$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/AF6A12881EBB11EDB35A2561C4F9AE02.roa File: AF6A12881EBB11EDB35A2561C4F9AE02.roa (raw, json) Hash identifier: cKa9eR42THXESBXh5GR6j0R3nTxgHwhQOzuCbJGCePs= Subject key identifier: DC:B9:5F:DD:F0:E1:E8:E0:FD:B1:C5:F1:C8:71:D6:5E:04:5D:50:79 Certificate issuer: /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Certificate serial: 0172 Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/AF6A12881EBB11EDB35A2561C4F9AE02.roa Signing time: Sat 23 Mar 2024 04:26:29 +0000 ROA not before: Sat 23 Mar 2024 04:26:29 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 133947 IP address blocks: 103.49.148.0/24 maxlen: 24 103.49.149.0/24 maxlen: 24 103.78.102.0/24 maxlen: 24 103.78.103.0/24 maxlen: 24 2001:df2:5c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Validity Not Before: Mar 23 04:26:29 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65fe59f5-97c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:13:2f:59:1b:e8:85:37:7d:78:d9:59:a7:a4: fc:8c:ab:93:23:7e:ad:79:80:46:33:58:e0:b7:c2: 10:62:98:87:b3:64:ed:29:61:e7:d5:5c:c5:2e:5b: 70:43:5e:af:ec:31:03:aa:d1:7a:24:d3:9a:ac:59: a8:3b:5b:49:64:e9:0a:bf:aa:9f:26:42:b8:2c:2e: 90:db:c6:2c:45:55:61:4c:7d:10:24:8a:3d:73:70: 6b:42:bb:19:d4:12:ab:c9:27:4e:3f:d4:c5:0c:eb: 9f:7b:13:6f:8c:9c:0d:be:fe:55:e0:0e:11:fc:20: 07:10:3b:d2:87:d2:ca:d6:14:98:7f:1e:62:8a:2c: db:78:95:a9:19:00:a8:ae:cf:fe:f0:ec:e6:c6:fc: d7:11:06:54:ba:46:23:ad:37:51:25:91:1b:4d:2c: c2:d3:41:65:eb:c9:e2:2c:d1:6c:01:67:2f:75:b9: 16:ea:03:03:f8:6e:ce:67:1a:f8:26:b7:5d:0b:b6: 43:19:37:0b:7d:e5:a0:78:7f:1a:2d:12:b8:e7:6e: 73:29:f4:04:dc:0c:3b:74:bf:dc:ec:bb:68:40:42: 22:2e:0b:2e:15:f4:57:9e:b0:46:5f:e0:3c:c2:28: e2:ad:c7:99:3f:60:a8:30:36:00:e3:16:a8:04:39: fd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B9:5F:DD:F0:E1:E8:E0:FD:B1:C5:F1:C8:71:D6:5E:04:5D:50:79 X509v3 Authority Key Identifier: keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/AF6A12881EBB11EDB35A2561C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.49.148.0/23 103.78.102.0/23 IPv6: 2001:df2:5c00::/48 Signature Algorithm: sha256WithRSAEncryption 93:18:7d:22:ad:89:57:7a:95:be:2e:6a:9e:60:b2:a4:0c:b5: 18:b2:2b:8d:c4:16:41:9b:91:fd:da:e0:70:90:06:44:8a:d1: b0:29:34:89:cc:a6:d6:e1:0e:c6:97:8f:64:be:63:40:64:aa: db:ed:52:ee:42:a7:4f:1d:e5:15:fb:f0:87:65:27:de:7d:7a: a0:94:a4:5e:bc:42:66:b8:8f:93:96:42:10:05:b7:fa:a8:2e: 30:b3:ae:f9:6d:db:82:60:20:22:67:4d:d7:c8:08:66:20:ba: 0b:4a:d4:f6:a8:23:bd:d1:ae:f8:63:89:56:39:f2:1f:84:26: 78:f5:bb:40:de:af:69:8d:32:2b:35:f4:e4:ec:11:2a:f6:bb: 40:57:70:b9:3d:7e:92:e9:d7:ac:eb:fd:6b:c9:24:c5:a8:b0: 5b:ab:03:dc:7b:05:a7:ef:2a:57:23:c3:94:f5:4a:5f:17:a7: ef:a4:02:fc:0a:8d:32:71:5d:d6:89:86:11:e8:f1:49:75:bb: a4:9a:87:1b:9c:b8:bf:a6:c8:8e:7e:cb:8a:24:3b:a6:94:df: f1:91:a4:26:04:87:bf:13:48:6f:43:08:9a:1f:2b:82:36:0f: 4d:e1:6a:96:1e:f6:e5:a3:3e:a6:fe:ec:79:67:22:4f:bd:af: f8:1b:d2:a1 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBGMUYxMTAvBgNVBAUTKDk1MkY3MTJERjExODQxMjA4QTNCNEE4NzQ2MjBDNTlG RUVENzcwQjAwHhcNMjQwMzIzMDQyNjI5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWZlNTlmNS05N2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxMvWRvohTd9eNlZp6T8jKuTI36teYBGM1jgt8IQYpiHs2TtKWHn1VzFLltw Q16v7DEDqtF6JNOarFmoO1tJZOkKv6qfJkK4LC6Q28YsRVVhTH0QJIo9c3BrQrsZ 1BKrySdOP9TFDOufexNvjJwNvv5V4A4R/CAHEDvSh9LK1hSYfx5iiizbeJWpGQCo rs/+8OzmxvzXEQZUukYjrTdRJZEbTSzC00Fl68niLNFsAWcvdbkW6gMD+G7OZxr4 JrddC7ZDGTcLfeWgeH8aLRK4525zKfQE3Aw7dL/c7LtoQEIiLgsuFfRXnrBGX+A8 wijirceZP2CoMDYA4xaoBDn9zQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFNy5X93w 4ejg/bHF8chx1l4EXVB5MB8GA1UdIwQYMBaAFJUvcS3xGEEgijtKh0YgxZ/u13Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEYxRi82QzBGRUY1QTFF QjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFTQ0tPMHFIUmlERm4tN1hj TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTOXhMZkVZUVNDS08wcUhSaURGbi03WGNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBGMUYvNkMwRkVGNUExRUI5MTFFRDlGQzY4NzYwQzRGOUFFMDIvQUY2QTEyODgx RUJCMTFFREIzNUEyNTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnMZQDBAFnTmYwDwQCAAIwCQMHACABDfJcADANBgkqhkiG 9w0BAQsFAAOCAQEAkxh9Iq2JV3qVvi5qnmCypAy1GLIrjcQWQZuR/drgcJAGRIrR sCk0icym1uEOxpePZL5jQGSq2+1S7kKnTx3lFfvwh2Un3n16oJSkXrxCZriPk5ZC EAW3+qguMLOu+W3bgmAgImdN18gIZiC6C0rU9qgjvdGu+GOJVjnyH4QmePW7QN6v aY0yKzX05OwRKva7QFdwuT1+kunXrOv9a8kkxaiwW6sD3HsFp+8qVyPDlPVKXxen 76QC/AqNMnFd1omGEejxSXW7pJqHG5y4v6bIjn7LiiQ7ppTf8ZGkJgSHvxNIb0MI mh8rgjYPTeFqlh725aM+pv7seWciT72v+BvSoQ== -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:31 2024 by rpki-client on console-ams.rpki-client.org