$ rpki-client -vvf rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/A4A123AE910F11EBA9F7B639C4F9AE02.roa File: A4A123AE910F11EBA9F7B639C4F9AE02.roa (raw, json) Hash identifier: oZ+tmJpj+3ObATVrfcAk/wfoxKUb98KJ7Fg8c/+eqLU= Subject key identifier: 40:D5:0D:12:DD:59:3B:F7:9F:15:8C:32:F8:2D:FF:4F:1B:AE:41:BB Certificate issuer: /CN=A917F89D/serialNumber=C396305D02D2F885F3FADED53AC310F21BD05487 Certificate serial: 12BB Authority key identifier: C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/A4A123AE910F11EBA9F7B639C4F9AE02.roa Signing time: Thu 22 Aug 2024 17:35:13 +0000 ROA not before: Thu 22 Aug 2024 17:35:13 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 45117 IP address blocks: 103.116.177.0/24 maxlen: 24 103.116.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4795 (0x12bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F89D/serialNumber=C396305D02D2F885F3FADED53AC310F21BD05487 Validity Not Before: Aug 22 17:35:13 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66c776d0-e689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7e:1f:56:9c:4e:7f:e9:51:d3:5a:47:b6:5e: 59:29:21:df:f5:4a:4b:96:1a:7f:5b:16:51:d5:2c: 59:ff:ec:9c:d0:c4:6b:0d:f0:1f:ce:70:db:1e:2e: 98:93:e0:fd:8f:9d:8f:c1:60:a8:be:1f:c4:1a:0f: 65:f4:b3:c7:7d:b1:20:be:e4:4f:b3:8c:ce:83:60: 22:e1:60:64:cd:d7:33:ea:5c:53:19:a7:06:0d:a2: 87:ca:d2:13:fd:93:a2:79:09:b1:34:c0:9a:13:cf: 11:f9:8c:e9:16:45:ce:f1:c2:85:eb:71:71:42:a2: 71:c5:f2:75:b7:5e:98:ab:f6:95:3f:79:21:3d:1d: 0c:37:44:c9:aa:35:d3:73:f2:34:aa:60:6a:37:dd: d5:e2:28:b1:83:25:92:56:d2:67:d5:ac:c3:ad:bc: 85:74:1c:e6:4c:68:21:10:1e:25:8c:44:19:79:72: f5:8e:04:46:ce:bc:05:2d:72:b8:a9:0b:09:42:58: 6a:d0:4c:75:61:58:a9:3e:3e:eb:b8:ed:6d:3a:a3: dc:6a:72:bb:76:fb:97:52:ae:e2:74:b6:f6:9e:7a: d7:92:a2:c8:a1:47:2a:68:84:3d:86:ee:b5:dd:55: e8:a6:1e:19:ba:b5:9c:11:d6:9b:4f:c2:3e:7a:dc: db:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D5:0D:12:DD:59:3B:F7:9F:15:8C:32:F8:2D:FF:4F:1B:AE:41:BB X509v3 Authority Key Identifier: keyid:C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/A4A123AE910F11EBA9F7B639C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.177.0-103.116.178.255 Signature Algorithm: sha256WithRSAEncryption 3f:06:da:75:bb:1a:ed:24:61:fa:59:bf:90:9a:68:cd:69:17: df:fa:3d:3a:df:61:a1:1e:64:ca:f2:fa:12:38:ba:f7:f6:81: a9:e7:02:92:cd:08:28:4f:b0:ee:d7:c7:b0:08:b2:44:95:02: ba:4b:c3:62:65:de:86:1b:14:66:9d:41:5d:e0:dc:02:b6:95: 2e:20:e9:62:24:9d:cb:e2:cd:b1:21:24:ea:a1:e5:9f:ef:b6: d2:87:ac:50:ec:2f:93:8a:6e:de:2c:2e:ed:9f:9b:33:4a:ad: ac:0b:40:00:59:9a:98:61:f4:6c:c3:85:c0:2f:73:fa:b5:a8: a0:6b:77:21:cb:31:da:b6:36:32:5a:6d:8f:10:af:c4:4a:39: ce:f0:d4:57:3d:9d:09:f9:83:51:11:8b:59:3a:89:d0:20:2b: 31:1d:87:e2:bc:5a:62:41:ce:e4:20:7b:95:80:16:8b:32:eb: 59:9d:40:1b:4b:ee:84:d4:9c:ad:88:fb:a0:d0:e4:6a:07:20: 35:51:e6:2b:7d:d2:d2:36:9d:da:e1:43:08:66:46:2e:53:d7: 16:57:be:de:a2:ec:46:69:5b:7b:a6:25:72:f6:4f:87:e5:8d: 42:fb:ed:9c:a4:91:de:d6:67:8c:94:27:79:72:5e:1f:02:c6: e7:da:bd:e5 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICErswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4OUQxMTAvBgNVBAUTKEMzOTYzMDVEMDJEMkY4ODVGM0ZBREVENTNBQzMxMEYy MUJEMDU0ODcwHhcNMjQwODIyMTczNTEzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM3NzZkMC1lNjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA334fVpxOf+lR01pHtl5ZKSHf9UpLlhp/WxZR1SxZ/+yc0MRrDfAfznDbHi6Y k+D9j52PwWCovh/EGg9l9LPHfbEgvuRPs4zOg2Ai4WBkzdcz6lxTGacGDaKHytIT /ZOieQmxNMCaE88R+YzpFkXO8cKF63FxQqJxxfJ1t16Yq/aVP3khPR0MN0TJqjXT c/I0qmBqN93V4iixgyWSVtJn1azDrbyFdBzmTGghEB4ljEQZeXL1jgRGzrwFLXK4 qQsJQlhq0Ex1YVipPj7ruO1tOqPcanK7dvuXUq7idLb2nnrXkqLIoUcqaIQ9hu61 3VXoph4ZurWcEdabT8I+etzbbQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFEDVDRLd WTv3nxWMMvgt/08brkG7MB8GA1UdIwQYMBaAFMOWMF0C0viF8/re1TrDEPIb0FSH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg5RC85Njc0QUZDOEE1 QzQxMUU4OTUwNUZEMzFDNEY5QUUwMi93NVl3WFFMUy1JWHotdDdWT3NNUThodlFW SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c1WXdYUUxTLUlYei10N1ZPc01ROGh2UVZJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Y4OUQvOTY3NEFGQzhBNUM0MTFFODk1MDVGRDMxQzRGOUFFMDIvQTRBMTIzQUU5 MTBGMTFFQkE5RjdCNjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGd0sQMEAGd0sjANBgkqhkiG9w0BAQsFAAOCAQEAPwba dbsa7SRh+lm/kJpozWkX3/o9Ot9hoR5kyvL6Eji69/aBqecCks0IKE+w7tfHsAiy RJUCukvDYmXehhsUZp1BXeDcAraVLiDpYiSdy+LNsSEk6qHln++20oesUOwvk4pu 3iwu7Z+bM0qtrAtAAFmamGH0bMOFwC9z+rWooGt3Icsx2rY2MlptjxCvxEo5zvDU Vz2dCfmDURGLWTqJ0CArMR2H4rxaYkHO5CB7lYAWizLrWZ1AG0vuhNScrYj7oNDk agcgNVHmK33S0jad2uFDCGZGLlPXFle+3qLsRmlbe6YlcvZPh+WNQvvtnKSR3tZn jJQneXJeHwLG59q95Q== -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org