$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/BC69DF32B33E11EDAA6D117BC4F9AE02.roa File: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (raw, json) Hash identifier: db2NWeg4HG/QWHWjQkMvsucOm2s5WuaDwiakb3D08Rk= Subject key identifier: 52:56:9D:D2:6B:3B:49:8D:75:DD:34:05:84:BA:56:AC:0D:2F:18:03 Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Certificate serial: 012E Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/BC69DF32B33E11EDAA6D117BC4F9AE02.roa Signing time: Sat 21 Sep 2024 03:26:07 +0000 ROA not before: Sat 21 Sep 2024 03:26:07 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150131 IP address blocks: 103.191.160.0/23 maxlen: 24 2001:df1:5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Validity Not Before: Sep 21 03:26:07 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ee3ccf-afa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:e2:ba:51:01:6f:80:2c:74:1b:35:4d:24: 37:50:3c:54:64:85:82:f0:d0:10:17:e3:0b:04:27: 59:45:a0:9c:c9:c6:e5:d0:c3:d4:15:93:51:45:ee: 73:90:6d:a0:22:ba:6e:93:52:b4:58:16:07:11:d2: ef:17:40:9f:b0:2b:7a:65:d3:91:6c:5f:62:c8:88: 51:d0:b0:ed:a7:f8:2d:d2:3e:02:f3:00:88:69:bb: 9e:1c:8a:0a:81:86:ee:1e:b5:87:a3:d1:6a:3d:80: 8a:23:59:2b:4e:f8:48:78:7e:aa:29:d8:7f:44:16: 56:49:3a:22:ec:04:18:22:f0:21:32:40:a9:71:48: 3c:05:18:f0:fc:55:16:54:de:d6:c9:bb:ee:c6:e0: 45:24:b0:a3:01:42:40:80:2c:90:d7:2c:ca:98:eb: 6d:cd:c6:3e:7f:66:a7:10:0b:35:f2:d7:9c:b3:b9: 7f:06:cd:cf:c7:d8:e3:28:de:7b:52:9a:42:51:94: 5a:57:51:87:ea:4f:23:ba:a5:55:80:b4:16:b7:4e: e0:7f:e9:0f:d8:e7:03:0d:40:e8:e5:f0:d8:ce:dd: bd:d9:2f:f2:b7:e8:3d:3e:88:75:02:b4:46:18:ab: f1:7c:6d:39:e8:18:b1:59:8a:bd:6e:fa:67:e4:8a: 61:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:56:9D:D2:6B:3B:49:8D:75:DD:34:05:84:BA:56:AC:0D:2F:18:03 X509v3 Authority Key Identifier: keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/BC69DF32B33E11EDAA6D117BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.160.0/23 IPv6: 2001:df1:5c0::/48 Signature Algorithm: sha256WithRSAEncryption 09:de:2a:2a:ec:d6:93:d9:87:08:02:b9:29:e0:f6:d4:94:69: f5:1d:b4:f0:ab:31:7c:da:42:98:b0:9d:d0:c7:f0:d4:7c:5a: ed:0b:83:d0:63:3b:58:28:80:e1:9c:a3:66:d0:85:ea:eb:c3: b6:c2:92:68:f5:9e:31:3b:c0:88:2a:e6:da:5a:14:ae:3d:ef: f3:bb:68:54:90:6e:e5:35:8d:27:d1:d8:b0:2f:64:49:9c:7b: d9:57:b9:fd:8a:f7:c5:7e:f5:7e:af:01:56:ca:a1:df:41:b7: be:38:77:10:00:b9:89:5b:44:07:6e:d3:24:ff:59:1b:d0:44: fe:d4:77:63:34:12:b7:1f:6b:45:93:34:1d:4c:26:de:de:ee: c9:7f:28:bb:8a:8b:6b:28:5e:63:ea:16:d9:57:a9:d6:76:a2: 18:11:cb:10:68:2f:03:f9:29:e1:2b:a9:6a:1b:59:34:88:aa: ba:c3:1b:7c:c5:c2:7a:5a:fa:ed:62:d5:42:a8:c2:35:1e:8c: e3:a8:6c:bc:00:06:90:6f:e6:96:cf:26:61:f5:2b:d6:1c:9b: da:ec:0c:36:40:3c:b0:93:d9:71:c2:0d:a6:cf:10:32:8d:ea: e1:1c:71:19:36:d0:f9:36:19:73:76:4e:e1:7d:3f:db:a8:43: 02:75:ad:d4 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QzYxMTAvBgNVBAUTKDcxNTQ2MDczQkQwOTI3RUJFQjg1MEYwNkRBNzZBNzI3 NjlFNzEzNkIwHhcNMjQwOTIxMDMyNjA3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVlM2NjZi1hZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYTiulEBb4AsdBs1TSQ3UDxUZIWC8NAQF+MLBCdZRaCcycbl0MPUFZNRRe5z kG2gIrpuk1K0WBYHEdLvF0CfsCt6ZdORbF9iyIhR0LDtp/gt0j4C8wCIabueHIoK gYbuHrWHo9FqPYCKI1krTvhIeH6qKdh/RBZWSToi7AQYIvAhMkCpcUg8BRjw/FUW VN7WybvuxuBFJLCjAUJAgCyQ1yzKmOttzcY+f2anEAs18tecs7l/Bs3Px9jjKN57 UppCUZRaV1GH6k8juqVVgLQWt07gf+kP2OcDDUDo5fDYzt292S/yt+g9Poh1ArRG GKvxfG056BixWYq9bvpn5Iph3wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFJWndJr O0mNdd00BYS6VqwNLxgDMB8GA1UdIwQYMBaAFHFUYHO9CSfr64UPBtp2pydp5xNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZDNi8yQ0FFQUQwNEIz M0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkotdnJoUThHMm5hbkoybm5F MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWUmdjNzBKSi12cmhROEcybmFuSjJubkUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE2QzYvMkNBRUFEMDRCMzNBMTFFRDlGQkQwRTVDQzRGOUFFMDIvQkM2OURGMzJC MzNFMTFFREFBNkQxMTdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnv6AwDwQCAAIwCQMHACABDfEFwDANBgkqhkiG9w0BAQsF AAOCAQEACd4qKuzWk9mHCAK5KeD21JRp9R208KsxfNpCmLCd0Mfw1Hxa7QuD0GM7 WCiA4ZyjZtCF6uvDtsKSaPWeMTvAiCrm2loUrj3v87toVJBu5TWNJ9HYsC9kSZx7 2Ve5/Yr3xX71fq8BVsqh30G3vjh3EAC5iVtEB27TJP9ZG9BE/tR3YzQStx9rRZM0 HUwm3t7uyX8ou4qLayheY+oW2Vep1naiGBHLEGgvA/kp4SupahtZNIiqusMbfMXC elr67WLVQqjCNR6M46hsvAAGkG/mls8mYfUr1hyb2uwMNkA8sJPZccINps8QMo3q 4RxxGTbQ+TYZc3ZO4X0/26hDAnWt1A== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org