$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/783C88A285FF11EEAFD34A2CC4F9AE02.roa File: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (raw, json) Hash identifier: Zhl+3aO9NEoActhbobOjQwGWHU93DOaHLYLu49Yt4rA= Subject key identifier: 50:5D:D7:2D:A7:ED:E7:77:EA:23:28:D8:DF:88:04:35:05:33:92:A6 Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Certificate serial: 03A9 Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/783C88A285FF11EEAFD34A2CC4F9AE02.roa Signing time: Thu 08 Aug 2024 04:39:17 +0000 ROA not before: Thu 08 Aug 2024 04:39:17 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 151332 IP address blocks: 103.179.36.0/24 maxlen: 24 103.179.37.0/24 maxlen: 24 2001:df0:45c0::/48 maxlen: 48 2001:df0:45c1::/48 maxlen: 48 2001:df0:45c2::/47 maxlen: 48 2001:df0:45c4::/46 maxlen: 48 2001:df0:45c8::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 937 (0x3a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Validity Not Before: Aug 8 04:39:17 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=66b44bf5-2659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:f0:cd:f6:cb:e0:ac:6a:d1:20:86:b7:eb: aa:93:ec:9d:25:1a:d3:a6:0d:40:c2:cf:1a:85:15: c1:7d:b6:54:df:ab:1c:2a:b4:05:87:4f:fa:b7:5b: 8b:cb:7f:2d:aa:51:f8:f7:12:e5:ea:a8:ff:5a:f3: f3:47:f2:04:e4:d5:4c:2d:3f:59:d7:52:ac:ff:87: b7:19:10:84:3c:fd:04:df:73:0b:37:6c:ef:a3:21: 74:cf:a2:5b:e4:77:79:46:4f:3d:31:c0:a6:e8:35: 8e:c7:71:3c:e2:d4:53:76:f7:51:7e:37:3e:d7:16: be:26:51:bf:60:74:f2:50:5f:ff:9a:72:ae:de:92: 34:4b:14:24:a4:94:89:18:4c:f6:6f:d1:e1:44:5e: 00:61:8f:06:75:a0:96:c7:62:fc:28:76:84:8e:d0: ab:53:f2:09:8b:db:86:d7:8e:c6:4e:e4:c2:15:26: e8:68:e3:14:cb:9c:b1:de:1c:45:84:bc:f2:c0:24: 76:cd:5f:57:28:ce:ea:1b:18:be:4b:83:d3:7b:87: e2:c2:5a:ff:8f:19:7b:00:98:77:5a:67:ec:f1:f4: 0d:b7:b4:fe:04:e9:2b:84:07:c7:c4:44:8f:91:2f: fb:21:9f:61:db:ae:d0:d4:01:9a:cb:58:a6:53:4f: 8a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5D:D7:2D:A7:ED:E7:77:EA:23:28:D8:DF:88:04:35:05:33:92:A6 X509v3 Authority Key Identifier: keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/783C88A285FF11EEAFD34A2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.36.0/23 IPv6: 2001:df0:45c0::/44 Signature Algorithm: sha256WithRSAEncryption 6d:8b:f8:29:eb:8a:4f:4b:4f:c5:70:4d:5d:5d:fb:31:7a:d9: 26:47:3f:0e:f9:6d:6e:01:2e:1f:cc:83:18:d3:d9:b1:e5:fe: f8:33:17:c8:ad:5f:de:ce:f1:84:ac:36:70:9d:d6:36:82:28: e1:cb:be:bb:e9:20:a4:0f:9b:ec:03:8a:05:1b:9c:1a:1a:13: 97:ec:4d:d9:07:91:6f:66:2c:af:4b:23:45:b0:f3:bd:42:00: 58:ec:20:94:ec:8a:52:aa:87:53:19:eb:83:b1:ac:96:c7:26: 12:9e:64:1a:de:d9:02:de:c1:c1:91:5a:d9:73:c4:5c:71:27: 9d:82:51:b6:28:97:9c:e3:ca:7f:77:c5:a4:7f:72:e7:70:a2: d7:19:07:ca:3a:ad:06:76:65:a4:58:e5:39:9f:01:f4:96:9c: 18:89:28:6b:50:3f:d9:56:5b:a1:07:78:b6:cc:92:f0:c6:b8: 42:45:cd:86:5c:25:b3:30:84:19:79:bf:af:e4:57:60:25:07: bb:5a:97:d1:43:1e:90:e5:0a:00:aa:63:b8:10:27:c8:54:8c: b5:2f:f5:81:01:15:1b:9a:26:73:bb:44:74:f8:c4:23:c7:c0: 16:93:1c:9b:85:ac:2f:f7:93:eb:bd:22:bc:47:d7:4a:fe:b0: 4f:d4:88:58 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy NkZERjdBMTMwHhcNMjQwODA4MDQzOTE3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI0NGJmNS0yNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJzwzfbL4Kxq0SCGt+uqk+ydJRrTpg1Aws8ahRXBfbZU36scKrQFh0/6t1uL y38tqlH49xLl6qj/WvPzR/IE5NVMLT9Z11Ks/4e3GRCEPP0E33MLN2zvoyF0z6Jb 5Hd5Rk89McCm6DWOx3E84tRTdvdRfjc+1xa+JlG/YHTyUF//mnKu3pI0SxQkpJSJ GEz2b9HhRF4AYY8GdaCWx2L8KHaEjtCrU/IJi9uG147GTuTCFSboaOMUy5yx3hxF hLzywCR2zV9XKM7qGxi+S4PTe4fiwlr/jxl7AJh3Wmfs8fQNt7T+BOkrhAfHxESP kS/7IZ9h267Q1AGay1imU0+KqwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFBd1y2n 7ed36iMo2N+IBDUFM5KmMB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFBRjUvRTk5RjUyM0E2RUM0MTFFQ0FGRDI3MzMxQzRGOUFFMDIvNzgzQzg4QTI4 NUZGMTFFRUFGRDM0QTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsyQwDwQCAAIwCQMHBCABDfBFwDANBgkqhkiG9w0BAQsF AAOCAQEAbYv4KeuKT0tPxXBNXV37MXrZJkc/DvltbgEuH8yDGNPZseX++DMXyK1f 3s7xhKw2cJ3WNoIo4cu+u+kgpA+b7AOKBRucGhoTl+xN2QeRb2Ysr0sjRbDzvUIA WOwglOyKUqqHUxnrg7GslscmEp5kGt7ZAt7BwZFa2XPEXHEnnYJRtiiXnOPKf3fF pH9y53Ci1xkHyjqtBnZlpFjlOZ8B9JacGIkoa1A/2VZboQd4tsyS8Ma4QkXNhlwl szCEGXm/r+RXYCUHu1qX0UMekOUKAKpjuBAnyFSMtS/1gQEVG5omc7tEdPjEI8fA FpMcm4WsL/eT670ivEfXSv6wT9SIWA== -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:33 2024 by rpki-client on console-fra.rpki-client.org