$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4C5CCE6EB46A11EAB5A01176C4F9AE02.roa File: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (raw, json) Hash identifier: YmROt2RnH3UdNIAXBylk68JRdbwoGmgzkhxTYT8yZZA= Subject key identifier: 84:BE:8E:92:66:CD:F9:E7:DB:AA:36:45:A3:83:07:CC:62:6F:A4:1F Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 0863 Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4C5CCE6EB46A11EAB5A01176C4F9AE02.roa Signing time: Wed 04 Sep 2024 21:29:25 +0000 ROA not before: Wed 04 Sep 2024 21:29:25 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 45634 IP address blocks: 103.5.44.0/22 maxlen: 22 103.5.44.0/24 maxlen: 24 103.5.45.0/24 maxlen: 24 103.5.46.0/24 maxlen: 24 103.5.47.0/24 maxlen: 24 103.35.204.0/22 maxlen: 22 103.35.204.0/24 maxlen: 24 103.35.205.0/24 maxlen: 24 103.35.206.0/24 maxlen: 24 103.35.207.0/24 maxlen: 24 103.249.160.0/22 maxlen: 22 103.249.160.0/24 maxlen: 24 103.249.161.0/24 maxlen: 24 103.249.162.0/24 maxlen: 24 103.249.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Sep 4 21:29:25 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d8d134-58e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:00:3a:a2:d0:34:63:3a:e9:7f:2e:fa:17:d3: b9:4f:ff:49:6f:ca:bf:6a:22:fa:cf:18:e1:d4:55: 28:e0:12:c3:23:4a:86:fc:a5:fe:7a:9d:32:8e:72: a3:97:83:e7:99:6e:ef:bb:21:71:bd:0d:b0:36:b1: d0:80:54:f6:6c:23:ee:7a:08:c7:a5:2b:7b:2f:d0: 54:1c:c9:0a:03:42:95:64:85:af:94:be:ab:00:8f: cd:66:48:bc:63:4a:d4:a6:34:e5:82:72:00:bc:22: f0:5f:43:28:8e:2a:45:89:44:35:a6:ee:7a:45:65: 50:dc:6e:76:86:f8:7f:ef:cf:5c:b6:fe:f0:bb:f8: 5e:06:71:a2:62:91:77:2f:4b:e1:f3:ad:a1:22:40: 9f:ce:96:0b:88:14:52:cf:93:39:34:58:3d:ae:40: 21:36:fd:31:13:c2:37:17:5d:ae:ca:11:06:af:1e: db:70:e6:c7:6d:24:f5:62:0e:4d:c7:76:57:53:eb: dc:c4:3c:ce:7b:79:8c:60:30:34:cf:69:61:b4:a9: eb:cb:81:ba:c0:47:b0:0b:4e:78:27:13:3e:0c:b8: a0:85:1d:c2:f7:19:dd:04:f5:6f:8b:26:e6:53:b6: 17:aa:34:f0:ff:c0:be:40:4f:89:26:aa:96:84:0a: 50:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BE:8E:92:66:CD:F9:E7:DB:AA:36:45:A3:83:07:CC:62:6F:A4:1F X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4C5CCE6EB46A11EAB5A01176C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.44.0/22 103.35.204.0/22 103.249.160.0/22 Signature Algorithm: sha256WithRSAEncryption 68:00:00:65:0c:ca:29:9d:83:78:03:5f:42:db:70:bd:a0:8d: 89:f5:6c:69:6b:bf:91:5c:4c:4f:e8:c7:32:25:71:3d:1f:e7: b4:67:69:7f:c9:5a:3d:b3:d8:a5:6f:f4:c6:ab:c2:51:3d:35: 4a:65:b1:ad:2e:af:a4:7c:68:6c:02:78:e6:63:fc:70:50:3b: a2:e8:2a:9e:e9:5d:34:3c:23:fc:d1:fb:50:7c:aa:1e:cb:d7: ce:e6:c5:cd:8a:a9:7e:54:0c:20:32:c0:4d:58:04:7f:b7:a5: bc:f5:88:cd:ed:0a:b1:e8:35:45:04:50:df:58:8a:29:f0:da: 5c:c3:50:cb:97:ab:45:39:ef:29:29:26:0b:86:fe:18:21:b2: 28:24:99:9d:b7:67:f4:86:c8:cf:cc:43:69:79:12:c2:97:c8: 2b:13:cf:22:79:a5:2a:c0:df:a2:2d:c4:9e:d1:2e:02:09:8c: 7a:28:a3:ab:7a:1b:c2:1c:58:96:2d:5b:4f:c3:c1:2e:62:c1: 5a:d8:0e:6d:bd:7f:7a:59:c1:f8:c4:67:d6:80:7d:bf:de:c3: 17:09:52:2c:e6:b7:25:2f:ad:93:41:23:36:91:13:ff:e5:67: fe:f9:32:b6:d5:63:04:75:20:b5:ff:8f:d9:51:f0:97:54:75: fc:c7:96:85 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjQwOTA0MjEyOTI1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4ZDEzNC01OGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8QA6otA0Yzrpfy76F9O5T/9Jb8q/aiL6zxjh1FUo4BLDI0qG/KX+ep0yjnKj l4PnmW7vuyFxvQ2wNrHQgFT2bCPuegjHpSt7L9BUHMkKA0KVZIWvlL6rAI/NZki8 Y0rUpjTlgnIAvCLwX0MojipFiUQ1pu56RWVQ3G52hvh/789ctv7wu/heBnGiYpF3 L0vh862hIkCfzpYLiBRSz5M5NFg9rkAhNv0xE8I3F12uyhEGrx7bcObHbST1Yg5N x3ZXU+vcxDzOe3mMYDA0z2lhtKnry4G6wEewC054JxM+DLighR3C9xndBPVviybm U7YXqjTw/8C+QE+JJqqWhApQzwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIS+jpJm zfnn26o2RaODB8xib6QfMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUxMkYvNEI4QkZGRUNCNDY5MTFFQUFCQTcxQzc1QzRGOUFFMDIvNEM1Q0NFNkVC NDZBMTFFQUI1QTAxMTc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnBSwDBAJnI8wDBAJn+aAwDQYJKoZIhvcNAQELBQADggEB AGgAAGUMyimdg3gDX0LbcL2gjYn1bGlrv5FcTE/oxzIlcT0f57RnaX/JWj2z2KVv 9MarwlE9NUplsa0ur6R8aGwCeOZj/HBQO6LoKp7pXTQ8I/zR+1B8qh7L187mxc2K qX5UDCAywE1YBH+3pbz1iM3tCrHoNUUEUN9Yiinw2lzDUMuXq0U57ykpJguG/hgh sigkmZ23Z/SGyM/MQ2l5EsKXyCsTzyJ5pSrA36ItxJ7RLgIJjHooo6t6G8IcWJYt W0/DwS5iwVrYDm29f3pZwfjEZ9aAfb/ewxcJUizmtyUvrZNBIzaRE//lZ/75MrbV YwR1ILX/j9lR8JdUdfzHloU= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org