$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/47249F9E7D7D11EBA5FADA5FC4F9AE02.roa File: 47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (raw, json) Hash identifier: Ck9VYv/1rcTBtaX5FrHIAevWzTx3mNc72bWTwUqMdEA= Subject key identifier: 5E:5E:2E:CF:0A:F5:B5:31:58:3D:43:02:48:D4:75:CF:33:35:04:B7 Certificate issuer: /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Certificate serial: 0613 Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/47249F9E7D7D11EBA5FADA5FC4F9AE02.roa Signing time: Mon 18 Nov 2024 22:31:41 +0000 ROA not before: Mon 18 Nov 2024 22:31:41 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 138977 IP address blocks: 103.137.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1555 (0x613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Validity Not Before: Nov 18 22:31:41 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=673bc04d-b58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:30:48:50:45:06:15:60:c1:ed:5b:7a:ff: 88:54:96:9c:63:92:cd:28:5b:5a:fd:96:20:3c:85: 43:92:02:9d:05:97:7d:56:ba:6c:df:51:3a:0b:f9: 7c:82:40:6c:e0:ce:9c:6f:3e:fd:e2:63:f7:85:c4: 66:dd:a8:68:c7:62:74:33:00:36:97:88:2c:b0:99: 96:9b:bb:99:5c:fb:05:33:07:45:dd:b6:25:c3:13: aa:d1:ce:d7:d0:40:be:ce:cc:f6:a1:73:22:7e:13: ec:08:c9:e9:30:09:c4:2d:22:8f:b5:ad:65:46:82: 13:f3:0e:b9:64:7e:ca:ae:54:a5:03:5f:f0:66:47: cf:63:56:d9:04:c2:2e:b0:ec:10:4d:d1:47:d8:41: cf:89:20:94:06:30:7a:06:c8:06:18:02:01:3d:26: 7e:e1:2b:c1:e4:da:1a:1e:8b:82:fe:bb:4b:cf:03: a6:9b:b4:12:5c:54:28:6e:9e:0a:b9:93:14:88:46: 1c:81:c9:1a:f0:1b:95:5a:e8:37:1a:af:a0:00:80: a2:97:90:5e:e9:f1:7e:50:21:d4:c0:70:f9:f5:28: 81:10:1a:13:c2:a9:d5:67:1d:c6:ce:2c:cb:68:09: 74:f4:9d:bb:5d:db:39:0a:b8:49:78:64:40:f7:a6: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5E:2E:CF:0A:F5:B5:31:58:3D:43:02:48:D4:75:CF:33:35:04:B7 X509v3 Authority Key Identifier: keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/47249F9E7D7D11EBA5FADA5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.252.0/24 Signature Algorithm: sha256WithRSAEncryption 57:e5:de:b3:75:07:77:7b:6c:ee:5f:18:d5:2b:7e:12:a7:e9: 38:74:59:32:92:3e:05:3a:3d:f9:3f:13:a0:bc:e1:2a:f5:4f: 5c:41:fb:cb:4d:20:0d:41:ef:c7:09:cd:9e:10:e9:f4:e8:d1: 97:bb:6a:1d:9e:80:e4:95:93:09:08:44:82:77:52:b0:9c:86: 6b:87:ea:03:48:82:f1:1f:eb:73:6d:98:9e:5a:9f:94:29:41: 31:03:23:8a:3c:5d:c7:64:39:c8:a5:c3:b8:90:d0:d5:fd:39: 38:76:2c:2b:7f:0e:9f:97:da:50:ee:00:80:72:e1:ad:ed:c7: 08:a0:b6:c9:fb:aa:63:c5:de:ab:47:f7:0d:b3:aa:b3:98:30: d5:98:a1:9d:89:4a:ff:80:31:75:f3:c4:9b:0b:3f:dd:f2:b0: 9e:46:70:98:49:72:d5:70:14:18:ed:03:c1:90:89:6f:3c:27: ce:81:21:4d:53:74:f8:a6:04:58:7a:e5:68:4c:00:a8:1d:8a: 3a:56:64:58:f2:e5:5c:97:1a:af:92:00:81:be:85:cb:a0:4f: 6b:4e:3c:1c:0d:17:7a:0e:ae:cf:e5:02:03:b3:2e:a8:4f:f0: f4:c7:98:22:c8:4d:88:05:39:7b:e9:ae:9e:83:c3:8e:9b:2f: a6:10:f0:b8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4QjIxMTAvBgNVBAUTKEFEREVFOTA5QTMxNjc2MjE1NTNGRDQ0RTAyMjREMzhB MDY3ODc5ODcwHhcNMjQxMTE4MjIzMTQxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNiYzA0ZC1iNThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcQwSFBFBhVgwe1bev+IVJacY5LNKFta/ZYgPIVDkgKdBZd9Vrps31E6C/l8 gkBs4M6cbz794mP3hcRm3ahox2J0MwA2l4gssJmWm7uZXPsFMwdF3bYlwxOq0c7X 0EC+zsz2oXMifhPsCMnpMAnELSKPta1lRoIT8w65ZH7KrlSlA1/wZkfPY1bZBMIu sOwQTdFH2EHPiSCUBjB6BsgGGAIBPSZ+4SvB5NoaHouC/rtLzwOmm7QSXFQobp4K uZMUiEYcgcka8BuVWug3Gq+gAICil5Be6fF+UCHUwHD59SiBEBoTwqnVZx3GzizL aAl09J27Xds5CrhJeGRA96ZrgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF5eLs8K 9bUxWD1DAkjUdc8zNQS3MB8GA1UdIwQYMBaAFK3e6QmjFnYhVT/UTgIk04oGeHmH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhCMi83MzlCQkE1QTdE N0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2RpRlZQOVJPQWlUVGlnWjRl WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkN3BDYU1XZGlGVlA5Uk9BaVRUaWdaNGVZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc4QjIvNzM5QkJBNUE3RDdCMTFFQkE2MjIyNzVCQzRGOUFFMDIvNDcyNDlGOUU3 RDdEMTFFQkE1RkFEQTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnifwwDQYJKoZIhvcNAQELBQADggEBAFfl3rN1B3d7bO5f GNUrfhKn6Th0WTKSPgU6Pfk/E6C84Sr1T1xB+8tNIA1B78cJzZ4Q6fTo0Ze7ah2e gOSVkwkIRIJ3UrCchmuH6gNIgvEf63NtmJ5an5QpQTEDI4o8XcdkOcilw7iQ0NX9 OTh2LCt/Dp+X2lDuAIBy4a3txwigtsn7qmPF3qtH9w2zqrOYMNWYoZ2JSv+AMXXz xJsLP93ysJ5GcJhJctVwFBjtA8GQiW88J86BIU1TdPimBFh65WhMAKgdijpWZFjy 5VyXGq+SAIG+hcugT2tOPBwNF3oOrs/lAgOzLqhP8PTHmCLITYgFOXvprp6Dw46b L6YQ8Lg= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:30 2024 by rpki-client on console-fra.rpki-client.org