$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/1324C3945ECB11EAB9A53075C4F9AE02.roa File: 1324C3945ECB11EAB9A53075C4F9AE02.roa (raw, json) Hash identifier: Gj6P0hvRFS1vzEC264ECM2IUV37Ayz6A5+ZUKMlGXCQ= Subject key identifier: CD:5F:51:2C:F1:F3:98:B6:21:A3:31:17:46:EB:29:FF:30:A6:E5:13 Certificate issuer: /CN=A91D4413/serialNumber=8AA8786526852346839372631DFB09984BC3005E Certificate serial: 098C Authority key identifier: 8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/1324C3945ECB11EAB9A53075C4F9AE02.roa Signing time: Tue 30 Jan 2024 16:43:33 +0000 ROA not before: Tue 30 Jan 2024 16:43:33 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 134983 IP address blocks: 103.204.200.0/22 maxlen: 24 202.181.12.0/22 maxlen: 24 2404:c280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413/serialNumber=8AA8786526852346839372631DFB09984BC3005E Validity Not Before: Jan 30 16:43:33 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65b92735-950c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:11:d8:37:01:a2:5c:fa:a4:9d:0f:23:be:14: 15:ed:4f:69:84:83:74:61:ad:ed:24:7f:52:d9:3e: dd:67:53:29:e3:c6:49:96:0e:8e:34:07:25:ea:a4: 1b:67:ea:1b:6a:c0:ca:a9:e6:ee:dd:e7:a1:b4:8a: 5e:41:c2:43:7f:05:4b:fa:61:fc:24:41:31:ce:20: 67:5c:9d:b6:1a:e4:5e:72:3d:de:f7:ee:8e:36:16: 2c:35:a0:a8:a1:15:24:45:68:6a:d3:7a:8a:80:e6: 76:29:55:da:ce:94:70:0a:87:ea:4b:35:ef:3e:c9: b3:fb:f0:04:dd:2a:ce:55:29:6e:25:a6:70:d9:0e: ee:06:7b:70:00:ab:fa:56:e6:c6:c8:1f:52:34:5e: d8:b6:b6:7f:e4:e1:7d:83:2f:c9:e0:1f:f3:86:7d: b6:ce:fe:75:cf:23:69:e2:bf:d6:93:c7:d6:47:47: 2c:43:8a:93:96:78:41:1b:f0:c2:0f:aa:e4:4d:64: 14:c0:14:75:47:a6:4a:e6:af:0b:74:fb:7e:c5:7a: 4b:99:90:aa:4b:d3:41:ec:54:c5:ef:16:a1:1c:c9: 36:ca:67:a3:fb:4b:b8:6f:64:90:f9:ae:7c:e5:ed: 53:92:49:64:40:0a:22:2e:12:aa:3c:89:37:8d:dd: 9b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5F:51:2C:F1:F3:98:B6:21:A3:31:17:46:EB:29:FF:30:A6:E5:13 X509v3 Authority Key Identifier: keyid:8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/1324C3945ECB11EAB9A53075C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.200.0/22 202.181.12.0/22 IPv6: 2404:c280::/32 Signature Algorithm: sha256WithRSAEncryption 7e:11:ea:03:ff:d8:9c:f4:47:7d:78:e8:33:46:11:4d:61:6b: 30:21:1d:dd:78:a8:72:f6:c2:51:7a:c1:84:4b:8c:f6:4e:40: bb:c7:9b:2e:a8:5b:c7:77:9a:46:db:85:fe:24:2c:2e:b5:93: 87:7f:01:02:8f:97:11:ed:e4:5f:20:dc:98:57:56:ae:b3:e8: 02:8d:4e:fd:4a:b9:98:90:74:4b:3f:30:1f:2d:e5:e9:95:9e: 80:35:11:5a:e2:a1:5b:be:2f:02:35:68:67:de:7f:12:fa:c5: 7b:51:4a:a4:6e:74:cf:ae:c6:ee:89:81:ce:48:f0:40:6e:5b: 92:7b:fb:b0:dc:8c:f6:cf:9c:70:fb:53:d9:fa:70:87:93:26: f4:6a:aa:6a:ba:12:fa:2a:1a:1a:98:0d:f2:2a:1e:4d:dd:fe: c2:e4:c9:45:65:db:68:19:86:0c:61:f8:e8:1d:0e:60:8c:43: 48:3d:c6:d7:78:fa:b5:93:e8:b7:26:2e:be:ab:cf:d2:00:04: 1a:27:c5:92:d8:56:d8:9e:ba:93:f9:66:b8:c6:af:4d:4d:aa: a9:c1:b0:48:7e:95:d8:6f:07:5e:b5:f9:e3:93:c6:68:42:18: 34:d9:79:11:84:04:aa:66:04:f1:74:21:70:3e:45:e3:cf:ee: ce:77:a6:4d -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDhBQTg3ODY1MjY4NTIzNDY4MzkzNzI2MzFERkIwOTk4 NEJDMzAwNUUwHhcNMjQwMTMwMTY0MzMzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5MjczNS05NTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRHYNwGiXPqknQ8jvhQV7U9phIN0Ya3tJH9S2T7dZ1Mp48ZJlg6ONAcl6qQb Z+obasDKqebu3eehtIpeQcJDfwVL+mH8JEExziBnXJ22GuRecj3e9+6ONhYsNaCo oRUkRWhq03qKgOZ2KVXazpRwCofqSzXvPsmz+/AE3SrOVSluJaZw2Q7uBntwAKv6 VubGyB9SNF7YtrZ/5OF9gy/J4B/zhn22zv51zyNp4r/Wk8fWR0csQ4qTlnhBG/DC D6rkTWQUwBR1R6ZK5q8LdPt+xXpLmZCqS9NB7FTF7xahHMk2ymej+0u4b2SQ+a58 5e1TkklkQAoiLhKqPIk3jd2bNwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFM1fUSzx 85i2IaMxF0brKf8wpuUTMB8GA1UdIwQYMBaAFIqoeGUmhSNGg5NyYx37CZhLwwBe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9pcWg0WlNhRkkwYURrM0pqSGZzSm1FdkRB RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lxaDRaU2FGSTBhRGszSmpIZnNKbUV2REFGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ0MTMvMDgxNkU3NTRGRkI0MTFFNTk0NDMxMDJDQzRGOUFFMDIvMTMyNEMzOTQ1 RUNCMTFFQUI5QTUzMDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnzMgDBALKtQwwDQQCAAIwBwMFACQEwoAwDQYJKoZIhvcN AQELBQADggEBAH4R6gP/2Jz0R3146DNGEU1hazAhHd14qHL2wlF6wYRLjPZOQLvH my6oW8d3mkbbhf4kLC61k4d/AQKPlxHt5F8g3JhXVq6z6AKNTv1KuZiQdEs/MB8t 5emVnoA1EVrioVu+LwI1aGfefxL6xXtRSqRudM+uxu6Jgc5I8EBuW5J7+7DcjPbP nHD7U9n6cIeTJvRqqmq6EvoqGhqYDfIqHk3d/sLkyUVl22gZhgxh+OgdDmCMQ0g9 xtd4+rWT6LcmLr6rz9IABBonxZLYVtieupP5ZrjGr01NqqnBsEh+ldhvB161+eOT xmhCGDTZeRGEBKpmBPF0IXA+RePP7s53pk0= -----END CERTIFICATE-----Generated at Fri May 31 20:34:16 2024 by rpki-client on console-ams.rpki-client.org