$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/11328E82645511EBAE4A4633C4F9AE02.roa File: 11328E82645511EBAE4A4633C4F9AE02.roa (raw, json) Hash identifier: t7mfrUSDQrKIp8JEdIvGwr5fOfRSKBqvcJKp6zu78N8= Subject key identifier: B4:03:5C:C7:CE:AB:76:52:EA:96:14:B0:01:28:A2:B8:CD:69:49:A3 Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Certificate serial: 05D9 Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/11328E82645511EBAE4A4633C4F9AE02.roa Signing time: Sat 23 Mar 2024 00:02:49 +0000 ROA not before: Sat 23 Mar 2024 00:02:49 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 141689 IP address blocks: 103.162.6.0/24 maxlen: 24 103.165.242.0/24 maxlen: 24 2001:df5:dc80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1497 (0x5d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Validity Not Before: Mar 23 00:02:49 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65fe1c29-bc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:6b:f4:d0:e5:bb:fd:a4:c2:a9:9e:41:af: fc:18:dd:6a:05:8e:3f:ac:46:e0:d4:4e:13:33:b6: be:2b:be:6b:66:c9:e2:a6:a4:1c:e4:fb:a7:9d:84: 4b:b8:f0:5b:ec:64:ff:b2:2b:ab:20:0c:18:04:30: ed:30:5a:63:dd:a8:ed:c6:77:45:0a:03:7d:9f:bf: 2c:2a:c9:72:88:5e:aa:ce:67:65:70:1c:15:08:98: eb:39:db:20:df:bb:4b:cb:8b:da:b3:6b:80:c5:a2: 63:de:79:af:76:68:92:ce:47:e7:33:5c:cf:ad:d1: eb:12:49:b4:f3:a8:a9:a0:86:46:78:f7:b3:75:f9: a2:15:13:4c:6c:ed:8e:cf:50:4d:ee:43:03:a7:93: 82:7a:a4:44:09:ab:09:74:f5:38:c0:65:61:83:05: c0:be:aa:d9:62:44:69:f5:de:37:52:f3:75:9c:dc: 30:fa:5c:d3:da:2d:53:d1:01:c5:6a:a4:00:ac:b0: 87:77:94:0d:2b:49:b1:22:45:09:c0:86:f1:8b:b0: 5f:83:c3:2f:db:67:b2:c2:e8:f6:16:aa:c6:5a:1c: bc:a9:4a:ef:d3:4f:66:e7:2e:5c:72:df:ed:c1:06: bd:1c:ce:83:1c:ef:14:72:76:5f:04:07:1d:b4:28: 6a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:03:5C:C7:CE:AB:76:52:EA:96:14:B0:01:28:A2:B8:CD:69:49:A3 X509v3 Authority Key Identifier: keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/11328E82645511EBAE4A4633C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.6.0/24 103.165.242.0/24 IPv6: 2001:df5:dc80::/48 Signature Algorithm: sha256WithRSAEncryption 18:3e:3b:2c:d7:ee:ec:e0:94:b5:9d:b3:c7:ed:c3:88:ab:01: 1f:c9:75:cd:c6:8d:f4:6e:f1:30:f8:ef:02:66:9e:0e:5c:3e: 4d:85:72:c9:28:f9:47:68:3f:57:8f:7d:21:b0:97:a7:1b:79: 2a:04:9f:d4:78:81:c4:e7:b0:ee:53:59:38:a7:1d:43:a2:a6: 9a:18:e1:37:81:5a:f1:4b:22:00:f7:fb:37:5a:7c:b8:2e:8b: b6:29:38:43:26:14:f8:54:cc:ad:aa:ef:6d:7a:5b:e9:18:74: 29:22:a5:a3:2e:71:ec:bf:55:e8:f3:c2:74:f9:5d:be:ed:e4: e3:05:6b:19:d8:ec:ca:71:63:72:00:ae:f3:e1:80:79:4e:99: 06:3e:77:3e:ff:df:d5:9d:75:cd:58:ae:00:b2:4a:ec:78:24: 6d:1a:de:db:cd:0f:b3:9e:e5:8e:7d:92:43:ea:84:6b:46:01: 11:30:32:4c:f6:3a:2f:9f:68:4d:24:34:78:20:48:05:06:97: 3e:23:c8:bc:6a:31:a1:f9:5c:65:33:b8:7b:b5:17:8b:f0:7c: 47:8c:1b:13:19:85:61:c3:24:99:ec:c1:32:3c:5d:fa:be:3b: ea:c7:83:78:fb:b0:66:30:75:03:63:62:2a:06:f6:b7:03:82: cb:0a:2d:24 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCODAxMTAvBgNVBAUTKDhENjY4QUZEM0UwM0U3MEI4NDQ5ODgxRkEzNTAxMzFC QUNBQzQ4NTYwHhcNMjQwMzIzMDAwMjQ5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWZlMWMyOS1iYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXNr9NDlu/2kwqmeQa/8GN1qBY4/rEbg1E4TM7a+K75rZsnipqQc5PunnYRL uPBb7GT/siurIAwYBDDtMFpj3ajtxndFCgN9n78sKslyiF6qzmdlcBwVCJjrOdsg 37tLy4vas2uAxaJj3nmvdmiSzkfnM1zPrdHrEkm086ipoIZGePezdfmiFRNMbO2O z1BN7kMDp5OCeqRECasJdPU4wGVhgwXAvqrZYkRp9d43UvN1nNww+lzT2i1T0QHF aqQArLCHd5QNK0mxIkUJwIbxi7Bfg8Mv22eywuj2FqrGWhy8qUrv009m5y5cct/t wQa9HM6DHO8UcnZfBAcdtChqLQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFLQDXMfO q3ZS6pYUsAEoorjNaUmjMB8GA1UdIwQYMBaAFI1miv0+A+cLhEmIH6NQExusrEhW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREI4MC9CRTlGNjFBMDY0 NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3dUVTWWdmbzFBVEc2eXNT RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pXYUtfVDRENXd1RVNZZ2ZvMUFURzZ5c1NGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRCODAvQkU5RjYxQTA2NDUzMTFFQkFGNzc0RDMyQzRGOUFFMDIvMTEzMjhFODI2 NDU1MTFFQkFFNEE0NjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnogYDBABnpfIwDwQCAAIwCQMHACABDfXcgDANBgkqhkiG 9w0BAQsFAAOCAQEAGD47LNfu7OCUtZ2zx+3DiKsBH8l1zcaN9G7xMPjvAmaeDlw+ TYVyySj5R2g/V499IbCXpxt5KgSf1HiBxOew7lNZOKcdQ6KmmhjhN4Fa8UsiAPf7 N1p8uC6Ltik4QyYU+FTMrarvbXpb6Rh0KSKloy5x7L9V6PPCdPldvu3k4wVrGdjs ynFjcgCu8+GAeU6ZBj53Pv/f1Z11zViuALJK7HgkbRre280Ps57ljn2SQ+qEa0YB ETAyTPY6L59oTSQ0eCBIBQaXPiPIvGoxoflcZTO4e7UXi/B8R4wbExmFYcMkmezB Mjxd+r476seDePuwZjB1A2NiKgb2twOCywotJA== -----END CERTIFICATE-----Generated at Sat May 11 02:39:36 2024 by rpki-client on console-fra.rpki-client.org