$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/CA181F42791211ED9D926781C4F9AE02.roa File: CA181F42791211ED9D926781C4F9AE02.roa (raw, json) Hash identifier: 7nUrgsXGN1+KumYSAJKqjvtegrJHofkPLzFdsb9Xqkw= Subject key identifier: FC:40:CE:2C:B1:A8:CF:88:F4:66:00:84:EC:4E:C1:CD:7A:02:36:5F Certificate issuer: /CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Certificate serial: B7 Authority key identifier: 0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/CA181F42791211ED9D926781C4F9AE02.roa Signing time: Wed 29 Nov 2023 05:16:20 +0000 ROA not before: Wed 29 Nov 2023 05:16:20 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 150668 IP address blocks: 103.109.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 06:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Validity Not Before: Nov 29 05:16:20 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6566c924-d4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:76:31:49:b0:d7:28:ee:5f:4c:b8:66:35: ed:bc:81:98:14:09:e1:69:e5:c4:83:e1:9e:44:5d: 7f:47:30:ff:9e:62:f6:d6:9f:d8:44:5c:15:35:50: 17:55:30:ec:f0:7e:40:93:c1:61:1a:41:2a:26:fa: bc:e4:0d:ea:ae:4a:f6:6c:cf:f3:1f:56:25:c9:9c: 45:fc:67:25:06:e5:96:34:eb:0a:b7:28:bf:6c:af: 31:bc:7d:d2:80:32:29:51:71:16:a5:7c:8b:f3:76: ea:51:cd:37:c4:e6:b8:3e:72:42:fe:3d:50:8a:1c: 47:a5:ea:3d:e6:4f:d4:d1:5e:36:42:1c:71:14:54: 2d:70:dd:98:c1:7c:ae:9f:32:97:66:77:b3:b1:ae: dd:de:0d:66:63:7e:bc:cf:96:cb:d5:72:16:74:83: 07:c0:64:63:bc:fc:6f:6b:0e:fa:83:89:b7:59:84: c7:62:c4:60:e7:20:a0:2d:d4:1a:38:ed:cd:20:a6: 27:b8:86:ea:d1:d6:00:17:5b:5e:fc:21:ed:46:e2: aa:98:f2:33:3f:fa:02:b2:98:ec:c5:ed:e3:09:ac: 82:47:6c:bb:26:e4:1f:85:3f:37:e7:d6:80:bd:20: a6:c1:e4:d7:8b:7f:b8:ae:b9:05:7b:a5:a0:84:0c: 0a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:40:CE:2C:B1:A8:CF:88:F4:66:00:84:EC:4E:C1:CD:7A:02:36:5F X509v3 Authority Key Identifier: keyid:0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/CA181F42791211ED9D926781C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.105.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:d4:f4:8a:b3:6f:d8:05:b9:3d:5c:97:cf:3a:94:e8:5e:f2: ce:13:d7:12:c8:55:7a:62:7c:75:c8:a8:6b:cc:4f:80:59:e2: 51:fc:40:61:2f:d3:7d:bd:f1:7c:45:a2:85:25:15:25:3e:c6: b6:2e:d5:c9:27:ca:8f:e8:ca:1e:17:1c:c8:61:45:44:a6:ec: d8:1d:52:c6:43:77:34:1b:75:8a:70:ee:9a:34:30:30:48:08: 40:be:54:ae:2d:11:c9:f7:d6:fa:ad:36:3f:c1:d4:cb:fe:6d: bd:ff:22:68:dd:ec:62:46:3b:79:5a:f3:0b:d8:80:21:e4:53: 2c:a2:e9:02:49:91:3c:d8:45:59:c9:bc:58:cb:d7:39:c1:1c: 45:76:ca:a3:d9:b3:c6:00:d8:1e:ef:4b:36:d7:02:e1:ab:37: 56:47:94:2b:d0:7d:e4:32:2e:77:f7:9c:0a:bb:f7:c8:1a:ba: 31:16:88:00:bb:05:ee:76:c6:9a:a1:c8:53:d8:11:2e:ed:86: 16:35:be:77:f2:f4:75:24:e3:4a:bb:e9:0b:7e:3e:3e:75:17: df:c4:b0:f5:bd:e4:90:c6:d0:59:c0:d9:a5:f0:66:85:22:45: 74:c3:75:05:14:0d:3f:78:71:3d:0a:08:cb:9b:9c:5b:e0:10: 74:47:f0:8f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QUMxMTAvBgNVBAUTKDBGRDQyNDhGRDQ4QkExQUUwQjYwRDhDRjZBNDNEQjMz QjZGNEY2QkEwHhcNMjMxMTI5MDUxNjIwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY2YzkyNC1kNGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSd2MUmw1yjuX0y4ZjXtvIGYFAnhaeXEg+GeRF1/RzD/nmL21p/YRFwVNVAX VTDs8H5Ak8FhGkEqJvq85A3qrkr2bM/zH1YlyZxF/GclBuWWNOsKtyi/bK8xvH3S gDIpUXEWpXyL83bqUc03xOa4PnJC/j1QihxHpeo95k/U0V42QhxxFFQtcN2YwXyu nzKXZnezsa7d3g1mY368z5bL1XIWdIMHwGRjvPxvaw76g4m3WYTHYsRg5yCgLdQa OO3NIKYnuIbq0dYAF1te/CHtRuKqmPIzP/oCspjsxe3jCayCR2y7JuQfhT8359aA vSCmweTXi3+4rrkFe6WghAwKOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPxAziyx qM+I9GYAhOxOwc16AjZfMB8GA1UdIwQYMBaAFA/UJI/Ui6GuC2DYz2pD2zO29Pa6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVBQy81RkFGNTY0Mjc5 MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9hNExZTmpQYWtQYk03YjA5 cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5UWtqOVNMb2E0TFlOalBha1BiTTdiMDlyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI1QUMvNUZBRjU2NDI3OTBFMTFFRDhFN0MxQjc5QzRGOUFFMDIvQ0ExODFGNDI3 OTEyMTFFRDlEOTI2NzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnbWkwDQYJKoZIhvcNAQELBQADggEBAAzU9Iqzb9gFuT1c l886lOhe8s4T1xLIVXpifHXIqGvMT4BZ4lH8QGEv03298XxFooUlFSU+xrYu1ckn yo/oyh4XHMhhRUSm7NgdUsZDdzQbdYpw7po0MDBICEC+VK4tEcn31vqtNj/B1Mv+ bb3/Imjd7GJGO3la8wvYgCHkUyyi6QJJkTzYRVnJvFjL1znBHEV2yqPZs8YA2B7v SzbXAuGrN1ZHlCvQfeQyLnf3nAq798gaujEWiAC7Be52xpqhyFPYES7thhY1vnfy 9HUk40q76Qt+Pj51F9/EsPW95JDG0FnA2aXwZoUiRXTDdQUUDT94cT0KCMubnFvg EHRH8I8= -----END CERTIFICATE-----Generated at Sat Jun 1 08:15:54 2024 by rpki-client on console-ams.rpki-client.org