$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1DA961ACEE8911EDBFAE4177C4F9AE02.roa File: 1DA961ACEE8911EDBFAE4177C4F9AE02.roa (raw, json) Hash identifier: TNSpjF6OeReM48TkuI+F5DR9ql/RdBa28TlUz4BMXXY= Subject key identifier: 18:08:25:C5:BA:91:EC:F2:70:49:49:A5:77:CA:8A:4F:2F:BA:7F:ED Certificate issuer: /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Certificate serial: E9 Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1DA961ACEE8911EDBFAE4177C4F9AE02.roa Signing time: Tue 11 Jun 2024 06:43:27 +0000 ROA not before: Tue 11 Jun 2024 06:43:27 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 59239 IP address blocks: 103.130.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Validity Not Before: Jun 11 06:43:27 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6667f20e-f783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:01:0a:fd:c1:4e:f0:78:39:25:e8:31:fa: a0:b4:30:c0:6a:0f:a2:81:71:1a:b8:65:83:9d:14: 71:6c:51:37:81:1d:f1:52:1b:56:1a:4d:cc:2a:6d: bc:cb:09:8d:17:8d:f0:a6:f8:7b:ba:a9:e4:b5:cd: 1e:93:9f:e0:63:32:58:28:3e:25:8b:4a:e2:31:4b: 29:f4:08:48:c1:79:36:4a:a6:1a:12:20:48:d6:fc: c4:24:64:69:9b:62:73:cd:45:bc:72:e2:4b:c8:2b: 7c:04:1e:76:63:66:1b:a1:97:d6:10:4d:c8:89:4e: da:03:23:9f:7b:0b:ca:86:e7:0c:90:32:f1:af:b3: 2c:a0:a2:bd:0f:6c:41:39:50:4f:a8:5a:c9:18:17: 21:c0:07:26:28:03:95:2d:b1:9c:21:a9:b0:52:28: c3:f1:bc:42:bf:13:96:e9:64:22:f9:70:e3:64:73: 01:c5:48:36:14:2b:88:02:44:a7:b7:b9:fb:e4:11: 6d:ad:a5:c2:e6:83:99:c0:12:0f:97:e2:7a:47:ff: bb:14:d5:a2:02:08:f8:cd:33:41:8e:7f:ad:54:3a: 10:96:d3:f3:fa:32:93:eb:2c:d0:38:7f:42:2d:ec: 74:5f:8b:35:13:92:fa:17:a2:50:99:1f:68:e4:b0: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:08:25:C5:BA:91:EC:F2:70:49:49:A5:77:CA:8A:4F:2F:BA:7F:ED X509v3 Authority Key Identifier: keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1DA961ACEE8911EDBFAE4177C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.130.118.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:ac:ae:fd:95:02:a8:ca:df:67:68:ba:af:25:ca:b9:ca:7a: f1:33:10:fa:c3:55:d9:28:a8:9a:4a:e3:21:60:ad:b9:6f:52: 73:d3:15:db:b0:27:50:e2:9e:b7:d2:cd:63:8f:80:35:65:f6: 1c:59:07:1b:10:8c:a2:1b:9c:06:58:b4:82:56:9f:3f:a4:51: 18:c1:16:c4:c2:e0:62:8a:6f:81:e1:8f:07:94:ec:d7:f1:10: 84:4c:2e:45:19:da:82:4d:ca:2f:b0:19:31:ef:2a:c0:59:73: 1d:b8:f5:f4:89:c4:63:50:b5:93:f5:90:e8:07:a4:35:f9:57: 4b:c4:af:5c:11:71:23:d1:4a:e5:89:41:63:55:43:e6:4e:66: 4d:2a:31:93:a9:aa:05:d8:85:39:3e:33:86:56:3f:0b:bd:27: e1:98:4a:d9:e5:b9:15:c9:d3:49:09:22:44:f3:17:0a:e2:0a: 12:11:dc:7f:3b:26:db:9f:7b:f4:80:ed:b7:d5:6a:57:fa:be: 96:fc:35:a1:f4:4c:bc:9f:3a:24:35:fc:e4:e5:ef:3e:9e:a8: 73:e8:be:3d:51:89:c8:ff:8e:06:ae:8e:e4:63:f0:be:e1:f6: a1:83:79:7b:d6:45:15:57:c6:bd:4f:2e:9c:25:66:60:3d:95: 61:38:db:49 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAzMjkxMTAvBgNVBAUTKEY3NEU5NkNBOUVFOTM2MDc0NTY0MjkyOTYwRkJDMUY5 Q0YzNDg1NEQwHhcNMjQwNjExMDY0MzI3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjY3ZjIwZS1mNzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQUBCv3BTvB4OSXoMfqgtDDAag+igXEauGWDnRRxbFE3gR3xUhtWGk3MKm28 ywmNF43wpvh7uqnktc0ek5/gYzJYKD4li0riMUsp9AhIwXk2SqYaEiBI1vzEJGRp m2JzzUW8cuJLyCt8BB52Y2YboZfWEE3IiU7aAyOfewvKhucMkDLxr7MsoKK9D2xB OVBPqFrJGBchwAcmKAOVLbGcIamwUijD8bxCvxOW6WQi+XDjZHMBxUg2FCuIAkSn t7n75BFtraXC5oOZwBIPl+J6R/+7FNWiAgj4zTNBjn+tVDoQltPz+jKT6yzQOH9C Lex0X4s1E5L6F6JQmR9o5LDN5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBgIJcW6 kezycElJpXfKik8vun/tMB8GA1UdIwQYMBaAFPdOlsqe6TYHRWQpKWD7wfnPNIVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDMyOS80NUQ2RUZGQ0Qz OUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5nZEZaQ2twWVB2Qi1jODBo VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwNld5cDdwTmdkRlpDa3BZUHZCLWM4MGhVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTAzMjkvNDVENkVGRkNEMzlEMTFFREJCQ0IyODBGQzRGOUFFMDIvMURBOTYxQUNF RTg5MTFFREJGQUU0MTc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABngnYwDQYJKoZIhvcNAQELBQADggEBAHqsrv2VAqjK32do uq8lyrnKevEzEPrDVdkoqJpK4yFgrblvUnPTFduwJ1DinrfSzWOPgDVl9hxZBxsQ jKIbnAZYtIJWnz+kURjBFsTC4GKKb4HhjweU7NfxEIRMLkUZ2oJNyi+wGTHvKsBZ cx249fSJxGNQtZP1kOgHpDX5V0vEr1wRcSPRSuWJQWNVQ+ZOZk0qMZOpqgXYhTk+ M4ZWPwu9J+GYStnluRXJ00kJIkTzFwriChIR3H87Jtufe/SA7bfValf6vpb8NaH0 TLyfOiQ1/OTl7z6eqHPovj1Ricj/jgaujuRj8L7h9qGDeXvWRRVXxr1PLpwlZmA9 lWE420k= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org