$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/8A65F1587E1A11EFB5D20D0FC4F9AE02.roa File: 8A65F1587E1A11EFB5D20D0FC4F9AE02.roa (raw, json) Hash identifier: 90MrHfQBYj0k5dXvHTFZmXI7TFbYEi0Qra4US5e5RGE= Subject key identifier: DC:50:81:19:99:E0:A2:C3:04:7A:DB:71:47:6E:BA:D8:07:C1:37:B4 Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Certificate serial: 0987 Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/8A65F1587E1A11EFB5D20D0FC4F9AE02.roa Signing time: Sun 29 Sep 2024 04:24:38 +0000 ROA not before: Sun 29 Sep 2024 04:24:37 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 141047 IP address blocks: 103.114.24.0/24 maxlen: 24 103.114.25.0/24 maxlen: 24 103.114.26.0/24 maxlen: 24 103.114.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2439 (0x987) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Validity Not Before: Sep 29 04:24:37 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66f8d685-d9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6e:ae:82:a4:6a:f7:44:4a:04:04:48:88:18: f0:79:c9:02:ea:81:a3:cb:ac:eb:95:ce:3a:7f:08: 75:a2:80:c0:17:7a:b1:55:fe:48:32:8d:c6:c9:64: c3:66:d5:90:b7:f0:9e:d9:81:85:80:4e:f6:77:78: 4d:47:d3:87:68:b4:48:10:e8:da:af:15:71:b1:5b: 0d:b3:9c:a0:6e:53:d0:aa:46:90:6f:16:33:9e:03: 03:97:4b:e1:1e:46:71:5b:55:63:a0:db:e5:3c:89: 9f:cf:94:53:5c:18:52:e9:dd:1f:cb:c4:52:09:1b: 3f:59:22:a9:cd:50:4d:4c:df:89:e1:b4:02:b1:7f: 36:f9:34:34:73:c7:b6:25:0e:bf:14:7c:af:37:76: be:28:c6:07:53:63:e3:8f:9d:75:be:92:8d:f7:22: 40:b5:07:ed:8d:34:ed:03:5a:ac:af:cc:41:8a:df: fb:85:8f:7f:82:5f:42:22:3c:79:6d:f2:cd:ff:97: 54:d1:1e:1a:61:fa:f9:76:89:c5:96:6a:7a:10:ba: ad:07:4e:ca:9f:2c:53:8d:85:43:26:4a:62:c3:13: b5:78:59:ef:3b:89:9a:59:c8:bd:7b:c4:a4:bd:07: ef:6c:78:38:31:3b:dd:c5:38:c3:59:bb:bc:63:b9: 2c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:50:81:19:99:E0:A2:C3:04:7A:DB:71:47:6E:BA:D8:07:C1:37:B4 X509v3 Authority Key Identifier: keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/8A65F1587E1A11EFB5D20D0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.24.0/22 Signature Algorithm: sha256WithRSAEncryption 48:0d:a5:6d:2f:cc:40:b7:62:bb:00:09:cb:20:73:1e:5d:ce: f7:9c:b3:23:30:80:4f:3f:ad:1a:be:65:ba:67:b1:71:67:80: c5:4f:f6:44:8e:86:f4:c7:4f:04:80:a7:db:f3:13:e0:38:5e: 47:3d:cb:4b:03:8a:18:16:22:15:b1:3f:fb:a1:8f:51:7b:94: c7:b5:ff:83:e6:4c:34:b9:94:0e:89:00:67:d9:71:a5:1a:5d: 65:e0:66:9b:ae:6f:44:06:d7:07:28:cd:09:9c:31:5c:d6:1f: 53:09:77:8e:65:70:14:17:ad:99:61:7b:e7:b9:b6:d8:92:75: 67:8a:71:41:d1:51:83:1f:ce:82:4e:21:28:2e:d1:d3:ae:5f: 00:55:2f:db:d2:3b:17:c5:fd:f4:cf:af:60:66:8d:89:06:14: 04:56:da:1e:64:52:d0:69:f1:34:27:d4:d8:1c:c5:e9:5f:71: a4:b8:7f:7b:4e:0c:7f:5d:01:5f:97:0c:ee:b7:5c:40:3f:37: 88:be:f7:f5:ff:b8:ff:03:a0:6a:58:87:15:84:e1:c9:d1:a4: 2b:68:cc:e9:18:d1:22:c7:8d:4e:7a:6e:6c:e2:48:7e:8d:e4: cf:8e:89:2c:f2:1d:b8:92:1e:1a:93:a7:ac:ed:a5:83:f1:7f: de:d1:39:77 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDNTExMTAvBgNVBAUTKDhEN0UzMDU4MzUwQkI4REZFRkZDRTc3NzBCQkM4Qzg2 Qjc2MkExRTQwHhcNMjQwOTI5MDQyNDM3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY4ZDY4NS1kOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnW6ugqRq90RKBARIiBjweckC6oGjy6zrlc46fwh1ooDAF3qxVf5IMo3GyWTD ZtWQt/Ce2YGFgE72d3hNR9OHaLRIEOjarxVxsVsNs5ygblPQqkaQbxYzngMDl0vh HkZxW1VjoNvlPImfz5RTXBhS6d0fy8RSCRs/WSKpzVBNTN+J4bQCsX82+TQ0c8e2 JQ6/FHyvN3a+KMYHU2Pjj511vpKN9yJAtQftjTTtA1qsr8xBit/7hY9/gl9CIjx5 bfLN/5dU0R4aYfr5donFlmp6ELqtB07KnyxTjYVDJkpiwxO1eFnvO4maWci9e8Sk vQfvbHg4MTvdxTjDWbu8Y7ksOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNxQgRmZ 4KLDBHrbcUduutgHwTe0MB8GA1UdIwQYMBaAFI1+MFg1C7jf7/zndwu8jIa3YqHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM1MS80NzZBN0JFMDdC QkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVOX3ZfT2QzQzd5TWhyZGlv ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYNHdXRFVMdU5fdl9PZDNDN3lNaHJkaW9lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBDNTEvNDc2QTdCRTA3QkJDMTFFQTk2M0YzNjg2QzRGOUFFMDIvOEE2NUYxNTg3 RTFBMTFFRkI1RDIwRDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnchgwDQYJKoZIhvcNAQELBQADggEBAEgNpW0vzEC3YrsA Ccsgcx5dzvecsyMwgE8/rRq+ZbpnsXFngMVP9kSOhvTHTwSAp9vzE+A4Xkc9y0sD ihgWIhWxP/uhj1F7lMe1/4PmTDS5lA6JAGfZcaUaXWXgZpuub0QG1wcozQmcMVzW H1MJd45lcBQXrZlhe+e5ttiSdWeKcUHRUYMfzoJOISgu0dOuXwBVL9vSOxfF/fTP r2BmjYkGFARW2h5kUtBp8TQn1NgcxelfcaS4f3tODH9dAV+XDO63XEA/N4i+9/X/ uP8DoGpYhxWE4cnRpCtozOkY0SLHjU56bmziSH6N5M+OiSzyHbiSHhqTp6ztpYPx f97ROXc= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org