$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/4A6D188450EA11EC8FF55B24C4F9AE02.roa File: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (raw, json) Hash identifier: BnFC84Z3Yf9LkmdRLs3U+FR7fFSaBZtBJv0QdIrENC0= Subject key identifier: 45:75:27:D6:12:2D:64:70:E9:8E:CF:C5:F7:DC:46:AF:F8:92:5B:27 Certificate issuer: /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761 Certificate serial: 0701 Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/4A6D188450EA11EC8FF55B24C4F9AE02.roa Signing time: Mon 06 Nov 2023 22:30:01 +0000 ROA not before: Mon 06 Nov 2023 22:30:01 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 9744 IP address blocks: 103.1.224.0/22 maxlen: 24 103.199.104.0/22 maxlen: 24 112.121.160.0/19 maxlen: 24 137.59.20.0/22 maxlen: 24 180.178.32.0/19 maxlen: 24 182.16.0.0/17 maxlen: 24 2406:8680::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1793 (0x701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761 Validity Not Before: Nov 6 22:30:01 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=654968e9-980d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:c1:61:f2:47:16:5c:bb:de:4f:f8:2a:4e: c4:a9:eb:70:20:9a:29:65:66:04:f8:07:f9:28:81: 96:a5:6e:2d:65:71:ee:a0:9e:40:0c:1b:02:02:90: 02:1f:8c:fe:18:81:40:82:62:b3:3a:9a:59:8c:06: 80:06:e0:d6:b5:b2:2e:97:10:03:1e:80:04:6c:ef: 45:35:56:41:de:3d:23:63:05:27:db:7a:df:25:28: 89:c0:c8:6b:5e:8d:17:e2:c6:f5:de:c5:bf:e4:d5: aa:70:4e:7b:9e:28:28:28:eb:44:81:8a:ef:17:1f: 5f:f4:ad:5d:f1:e2:18:45:7e:2b:5e:3f:93:61:92: 33:51:d9:6d:12:2f:af:0c:e2:9c:4b:55:ae:20:9a: dc:00:0c:69:5a:f2:6b:ef:f5:65:56:79:43:e9:71: 16:46:06:37:b2:e2:71:c7:3a:10:3c:7e:80:99:68: b0:17:0b:b9:10:92:b4:2f:27:66:1f:f5:32:9f:20: a5:19:0b:1b:5a:59:3d:57:e6:b6:1e:c3:25:0a:c4: 06:33:b6:92:b4:0b:65:68:40:6b:9b:41:33:83:1f: 78:09:27:89:21:14:90:59:ab:41:48:2c:20:f5:e1: 45:5d:46:ba:e2:b2:c9:da:ac:48:7d:fe:e6:2a:8c: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:75:27:D6:12:2D:64:70:E9:8E:CF:C5:F7:DC:46:AF:F8:92:5B:27 X509v3 Authority Key Identifier: keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/4A6D188450EA11EC8FF55B24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.1.224.0/22 103.199.104.0/22 112.121.160.0/19 137.59.20.0/22 180.178.32.0/19 182.16.0.0/17 IPv6: 2406:8680::/32 Signature Algorithm: sha256WithRSAEncryption 09:9b:53:07:49:42:26:9f:41:e1:e5:a7:76:6d:01:52:e6:00: 7f:27:75:fa:88:04:9b:00:1d:c3:aa:7c:e7:39:95:f4:7a:b8: 47:dc:7c:a3:16:88:89:84:30:fe:b5:23:44:94:d3:1c:b7:4e: ee:13:2b:5c:c8:23:1e:7d:cb:51:4a:59:39:cd:30:e2:0d:2b: 8e:1c:a2:ce:b0:0b:d2:86:52:b4:b6:34:6e:ea:3f:35:c8:28: 03:39:03:9d:38:49:ab:3c:b2:be:1a:36:72:01:5e:b2:f4:bf: ff:8c:61:84:6f:50:73:d3:ba:3f:6f:18:ea:d3:8f:b8:49:6c: 1a:56:0a:6b:11:d8:e2:03:e4:dc:61:ac:01:25:cd:bf:e8:6e: 31:3b:f6:da:1a:f0:df:da:56:d0:b0:c6:6f:71:3e:0c:24:9a: 3b:e8:5f:24:18:f2:42:54:4d:5a:ef:cf:13:70:2f:73:85:04: 3c:c8:2d:b6:d0:b9:ec:2f:72:dc:78:3e:9b:04:39:d0:fa:19: 79:8b:f3:88:b8:d4:ad:39:6d:24:24:66:08:c6:ee:da:ab:80: 41:ab:b9:cf:c9:0f:ee:b8:9b:f3:2d:0a:67:e4:de:78:b0:49: 5b:1e:6d:08:40:e2:53:5b:f7:47:4f:2b:e8:31:3a:f8:f5:84: 8d:0c:2d:fb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEFBQTYyREI0N0YwMTJCMjZERDg2OThFMkNDMzVERThG Mjk0Mzc3NjEwHhcNMjMxMTA2MjIzMDAxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ5NjhlOS05ODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkTBYfJHFly73k/4Kk7EqetwIJopZWYE+Af5KIGWpW4tZXHuoJ5ADBsCApAC H4z+GIFAgmKzOppZjAaABuDWtbIulxADHoAEbO9FNVZB3j0jYwUn23rfJSiJwMhr Xo0X4sb13sW/5NWqcE57nigoKOtEgYrvFx9f9K1d8eIYRX4rXj+TYZIzUdltEi+v DOKcS1WuIJrcAAxpWvJr7/VlVnlD6XEWRgY3suJxxzoQPH6AmWiwFwu5EJK0Lydm H/UynyClGQsbWlk9V+a2HsMlCsQGM7aStAtlaEBrm0Ezgx94CSeJIRSQWatBSCwg 9eFFXUa64rLJ2qxIff7mKoyBnwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFEV1J9YS LWRw6Y7PxffcRq/4klsnMB8GA1UdIwQYMBaAFKqmLbR/ASsm3YaY4sw13o8pQ3dh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC82NUQxREIyQ0RB RUExMUVBOTU4RUIzNUJDNEY5QUUwMi9xcVl0dEg4Qkt5YmRocGppekRYZWp5bERk MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FxWXR0SDhCS3liZGhwaml6RFhlanlsRGQyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhFQjAvNjVEMURCMkNEQUVBMTFFQTk1OEVCMzVCQzRGOUFFMDIvNEE2RDE4ODQ1 MEVBMTFFQzhGRjU1QjI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCoEAgABMCQDBAJnAeADBAJnx2gDBAVweaADBAKJOxQDBAW0siADBAe2EAAw DQQCAAIwBwMFACQGhoAwDQYJKoZIhvcNAQELBQADggEBAAmbUwdJQiafQeHlp3Zt AVLmAH8ndfqIBJsAHcOqfOc5lfR6uEfcfKMWiImEMP61I0SU0xy3Tu4TK1zIIx59 y1FKWTnNMOINK44cos6wC9KGUrS2NG7qPzXIKAM5A504Sas8sr4aNnIBXrL0v/+M YYRvUHPTuj9vGOrTj7hJbBpWCmsR2OID5NxhrAElzb/objE79toa8N/aVtCwxm9x PgwkmjvoXyQY8kJUTVrvzxNwL3OFBDzILbbQuewvctx4PpsEOdD6GXmL84i41K05 bSQkZgjG7tqrgEGruc/JD+64m/MtCmfk3niwSVsebQhA4lNb90dPK+gxOvj1hI0M Lfs= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:31 2024 by rpki-client on console-ams.rpki-client.org