$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa File: 5915642864AB11EEBFD54F2EC4F9AE02.roa (raw, json) Hash identifier: L+aUrfi/IHEm4FCCzrEf6AdJOcO/5KYjXAI+VHu0xCQ= Subject key identifier: 66:2E:FE:58:83:CE:47:FA:C7:51:F9:B2:99:DC:F2:07:00:65:20:4E Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0E01 Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa Signing time: Wed 04 Sep 2024 18:36:30 +0000 ROA not before: Wed 04 Sep 2024 18:36:30 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151627 IP address blocks: 103.5.0.0/22 maxlen: 22 103.5.0.0/23 maxlen: 23 103.5.0.0/24 maxlen: 24 103.5.1.0/24 maxlen: 24 103.5.2.0/23 maxlen: 23 103.5.2.0/24 maxlen: 24 103.5.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3585 (0xe01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Sep 4 18:36:30 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d8a8ae-f266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:7c:95:60:af:db:76:0e:0b:cf:69:1f:8d: 9d:f0:66:f4:eb:59:fd:37:80:21:e7:5d:9a:85:1b: ce:ee:79:f7:4f:a3:75:09:a2:33:07:08:e6:f0:a5: 3e:fe:be:a6:41:f3:4c:aa:b6:44:9c:5e:a3:72:67: 80:db:28:28:44:3b:a7:27:ca:ef:11:43:ca:f6:dd: 3f:cf:ed:16:1e:b5:c4:45:65:6a:83:71:30:e4:19: 1e:18:fa:14:b7:f6:1f:68:f8:60:4d:05:93:60:8e: f7:a9:e8:df:52:c0:3f:aa:e7:2f:aa:67:84:d0:85: 11:79:54:2e:11:d8:26:3d:f8:68:36:91:b1:5c:6e: 6b:47:13:6c:96:91:23:c9:b6:01:11:51:ae:27:2c: 12:d1:f3:20:18:13:07:30:4b:a9:99:a5:95:6f:b6: 45:34:38:b4:95:5c:b4:7c:d2:e4:37:78:86:2d:cd: 3f:6a:8b:e2:5f:e4:6b:2c:23:dd:d9:f9:4a:b2:12: 64:3f:46:0e:d8:93:8d:34:75:9d:af:b7:fb:c7:f3: c5:99:57:65:72:57:5c:82:f1:f5:0f:eb:15:6f:9a: fc:2c:d1:b9:55:42:0a:c6:ec:a6:07:ac:ad:98:a7: 24:59:24:48:ae:d9:d6:e7:fb:5f:81:88:b4:02:48: cf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2E:FE:58:83:CE:47:FA:C7:51:F9:B2:99:DC:F2:07:00:65:20:4E X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.0.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:3f:37:47:5a:fd:5f:c3:85:fb:ef:ca:46:2a:57:fb:52:38: 7a:c2:82:4f:2d:6f:73:8e:86:94:50:ba:66:8c:17:81:bd:a3: 90:a1:c1:c6:ab:fd:b8:5b:8c:25:e5:df:dd:1c:3b:1d:02:3f: d8:72:9f:b5:d6:4e:a6:ee:87:8a:a6:c0:39:01:c2:95:af:ab: b1:7b:19:c1:c2:cc:df:f7:75:a7:c1:eb:a8:ad:2c:62:50:8a: 75:7a:6f:e8:a2:73:b4:e5:e2:ac:ca:cf:6a:b0:d9:c3:57:0d: a1:71:55:8e:10:e2:19:d0:86:cb:86:8f:1c:98:3d:30:16:22: 8e:03:4c:04:cd:ad:72:7e:99:12:ab:db:2d:06:32:17:3a:e1: 54:47:a4:08:cb:6d:d2:2a:ad:b8:da:99:be:a4:24:ea:47:00: ed:30:64:31:dd:25:aa:bb:23:31:a7:42:58:08:a9:c3:15:39: e2:ea:c5:8b:c1:f5:bb:38:9c:e7:7b:8c:96:26:38:94:79:e4: 4f:ef:22:96:28:9c:f3:bf:48:5c:aa:e6:c8:48:0d:a9:a7:50: ff:9b:73:82:1f:f0:f6:04:45:87:b9:19:16:c2:c2:13:08:e9: 73:bd:8e:f9:67:8e:94:18:eb:a8:aa:0d:aa:8c:70:83:3c:c5: 2e:d1:9b:05 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjQwOTA0MTgzNjMwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4YThhZS1mMjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyp58lWCv23YOC89pH42d8Gb061n9N4Ah512ahRvO7nn3T6N1CaIzBwjm8KU+ /r6mQfNMqrZEnF6jcmeA2ygoRDunJ8rvEUPK9t0/z+0WHrXERWVqg3Ew5BkeGPoU t/YfaPhgTQWTYI73qejfUsA/qucvqmeE0IUReVQuEdgmPfhoNpGxXG5rRxNslpEj ybYBEVGuJywS0fMgGBMHMEupmaWVb7ZFNDi0lVy0fNLkN3iGLc0/aoviX+RrLCPd 2flKshJkP0YO2JONNHWdr7f7x/PFmVdlcldcgvH1D+sVb5r8LNG5VUIKxuymB6yt mKckWSRIrtnW5/tfgYi0AkjP1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFGYu/liD zkf6x1H5spnc8gcAZSBOMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg2OEMvM0ZCOTMzNjhBOURCMTFFOTg0Mjg1Mjg2QzRGOUFFMDIvNTkxNTY0Mjg2 NEFCMTFFRUJGRDU0RjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnBQAwDQYJKoZIhvcNAQELBQADggEBAGo/N0da/V/Dhfvv ykYqV/tSOHrCgk8tb3OOhpRQumaMF4G9o5Chwcar/bhbjCXl390cOx0CP9hyn7XW Tqbuh4qmwDkBwpWvq7F7GcHCzN/3dafB66itLGJQinV6b+iic7Tl4qzKz2qw2cNX DaFxVY4Q4hnQhsuGjxyYPTAWIo4DTATNrXJ+mRKr2y0GMhc64VRHpAjLbdIqrbja mb6kJOpHAO0wZDHdJaq7IzGnQlgIqcMVOeLqxYvB9bs4nOd7jJYmOJR55E/vIpYo nPO/SFyq5shIDamnUP+bc4If8PYERYe5GRbCwhMI6XO9jvlnjpQY66iqDaqMcIM8 xS7RmwU= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org