$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/05B67AF8C6A011EAA70D183FC4F9AE02.roa File: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (raw, json) Hash identifier: 04/HwV26/Fx1bZoGuRdSyRLiYV06aFK5mycaJ+/tqsU= Subject key identifier: C1:FC:FD:7C:94:8B:D2:77:F0:69:0C:1D:C5:2C:68:B3:FA:01:3B:D2 Certificate issuer: /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Certificate serial: 0801 Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/05B67AF8C6A011EAA70D183FC4F9AE02.roa Signing time: Thu 14 Nov 2024 12:11:54 +0000 ROA not before: Thu 14 Nov 2024 12:11:54 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 140906 IP address blocks: 103.153.48.0/23 maxlen: 23 103.153.48.0/24 maxlen: 24 103.153.49.0/24 maxlen: 24 2406:3f40::/32 maxlen: 32 2406:3f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Validity Not Before: Nov 14 12:11:54 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6735e90a-a98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:06:0a:70:09:9d:0d:bb:bd:af:05:d0:a6: fc:cf:65:e4:90:3b:0b:38:ca:fe:88:eb:7b:7b:37: c9:8a:49:1e:c2:0f:07:8c:a1:1d:a2:70:5d:28:a1: 41:e7:4b:ec:4a:30:2f:59:b7:cb:70:c2:b8:5b:f4: cc:92:07:78:91:38:c9:db:b4:ce:77:fa:72:cf:1a: 1a:23:28:7d:c8:e4:ab:a3:72:19:6c:9c:28:56:e7: ae:6f:22:1e:64:84:df:1a:56:11:7d:04:2f:d9:06: 49:b0:86:f0:3a:52:e0:12:94:85:25:c2:c8:d8:f8: 81:7d:69:fd:81:74:4c:da:19:d2:4e:2c:74:34:ca: 22:3f:5a:e5:0b:1d:45:3d:8c:59:ba:c4:f6:2c:05: df:c7:c3:48:72:31:66:96:96:4b:8a:1f:a6:28:aa: d0:34:7d:48:1e:92:da:0d:8b:87:38:b1:f4:7d:28: 5d:3a:70:a6:b4:17:f8:0f:f5:07:19:01:96:24:94: d1:02:62:0b:b6:12:3f:39:9d:d0:7f:58:8a:9f:47: 96:a5:ba:5b:b4:a0:5f:b6:10:96:cc:a3:af:3d:5f: 6e:2f:56:00:26:88:9c:f0:b3:e3:22:7b:fc:37:af: 1c:35:a5:51:d1:48:b6:a2:39:5e:af:6c:fb:e1:5d: d6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FC:FD:7C:94:8B:D2:77:F0:69:0C:1D:C5:2C:68:B3:FA:01:3B:D2 X509v3 Authority Key Identifier: keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/05B67AF8C6A011EAA70D183FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.48.0/23 IPv6: 2406:3f40::/32 Signature Algorithm: sha256WithRSAEncryption cf:d5:2d:87:ca:ac:fe:8d:8a:f8:0b:c8:5e:5b:97:ec:cd:27: ae:52:43:2b:8f:4d:f3:92:00:46:c1:1f:4f:66:f1:47:8f:eb: 73:2c:d8:aa:76:b9:27:1c:86:ca:33:fc:58:0f:8e:4d:e8:e5: ea:e1:9b:a2:e9:bc:ca:c6:3f:e0:9b:31:66:28:55:18:96:7f: 2c:d9:aa:4d:e7:c1:45:3a:66:29:d1:68:14:66:2f:29:f8:02: 63:a9:54:ed:78:ea:54:8e:2f:40:a0:de:a7:7b:d5:59:7d:ce: b7:00:87:a1:b3:36:c3:59:35:17:df:4a:1a:ce:cb:74:20:97: 64:e9:78:a3:fa:f3:6d:3b:23:ca:30:52:4b:ba:e3:45:4f:e1: f0:fb:63:d3:7b:3e:25:18:2b:60:f4:b9:6c:85:b5:2d:f4:9b: 08:b8:09:46:1a:c4:88:c5:10:4d:ba:fd:0a:7f:a6:e2:ff:67: 24:e4:8f:12:f1:74:a7:ac:65:ca:39:44:56:05:72:a3:61:c8: 4d:0f:73:a8:38:61:7a:19:86:cd:f8:74:25:2d:ed:3f:3e:aa: e6:ef:36:92:3f:15:4c:43:9f:fc:42:53:29:6b:5d:4e:33:c3: 4c:10:30:51:b3:89:79:4b:96:5d:3a:73:03:66:dc:39:c1:7f: 8c:e6:0f:0d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGODkxMTAvBgNVBAUTKDVGMzA3RTYyNzRBQzM5RTU0RTk5ODY2REFCQjg1QzJD OUVGRDE2QjEwHhcNMjQxMTE0MTIxMTU0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM1ZTkwYS1hOThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzUGCnAJnQ27va8F0Kb8z2XkkDsLOMr+iOt7ezfJikkewg8HjKEdonBdKKFB 50vsSjAvWbfLcMK4W/TMkgd4kTjJ27TOd/pyzxoaIyh9yOSro3IZbJwoVueubyIe ZITfGlYRfQQv2QZJsIbwOlLgEpSFJcLI2PiBfWn9gXRM2hnSTix0NMoiP1rlCx1F PYxZusT2LAXfx8NIcjFmlpZLih+mKKrQNH1IHpLaDYuHOLH0fShdOnCmtBf4D/UH GQGWJJTRAmILthI/OZ3Qf1iKn0eWpbpbtKBfthCWzKOvPV9uL1YAJoic8LPjInv8 N68cNaVR0Ui2ojler2z74V3WhwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMH8/XyU i9J38GkMHcUsaLP6ATvSMB8GA1UdIwQYMBaAFF8wfmJ0rDnlTpmGbau4XCye/Rax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUY4OS81QkU3NDg3OEM2 OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09lVk9tWVp0cTdoY0xKNzlG ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6Qi1ZblNzT2VWT21ZWnRxN2hjTEo3OUZyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlGODkvNUJFNzQ4NzhDNjlFMTFFQTlCRjhBMzNDQzRGOUFFMDIvMDVCNjdBRjhD NkEwMTFFQUE3MEQxODNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnmTAwDQQCAAIwBwMFACQGP0AwDQYJKoZIhvcNAQELBQAD ggEBAM/VLYfKrP6NivgLyF5bl+zNJ65SQyuPTfOSAEbBH09m8UeP63Ms2Kp2uScc hsoz/FgPjk3o5erhm6LpvMrGP+CbMWYoVRiWfyzZqk3nwUU6ZinRaBRmLyn4AmOp VO146lSOL0Cg3qd71Vl9zrcAh6GzNsNZNRffShrOy3Qgl2TpeKP68207I8owUku6 40VP4fD7Y9N7PiUYK2D0uWyFtS30mwi4CUYaxIjFEE26/Qp/puL/ZyTkjxLxdKes Zco5RFYFcqNhyE0Pc6g4YXoZhs34dCUt7T8+qubvNpI/FUxDn/xCUylrXU4zw0wQ MFGziXlLll06cwNm3DnBf4zmDw0= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:14 2024 by rpki-client on console-fra.rpki-client.org