$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/047A427C7E2B11EAB1B5B00DC4F9AE02.roa File: 047A427C7E2B11EAB1B5B00DC4F9AE02.roa (raw, json) Hash identifier: vYfbYGbaZtOjNPwwYTLo3cpgHwXTvaA/VLhLM/0gXjE= Subject key identifier: AB:A0:00:C4:F6:94:B5:EF:F5:08:03:3A:A4:C0:19:BF:FF:32:92:D8 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 0974 Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/047A427C7E2B11EAB1B5B00DC4F9AE02.roa Signing time: Thu 26 Sep 2024 20:18:58 +0000 ROA not before: Thu 26 Sep 2024 20:18:58 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 135337 IP address blocks: 103.94.158.0/23 maxlen: 24 103.198.8.0/23 maxlen: 24 2001:df0:8a00::/48 maxlen: 48 2406:6840::/32 maxlen: 32 2406:6840:8::/48 maxlen: 48 2406:6840:a::/48 maxlen: 48 2406:6840:c::/48 maxlen: 48 2406:6840:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2420 (0x974) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: Sep 26 20:18:58 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f5c1b2-4b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:95:2d:96:7d:23:c3:ec:23:da:ae:06:3e:7d: a0:9c:eb:c8:a1:b9:1d:26:b3:8f:ac:1b:fe:ea:a1: f0:d3:15:c5:c9:98:1e:80:e7:df:46:a9:fe:ec:d6: c5:fb:29:5d:82:bc:c5:46:a3:96:3a:69:54:5c:70: a5:2e:3d:d9:8d:6e:94:ae:93:1a:b0:f1:fd:bf:94: 64:56:60:7b:a7:9a:55:0b:09:fb:1b:6e:3a:ff:2c: c8:e7:a5:28:6c:2d:46:0d:6d:73:13:c8:d2:27:8d: 89:05:4b:0f:0f:bf:36:aa:50:5c:bf:2a:11:a3:c6: 40:e6:26:65:d4:5d:43:b6:03:55:60:30:fe:d0:ea: 69:b3:f3:64:d9:6b:8d:11:40:aa:93:52:59:33:94: d7:37:a7:8d:ce:0e:4c:a7:86:ef:57:86:f3:a8:02: a7:1b:9d:cd:20:da:90:26:fe:5e:b1:e4:f2:ef:b6: 21:56:6e:42:1d:ce:40:23:0f:d9:6f:2f:6e:f3:ac: 7d:ea:c4:84:43:a3:a7:2f:1c:78:f6:d5:22:8f:c8: fd:28:7d:d3:cd:55:cd:b6:f0:c8:cf:bc:3a:c1:97: 8c:dc:2b:e9:28:96:0e:22:2a:9c:16:70:c8:54:c8: 57:64:ea:83:25:80:ca:2e:a1:66:18:c5:1c:c5:4f: 36:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A0:00:C4:F6:94:B5:EF:F5:08:03:3A:A4:C0:19:BF:FF:32:92:D8 X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/047A427C7E2B11EAB1B5B00DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.158.0/23 103.198.8.0/23 IPv6: 2001:df0:8a00::/48 2406:6840::/32 Signature Algorithm: sha256WithRSAEncryption 2e:88:07:40:de:bd:bc:fe:19:11:df:e0:84:a6:13:aa:d8:1c: 12:ac:1f:d7:6b:4d:36:81:29:87:a0:5b:9f:10:ca:b4:b9:2f: 86:79:73:5e:cb:cf:35:e3:59:bc:be:f1:3e:be:3f:4d:b9:9f: 04:5f:8a:3f:80:f3:84:41:0b:71:fa:a5:19:bf:63:7b:21:1c: d9:87:a9:ae:c2:5f:5b:b5:c9:40:a0:be:29:7e:85:c8:5b:f2: a1:a6:01:2c:23:af:92:1e:15:1f:07:39:64:6d:36:b0:77:c0: ca:34:89:5c:5d:56:e9:c4:1b:0c:1b:64:f6:83:38:f5:88:e9: ff:01:e3:21:86:5b:20:1f:1d:db:97:60:97:c3:be:4b:d5:8c: 9d:60:ff:6a:e9:fa:82:b2:fa:ca:0b:6e:f5:eb:be:60:d2:b0: 30:9d:7e:0b:15:7c:fc:ae:6b:e4:01:c8:a0:bd:b3:86:c8:28: 0a:11:ea:70:b2:24:12:82:e1:49:f3:82:0b:94:f8:71:9a:46: e9:dc:d6:41:98:0d:14:e9:e1:73:7e:6d:41:0c:0e:65:b6:40: 2c:97:b0:84:e5:f7:9f:6c:dd:e3:94:00:e1:0b:ff:2e:de:40: b7:eb:62:dd:3b:44:1e:15:09:c0:70:d7:e3:d8:ff:3f:2c:95: 97:57:32:64 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICCXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjQwOTI2MjAxODU4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY1YzFiMi00YjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pUtln0jw+wj2q4GPn2gnOvIobkdJrOPrBv+6qHw0xXFyZgegOffRqn+7NbF +yldgrzFRqOWOmlUXHClLj3ZjW6UrpMasPH9v5RkVmB7p5pVCwn7G246/yzI56Uo bC1GDW1zE8jSJ42JBUsPD782qlBcvyoRo8ZA5iZl1F1DtgNVYDD+0Opps/Nk2WuN EUCqk1JZM5TXN6eNzg5Mp4bvV4bzqAKnG53NINqQJv5eseTy77YhVm5CHc5AIw/Z by9u86x96sSEQ6OnLxx49tUij8j9KH3TzVXNtvDIz7w6wZeM3CvpKJYOIiqcFnDI VMhXZOqDJYDKLqFmGMUcxU829QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFKugAMT2 lLXv9QgDOqTAGb//MpLYMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFEMjIvMjg0MDAxRUM3QjFGMTFFQTg1OEJDRDg2QzRGOUFFMDIvMDQ3QTQyN0M3 RTJCMTFFQUIxQjVCMDBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMBIEAgABMAwDBAFnXp4DBAFnxggwFgQCAAIwEAMHACABDfCKAAMFACQGaEAw DQYJKoZIhvcNAQELBQADggEBAC6IB0Devbz+GRHf4ISmE6rYHBKsH9drTTaBKYeg W58QyrS5L4Z5c17LzzXjWby+8T6+P025nwRfij+A84RBC3H6pRm/Y3shHNmHqa7C X1u1yUCgvil+hchb8qGmASwjr5IeFR8HOWRtNrB3wMo0iVxdVunEGwwbZPaDOPWI 6f8B4yGGWyAfHduXYJfDvkvVjJ1g/2rp+oKy+soLbvXrvmDSsDCdfgsVfPyua+QB yKC9s4bIKAoR6nCyJBKC4UnzgguU+HGaRunc1kGYDRTp4XN+bUEMDmW2QCyXsITl 959s3eOUAOEL/y7eQLfrYt07RB4VCcBw1+PY/z8slZdXMmQ= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org