$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/490CDADA42F211EBB34A1A60C4F9AE02.roa File: 490CDADA42F211EBB34A1A60C4F9AE02.roa (raw, json) Hash identifier: 3kD8w6kxSxV6XYWFlWj1NaSUIuuzPrI6iUcel7na0eY= Subject key identifier: E2:ED:B3:8E:00:F4:CA:3A:FE:7D:CE:77:80:DA:04:B3:7E:92:EB:65 Certificate issuer: /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Certificate serial: 0602 Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/490CDADA42F211EBB34A1A60C4F9AE02.roa Signing time: Mon 08 Jan 2024 04:27:10 +0000 ROA not before: Mon 08 Jan 2024 04:27:10 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 138995 IP address blocks: 103.142.244.0/24 maxlen: 24 103.142.245.0/24 maxlen: 24 2001:df1:5f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Validity Not Before: Jan 8 04:27:10 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=659b799e-96e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ac:69:94:13:a5:e3:c1:54:cc:25:fb:15:19: 2d:20:7e:ab:47:b6:26:7d:7b:59:bc:21:cc:b8:1c: 40:65:30:ad:6a:ea:c0:8b:87:10:aa:7d:a0:d9:63: 04:9c:8a:7b:a9:d1:61:eb:ed:7c:87:1b:9f:34:d2: 35:e8:9a:ac:e1:1e:30:16:ed:14:d0:6d:44:2e:de: 2f:e9:eb:e1:39:3c:9e:99:0e:bc:da:b6:ca:11:fa: 2a:71:c3:d6:ad:a5:68:44:81:a1:2b:3b:e6:ae:ba: e6:18:63:a3:24:51:33:02:3e:88:f0:e8:23:6d:03: 3a:98:26:1d:1d:2a:67:22:22:20:c5:38:7c:aa:14: 05:3a:89:7c:e5:d4:2a:70:61:df:59:ce:99:74:2f: 3b:02:8d:2c:f6:41:64:e8:2a:e5:af:dd:64:9f:db: 81:d7:b1:19:c8:8b:37:b7:0e:d5:a0:76:2d:e8:07: 2a:37:96:d7:0f:51:9b:8b:38:31:fd:c1:33:28:87: 83:71:42:0a:fc:0e:fe:fd:34:86:01:f0:da:4e:ad: fc:1f:d3:9b:de:cc:5a:9a:77:c6:4f:ed:38:ce:a4: 99:44:11:b8:6a:c8:41:3b:3b:c6:4b:16:43:01:3c: 60:77:93:3d:98:16:bc:81:01:1d:51:16:53:73:bd: 02:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:ED:B3:8E:00:F4:CA:3A:FE:7D:CE:77:80:DA:04:B3:7E:92:EB:65 X509v3 Authority Key Identifier: keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/490CDADA42F211EBB34A1A60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.244.0/23 IPv6: 2001:df1:5f80::/48 Signature Algorithm: sha256WithRSAEncryption d2:fe:55:05:14:b6:1f:a6:e0:35:ac:2a:53:52:0f:ac:5d:29: b1:8a:d8:0f:b8:87:41:b8:81:31:dd:7e:a2:65:f9:b0:83:54: dc:85:13:71:89:4c:57:07:95:46:f4:18:4c:16:64:02:41:dc: 05:f0:05:b2:01:ec:21:f8:74:08:6a:d7:52:1d:47:3f:57:41: c9:2c:cd:f2:55:64:7a:5f:f5:e7:ff:b1:f2:94:8a:5e:3d:28: fb:30:9c:aa:de:6d:41:ad:51:01:9b:71:bb:13:2d:82:02:54: fc:3c:21:3a:e1:a7:70:92:6c:be:32:a3:1f:28:cd:96:07:24: c9:50:91:2d:d9:53:b0:9d:d6:cf:e0:c8:c6:19:2c:c3:b8:05: ba:4d:83:c8:07:04:3e:63:3f:d2:c7:e6:83:87:e6:a9:76:dc: 0a:e9:d4:2b:9b:25:04:48:8f:b7:e8:2a:0a:64:86:75:c6:1f: df:a9:7d:c5:6e:1c:bc:2d:90:2e:97:34:38:c6:e8:b2:c5:d4: b3:51:4a:b3:50:b1:a5:6e:51:15:57:af:f2:0e:d3:2f:4e:d0: 2f:89:b7:74:7d:8e:1f:3e:0b:9a:f4:29:21:68:8d:ec:31:26: cd:31:8e:f5:19:cb:e7:0c:08:ef:2c:b0:bf:d8:8d:42:2b:84: eb:79:b3:d0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKDhBRTlDREUxMEJFMEI3N0YwOTFCMEQzOEVCQzE5NjdD OEJDMDkxOUUwHhcNMjQwMTA4MDQyNzEwWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTliNzk5ZS05NmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KxplBOl48FUzCX7FRktIH6rR7YmfXtZvCHMuBxAZTCtaurAi4cQqn2g2WME nIp7qdFh6+18hxufNNI16Jqs4R4wFu0U0G1ELt4v6evhOTyemQ682rbKEfoqccPW raVoRIGhKzvmrrrmGGOjJFEzAj6I8OgjbQM6mCYdHSpnIiIgxTh8qhQFOol85dQq cGHfWc6ZdC87Ao0s9kFk6Crlr91kn9uB17EZyIs3tw7VoHYt6AcqN5bXD1Gbizgx /cEzKIeDcUIK/A7+/TSGAfDaTq38H9Ob3sxamnfGT+04zqSZRBG4ashBOzvGSxZD ATxgd5M9mBa8gQEdURZTc70CvQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOLts44A 9Mo6/n3Od4DaBLN+kutlMB8GA1UdIwQYMBaAFIrpzeEL4Ld/CRsNOOvBlnyLwJGe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC8zOURDRjc1NDQy RjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3QzOEpHdzA0NjhHV2ZJdkFr WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l1bk40UXZndDM4Skd3MDQ2OEdXZkl2QWtaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTZCQjgvMzlEQ0Y3NTQ0MkYwMTFFQjhBMDlDNzVBQzRGOUFFMDIvNDkwQ0RBREE0 MkYyMTFFQkIzNEExQTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjvQwDwQCAAIwCQMHACABDfFfgDANBgkqhkiG9w0BAQsF AAOCAQEA0v5VBRS2H6bgNawqU1IPrF0psYrYD7iHQbiBMd1+omX5sINU3IUTcYlM VweVRvQYTBZkAkHcBfAFsgHsIfh0CGrXUh1HP1dBySzN8lVkel/15/+x8pSKXj0o +zCcqt5tQa1RAZtxuxMtggJU/DwhOuGncJJsvjKjHyjNlgckyVCRLdlTsJ3Wz+DI xhksw7gFuk2DyAcEPmM/0sfmg4fmqXbcCunUK5slBEiPt+gqCmSGdcYf36l9xW4c vC2QLpc0OMbossXUs1FKs1CxpW5RFVev8g7TL07QL4m3dH2OHz4LmvQpIWiN7DEm zTGO9RnL5wwI7yywv9iNQiuE63mz0A== -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:10 2024 by rpki-client on console-ams.rpki-client.org