$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa File: AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa (raw, json) Hash identifier: KghdCfc9o42iOfQL3hI0MGr1qL+JhgQLoQInt8LXNLk= Subject key identifier: 48:3B:EF:8E:06:06:D3:55:8C:F2:5C:3F:FD:E5:80:8A:03:1C:47:FA Certificate issuer: /CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627 Certificate serial: 0336 Authority key identifier: 4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa Signing time: Tue 05 Mar 2024 02:44:26 +0000 ROA not before: Tue 05 Mar 2024 02:44:26 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 149415 IP address blocks: 103.178.238.0/23 maxlen: 24 2001:df0:4240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 822 (0x336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627 Validity Not Before: Mar 5 02:44:26 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65e6870a-cecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:02:6e:25:b7:d4:27:18:d2:48:90:76:5b: e8:82:12:29:2f:a3:cd:35:ad:7c:92:55:03:db:2a: 8e:3c:26:9c:90:a2:47:c6:1a:ee:82:07:36:48:7f: 87:2a:f6:85:f1:25:7a:37:b0:87:2a:44:c9:cc:ad: d4:b9:8e:43:1c:83:b7:93:14:02:75:a3:a6:6a:ad: 6f:ac:4b:b4:7e:12:bc:83:7c:5a:95:d9:7d:26:2e: 0a:73:a6:b2:fa:ff:68:6f:c9:15:74:9a:60:69:51: bf:80:4c:5c:8b:66:92:44:7c:6a:90:92:1e:5b:55: 1a:8b:73:2f:b9:76:89:4f:64:27:ea:8a:df:39:fe: 40:63:4a:6a:0a:c5:bd:c0:93:27:8b:53:00:58:70: ad:8d:a2:2d:07:a8:e1:f9:c2:50:ac:72:a9:7a:39: ac:a3:57:f6:fe:1e:f8:dc:06:e2:f0:00:3b:60:62: e2:35:d1:63:1d:39:bd:27:1e:b2:dc:a2:a1:b5:92: fa:a3:14:43:b8:f9:43:02:e1:e1:61:6b:f3:bc:57: 22:93:2c:29:6e:12:e4:bf:5b:52:fd:05:12:f2:d3: 0f:0d:f4:1e:91:a0:0e:0c:26:a4:fc:40:a1:e1:85: 12:b4:c6:ec:f6:f4:8f:7e:9a:c9:8f:77:2f:4f:42: 8a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3B:EF:8E:06:06:D3:55:8C:F2:5C:3F:FD:E5:80:8A:03:1C:47:FA X509v3 Authority Key Identifier: keyid:4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.178.238.0/23 IPv6: 2001:df0:4240::/48 Signature Algorithm: sha256WithRSAEncryption aa:7e:65:88:18:a5:f9:ed:34:89:8a:1a:3c:f2:6e:41:7b:cc: e2:2f:3c:21:27:57:4a:7d:94:3a:02:25:16:d8:5f:62:56:12: 52:63:22:e2:5a:97:dd:fa:7b:e9:3d:5c:9c:d8:4d:84:07:c5: 9d:66:76:85:9c:b1:5a:a1:c2:43:7e:bb:a7:04:4b:cf:70:d3: cd:0b:81:70:22:c8:63:ce:a2:1b:f7:1b:d4:24:b9:de:3a:68: 0a:0d:9a:b0:3c:21:53:bb:f8:e9:2c:47:d4:53:da:df:96:b2: 12:90:64:2c:d8:fd:31:92:4e:dd:fb:2c:83:f5:3b:3f:41:51: e5:f0:53:d7:31:2e:0b:5f:fb:48:9b:38:aa:b6:69:41:a1:f4: 0b:9c:17:c3:3a:dd:5f:2a:88:ee:ad:04:d6:35:ac:4f:be:4e: b3:95:cc:28:d5:fa:82:18:12:e0:ba:a5:8b:a4:22:09:b7:0b: 39:93:63:e8:e7:c2:b5:bc:35:e3:6d:36:a5:a4:06:53:b0:9e: 83:43:26:49:63:dc:16:9f:9a:ad:4d:d0:4c:9b:7b:33:03:47: c0:77:ba:cb:34:fb:ce:ec:2c:64:9e:8e:38:d9:21:33:ec:6a: 3f:3b:32:e1:75:e2:0b:8d:cb:ec:02:db:fb:9b:af:fb:17:aa: 11:96:9e:e6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDRDUxMTAvBgNVBAUTKDRCNEMzQUNDNzYyMENBOEQyNjlGNzdDMkY4QkU2Q0Ew REEyMTc2MjcwHhcNMjQwMzA1MDI0NDI2WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWU2ODcwYS1jZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpsCbiW31CcY0kiQdlvoghIpL6PNNa18klUD2yqOPCackKJHxhruggc2SH+H KvaF8SV6N7CHKkTJzK3UuY5DHIO3kxQCdaOmaq1vrEu0fhK8g3xaldl9Ji4Kc6ay +v9ob8kVdJpgaVG/gExci2aSRHxqkJIeW1Uai3MvuXaJT2Qn6orfOf5AY0pqCsW9 wJMni1MAWHCtjaItB6jh+cJQrHKpejmso1f2/h743Abi8AA7YGLiNdFjHTm9Jx6y 3KKhtZL6oxRDuPlDAuHhYWvzvFcikywpbhLkv1tS/QUS8tMPDfQekaAODCak/ECh 4YUStMbs9vSPfprJj3cvT0KKYQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEg7744G BtNVjPJcP/3lgIoDHEf6MB8GA1UdIwQYMBaAFEtMOsx2IMqNJp93wvi+bKDaIXYn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNENS84MDRCMUU5MjZB REExMUVDQUNBN0E1MzBDNEY5QUUwMi9TMHc2ekhZZ3lvMG1uM2ZDLUw1c29Ob2hk aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwdzZ6SFlneW8wbW4zZkMtTDVzb05vaGRpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZDRDUvODA0QjFFOTI2QURBMTFFQ0FDQTdBNTMwQzRGOUFFMDIvQUUwQUZFODQ2 QURFMTFFQ0FERjJGRTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsu4wDwQCAAIwCQMHACABDfBCQDANBgkqhkiG9w0BAQsF AAOCAQEAqn5liBil+e00iYoaPPJuQXvM4i88ISdXSn2UOgIlFthfYlYSUmMi4lqX 3fp76T1cnNhNhAfFnWZ2hZyxWqHCQ367pwRLz3DTzQuBcCLIY86iG/cb1CS53jpo Cg2asDwhU7v46SxH1FPa35ayEpBkLNj9MZJO3fssg/U7P0FR5fBT1zEuC1/7SJs4 qrZpQaH0C5wXwzrdXyqI7q0E1jWsT75Os5XMKNX6ghgS4Lqli6QiCbcLOZNj6OfC tbw14202paQGU7Ceg0MmSWPcFp+arU3QTJt7MwNHwHe6yzT7zuwsZJ6OONkhM+xq Pzsy4XXiC43L7ALb+5uv+xeqEZae5g== -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org