$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/4ABAD810208D11EAA05C7C3DC4F9AE02.roa File: 4ABAD810208D11EAA05C7C3DC4F9AE02.roa (raw, json) Hash identifier: IjPsFFHCvUaMlnUaOFvCNKSeXcsnIqpFaL3Dn7jwLDU= Subject key identifier: E6:A7:77:BE:36:4F:47:15:1B:B2:D2:A5:4C:0C:EA:B7:44:FF:56:ED Certificate issuer: /CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9 Certificate serial: 0B52 Authority key identifier: 2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/4ABAD810208D11EAA05C7C3DC4F9AE02.roa Signing time: Fri 08 Nov 2024 19:07:52 +0000 ROA not before: Fri 08 Nov 2024 19:07:52 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 58427 IP address blocks: 103.5.172.0/24 maxlen: 24 103.5.173.0/24 maxlen: 24 103.5.174.0/24 maxlen: 24 103.5.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2898 (0xb52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9 Validity Not Before: Nov 8 19:07:52 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672e6188-e9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8b:f5:aa:88:5c:f0:b1:59:e7:cc:49:fa:2d: b6:72:1d:59:59:18:8c:0d:09:e1:f6:ca:4c:3f:26: 89:f9:97:fc:e5:17:ab:c7:bc:aa:6f:7c:1c:dc:5a: 36:94:d1:06:7f:0a:04:09:96:e8:0f:6f:06:2b:76: a1:f8:35:51:ad:92:9d:79:e7:46:04:73:f8:ad:d5: 91:09:27:b2:d9:e2:43:92:a7:77:7d:ba:6a:9d:f2: 7d:36:c1:71:41:a0:71:b7:03:e0:3b:28:a7:b1:dc: e6:0f:b2:8e:31:d8:0f:b6:87:1f:6d:41:6f:1f:af: 48:92:d6:56:3e:7c:18:c0:99:f1:b8:29:b5:9e:af: 7e:75:50:db:aa:90:68:cf:57:5c:0e:ef:df:a2:bd: 53:bd:76:18:c3:c6:7b:db:91:43:a8:08:77:be:8d: 8b:f1:b3:04:f5:e0:42:66:ab:28:9c:bc:c6:52:c2: b5:e3:e6:93:56:0a:97:88:50:d6:ff:b8:8a:d8:d5: ae:01:6b:5e:3a:9b:2a:3f:f3:61:b2:75:92:23:1a: cf:59:e1:ad:c8:d7:07:a3:16:4e:db:12:fb:41:fe: 02:af:b9:d6:67:fc:35:d9:d8:3b:31:a3:bb:2d:ac: 42:92:ff:4f:6c:2d:82:3c:9a:6f:c8:2e:db:ad:f7: fa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A7:77:BE:36:4F:47:15:1B:B2:D2:A5:4C:0C:EA:B7:44:FF:56:ED X509v3 Authority Key Identifier: keyid:2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/4ABAD810208D11EAA05C7C3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.172.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:a3:76:7a:a6:76:61:83:e5:1b:d4:ca:0b:e8:87:cb:7c:df: 24:fa:49:49:99:de:c3:db:15:dc:6f:f6:f0:46:c6:ef:f3:6c: 73:fa:ef:45:33:06:8d:42:37:b9:bb:6f:3d:e4:56:65:c4:60: e6:38:b0:bf:98:a0:af:71:30:83:ac:a8:ef:52:d3:dc:f5:cb: fc:e9:dc:99:c2:39:d6:1e:8d:66:07:1e:5c:3a:53:a4:c0:ed: 75:35:dc:47:0c:1b:22:46:6f:90:1d:c5:b1:35:04:34:43:cb: ae:13:e4:16:dd:b4:cd:d5:30:5d:87:5f:38:e9:56:ca:51:75: 39:df:a2:78:fe:36:93:38:e9:ec:fd:e7:35:f0:90:8e:14:d5: 63:4d:a8:16:49:f7:82:68:52:13:d3:61:0d:9c:46:35:24:cf: 53:00:d3:64:8f:2b:3c:da:90:05:e9:50:a2:b5:6c:6c:b8:0e: f3:1b:25:16:3b:5a:14:16:7f:1f:8d:7e:d8:4d:c8:0f:13:07: 5f:b7:ff:5a:aa:ad:d1:1a:ad:74:b6:1c:67:75:a1:bf:48:f4: 48:b2:1c:1a:77:92:1f:e3:9b:89:84:1b:53:c6:1b:5d:a3:c3: f5:77:50:d1:b9:c4:b7:3c:f0:a1:b8:dc:39:f9:fb:55:90:41: 3b:a1:ec:d4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JDMDUxMTAvBgNVBAUTKDJENUE5NUYyREE0QjFGMUM3MEM2NDYyNTE5RkM2RjU4 OTQ1RkNBQjkwHhcNMjQxMTA4MTkwNzUyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJlNjE4OC1lOWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Iv1qohc8LFZ58xJ+i22ch1ZWRiMDQnh9spMPyaJ+Zf85Rerx7yqb3wc3Fo2 lNEGfwoECZboD28GK3ah+DVRrZKdeedGBHP4rdWRCSey2eJDkqd3fbpqnfJ9NsFx QaBxtwPgOyinsdzmD7KOMdgPtocfbUFvH69IktZWPnwYwJnxuCm1nq9+dVDbqpBo z1dcDu/for1TvXYYw8Z725FDqAh3vo2L8bME9eBCZqsonLzGUsK14+aTVgqXiFDW /7iK2NWuAWteOpsqP/NhsnWSIxrPWeGtyNcHoxZO2xL7Qf4Cr7nWZ/w12dg7MaO7 LaxCkv9PbC2CPJpvyC7brff6eQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOand742 T0cVG7LSpUwM6rdE/1btMB8GA1UdIwQYMBaAFC1alfLaSx8ccMZGJRn8b1iUX8q5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS80NzMzOTU2NjIw OEMxMUVBOTQzNUU2M0JDNEY5QUUwMi9MVnFWOHRwTEh4eHd4a1lsR2Z4dldKUmZ5 cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xWcVY4dHBMSHh4d3hrWWxHZnh2V0pSZnlyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0JDMDUvNDczMzk1NjYyMDhDMTFFQTk0MzVFNjNCQzRGOUFFMDIvNEFCQUQ4MTAy MDhEMTFFQUEwNUM3QzNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnBawwDQYJKoZIhvcNAQELBQADggEBAA+jdnqmdmGD5RvU ygvoh8t83yT6SUmZ3sPbFdxv9vBGxu/zbHP670UzBo1CN7m7bz3kVmXEYOY4sL+Y oK9xMIOsqO9S09z1y/zp3JnCOdYejWYHHlw6U6TA7XU13EcMGyJGb5AdxbE1BDRD y64T5BbdtM3VMF2HXzjpVspRdTnfonj+NpM46ez95zXwkI4U1WNNqBZJ94JoUhPT YQ2cRjUkz1MA02SPKzzakAXpUKK1bGy4DvMbJRY7WhQWfx+NfthNyA8TB1+3/1qq rdEarXS2HGd1ob9I9EiyHBp3kh/jm4mEG1PGG12jw/V3UNG5xLc88KG43Dn5+1WQ QTuh7NQ= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:24 2024 by rpki-client on console-ams.rpki-client.org