$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/651384A6766811EF96E4115EC4F9AE02.roa File: 651384A6766811EF96E4115EC4F9AE02.roa (raw, json) Hash identifier: p8tYT8YIzrMYfS8FEgPfOhyzQ3A1i1G+CgkjUdJPswc= Subject key identifier: 08:2F:D2:68:D9:27:00:DE:FB:F8:8D:8E:40:EF:6B:A1:06:02:A1:2B Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Certificate serial: 092E Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/651384A6766811EF96E4115EC4F9AE02.roa Signing time: Thu 19 Sep 2024 09:23:27 +0000 ROA not before: Thu 19 Sep 2024 09:23:27 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 140612 IP address blocks: 103.151.0.0/23 maxlen: 24 2400:8860::/32 maxlen: 32 2400:8860::/33 maxlen: 33 2400:8860:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2350 (0x92e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Validity Not Before: Sep 19 09:23:27 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66ebed8f-800d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c0:d7:d6:a3:5b:85:4b:5b:36:7b:ad:b1:07: f9:22:d5:72:13:c5:5e:47:73:ef:50:0f:cf:15:c1: c6:44:21:12:1a:26:67:fc:60:4e:6b:20:d3:c1:1d: 18:9a:30:b2:5e:62:b7:9e:80:fc:90:65:a7:29:29: a2:37:d7:b0:81:ad:41:d0:d4:7b:e2:ee:a5:05:a8: 17:33:82:f4:15:8d:24:64:fb:9f:48:f1:df:36:5f: e8:07:db:cc:6a:24:82:1e:f2:6d:79:1c:10:77:f3: 8e:25:20:2e:ff:e9:30:7e:28:88:87:2b:38:8d:29: 39:0c:99:94:21:07:c5:26:99:82:ce:30:db:42:15: 9a:51:53:27:f6:b8:24:0d:a4:88:e5:b2:11:9d:2b: 17:44:a5:ae:b9:05:bb:0e:d8:10:89:6e:ee:3d:55: 54:f7:d0:b5:5f:76:ea:1d:77:4c:cf:be:ea:2b:31: 1c:e8:be:ac:58:b8:1e:f5:d5:11:de:6b:af:04:ac: 8a:22:6c:f6:6b:4a:cf:33:b4:05:c9:1c:40:b8:91: bd:23:ba:86:8f:39:62:d4:e5:98:96:9c:19:86:91: 4b:19:b2:1e:f2:05:82:55:c3:1c:05:dd:ea:33:c6: 7f:68:a1:34:76:a3:47:49:fd:0c:fc:ae:4f:e8:fb: b3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2F:D2:68:D9:27:00:DE:FB:F8:8D:8E:40:EF:6B:A1:06:02:A1:2B X509v3 Authority Key Identifier: keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/651384A6766811EF96E4115EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.0.0/23 IPv6: 2400:8860::/32 Signature Algorithm: sha256WithRSAEncryption 7b:35:5c:db:87:5b:4a:43:5c:d6:b3:26:24:99:b0:8f:1b:bc: 21:b9:0c:72:f3:00:d9:9e:fa:35:75:89:46:4b:42:58:b1:3d: 6d:93:2c:ef:dc:3d:78:9f:d1:26:81:0b:e9:76:5c:f1:c8:a4: ae:f6:0f:6c:1d:62:a0:26:ca:60:3c:aa:c7:94:70:2d:1c:04: 65:8b:25:cd:02:4e:d1:fb:3b:85:6b:b9:db:db:12:40:07:59: 6f:26:37:8b:a9:81:38:d0:b5:c9:73:a7:ff:61:43:a2:5d:be: 6d:da:36:ef:7a:b4:e4:35:e6:f4:6f:d5:4c:1e:24:c2:80:31: 21:46:26:30:3d:ad:f2:d4:14:11:5b:aa:43:4c:1c:36:05:ee: 12:d5:ef:ef:03:56:95:de:41:c6:5b:e3:40:49:0b:c4:c3:d8: 8e:92:20:02:77:df:35:59:43:0d:07:24:46:b9:2b:01:40:ce: f6:5d:bd:de:51:00:26:7c:1b:8c:fd:9b:ea:5e:94:44:71:b5: 0b:c4:db:4b:e7:6a:05:54:86:f8:3e:7f:fe:1a:04:49:fd:2b: 40:fc:43:d1:73:3a:f8:a9:8e:6e:cc:68:08:3b:61:74:d6:3c: b6:02:d8:09:44:5c:c8:04:c9:c8:7f:6c:56:52:fc:df:3b:3d: 12:f5:15:6f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx OTg5MTkzQTUwHhcNMjQwOTE5MDkyMzI3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NmViZWQ4Zi04MDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcDX1qNbhUtbNnutsQf5ItVyE8VeR3PvUA/PFcHGRCESGiZn/GBOayDTwR0Y mjCyXmK3noD8kGWnKSmiN9ewga1B0NR74u6lBagXM4L0FY0kZPufSPHfNl/oB9vM aiSCHvJteRwQd/OOJSAu/+kwfiiIhys4jSk5DJmUIQfFJpmCzjDbQhWaUVMn9rgk DaSI5bIRnSsXRKWuuQW7DtgQiW7uPVVU99C1X3bqHXdMz77qKzEc6L6sWLge9dUR 3muvBKyKImz2a0rPM7QFyRxAuJG9I7qGjzli1OWYlpwZhpFLGbIe8gWCVcMcBd3q M8Z/aKE0dqNHSf0M/K5P6Puz0wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAgv0mjZ JwDe+/iNjkDva6EGAqErMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZBREYvNTg1MzIwREU4QkQ4MTFFQTk1QUFFQjgzQzRGOUFFMDIvNjUxMzg0QTY3 NjY4MTFFRjk2RTQxMTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnlwAwDQQCAAIwBwMFACQAiGAwDQYJKoZIhvcNAQELBQAD ggEBAHs1XNuHW0pDXNazJiSZsI8bvCG5DHLzANme+jV1iUZLQlixPW2TLO/cPXif 0SaBC+l2XPHIpK72D2wdYqAmymA8qseUcC0cBGWLJc0CTtH7O4VrudvbEkAHWW8m N4upgTjQtclzp/9hQ6Jdvm3aNu96tOQ15vRv1UweJMKAMSFGJjA9rfLUFBFbqkNM HDYF7hLV7+8DVpXeQcZb40BJC8TD2I6SIAJ33zVZQw0HJEa5KwFAzvZdvd5RACZ8 G4z9m+pelERxtQvE20vnagVUhvg+f/4aBEn9K0D8Q9FzOvipjm7MaAg7YXTWPLYC 2AlEXMgEych/bFZS/N87PRL1FW8= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org