$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/F6CE4EEC56F911E997D5B40AC4F9AE02.roa File: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (raw, json) Hash identifier: 4H4+YRS4PlEbIBAUOpRTR8xQkQgHSLqxXY4Nc9mbKmQ= Subject key identifier: 80:8D:45:2D:A2:87:08:F1:33:7F:0F:91:5F:19:B6:A0:08:33:7A:91 Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Certificate serial: 150F Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/F6CE4EEC56F911E997D5B40AC4F9AE02.roa Signing time: Thu 06 Jun 2024 14:05:41 +0000 ROA not before: Thu 06 Jun 2024 14:05:41 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137521 IP address blocks: 103.111.79.0/24 maxlen: 24 103.123.84.0/24 maxlen: 24 2001:df3:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5391 (0x150f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Validity Not Before: Jun 6 14:05:41 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6661c234-a8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ed:05:a1:b0:26:85:41:20:71:24:ea:a8:07: b3:75:1f:07:d2:eb:70:bc:27:a1:63:c0:2d:1f:c4: b2:7c:c9:50:f4:89:0e:85:47:da:1f:83:58:3c:13: 9f:19:c7:75:35:05:28:1f:08:c2:d9:d2:7e:29:31: 2a:17:b6:7a:eb:a9:cf:17:f1:1a:df:d9:f9:58:0e: 8f:b1:a9:44:eb:45:08:39:fd:0b:60:f6:0f:03:d2: df:c2:e7:d0:15:85:ee:53:2a:d8:bd:3d:f2:a5:28: c2:9e:99:5b:a7:41:72:57:bd:62:13:1c:65:f3:38: 9d:43:ef:fe:e4:b2:79:b5:41:1f:57:54:c3:04:1c: 73:6a:d0:ff:ce:b8:72:f0:aa:a6:51:eb:4d:34:1d: 1b:4c:f3:b6:9d:0b:b4:26:26:80:b7:b6:9e:33:d2: 80:58:ef:ed:15:40:96:64:2f:e9:04:6e:d7:f9:8c: 99:a0:fb:2b:3f:d2:2f:9b:0d:7c:f3:37:05:c6:20: 4a:77:4f:8e:5d:9d:2a:38:a6:9a:56:18:15:a0:81: 1e:0b:fb:e3:7c:26:40:e3:b9:2a:03:ea:ec:ce:9f: 99:d6:cf:8c:19:33:f1:05:18:76:1c:94:93:b1:0a: 07:f4:3a:17:92:53:6a:64:27:05:dd:a1:e9:94:e1: 77:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8D:45:2D:A2:87:08:F1:33:7F:0F:91:5F:19:B6:A0:08:33:7A:91 X509v3 Authority Key Identifier: keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/F6CE4EEC56F911E997D5B40AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.79.0/24 103.123.84.0/24 IPv6: 2001:df3:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption 44:f2:20:ad:0a:88:af:02:66:ec:b0:53:1d:6b:70:a0:73:63: b6:72:ed:c4:83:20:1c:4b:e9:73:ac:4b:e2:84:7a:85:d5:f2: 36:49:e9:76:d6:34:31:a4:93:29:7e:55:f5:25:7f:e9:a7:65: 7c:8f:ca:bf:5f:eb:53:c3:f2:1f:f8:ca:85:54:83:77:08:53: ee:07:3d:7b:04:0d:86:f6:7d:76:54:0a:73:f6:d8:ca:e0:9c: bb:7e:0d:d7:b2:78:48:64:21:aa:b4:00:1e:e2:8c:7f:94:a3: fe:7e:d9:a5:0f:68:3d:d5:45:70:d4:ac:46:9d:0d:42:fa:4c: 46:98:06:87:34:4b:21:29:a9:db:b8:4e:41:da:66:36:da:1c: 6f:a1:dd:b4:e4:1b:1d:8f:96:01:f6:14:a0:7b:93:8a:c9:71: e7:c5:87:ea:38:70:e2:11:3a:80:18:6c:ac:d7:cb:ce:1a:d7: 38:e5:47:99:fa:84:e5:f2:7e:d0:61:23:5b:ce:f7:b1:88:a7: b8:99:50:5a:4c:fd:3c:19:df:fc:7a:e4:2b:63:fa:82:0d:94: 23:ca:f1:a1:f5:49:6d:31:ce:39:aa:07:9b:6c:8c:49:08:91: 3e:68:bf:66:a2:39:73:50:86:92:dd:68:87:2e:36:33:9d:a2: db:2f:a1:cc -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICFQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ0RUExMTAvBgNVBAUTKDY5RTcwMUIxRjMzNDI5MjM4MEU3QUJCOTAxQzM0MjYz MzJDNkFBNUEwHhcNMjQwNjA2MTQwNTQxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjYxYzIzNC1hOGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1u0FobAmhUEgcSTqqAezdR8H0utwvCehY8AtH8SyfMlQ9IkOhUfaH4NYPBOf Gcd1NQUoHwjC2dJ+KTEqF7Z666nPF/Ea39n5WA6PsalE60UIOf0LYPYPA9LfwufQ FYXuUyrYvT3ypSjCnplbp0FyV71iExxl8zidQ+/+5LJ5tUEfV1TDBBxzatD/zrhy 8KqmUetNNB0bTPO2nQu0JiaAt7aeM9KAWO/tFUCWZC/pBG7X+YyZoPsrP9Ivmw18 8zcFxiBKd0+OXZ0qOKaaVhgVoIEeC/vjfCZA47kqA+rszp+Z1s+MGTPxBRh2HJST sQoH9DoXklNqZCcF3aHplOF3LQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFICNRS2i hwjxM38PkV8ZtqAIM3qRMB8GA1UdIwQYMBaAFGnnAbHzNCkjgOeruQHDQmMyxqpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDRFQS82ODkwMzM5NjJC NDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtTT0E1NnU1QWNOQ1l6TEdx bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlY0JzZk0wS1NPQTU2dTVBY05DWXpMR3Fsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQ0RUEvNjg5MDMzOTYyQjQxMTFFODg0NTc5Mzg3QzRGOUFFMDIvRjZDRTRFRUM1 NkY5MTFFOTk3RDVCNDBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnb08DBABne1QwDwQCAAIwCQMHACABDfPgwDANBgkqhkiG 9w0BAQsFAAOCAQEARPIgrQqIrwJm7LBTHWtwoHNjtnLtxIMgHEvpc6xL4oR6hdXy NknpdtY0MaSTKX5V9SV/6adlfI/Kv1/rU8PyH/jKhVSDdwhT7gc9ewQNhvZ9dlQK c/bYyuCcu34N17J4SGQhqrQAHuKMf5Sj/n7ZpQ9oPdVFcNSsRp0NQvpMRpgGhzRL ISmp27hOQdpmNtocb6HdtOQbHY+WAfYUoHuTislx58WH6jhw4hE6gBhsrNfLzhrX OOVHmfqE5fJ+0GEjW873sYinuJlQWkz9PBnf/HrkK2P6gg2UI8rxofVJbTHOOaoH m2yMSQiRPmi/ZqI5c1CGkt1ohy42M52i2y+hzA== -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org