$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BEB276EECCE311EAA397205EC4F9AE02.roa File: BEB276EECCE311EAA397205EC4F9AE02.roa (raw, json) Hash identifier: jgTYi57dnGXhFEZx8F96LVtuauTCfgLefdSP5U2KTns= Subject key identifier: 53:49:E5:C4:F2:9E:39:DD:6B:CA:03:22:70:DC:D1:61:81:F0:F0:A2 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 07A5 Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BEB276EECCE311EAA397205EC4F9AE02.roa Signing time: Tue 16 Jul 2024 21:39:34 +0000 ROA not before: Tue 16 Jul 2024 21:39:34 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 45437 IP address blocks: 103.57.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Jul 16 21:39:34 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6696e896-de2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:a3:55:97:47:ea:f8:c6:e4:af:9c:d8:e9: 70:6a:80:96:a8:1a:25:4c:21:7f:e7:ea:e8:e2:ce: b1:8f:a5:8a:38:91:26:29:71:3f:58:8e:91:bd:8e: 69:71:a3:6a:71:64:5c:a3:85:97:00:92:e2:20:7b: 99:5e:fc:17:41:0f:49:b4:f4:d5:a9:f2:f8:e1:cb: 61:b7:bb:1b:66:f7:f1:f2:63:cf:68:ac:d6:bb:07: 43:89:a3:a2:e8:27:26:f4:a0:76:ff:9f:f8:30:48: 31:c6:a1:8a:d5:57:0c:36:3f:2e:f8:9b:82:d8:30: 62:95:ad:1a:b1:ac:ac:fb:41:45:f0:9f:89:12:a2: c6:70:77:85:a9:74:3f:14:5f:db:bf:0c:34:2c:f3: 5f:c8:2d:24:a7:66:e1:d6:2a:69:f6:93:8f:76:ac: 5f:9e:c9:d1:8d:85:54:7c:d3:51:48:ad:3a:02:83: f1:0d:08:4c:59:b2:d3:00:a2:65:ac:60:7e:00:55: a5:ea:be:24:c6:f7:75:01:17:b4:99:9f:16:08:2f: c8:6a:b6:47:09:e1:d6:86:9e:05:30:32:85:7f:18: 6d:6f:85:f2:eb:c7:7d:c1:db:35:0f:f4:aa:c3:3e: 38:5a:bf:44:d7:65:38:d2:4f:89:ca:84:f4:80:bb: 02:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:49:E5:C4:F2:9E:39:DD:6B:CA:03:22:70:DC:D1:61:81:F0:F0:A2 X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BEB276EECCE311EAA397205EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.57.3.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:95:15:c3:9f:28:b2:be:6c:99:7b:f2:1b:d8:27:4f:80:4d: 05:a0:5b:b8:e5:3f:17:8e:f6:bc:30:7d:11:7d:f7:c5:19:aa: 5b:f0:61:b7:60:64:f0:89:d4:39:7b:15:eb:92:04:4b:62:8c: 84:32:e4:35:a7:ab:50:b1:88:41:72:f1:4c:c4:26:a0:f4:37: 52:51:b3:fe:2c:e9:9a:57:06:62:14:e0:2d:aa:45:c0:74:80: 7f:f1:86:0e:ae:79:c9:b4:60:97:60:d1:3f:3a:ec:6f:66:6b: 90:86:b1:d3:45:61:78:08:79:be:c9:e8:68:4e:c1:65:34:36: 40:d2:56:ea:3d:3c:23:c3:b0:d8:de:44:40:29:0b:7f:9f:fb: 05:23:27:1b:1a:f9:21:78:22:39:5f:34:6e:78:26:95:b8:bc: eb:ac:30:55:68:92:d0:57:f7:90:74:71:c6:ac:79:6e:9d:0a: 5b:20:45:52:c4:55:fa:05:ff:eb:5e:4b:b6:7e:7e:08:78:68: d6:84:bc:e3:a9:1b:40:c3:7f:ce:3f:dd:ae:81:b7:90:41:8c: 3f:cb:1e:12:bf:49:8c:5a:97:97:e4:b6:52:c6:fc:65:9f:d0: f2:c9:6d:21:fc:10:45:21:06:31:7b:5a:85:ae:60:7f:9b:80: a2:c9:b0:65 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjQwNzE2MjEzOTM0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ZTg5Ni1kZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYqjVZdH6vjG5K+c2OlwaoCWqBolTCF/5+ro4s6xj6WKOJEmKXE/WI6RvY5p caNqcWRco4WXAJLiIHuZXvwXQQ9JtPTVqfL44ctht7sbZvfx8mPPaKzWuwdDiaOi 6Ccm9KB2/5/4MEgxxqGK1VcMNj8u+JuC2DBila0asays+0FF8J+JEqLGcHeFqXQ/ FF/bvww0LPNfyC0kp2bh1ipp9pOPdqxfnsnRjYVUfNNRSK06AoPxDQhMWbLTAKJl rGB+AFWl6r4kxvd1ARe0mZ8WCC/IarZHCeHWhp4FMDKFfxhtb4Xy68d9wds1D/Sq wz44Wr9E12U40k+JyoT0gLsC1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFFNJ5cTy njnda8oDInDc0WGB8PCiMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMwQzAvMDIyREJDQTRDQ0UzMTFFQUFGNzNGQzVEQzRGOUFFMDIvQkVCMjc2RUVD Q0UzMTFFQUEzOTcyMDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnOQMwDQYJKoZIhvcNAQELBQADggEBAF+VFcOfKLK+bJl7 8hvYJ0+ATQWgW7jlPxeO9rwwfRF998UZqlvwYbdgZPCJ1Dl7FeuSBEtijIQy5DWn q1CxiEFy8UzEJqD0N1JRs/4s6ZpXBmIU4C2qRcB0gH/xhg6uecm0YJdg0T867G9m a5CGsdNFYXgIeb7J6GhOwWU0NkDSVuo9PCPDsNjeREApC3+f+wUjJxsa+SF4Ijlf NG54JpW4vOusMFVoktBX95B0ccaseW6dClsgRVLEVfoF/+teS7Z+fgh4aNaEvOOp G0DDf84/3a6Bt5BBjD/LHhK/SYxal5fktlLG/GWf0PLJbSH8EEUhBjF7WoWuYH+b gKLJsGU= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:13 2024 by rpki-client on console-fra.rpki-client.org