$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/433917A83D8211EEA0E4DD46C4F9AE02.roa File: 433917A83D8211EEA0E4DD46C4F9AE02.roa (raw, json) Hash identifier: q8VjbfesBfjBXJ1O+TtlGTvZbuy2Q6Gq6lc9iUM1cKc= Subject key identifier: BF:5E:E5:84:AC:A0:93:ED:AD:2E:9E:5D:8C:C5:7A:06:C4:89:99:5E Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0E00 Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/433917A83D8211EEA0E4DD46C4F9AE02.roa Signing time: Wed 04 Sep 2024 18:36:30 +0000 ROA not before: Wed 04 Sep 2024 18:36:30 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151465 IP address blocks: 103.5.0.0/22 maxlen: 22 103.5.0.0/23 maxlen: 23 103.5.0.0/24 maxlen: 24 103.5.1.0/24 maxlen: 24 103.5.2.0/23 maxlen: 23 103.5.2.0/24 maxlen: 24 103.5.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3584 (0xe00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Sep 4 18:36:30 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d8a8ad-9a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:68:ca:0a:cb:99:69:aa:f4:87:8a:9c:da:fb: 63:e3:b4:24:f5:f9:5e:db:b8:a3:9f:b3:c1:16:2b: 58:21:ca:3c:a4:66:76:73:64:77:cb:a9:56:21:93: a5:f1:29:bb:1e:fd:2d:2b:45:fc:c3:c1:fe:01:53: fd:3d:eb:8b:8d:bd:39:4a:dc:cf:ce:4a:f3:8b:e2: 44:5c:d6:d8:10:ee:0d:ea:54:9e:dc:62:33:d7:0a: 21:3b:40:0c:fb:76:49:29:04:7a:79:07:53:f7:8f: aa:f2:e3:1a:51:7c:00:a1:0f:9d:37:b5:1e:96:2c: 81:0e:23:17:76:76:a5:89:db:d5:84:ec:3b:e9:0e: 60:2b:1b:69:43:bb:fe:54:b8:84:73:03:b1:15:20: f4:c1:92:2e:fb:90:76:e0:3e:b9:76:cc:2b:1e:2c: 93:4d:90:8d:2b:66:1a:e3:33:a1:d6:de:86:7b:bc: fc:83:ea:62:9f:5b:22:31:eb:44:b1:c5:49:52:aa: ae:5b:6c:bc:e8:29:84:3a:44:57:df:47:2b:ff:62: 0b:27:85:9c:6a:72:e9:10:06:71:f6:f2:02:51:b9: 07:b8:bb:2a:71:88:c4:47:08:ec:89:a9:04:ee:6a: 95:6b:aa:48:39:7a:2a:45:30:2a:6f:73:7c:bf:53: 82:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5E:E5:84:AC:A0:93:ED:AD:2E:9E:5D:8C:C5:7A:06:C4:89:99:5E X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/433917A83D8211EEA0E4DD46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.0.0/22 Signature Algorithm: sha256WithRSAEncryption 25:40:02:39:79:1c:fb:d0:1e:1b:c2:56:77:1f:a3:af:83:e1: c1:fb:19:47:1b:25:52:42:e7:32:24:35:c2:ab:e0:48:19:47: e5:59:83:de:23:7b:35:23:b9:e3:62:a3:8e:30:35:42:6c:97: 4a:47:e7:64:f8:44:72:08:bd:40:a6:e5:90:9a:f1:5e:73:8b: 15:8a:ce:fb:78:ff:09:a3:7a:05:cd:80:34:70:55:8f:e9:4a: 6c:38:5a:ac:9f:86:e8:4f:78:ac:50:70:18:c1:ea:cd:11:26: db:f0:b1:a4:37:7b:96:6d:80:be:5f:5a:50:93:1a:fe:de:dc: 88:34:8b:40:ba:9b:86:26:9d:f2:5a:eb:69:2a:5f:3c:b6:c8: f8:d7:3d:36:77:0b:31:88:8c:ce:77:25:f3:a5:b4:b7:0b:43: e6:cd:a1:fe:cd:06:3d:c4:88:20:a3:18:88:40:dd:04:f3:4e: 25:a2:7f:02:a4:fe:76:43:9c:2d:fd:f8:fa:b4:10:23:35:fa: 52:e8:2c:7d:9d:37:8c:b3:9a:f3:60:a0:ac:68:91:51:18:14: 94:26:3c:2f:53:a2:c5:d1:9d:11:7d:cb:28:13:24:59:8f:d2: 31:7c:96:8d:ac:80:f2:f8:a8:06:cb:11:34:27:41:8c:45:91: 55:36:eb:22 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjQwOTA0MTgzNjMwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4YThhZC05YTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32jKCsuZaar0h4qc2vtj47Qk9fle27ijn7PBFitYIco8pGZ2c2R3y6lWIZOl 8Sm7Hv0tK0X8w8H+AVP9PeuLjb05StzPzkrzi+JEXNbYEO4N6lSe3GIz1wohO0AM +3ZJKQR6eQdT94+q8uMaUXwAoQ+dN7UeliyBDiMXdnalidvVhOw76Q5gKxtpQ7v+ VLiEcwOxFSD0wZIu+5B24D65dswrHiyTTZCNK2Ya4zOh1t6Ge7z8g+pin1siMetE scVJUqquW2y86CmEOkRX30cr/2ILJ4WcanLpEAZx9vICUbkHuLsqcYjERwjsiakE 7mqVa6pIOXoqRTAqb3N8v1OCwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL9e5YSs oJPtrS6eXYzFegbEiZleMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg2OEMvM0ZCOTMzNjhBOURCMTFFOTg0Mjg1Mjg2QzRGOUFFMDIvNDMzOTE3QTgz RDgyMTFFRUEwRTRERDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnBQAwDQYJKoZIhvcNAQELBQADggEBACVAAjl5HPvQHhvC Vncfo6+D4cH7GUcbJVJC5zIkNcKr4EgZR+VZg94jezUjueNio44wNUJsl0pH52T4 RHIIvUCm5ZCa8V5zixWKzvt4/wmjegXNgDRwVY/pSmw4WqyfhuhPeKxQcBjB6s0R JtvwsaQ3e5ZtgL5fWlCTGv7e3Ig0i0C6m4YmnfJa62kqXzy2yPjXPTZ3CzGIjM53 JfOltLcLQ+bNof7NBj3EiCCjGIhA3QTzTiWifwKk/nZDnC39+Pq0ECM1+lLoLH2d N4yzmvNgoKxokVEYFJQmPC9TosXRnRF9yygTJFmP0jF8lo2sgPL4qAbLETQnQYxF kVU26yI= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:21 2024 by rpki-client on console-ams.rpki-client.org