$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/84A0C6B4D02811ECB2472344C4F9AE02.roa File: 84A0C6B4D02811ECB2472344C4F9AE02.roa (raw, json) Hash identifier: r+FlKKjUNgnx6Bj8dzyLXGS4dtd9pVHhE7jzwzS2cXI= Subject key identifier: EE:3F:BC:D1:E7:55:49:2F:01:CC:3F:15:48:01:B2:FB:9B:6A:4C:C3 Certificate issuer: /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Certificate serial: 025C Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/84A0C6B4D02811ECB2472344C4F9AE02.roa Signing time: Fri 31 May 2024 05:00:48 +0000 ROA not before: Fri 31 May 2024 05:00:48 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 149822 IP address blocks: 103.187.30.0/23 maxlen: 23 103.187.30.0/24 maxlen: 24 103.187.31.0/24 maxlen: 24 2400:7960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Validity Not Before: May 31 05:00:48 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6659597f-4b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:88:4b:d3:e3:5d:01:51:bd:b8:8e:cc:9a: 77:7f:aa:cb:7c:ad:c0:f5:22:df:55:6c:31:29:fe: 46:a7:d2:a7:81:e2:1c:9e:00:60:72:59:42:c8:ff: 32:04:4f:74:8d:94:8a:1e:ac:9e:19:b7:c1:36:97: d6:8a:a4:97:f0:34:bd:9f:af:ba:ee:6d:49:81:6d: 25:51:6e:ea:11:d8:d0:20:ef:b8:c3:79:1d:23:19: 50:1c:41:5e:11:96:c2:df:e5:5f:ed:04:2e:cc:9c: 93:a1:32:13:5e:81:f6:ee:2b:19:f7:41:74:38:f6: b7:47:8e:3f:ac:7d:6a:d8:b6:6c:76:43:22:dc:16: b6:4c:21:72:f1:92:1d:54:7c:6b:68:b3:62:8f:07: af:87:14:66:63:7b:64:1a:32:d8:fa:f3:53:8d:62: 69:3b:e1:fd:8f:4f:75:4b:c1:54:a5:53:47:ea:f0: 7d:68:44:bd:a7:88:95:91:04:0b:60:67:8a:ff:be: 9b:cb:1d:b8:eb:85:e9:d7:35:11:97:70:52:70:0a: e0:5d:0f:1d:b9:53:dc:cf:fd:f6:a4:7c:29:39:49: 3f:6b:a5:85:49:f3:04:a1:fb:77:2e:bc:4c:11:f6: b9:b7:37:36:aa:88:64:60:00:9d:9f:b0:aa:e7:ac: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3F:BC:D1:E7:55:49:2F:01:CC:3F:15:48:01:B2:FB:9B:6A:4C:C3 X509v3 Authority Key Identifier: keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/84A0C6B4D02811ECB2472344C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.187.30.0/23 IPv6: 2400:7960::/32 Signature Algorithm: sha256WithRSAEncryption 83:6c:03:c4:24:c9:d5:dd:88:c1:b2:94:80:50:b0:b4:8e:cc: 16:04:c8:1e:8a:eb:84:76:56:71:e1:2d:f0:00:2e:52:d3:8d: 8c:6f:09:a1:73:ed:63:88:90:8f:ca:e5:05:a5:fd:4e:20:64: 5d:89:e3:b1:41:80:18:e0:8e:14:de:68:16:2c:14:33:3a:d4: 97:cd:cf:8f:33:f0:be:18:6f:f9:f6:84:bc:30:29:b3:e7:e0: 71:c2:2a:50:f1:fc:c0:12:cc:9d:26:f1:0a:e5:83:77:06:32: 14:e6:b7:6e:91:80:80:33:d2:2c:50:27:8b:03:d3:e3:8d:4a: 25:d6:60:b1:91:63:a3:9b:d8:df:78:18:f2:89:6c:8a:a4:8e: 67:f4:05:69:f8:37:20:d0:c5:72:26:8b:3e:91:4c:42:15:d0: ed:a4:02:69:c4:9d:17:c8:61:35:08:f9:14:21:4c:a3:8f:a0: 00:de:7f:1e:3d:7e:6a:f3:6d:6e:59:7a:f6:99:67:d1:08:8d: 49:b0:34:a6:d6:a1:95:d7:cd:f1:55:54:8a:ec:cc:ac:15:72: 09:e8:b3:9c:58:31:2a:f5:1b:6b:ac:e0:b3:ef:f4:d0:64:c9: 46:cc:c2:3b:3c:a2:62:23:66:f1:7b:a7:b8:b1:38:f9:0d:e7: d5:21:68:fe -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMzQxMTAvBgNVBAUTKEQzQzYyMkU3OTBGMURFRjE2OTI4QkJFNTU0MTgxNzI3 Q0Y4Qzg4RjgwHhcNMjQwNTMxMDUwMDQ4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU5NTk3Zi00YjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnOIS9PjXQFRvbiOzJp3f6rLfK3A9SLfVWwxKf5Gp9KngeIcngBgcllCyP8y BE90jZSKHqyeGbfBNpfWiqSX8DS9n6+67m1JgW0lUW7qEdjQIO+4w3kdIxlQHEFe EZbC3+Vf7QQuzJyToTITXoH27isZ90F0OPa3R44/rH1q2LZsdkMi3Ba2TCFy8ZId VHxraLNijwevhxRmY3tkGjLY+vNTjWJpO+H9j091S8FUpVNH6vB9aES9p4iVkQQL YGeK/76byx2464Xp1zURl3BScArgXQ8duVPcz/32pHwpOUk/a6WFSfMEoft3LrxM Efa5tzc2qohkYACdn7Cq56z5JwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFO4/vNHn VUkvAcw/FUgBsvubakzDMB8GA1UdIwQYMBaAFNPGIueQ8d7xaSi75VQYFyfPjIj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIzNC9CMEZGMzBGRUQw MjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2RnBLTHZsVkJnWEo4LU1p UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WWk1NUR4M3ZGcEtMdmxWQmdYSjgtTWlQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDEyMzQvQjBGRjMwRkVEMDI1MTFFQ0EwMTI1NTNGQzRGOUFFMDIvODRBMEM2QjRE MDI4MTFFQ0IyNDcyMzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnux4wDQQCAAIwBwMFACQAeWAwDQYJKoZIhvcNAQELBQAD ggEBAINsA8QkydXdiMGylIBQsLSOzBYEyB6K64R2VnHhLfAALlLTjYxvCaFz7WOI kI/K5QWl/U4gZF2J47FBgBjgjhTeaBYsFDM61JfNz48z8L4Yb/n2hLwwKbPn4HHC KlDx/MASzJ0m8Qrlg3cGMhTmt26RgIAz0ixQJ4sD0+ONSiXWYLGRY6Ob2N94GPKJ bIqkjmf0BWn4NyDQxXImiz6RTEIV0O2kAmnEnRfIYTUI+RQhTKOPoADefx49fmrz bW5ZevaZZ9EIjUmwNKbWoZXXzfFVVIrszKwVcgnos5xYMSr1G2us4LPv9NBkyUbM wjs8omIjZvF7p7ixOPkN59UhaP4= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:46 2024 by rpki-client on console-fra.rpki-client.org