$ rpki-client -vvf rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/74897CC0622A11EBA8BA0B7EC4F9AE02.roa File: 74897CC0622A11EBA8BA0B7EC4F9AE02.roa (raw, json) Hash identifier: 3jLF9eGaw1FaBCZ3IF1mgPL+uokkd/4XtJL3l6kO2Tw= Subject key identifier: 00:B8:B1:A2:9B:F6:0B:2E:10:A6:C3:90:A6:5C:01:54:AF:B1:31:CC Certificate issuer: /CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Certificate serial: 0645 Authority key identifier: 7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/74897CC0622A11EBA8BA0B7EC4F9AE02.roa Signing time: Thu 17 Oct 2024 04:47:32 +0000 ROA not before: Thu 17 Oct 2024 04:47:32 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 141701 IP address blocks: 103.162.58.0/24 maxlen: 24 103.162.59.0/24 maxlen: 24 2401:cde0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Validity Not Before: Oct 17 04:47:32 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=671096e4-55cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:63:c1:7e:1a:da:c5:d2:d4:b7:47:10:0e: 40:0a:d6:62:43:6b:e8:a5:8b:d4:1f:94:b7:79:c5: 1e:34:58:5b:ca:d9:53:c1:f8:83:e5:28:dc:c8:6c: 5a:b5:ef:b3:87:2e:e7:dd:74:43:8c:ca:fe:4f:48: 20:99:52:27:85:4a:ca:f9:9b:38:1a:79:b3:c2:55: a2:c7:4f:b9:a3:8d:ef:44:6a:5f:07:a5:ad:7c:ea: 48:77:99:12:c8:e8:f6:9a:0f:b1:45:68:d7:ee:c5: 81:93:b4:9d:6e:29:5d:bb:95:c2:5b:ab:90:42:8b: 33:c1:15:92:a8:9b:4a:17:99:66:ea:29:28:32:60: e6:58:6e:0b:13:ab:36:48:77:c5:a1:bb:67:d8:32: 38:6f:97:20:ec:6f:77:bb:b6:c9:b8:79:39:9b:8e: e0:43:9e:13:c5:0f:65:6c:b9:52:a5:d6:74:60:39: f2:16:c2:90:56:d8:5c:b9:48:10:cb:6a:43:9e:ff: 24:c4:1f:16:5b:4b:26:04:59:b0:6f:ad:9d:13:2f: 61:88:1e:08:e4:0f:67:53:a6:e2:5b:00:de:47:0b: 8b:86:1e:29:8d:b0:fe:2c:1a:0f:05:39:5b:ea:25: 2e:8f:00:77:9f:e4:6c:00:b4:17:b8:ad:0d:ca:2e: 24:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B8:B1:A2:9B:F6:0B:2E:10:A6:C3:90:A6:5C:01:54:AF:B1:31:CC X509v3 Authority Key Identifier: keyid:7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/74897CC0622A11EBA8BA0B7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.58.0/23 IPv6: 2401:cde0::/32 Signature Algorithm: sha256WithRSAEncryption 53:2a:22:f9:79:e0:68:a2:ed:38:c2:53:d3:7d:81:05:d5:c0: bc:45:79:b4:dd:cf:52:90:4a:90:37:21:45:aa:07:ea:b7:91: 68:c5:1f:fa:4f:91:1e:d2:98:4c:e0:70:c4:db:0f:81:6d:f4: 54:d1:58:f8:00:ab:25:3a:9e:8e:07:df:57:0e:d6:a6:28:89: 13:39:3c:14:61:b2:f9:e8:b5:c0:58:24:fd:80:11:ca:d4:2d: 7d:6f:55:dc:01:a1:2b:6e:88:af:d3:f3:52:f6:4a:4f:79:65: d7:c3:e1:62:83:c4:c2:2b:53:78:b6:00:17:26:7f:e2:df:dd: 0f:cd:5b:5f:25:bb:7d:74:8e:18:fa:19:dc:7f:21:22:21:75: 6a:1a:16:b8:c4:a5:dc:91:82:c4:9d:16:24:e4:a9:0b:b8:88: b4:a8:1c:ff:61:81:e9:45:a7:cb:ed:60:02:20:38:c6:25:fc: 73:bf:ca:44:43:cd:2e:4b:fe:ab:37:ea:96:8c:9b:ef:52:1b: 49:d8:27:56:90:59:a0:6e:2e:6f:05:c7:2d:fe:95:99:ae:fe: 9a:b9:ae:36:2a:90:1f:a3:1b:9f:ab:71:8b:cb:ed:a4:a1:e9: 8b:32:76:c8:55:4f:0b:51:d0:2b:59:08:46:a4:00:7c:e6:37: 9b:57:cb:d8 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAwRUQxMTAvBgNVBAUTKDdDQTc1MENDMDk5MDc3RDRCNDMyOTBBNzYyODNBQjdC RjBCNjRBNjgwHhcNMjQxMDE3MDQ0NzMyWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEwOTZlNC01NWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2tjwX4a2sXS1LdHEA5ACtZiQ2vopYvUH5S3ecUeNFhbytlTwfiD5SjcyGxa te+zhy7n3XRDjMr+T0ggmVInhUrK+Zs4GnmzwlWix0+5o43vRGpfB6WtfOpId5kS yOj2mg+xRWjX7sWBk7Sdbildu5XCW6uQQoszwRWSqJtKF5lm6ikoMmDmWG4LE6s2 SHfFobtn2DI4b5cg7G93u7bJuHk5m47gQ54TxQ9lbLlSpdZ0YDnyFsKQVthcuUgQ y2pDnv8kxB8WW0smBFmwb62dEy9hiB4I5A9nU6biWwDeRwuLhh4pjbD+LBoPBTlb 6iUujwB3n+RsALQXuK0Nyi4kRwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAC4saKb 9gsuEKbDkKZcAVSvsTHMMB8GA1UdIwQYMBaAFHynUMwJkHfUtDKQp2KDq3vwtkpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDBFRC8wRUM5NEE4ODYy MjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5UzBNcENuWW9PcmVfQzJT bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZLZFF6QW1RZDlTME1wQ25Zb09yZV9DMlNtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzAwRUQvMEVDOTRBODg2MjI5MTFFQjhFMUJDMjdDQzRGOUFFMDIvNzQ4OTdDQzA2 MjJBMTFFQkE4QkEwQjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnojowDQQCAAIwBwMFACQBzeAwDQYJKoZIhvcNAQELBQAD ggEBAFMqIvl54Gii7TjCU9N9gQXVwLxFebTdz1KQSpA3IUWqB+q3kWjFH/pPkR7S mEzgcMTbD4Ft9FTRWPgAqyU6no4H31cO1qYoiRM5PBRhsvnotcBYJP2AEcrULX1v VdwBoStuiK/T81L2Sk95ZdfD4WKDxMIrU3i2ABcmf+Lf3Q/NW18lu310jhj6Gdx/ ISIhdWoaFrjEpdyRgsSdFiTkqQu4iLSoHP9hgelFp8vtYAIgOMYl/HO/ykRDzS5L /qs36paMm+9SG0nYJ1aQWaBuLm8Fxy3+lZmu/pq5rjYqkB+jG5+rcYvL7aSh6Ysy dshVTwtR0CtZCEakAHzmN5tXy9g= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:37 2024 by rpki-client on console-ams.rpki-client.org