$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/DAEB24B0176111EFAB2AD122C4F9AE02.roa File: DAEB24B0176111EFAB2AD122C4F9AE02.roa (raw, json) Hash identifier: Sbd7uixAB+aEWkmSGOrUVMGizlHems1ClmWbyRlTiKs= Subject key identifier: 9A:DF:C6:D1:5E:C9:B8:0A:F5:F2:B1:45:70:3A:6D:BF:B8:EF:7B:4D Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: 81 Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/DAEB24B0176111EFAB2AD122C4F9AE02.roa Signing time: Fri 25 Oct 2024 05:49:37 +0000 ROA not before: Fri 25 Oct 2024 05:49:37 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 140499 IP address blocks: 103.67.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Validity Not Before: Oct 25 05:49:37 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671b3171-8311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:04:8f:a9:19:45:b2:b0:4c:64:51:b5:18:44: c7:bd:11:ff:b2:e1:09:ca:52:1b:53:88:e2:68:44: 43:d4:a5:ed:44:51:ce:35:d9:40:29:ab:fc:a9:6d: 30:dd:fd:95:cb:5f:6f:1b:8a:fc:9c:95:86:93:6d: 34:d7:57:58:82:a7:69:aa:d3:23:f0:fc:c6:79:42: 83:6b:fd:2d:16:69:07:ec:d9:f9:08:bf:41:65:2c: ab:3c:34:d5:91:b5:3f:78:21:0e:2c:62:eb:51:5b: 18:9e:34:4f:66:01:d8:c9:3c:29:e6:a8:36:66:9f: 54:32:0e:f3:25:a4:81:b3:5c:de:ee:0e:b4:0d:5c: 45:a3:15:76:b4:4f:21:5e:6c:a0:4b:d7:0e:0e:40: d9:12:d7:45:10:d0:54:29:a8:32:24:53:0e:53:db: 03:3f:b6:52:26:9e:71:a7:7e:9c:80:fd:f0:51:7f: f9:74:81:3d:bb:d6:d2:a4:7e:24:8d:ed:5a:49:07: 08:d0:dc:f7:c4:a7:53:5d:20:64:9d:b3:60:36:48: 25:81:61:18:04:f1:6d:1a:c6:f8:c1:a5:aa:16:70: 9b:1e:19:45:ca:d7:ad:6f:34:d2:98:bf:59:ac:7c: b2:f6:b3:77:c6:97:b5:31:8c:b0:46:3c:5c:c6:49: d0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DF:C6:D1:5E:C9:B8:0A:F5:F2:B1:45:70:3A:6D:BF:B8:EF:7B:4D X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/DAEB24B0176111EFAB2AD122C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.55.0/24 Signature Algorithm: sha256WithRSAEncryption 91:cf:7a:31:b8:6d:83:09:3b:ea:b1:89:f4:2e:8f:b1:9c:65: c3:52:0f:a9:ee:d5:bd:87:db:1a:6f:c9:3e:42:16:f7:49:e3: bd:f6:26:7e:f9:0b:49:2a:92:c0:35:50:7a:c3:2c:95:c2:31: 2c:4b:88:58:ec:5b:90:2b:d5:87:0d:7f:e0:57:18:ac:a5:c9: b9:dd:e2:72:10:49:eb:0c:aa:4d:80:97:55:73:fe:ee:59:d5: ce:47:38:4c:c2:78:78:97:07:56:8a:b3:63:35:f8:5f:dd:4c: e3:ab:ed:e0:e3:dd:66:f1:9c:45:42:7c:54:6e:75:af:e4:63: 44:6d:b7:e3:e7:03:5e:ff:55:72:15:7f:ff:c7:0e:81:68:11: 7b:a0:dc:21:90:c9:2b:7e:e9:2a:46:34:34:34:3e:33:a4:c4: 93:3f:27:55:f5:1d:c6:9c:19:de:cf:b8:1c:58:d7:61:ba:2b: 4f:40:b6:b8:f9:61:4d:ea:d6:fd:80:07:19:9f:9d:c6:c6:08: 6c:4e:e8:b3:30:01:00:0f:f4:eb:46:7b:08:0f:f4:d8:3e:02: f6:8a:d1:24:26:9b:db:81:f9:00:4b:62:9c:d6:6a:fb:d1:4a: 02:47:f9:dc:c8:6b:6a:a8:dd:af:fc:9e:55:99:8d:0c:88:7a: 55:1c:6b:c6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG QjJGMEYxNjIwHhcNMjQxMDI1MDU0OTM3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFiMzE3MS04MzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArASPqRlFsrBMZFG1GETHvRH/suEJylIbU4jiaERD1KXtRFHONdlAKav8qW0w 3f2Vy19vG4r8nJWGk20011dYgqdpqtMj8PzGeUKDa/0tFmkH7Nn5CL9BZSyrPDTV kbU/eCEOLGLrUVsYnjRPZgHYyTwp5qg2Zp9UMg7zJaSBs1ze7g60DVxFoxV2tE8h XmygS9cODkDZEtdFENBUKagyJFMOU9sDP7ZSJp5xp36cgP3wUX/5dIE9u9bSpH4k je1aSQcI0Nz3xKdTXSBknbNgNkglgWEYBPFtGsb4waWqFnCbHhlFytetbzTSmL9Z rHyy9rN3xpe1MYywRjxcxknQEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJrfxtFe ybgK9fKxRXA6bb+473tNMB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1 RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkQ4QkUvQzY4RUZGOUVFNUQ2MTFFRThCMzU2NzM5QzRGOUFFMDIvREFFQjI0QjAx NzYxMTFFRkFCMkFEMTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnQzcwDQYJKoZIhvcNAQELBQADggEBAJHPejG4bYMJO+qx ifQuj7GcZcNSD6nu1b2H2xpvyT5CFvdJ4732Jn75C0kqksA1UHrDLJXCMSxLiFjs W5Ar1YcNf+BXGKylybnd4nIQSesMqk2Al1Vz/u5Z1c5HOEzCeHiXB1aKs2M1+F/d TOOr7eDj3WbxnEVCfFRuda/kY0Rtt+PnA17/VXIVf//HDoFoEXug3CGQySt+6SpG NDQ0PjOkxJM/J1X1HcacGd7PuBxY12G6K09Atrj5YU3q1v2ABxmfncbGCGxO6LMw AQAP9OtGewgP9Ng+AvaK0SQmm9uB+QBLYpzWavvRSgJH+dzIa2qo3a/8nlWZjQyI elUca8Y= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:32 2024 by rpki-client on console-fra.rpki-client.org