$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/E036A33A724711EBAC3F0059C4F9AE02.roa File: E036A33A724711EBAC3F0059C4F9AE02.roa (raw, json) Hash identifier: f7Qn0qXwPKUSx1AKDqHdBuBm3lykdUVyid+XDevm250= Subject key identifier: EB:3D:57:99:58:47:51:7E:7E:82:2B:E8:D8:4B:21:E7:04:3C:D0:F2 Certificate issuer: /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Certificate serial: 061E Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/E036A33A724711EBAC3F0059C4F9AE02.roa Signing time: Thu 24 Oct 2024 22:42:15 +0000 ROA not before: Thu 24 Oct 2024 22:42:15 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 132347 IP address blocks: 103.76.144.0/22 maxlen: 22 103.76.144.0/24 maxlen: 24 103.76.145.0/24 maxlen: 24 103.76.146.0/24 maxlen: 24 103.76.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Validity Not Before: Oct 24 22:42:15 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671acd46-79b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:35:9d:44:87:79:2c:5a:ea:97:ce:a9:70:47: 90:8e:49:3a:70:bd:2c:62:e4:f3:d2:98:29:83:66: 2d:df:48:e6:7c:f7:a1:2a:86:1d:29:0c:7d:f9:e4: 9b:2d:12:06:ba:df:7c:fe:0d:08:93:c5:41:b4:9b: 00:d4:34:e1:a7:cd:81:fd:0c:2e:f0:66:18:08:14: 80:ba:bb:70:d4:23:65:e3:fe:ff:33:4d:ce:f7:48: eb:a7:2f:1c:60:6a:5e:03:da:47:e4:20:2a:26:63: 1b:ed:b1:b1:21:25:32:1b:3e:b2:a5:95:45:69:f4: 96:9b:1b:d5:97:10:f4:85:9a:2f:b0:2a:36:7a:a1: 15:50:3b:35:43:ab:df:05:75:4c:8f:ed:b5:5b:d6: 50:25:e9:e5:f0:6b:41:66:05:6b:54:5c:32:ab:03: d3:3c:09:7b:04:0b:bc:5c:75:98:50:be:4c:e7:14: 5f:ba:31:a2:73:59:2a:e0:dd:71:c2:15:db:c2:d1: a2:c2:ae:7b:06:de:b9:a3:80:5d:51:98:f5:7a:0f: fb:ba:94:86:30:cb:80:89:4b:cb:75:4d:0d:19:ae: fd:d7:8e:0c:e2:8e:b6:f9:e7:7e:2e:9b:6e:11:5c: c2:55:01:4c:67:dc:3a:f3:1a:cc:0a:dd:bf:a7:ab: 23:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3D:57:99:58:47:51:7E:7E:82:2B:E8:D8:4B:21:E7:04:3C:D0:F2 X509v3 Authority Key Identifier: keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/E036A33A724711EBAC3F0059C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.144.0/22 Signature Algorithm: sha256WithRSAEncryption 58:b9:4b:2e:f2:0d:ff:84:09:f1:48:a0:7b:f9:ec:04:61:a5: d2:36:e6:11:96:b7:a0:50:ba:08:10:d9:34:82:68:f1:5f:13: 0c:a2:18:92:c1:1f:77:5c:0c:38:a7:c1:05:9d:26:21:19:f1: 94:ab:97:9f:e7:ca:d7:48:51:5e:d5:45:04:02:a4:54:45:b1: 48:d2:ef:bc:a4:5a:73:2a:ac:25:8e:12:67:20:3d:35:aa:28: 74:fd:66:de:c4:3f:09:ba:d2:88:e9:77:2e:4c:26:3f:de:46: 2b:02:73:fe:3f:d2:1f:58:36:b5:aa:d6:6a:25:8c:1e:9e:b1: 3d:01:2d:6a:87:a8:04:61:24:b0:86:41:00:d9:a8:b2:9d:32: 0b:28:1c:30:b1:ce:d2:ab:76:f0:2c:27:1d:ef:1f:56:a7:e7: bd:28:34:c6:47:52:90:b4:a8:31:4f:45:ce:cf:5b:8c:5c:53: e4:b9:28:dd:de:49:7b:aa:17:7e:8e:9b:00:26:be:a2:bc:c0: 05:d9:e8:bb:77:aa:74:11:4a:26:5b:dd:4f:97:26:4d:9a:08: f3:63:02:b6:e6:ee:b0:1d:be:40:dd:24:b3:45:73:2f:df:af: ac:fe:99:3c:53:8c:93:19:12:e3:5b:1e:79:17:51:1d:00:1b: e7:e5:e1:21 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzMDkxMTAvBgNVBAUTKDQxMDlBMTZFMTg3MkE0MzFBRjU5MTg2NjU1QkI2MEQ1 MzM3Q0E0ODUwHhcNMjQxMDI0MjI0MjE1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFhY2Q0Ni03OWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zWdRId5LFrql86pcEeQjkk6cL0sYuTz0pgpg2Yt30jmfPehKoYdKQx9+eSb LRIGut98/g0Ik8VBtJsA1DThp82B/Qwu8GYYCBSAurtw1CNl4/7/M03O90jrpy8c YGpeA9pH5CAqJmMb7bGxISUyGz6ypZVFafSWmxvVlxD0hZovsCo2eqEVUDs1Q6vf BXVMj+21W9ZQJenl8GtBZgVrVFwyqwPTPAl7BAu8XHWYUL5M5xRfujGic1kq4N1x whXbwtGiwq57Bt65o4BdUZj1eg/7upSGMMuAiUvLdU0NGa79144M4o62+ed+Lptu EVzCVQFMZ9w68xrMCt2/p6sjtwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOs9V5lY R1F+foIr6NhLIecEPNDyMB8GA1UdIwQYMBaAFEEJoW4YcqQxr1kYZlW7YNUzfKSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTMwOS9CREI0MkYzNjcy NDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBER3ZXUmhtVmJ0ZzFUTjhw SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRbWhiaGh5cERHdldSaG1WYnRnMVROOHBJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUUzMDkvQkRCNDJGMzY3MjQ2MTFFQjhBRUREQzU4QzRGOUFFMDIvRTAzNkEzM0E3 MjQ3MTFFQkFDM0YwMDU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnTJAwDQYJKoZIhvcNAQELBQADggEBAFi5Sy7yDf+ECfFI oHv57ARhpdI25hGWt6BQuggQ2TSCaPFfEwyiGJLBH3dcDDinwQWdJiEZ8ZSrl5/n ytdIUV7VRQQCpFRFsUjS77ykWnMqrCWOEmcgPTWqKHT9Zt7EPwm60ojpdy5MJj/e RisCc/4/0h9YNrWq1moljB6esT0BLWqHqARhJLCGQQDZqLKdMgsoHDCxztKrdvAs Jx3vH1an570oNMZHUpC0qDFPRc7PW4xcU+S5KN3eSXuqF36OmwAmvqK8wAXZ6Lt3 qnQRSiZb3U+XJk2aCPNjArbm7rAdvkDdJLNFcy/fr6z+mTxTjJMZEuNbHnkXUR0A G+fl4SE= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org