$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa File: C2AB1A10B64411E89321A417C4F9AE02.roa (raw, json) Hash identifier: sQZhVCqGnQgPNsHomc/Him+uzpF3a8NDcj08KMyeCpg= Subject key identifier: 8D:B4:61:40:BB:73:39:2F:F8:25:19:AC:C5:79:76:BF:23:11:BA:9D Certificate issuer: /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Certificate serial: 1317 Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa Signing time: Wed 10 Jul 2024 17:34:56 +0000 ROA not before: Wed 10 Jul 2024 17:34:56 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 137952 IP address blocks: 103.118.44.0/22 maxlen: 22 103.118.44.0/24 maxlen: 24 103.118.45.0/24 maxlen: 24 103.118.46.0/24 maxlen: 24 103.118.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 16:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4887 (0x1317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Validity Not Before: Jul 10 17:34:56 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=668ec63f-8578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:04:eb:e2:2a:41:24:a8:6e:78:e2:2b:73: 03:6e:6b:72:15:ab:8f:4f:48:8a:ad:e9:74:0c:a3: 3d:a3:30:7a:74:f6:15:63:34:e7:95:8f:79:3b:30: 1a:46:18:5f:d2:44:e6:57:42:f8:66:a9:96:ab:9e: e9:dd:5c:92:75:ce:77:da:72:ea:54:37:1c:c2:f7: 5b:04:4a:47:d0:2a:d8:8e:de:5c:9e:60:52:f9:6e: 1c:e4:6a:00:07:0e:3e:e9:08:b6:98:f1:e2:91:17: b7:d3:b0:7b:fc:33:34:fe:cb:98:40:d6:97:0d:6e: ee:73:ac:b1:39:ae:fb:36:d0:e5:17:c2:47:57:59: 3b:00:6a:3b:16:40:6d:1d:b7:0c:f4:7b:df:08:d2: 3b:ce:4a:83:76:78:22:9d:ba:50:91:23:59:44:bc: 36:69:e9:30:7e:85:e4:62:7a:d7:1c:43:3d:60:28: cc:b4:5e:86:31:95:cf:64:c3:5d:62:9f:c9:d9:b9: c6:53:54:0b:66:e7:02:c2:4c:35:6f:3e:25:2d:44: 1c:20:46:ec:33:d7:40:92:ba:ef:98:23:be:0a:20: 01:62:9f:2c:47:a7:d8:94:9e:b8:48:15:3d:ae:41: 32:01:28:d4:e6:aa:bd:58:dd:6e:16:8b:ec:ba:6c: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B4:61:40:BB:73:39:2F:F8:25:19:AC:C5:79:76:BF:23:11:BA:9D X509v3 Authority Key Identifier: keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.44.0/22 Signature Algorithm: sha256WithRSAEncryption 93:5f:03:75:21:a6:87:74:09:3e:16:a6:61:8f:6a:dc:b2:1e: 98:1e:18:50:11:00:d6:54:59:96:93:42:2f:6a:5b:43:78:44: ef:77:2c:fd:29:b1:78:a8:6f:bf:1f:70:54:17:38:bf:6d:7e: e2:d4:a7:65:5c:dd:80:bd:4e:c7:62:cb:43:12:d7:00:2a:0a: 43:94:cc:fd:5f:40:bd:31:d7:e0:e1:57:66:ae:9b:13:32:2a: fd:ba:71:7b:e2:4b:87:7d:4d:dc:d8:c0:fa:6f:d3:5a:8d:e3: fd:25:6a:67:91:bf:35:5f:9d:38:77:a4:46:0f:21:cb:a0:37: b0:a4:a6:00:9c:d0:17:bf:f2:99:2b:13:6b:5b:9c:b2:ff:4e: da:2f:c1:20:d9:9a:65:5e:77:03:e2:ca:d5:fc:99:3a:fc:55: 19:e6:8c:e9:7b:a4:ee:be:cf:4e:8a:55:4e:fe:3e:4a:bf:40: 72:10:da:44:f2:cc:f3:f2:1e:df:60:c7:73:0e:92:9d:01:06: ad:55:23:a1:30:ef:f3:00:ef:e3:a3:4c:2a:ed:52:a9:23:66: 16:ff:73:e1:2b:50:f4:44:1e:c2:f5:42:ef:d4:c3:af:08:11: 41:0a:14:d2:b2:9e:5f:02:1b:2f:c3:41:3a:4d:af:23:be:ea: 5c:44:9c:11 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICExcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCN0MxMTAvBgNVBAUTKDI0OTM2RTEzNjlDOTBDMUVERjkxQUY1MDcyRDczRkU3 NDU3REM5NDMwHhcNMjQwNzEwMTczNDU2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjhlYzYzZi04NTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrwE6+IqQSSobnjiK3MDbmtyFauPT0iKrel0DKM9ozB6dPYVYzTnlY95OzAa Rhhf0kTmV0L4ZqmWq57p3VySdc532nLqVDccwvdbBEpH0CrYjt5cnmBS+W4c5GoA Bw4+6Qi2mPHikRe307B7/DM0/suYQNaXDW7uc6yxOa77NtDlF8JHV1k7AGo7FkBt HbcM9HvfCNI7zkqDdnginbpQkSNZRLw2aekwfoXkYnrXHEM9YCjMtF6GMZXPZMNd Yp/J2bnGU1QLZucCwkw1bz4lLUQcIEbsM9dAkrrvmCO+CiABYp8sR6fYlJ64SBU9 rkEyASjU5qq9WN1uFovsumyVMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI20YUC7 czkv+CUZrMV5dr8jEbqdMB8GA1UdIwQYMBaAFCSTbhNpyQwe35GvUHLXP+dFfclD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI3Qy85NUZEQTFGQThG NTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRCN2ZrYTlRY3RjXzUwVjl5 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pKTnVFMm5KREI3ZmthOVFjdGNfNTBWOXlVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDhCN0MvOTVGREExRkE4RjU2MTFFODkzQjE4MjNBQzRGOUFFMDIvQzJBQjFBMTBC NjQ0MTFFODkzMjFBNDE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJndiwwDQYJKoZIhvcNAQELBQADggEBAJNfA3Uhpod0CT4W pmGPatyyHpgeGFARANZUWZaTQi9qW0N4RO93LP0psXiob78fcFQXOL9tfuLUp2Vc 3YC9Tsdiy0MS1wAqCkOUzP1fQL0x1+DhV2aumxMyKv26cXviS4d9TdzYwPpv01qN 4/0lameRvzVfnTh3pEYPIcugN7CkpgCc0Be/8pkrE2tbnLL/TtovwSDZmmVedwPi ytX8mTr8VRnmjOl7pO6+z06KVU7+Pkq/QHIQ2kTyzPPyHt9gx3MOkp0BBq1VI6Ew 7/MA7+OjTCrtUqkjZhb/c+ErUPREHsL1Qu/Uw68IEUEKFNKynl8CGy/DQTpNryO+ 6lxEnBE= -----END CERTIFICATE-----Generated at Sun Nov 24 18:36:25 2024 by rpki-client on console-fra.rpki-client.org