$ rpki-client -vvf rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/9FFF0E74665511EEB872BE4DC4F9AE02.roa File: 9FFF0E74665511EEB872BE4DC4F9AE02.roa (raw, json) Hash identifier: HsI9s/avf/WsE7yy/2Fnz0a9pkM1ZrwF3kHF8jU1yp8= Subject key identifier: 5F:0A:F9:14:D1:E6:96:FB:4A:CC:F6:55:8E:B1:47:06:46:C1:93:0E Certificate issuer: /CN=A91F63DC/serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1 Certificate serial: A2 Authority key identifier: 06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/9FFF0E74665511EEB872BE4DC4F9AE02.roa Signing time: Thu 15 Aug 2024 05:47:19 +0000 ROA not before: Thu 15 Aug 2024 05:47:19 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 133522 IP address blocks: 103.153.16.0/23 maxlen: 23 103.153.16.0/24 maxlen: 24 103.153.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F63DC/serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1 Validity Not Before: Aug 15 05:47:19 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66bd9667-1b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:ed:0f:af:40:d0:e6:87:12:54:ce:54:b0: 3d:ac:04:e3:3d:72:63:6c:e4:fa:49:99:c6:9e:e0: fb:97:6c:c6:14:dd:a3:f1:ee:59:27:f7:33:25:d8: 8d:a9:87:5a:ec:57:22:c9:8a:ce:85:43:fc:82:68: 8d:90:6a:dd:44:fb:73:8a:8c:9f:39:0c:bf:1e:b3: e8:8d:8d:be:db:31:5a:2b:f1:0d:1c:9d:80:3f:82: 47:74:fb:5f:e6:07:76:1f:bd:6c:b7:88:40:5d:c1: 59:53:25:37:23:f1:12:f4:d9:06:1f:c4:9c:37:8c: 58:7e:ea:10:76:6e:f1:10:d0:df:84:ea:89:1f:33: 7f:63:2b:9d:05:06:45:77:04:79:b6:dc:7a:8e:27: 41:45:d4:1f:39:3d:6e:2a:bb:ad:d9:28:bd:25:1c: e7:93:f8:83:c0:3a:24:f4:af:9f:bc:27:53:20:1e: c6:89:46:cc:1c:7a:00:a4:73:57:80:75:f9:1e:01: f5:a5:ec:24:b5:ae:25:cd:5e:1d:ba:8b:3a:55:8a: d4:0c:c4:1a:cd:4d:7a:81:d7:ee:11:64:df:e2:39: 5d:82:01:3a:bd:a7:26:4d:94:31:b8:ab:3f:4f:7a: 6a:b7:73:d6:98:1e:e1:e7:75:44:7a:b5:b1:ba:95: c5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0A:F9:14:D1:E6:96:FB:4A:CC:F6:55:8E:B1:47:06:46:C1:93:0E X509v3 Authority Key Identifier: keyid:06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/9FFF0E74665511EEB872BE4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.16.0/23 Signature Algorithm: sha256WithRSAEncryption 22:01:49:36:e9:cd:99:03:57:2d:16:46:e5:f3:4e:85:fe:b8: ff:68:e1:31:51:cc:37:8d:f5:c5:f1:3b:33:14:d4:a2:cd:ab: 53:0c:41:fa:f9:3e:3b:a5:c0:52:4e:88:58:ad:b6:52:22:d2: 74:47:f2:28:ae:ca:74:5b:65:95:20:64:da:65:73:69:b1:f7: 95:9a:10:7a:5a:c2:c3:33:38:67:79:b5:d5:94:d0:7d:32:7c: 32:d0:ad:e6:59:fa:6d:c4:3f:98:de:2c:81:45:b8:17:52:60: 23:88:2c:b1:4d:ae:d9:a3:b5:7b:bf:dd:28:71:12:67:21:a1: 19:7c:54:83:63:f7:93:9e:25:d7:04:7e:8f:c3:3d:80:6b:91: e8:1a:24:86:1d:b4:0e:ea:ba:9d:07:b2:a5:6c:2a:57:12:bf: a2:26:1b:68:92:26:01:ef:2e:49:ee:50:f2:0d:63:af:7f:9f: 2a:e1:e4:af:05:53:c6:16:0d:12:09:d9:92:81:42:58:00:7f: 72:2b:0e:41:62:37:f6:eb:19:f5:66:62:85:02:37:a4:a3:03: a1:99:b1:f6:82:f4:24:7e:ca:3a:64:c8:05:1e:dc:3e:98:f3: ae:08:58:8f:a3:81:52:ec:e7:d4:94:23:56:6a:d0:84:39:6c: 50:82:b4:9b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYzREMxMTAvBgNVBAUTKDA2NjY2QUVDRDc4QzBBNUVEMTM3OTBBNUU5QUE0MEMz NDkwRkJDRjEwHhcNMjQwODE1MDU0NzE5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJkOTY2Ny0xYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqztD69A0OaHElTOVLA9rATjPXJjbOT6SZnGnuD7l2zGFN2j8e5ZJ/czJdiN qYda7FciyYrOhUP8gmiNkGrdRPtzioyfOQy/HrPojY2+2zFaK/ENHJ2AP4JHdPtf 5gd2H71st4hAXcFZUyU3I/ES9NkGH8ScN4xYfuoQdm7xENDfhOqJHzN/YyudBQZF dwR5ttx6jidBRdQfOT1uKrut2Si9JRznk/iDwDok9K+fvCdTIB7GiUbMHHoApHNX gHX5HgH1pewkta4lzV4duos6VYrUDMQazU16gdfuEWTf4jldggE6vacmTZQxuKs/ T3pqt3PWmB7h53VEerWxupXFXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF8K+RTR 5pb7Ssz2VY6xRwZGwZMOMB8GA1UdIwQYMBaAFAZmauzXjApe0TeQpemqQMNJD7zx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjNEQy8wNDMxNTJFMjY2 NTMxMUVFOUM2OEVFMkJDNEY5QUUwMi9CbVpxN05lTUNsN1JONUNsNmFwQXcwa1B2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JtWnE3TmVNQ2w3Uk41Q2w2YXBBdzBrUHZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjYzREMvMDQzMTUyRTI2NjUzMTFFRTlDNjhFRTJCQzRGOUFFMDIvOUZGRjBFNzQ2 NjU1MTFFRUI4NzJCRTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmRAwDQYJKoZIhvcNAQELBQADggEBACIBSTbpzZkDVy0W RuXzToX+uP9o4TFRzDeN9cXxOzMU1KLNq1MMQfr5PjulwFJOiFittlIi0nRH8iiu ynRbZZUgZNplc2mx95WaEHpawsMzOGd5tdWU0H0yfDLQreZZ+m3EP5jeLIFFuBdS YCOILLFNrtmjtXu/3ShxEmchoRl8VINj95OeJdcEfo/DPYBrkegaJIYdtA7qup0H sqVsKlcSv6ImG2iSJgHvLknuUPINY69/nyrh5K8FU8YWDRIJ2ZKBQlgAf3IrDkFi N/brGfVmYoUCN6SjA6GZsfaC9CR+yjpkyAUe3D6Y864IWI+jgVLs59SUI1Zq0IQ5 bFCCtJs= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org