F8:02:6E:9D:12:3E:BC:8D:02:65:06 X509v3 Authority Key Identifier: keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/5A020E1229E011EB80A2FF13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.17.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:cd:f6:67:b7:77:70:d1:00:0d:bb:4b:e7:5a:f6:80:4f:7a: 28:66:54:0c:0d:ef:35:c7:c3:15:89:96:af:34:9e:9e:fc:87: c4:62:fe:53:e7:66:56:a9:fb:2b:32:fe:df:43:19:d9:cb:c1: 3e:7f:69:46:e7:3e:c8:24:8e:84:ac:fb:14:8a:62:61:1a:92: 02:12:79:22:d6:b4:df:6d:3b:0a:70:3a:7d:b7:20:7a:b3:4c: 61:80:7e:5e:36:53:de:9f:bc:a5:0c:f2:ef:1e:ff:34:6a:50: d5:af:fe:fc:ca:b9:c2:d6:2e:74:40:fa:eb:8d:4f:90:3c:15: 7c:ac:a1:9b:af:35:e1:9c:ee:55:35:25:f2:09:61:4a:7b:db: e1:62:07:72:43:98:c0:63:5e:ff:cd:9f:f6:60:db:15:4a:5b: 94:8e:1e:b6:fd:8c:97:73:4e:04:b6:61:81:c0:7b:77:58:7b: f0:65:19:ae:b8:07:34:6f:4f:5b:43:bd:6b:81:90:26:31:0a: a6:b3:aa:8b:63:fc:96:29:d7:cf:11:88:52:76:5c:59:c8:7e: 16:a8:b2:5c:ea:0e:7a:72:12:a4:d5:8f:c0:b9:55:65:fa:85: a1:d5:c8:43:2c:b9:9a:a4:68:b9:c1:a1:d9:55:25:1c:64:fb: 88:ca:5c:5c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUzOEQ3QkI3MTIz NzE5MDgyRTcwHhcNMjQwODMxMjE0OTMyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQzOGZlYy1hZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQDUOKLiP2ozKD5Ri+cFwjr5EDMbZZ/rjhTNCrg0gtfBHVwdHUGzB75lIMZ6 +F8z8XWgB1pHp27pNMdUN+9cIByeT2UJJPy+P9DpDOEVRGfsYApwiOBtQzl92n7J nYGPwHjVphZnr2oDMWNTX+Yb9JUVxVku7AV3+x9L5vfJCBPKObeN+z8n8uUnUjqv 0imc0nXzPnDsA5hHcfcPv7X8KjjX8qg5qQ6G3iuGKm9ipOQzY5SL1q5m/hMPsExB 3pyk5lHIP0WCJgFizxHJpSPnN35lRROzwl1N9bJsT6CmhVqq32gcUlyH6/tyZ7Ow LYkCKj27N0GGXzjLIiur3pSRrQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGUvjTgf rKjHG/gCbp0SPryNAmUGMB8GA1UdIwQYMBaAFMxdXODcGCEJDLx1ONe7cSNxkILn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTFBNi9CQTRDQ0UwRUQ3 MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlRa012SFU0MTd0eEkzR1Fn dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGMWM0TndZSVFrTXZIVTQxN3R4STNHUWd1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkxQTYvQkE0Q0NFMEVENzJCMTFFQThDMUJCRDREQzRGOUFFMDIvNUEwMjBFMTIy OUUwMTFFQjgwQTJGRjEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnmhEwDQYJKoZIhvcNAQELBQADggEBABvN9me3d3DRAA27 S+da9oBPeihmVAwN7zXHwxWJlq80np78h8Ri/lPnZlap+ysy/t9DGdnLwT5/aUbn PsgkjoSs+xSKYmEakgISeSLWtN9tOwpwOn23IHqzTGGAfl42U96fvKUM8u8e/zRq UNWv/vzKucLWLnRA+uuNT5A8FXysoZuvNeGc7lU1JfIJYUp72+FiB3JDmMBjXv/N n/Zg2xVKW5SOHrb9jJdzTgS2YYHAe3dYe/BlGa64BzRvT1tDvWuBkCYxCqazqotj /JYp188RiFJ2XFnIfhaoslzqDnpyEqTVj8C5VWX6haHVyEMsuZqkaLnBodlVJRxk +4jKXFw= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org