$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa File: 95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa (raw, json) Hash identifier: 7oLDQldYVyRxi75fB8xX/zbnoY5FIN5G44Xmk4Vonf0= Subject key identifier: E0:AC:E1:75:C5:03:D2:86:77:01:00:D7:6A:32:49:4C:33:6C:00:A7 Certificate issuer: /CN=A91D9D8B/serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Certificate serial: 0167 Authority key identifier: A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa Signing time: Fri 15 Nov 2024 02:25:54 +0000 ROA not before: Fri 15 Nov 2024 02:25:54 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 63890 IP address blocks: 103.43.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D8B/serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Validity Not Before: Nov 15 02:25:54 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6736b132-af00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9a:56:11:93:4d:15:5b:5e:08:04:57:2c:d0: 23:f1:97:2b:36:db:df:a0:d0:d3:63:b6:4f:f6:d1: de:18:34:47:a9:98:27:e0:45:56:52:cf:22:ff:37: 54:f3:d0:65:cd:a2:e6:4d:60:e4:1f:51:66:fb:3e: 87:f9:6b:3b:0d:0d:92:98:23:ff:86:95:67:c0:ae: 75:ec:27:b0:09:30:3a:48:62:1d:bc:e4:1d:49:86: 83:59:a8:76:ad:ba:4c:40:fe:df:60:24:22:fa:a8: 68:66:c8:a4:7e:5b:e8:58:3b:fd:14:63:be:73:f1: f3:8a:0d:63:b8:3a:75:f5:7b:be:f5:62:4e:cc:fb: df:d3:ee:9f:1b:cb:43:47:84:07:8e:df:72:a1:d8: 5a:2f:37:d4:bd:ac:3e:14:9d:1d:e2:42:05:af:db: e3:7c:ba:44:f3:d3:3b:c3:5c:5e:fb:27:63:a1:03: 73:2d:6a:e1:d8:1a:2b:4a:63:20:7e:ac:38:b1:01: 29:1a:f3:a0:9b:78:ec:54:04:7a:01:f5:cd:35:5d: 5b:73:a6:1d:29:05:c9:89:d7:a7:f0:7f:f5:9b:6d: c8:a5:a4:0b:f3:e7:22:95:b5:49:ac:16:fb:12:e9: 43:42:eb:56:1f:61:47:f1:17:73:3f:15:db:86:f9: 5e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AC:E1:75:C5:03:D2:86:77:01:00:D7:6A:32:49:4C:33:6C:00:A7 X509v3 Authority Key Identifier: keyid:A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.43.52.0/22 Signature Algorithm: sha256WithRSAEncryption 14:e4:e4:13:95:8c:37:bc:1d:1d:c3:3d:d7:ea:b6:39:69:7a: be:2a:43:22:2c:2b:1a:5c:62:5e:4c:0f:9b:4b:bf:42:fe:1a: 37:17:6f:8d:11:aa:e1:8a:be:40:64:e0:c6:d9:fb:74:9c:85: 31:e9:3f:79:1e:83:97:9c:a0:fa:e2:29:8e:61:40:4b:fc:5d: b4:ad:d7:7c:83:a3:7c:87:d7:5a:79:e9:e4:18:e2:c8:b8:f6: d0:b5:2e:be:dd:9f:85:1f:3f:a3:a1:35:c1:d5:11:47:d4:42: 39:1f:22:a8:66:2e:45:cd:3b:bc:20:84:f9:b6:4c:ea:d2:88: d2:a6:d9:7e:a1:ac:19:9f:89:ec:30:76:f7:4d:76:15:fc:4f: 90:a0:fd:1c:cd:72:0f:0c:09:b5:a2:ef:e1:91:b1:ed:d6:15: 40:77:bb:a2:66:cd:4c:39:4e:57:a0:ce:b8:bd:40:31:cf:12: a3:65:2d:85:71:9c:50:94:93:3c:ce:21:a7:20:e0:18:5f:77: c6:04:c2:92:6f:aa:ef:bc:7e:5d:6b:83:c7:98:4e:38:38:eb: f5:7b:73:0b:7a:5b:75:6d:2a:e9:57:49:00:ab:1f:0e:76:24: f2:62:15:ba:f3:9b:40:4b:31:33:cc:2a:fa:9e:f5:c4:cc:87: bf:f2:03:35 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEOEIxMTAvBgNVBAUTKEExOTM4QzkxMkFDMkY0QTk1OEI5M0RBRjhGNEIyNzIw MTVCMEQ4RDgwHhcNMjQxMTE1MDIyNTU0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM2YjEzMi1hZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5pWEZNNFVteCARXLNAj8ZcrNtvfoNDTY7ZP9tHeGDRHqZgn4EVWUs8i/zdU 89BlzaLmTWDkH1Fm+z6H+Ws7DQ2SmCP/hpVnwK517CewCTA6SGIdvOQdSYaDWah2 rbpMQP7fYCQi+qhoZsikflvoWDv9FGO+c/Hzig1juDp19Xu+9WJOzPvf0+6fG8tD R4QHjt9yodhaLzfUvaw+FJ0d4kIFr9vjfLpE89M7w1xe+ydjoQNzLWrh2BorSmMg fqw4sQEpGvOgm3jsVAR6AfXNNV1bc6YdKQXJiden8H/1m23IpaQL8+cilbVJrBb7 EulDQutWH2FH8RdzPxXbhvle/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFOCs4XXF A9KGdwEA12oySUwzbACnMB8GA1UdIwQYMBaAFKGTjJEqwvSpWLk9r49LJyAVsNjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ4Qi81RjExRTAyQTdG NzUxMUVEOEFGQkU2NzNDNEY5QUUwMi9vWk9Na1NyQzlLbFl1VDJ2ajBzbklCV3cy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29aT01rU3JDOUtsWXVUMnZqMHNuSUJXdzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlEOEIvNUYxMUUwMkE3Rjc1MTFFRDhBRkJFNjczQzRGOUFFMDIvOTVDNEM3QUE3 Rjc5MTFFRDlDMUVBRTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnKzQwDQYJKoZIhvcNAQELBQADggEBABTk5BOVjDe8HR3D Pdfqtjlper4qQyIsKxpcYl5MD5tLv0L+GjcXb40RquGKvkBk4MbZ+3SchTHpP3ke g5ecoPriKY5hQEv8XbSt13yDo3yH11p56eQY4si49tC1Lr7dn4UfP6OhNcHVEUfU QjkfIqhmLkXNO7wghPm2TOrSiNKm2X6hrBmfiewwdvdNdhX8T5Cg/RzNcg8MCbWi 7+GRse3WFUB3u6JmzUw5Tlegzri9QDHPEqNlLYVxnFCUkzzOIacg4Bhfd8YEwpJv qu+8fl1rg8eYTjg46/V7cwt6W3VtKulXSQCrHw52JPJiFbrzm0BLMTPMKvqe9cTM h7/yAzU= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org