$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/6875130A75D011EFAEA8B95DC4F9AE02.roa File: 6875130A75D011EFAEA8B95DC4F9AE02.roa (raw, json) Hash identifier: j9MU+6XiaMgg2sRP/18nlR8evD4Nijbjxv7J3XKYmto= Subject key identifier: 5A:B1:87:CC:54:EA:D8:4C:48:DA:A1:39:85:4C:B3:09:C9:20:BB:53 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 2169 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/6875130A75D011EFAEA8B95DC4F9AE02.roa Signing time: Wed 18 Sep 2024 15:12:24 +0000 ROA not before: Wed 18 Sep 2024 15:12:24 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 39600 IP address blocks: 103.111.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8553 (0x2169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Sep 18 15:12:24 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66eaedd8-d0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:a5:7f:15:93:82:d2:82:4c:78:87:5b:43: 18:4c:4d:ca:a8:84:6e:c0:0d:e1:a0:df:c5:b9:63: 3a:f2:db:e1:aa:ef:3a:d2:35:f4:39:d6:ce:97:a6: 6e:63:7f:51:98:d4:f3:18:0e:13:0c:2c:04:91:3a: f0:4c:55:40:f0:6c:c3:a9:19:77:d1:d2:fb:7a:b6: b1:5b:1d:0c:44:c1:34:92:a8:ce:87:1f:af:52:5a: c6:a7:22:35:e3:0e:e4:66:c3:c0:a4:af:c7:0d:fa: 8d:8a:51:cd:34:bd:ba:04:4b:3d:9a:7e:1a:4e:15: 4e:99:96:00:9b:43:6f:22:7f:6b:5c:b3:bc:d6:9e: c5:f0:fb:cc:81:45:ea:ba:17:00:1a:2a:0f:1f:36: db:3a:06:17:bb:ea:84:43:aa:a9:61:04:02:c2:2f: bc:5a:80:f3:b0:96:ba:1c:0d:d9:b1:b1:6f:93:dc: c0:fc:cc:40:4d:d1:35:53:ba:45:33:56:96:a6:2b: 1e:b2:09:6c:e0:2b:41:21:f2:17:2b:74:16:b1:73: ee:be:cf:a0:ba:89:63:5d:63:35:30:68:25:e1:0a: 13:aa:d0:2c:44:bf:83:3d:52:ad:57:f3:18:91:7a: 3c:78:49:9a:ae:4b:3d:9e:d9:55:83:00:1b:bd:c6: 41:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B1:87:CC:54:EA:D8:4C:48:DA:A1:39:85:4C:B3:09:C9:20:BB:53 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/6875130A75D011EFAEA8B95DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.89.0/24 Signature Algorithm: sha256WithRSAEncryption a8:e2:8f:2a:dd:a9:2b:6a:e6:b7:39:88:9c:28:e0:4c:52:5b: 6e:c1:34:e9:73:4b:d9:91:66:5c:2d:e9:32:4f:88:be:f8:d8: 5a:8a:d4:da:3a:e9:34:02:f5:e5:9a:d1:8e:ff:56:db:7e:2b: 71:14:9f:5e:f8:6f:ab:8e:a9:53:59:bf:60:11:d7:11:01:44: 31:60:1d:e9:b8:a7:2a:d6:97:cd:da:16:cc:2a:c7:08:9a:07: 12:6f:16:fe:12:5c:b0:62:a4:91:2a:dc:54:8a:68:a8:eb:48: 24:33:57:89:73:2c:1c:0f:ca:96:d2:a3:a6:c9:83:fe:16:43: 2c:23:51:24:4d:de:01:c1:ba:f4:5f:8d:78:d6:73:7e:46:08: db:0a:e8:d5:d2:42:42:7c:92:38:00:56:23:5b:06:9f:86:f0: 37:2a:c1:71:15:cb:38:5a:a7:46:52:68:59:2b:1a:5b:b7:69: 3e:ec:5a:13:b4:45:7b:a1:01:bb:22:38:43:00:cf:86:e3:f9: 82:88:9a:0e:71:05:15:fd:b4:92:88:30:bb:46:d1:60:8d:28: bb:42:56:35:56:dd:a8:ba:b9:d2:bb:c8:92:a0:e7:e0:54:1e: 75:11:21:1c:1e:58:e3:cf:64:0a:a2:fe:18:63:8c:4b:dd:24: ad:60:61:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjQwOTE4MTUxMjI0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVhZWRkOC1kMGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0OlfxWTgtKCTHiHW0MYTE3KqIRuwA3hoN/FuWM68tvhqu860jX0OdbOl6Zu Y39RmNTzGA4TDCwEkTrwTFVA8GzDqRl30dL7eraxWx0MRME0kqjOhx+vUlrGpyI1 4w7kZsPApK/HDfqNilHNNL26BEs9mn4aThVOmZYAm0NvIn9rXLO81p7F8PvMgUXq uhcAGioPHzbbOgYXu+qEQ6qpYQQCwi+8WoDzsJa6HA3ZsbFvk9zA/MxATdE1U7pF M1aWpisesgls4CtBIfIXK3QWsXPuvs+guoljXWM1MGgl4QoTqtAsRL+DPVKtV/MY kXo8eEmarks9ntlVgwAbvcZBwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFqxh8xU 6thMSNqhOYVMswnJILtTMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvNjg3NTEzMEE3 NUQwMTFFRkFFQThCOTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnb1kwDQYJKoZIhvcNAQELBQADggEBAKjijyrdqStq5rc5 iJwo4ExSW27BNOlzS9mRZlwt6TJPiL742FqK1No66TQC9eWa0Y7/Vtt+K3EUn174 b6uOqVNZv2AR1xEBRDFgHem4pyrWl83aFswqxwiaBxJvFv4SXLBipJEq3FSKaKjr SCQzV4lzLBwPypbSo6bJg/4WQywjUSRN3gHBuvRfjXjWc35GCNsK6NXSQkJ8kjgA ViNbBp+G8DcqwXEVyzhap0ZSaFkrGlu3aT7sWhO0RXuhAbsiOEMAz4bj+YKImg5x BRX9tJKIMLtG0WCNKLtCVjVW3ai6udK7yJKg5+BUHnURIRweWOPPZAqi/hhjjEvd JK1gYVk= -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:07 2024 by rpki-client on console-fra.rpki-client.org