$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/95A8E624A6F111EF9E720A74C4F9AE02.roa File: 95A8E624A6F111EF9E720A74C4F9AE02.roa (raw, json) Hash identifier: AL8g8R1nvsAF5tD4H7Zxpe+Zo6BrJ4TViEiATiToe98= Subject key identifier: 1C:0B:0F:D1:2C:E3:C4:18:73:2D:CD:14:49:63:F8:2F:62:AD:AB:DA Certificate issuer: /CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21 Certificate serial: 02 Authority key identifier: 78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/95A8E624A6F111EF9E720A74C4F9AE02.roa Signing time: Wed 20 Nov 2024 03:43:20 +0000 ROA not before: Wed 20 Nov 2024 03:43:20 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 134489 IP address blocks: 103.163.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21 Validity Not Before: Nov 20 03:43:20 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=673d5ad8-4857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:65:33:44:21:06:af:09:c7:a9:49:aa:8c:34: 15:32:ee:0b:f9:5d:7b:fa:51:b5:bf:bc:6a:16:ec: 4f:58:e2:34:f2:8c:c1:c8:25:49:0c:0b:5e:2e:b5: 7b:52:c0:2f:d3:f2:df:98:fd:bf:a7:64:45:23:94: 7c:24:e6:13:a5:30:e9:93:ae:c8:fb:90:e6:8b:7b: f0:6a:74:73:81:c6:64:ce:c4:29:84:88:1b:53:cf: a8:92:28:3c:7c:6b:b1:e7:60:1c:da:42:f5:e3:32: ee:22:62:69:ed:15:96:97:58:d4:f0:34:8e:5b:32: d7:06:bd:7c:44:95:a6:6c:2d:64:a7:02:0e:f2:cf: 7d:89:61:78:40:88:a2:7c:33:9d:16:19:b9:47:f0: 56:13:78:ab:68:ad:75:7a:d0:d7:53:a4:de:96:db: 10:92:4f:8f:11:f3:b7:e1:49:f0:79:79:bc:ac:ba: e0:05:e9:e2:8a:f5:0f:01:19:37:56:99:78:47:01: 38:4c:c3:80:a3:b0:d4:00:7a:0b:41:b4:23:76:2e: a2:cc:35:2e:ef:0f:5d:be:46:86:20:32:dc:15:e9: 44:3e:e9:11:05:2a:41:48:9d:0a:e6:6d:8d:b2:4b: dc:bf:1a:af:55:8b:e4:00:d1:77:70:9e:c9:3b:80: fa:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0B:0F:D1:2C:E3:C4:18:73:2D:CD:14:49:63:F8:2F:62:AD:AB:DA X509v3 Authority Key Identifier: keyid:78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/95A8E624A6F111EF9E720A74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.49.0/24 Signature Algorithm: sha256WithRSAEncryption 43:b9:6f:5d:4e:0c:75:b6:16:8e:85:53:c3:76:56:de:33:67: 79:33:5a:46:2a:7b:f2:e6:47:ed:50:8b:91:20:e6:6f:5e:7c: fb:ab:bb:2c:93:ab:09:ed:a3:a9:0a:dd:7b:53:9b:71:f5:ff: 37:fb:5e:25:3c:a2:bb:8f:09:c6:c4:d9:f1:e4:e3:b6:29:d9: da:2d:19:44:01:2f:d5:a3:f3:92:68:78:13:16:fe:25:38:b7: 7f:02:92:ec:06:0f:06:83:cc:b6:bd:77:6d:17:86:c6:fb:28: 9a:54:b1:8b:4b:38:22:99:d1:ca:e4:93:14:04:56:72:39:c7: 72:3f:42:18:79:80:a1:25:aa:76:dd:05:75:86:4f:b1:00:e8: 7f:90:38:d9:f6:bf:73:49:07:02:95:34:09:d4:49:64:45:ab: 41:9d:b7:7e:f2:b4:0f:bf:bf:13:61:26:02:1a:95:ea:9f:66: d7:38:51:1a:b6:cf:e3:46:0d:78:19:da:02:e1:39:ce:96:bb: 62:37:23:31:51:a6:67:c0:f8:e1:8f:bc:8d:7c:90:c0:82:23: 2a:d6:cb:28:aa:5c:b1:78:7d:40:bd:d2:fc:e9:7f:3d:53:6f: b5:42:07:20:26:59:0c:21:6f:9c:c7:e9:7a:08:5b:f8:4a:fe: 71:be:3e:b7 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OTM2MzExMC8GA1UEBRMoNzg4RkI0RDk2QjYwMURCQTYxNkREREM5OUNGRTQ2NUQ2 MEMzOEYyMTAeFw0yNDExMjAwMzQzMjBaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3M2Q1YWQ4LTQ4NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIZTNEIQavCcepSaqMNBUy7gv5XXv6UbW/vGoW7E9Y4jTyjMHIJUkMC14utXtS wC/T8t+Y/b+nZEUjlHwk5hOlMOmTrsj7kOaLe/BqdHOBxmTOxCmEiBtTz6iSKDx8 a7HnYBzaQvXjMu4iYmntFZaXWNTwNI5bMtcGvXxElaZsLWSnAg7yz32JYXhAiKJ8 M50WGblH8FYTeKtorXV60NdTpN6W2xCST48R87fhSfB5ebysuuAF6eKK9Q8BGTdW mXhHAThMw4CjsNQAegtBtCN2LqLMNS7vD12+RoYgMtwV6UQ+6REFKkFInQrmbY2y S9y/Gq9Vi+QA0Xdwnsk7gPqvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUHAsP0Szj xBhzLc0USWP4L2Ktq9owHwYDVR0jBBgwFoAUeI+02WtgHbphbd3JnP5GXWDDjyEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5MzYzLzMxRUFERkE0NUNC QTExRUM4QUExM0UyNEM0RjlBRTAyL2VJLTAyV3RnSGJwaGJkM0puUDVHWFdERGp5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUktMDJXdGdIYnBoYmQzSm5QNUdYV0REanlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTM2My8zMUVBREZBNDVDQkExMUVDOEFBMTNFMjRDNEY5QUUwMi85NUE4RTYyNEE2 RjExMUVGOUU3MjBBNzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGejMTANBgkqhkiG9w0BAQsFAAOCAQEAQ7lvXU4MdbYWjoVT w3ZW3jNneTNaRip78uZH7VCLkSDmb158+6u7LJOrCe2jqQrde1ObcfX/N/teJTyi u48JxsTZ8eTjtinZ2i0ZRAEv1aPzkmh4Exb+JTi3fwKS7AYPBoPMtr13bReGxvso mlSxi0s4IpnRyuSTFARWcjnHcj9CGHmAoSWqdt0FdYZPsQDof5A42fa/c0kHApU0 CdRJZEWrQZ23fvK0D7+/E2EmAhqV6p9m1zhRGrbP40YNeBnaAuE5zpa7YjcjMVGm Z8D44Y+8jXyQwIIjKtbLKKpcsXh9QL3S/Ol/PVNvtUIHICZZDCFvnMfpeghb+Er+ cb4+tw== -----END CERTIFICATE-----Generated at Thu Nov 21 03:56:44 2024 by rpki-client on console-fra.rpki-client.org