$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B9A42F96FEA211EDB9013076C4F9AE02.roa File: B9A42F96FEA211EDB9013076C4F9AE02.roa (raw, json) Hash identifier: Vz2c1dAL2tzLijBpz5XdkyV8FKeYtLOeinzLmhM0fXs= Subject key identifier: F5:88:5A:6B:93:24:50:92:4E:44:B5:2A:61:2B:58:AC:B9:51:89:90 Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Certificate serial: 057A Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B9A42F96FEA211EDB9013076C4F9AE02.roa Signing time: Sat 02 Nov 2024 23:02:22 +0000 ROA not before: Sat 02 Nov 2024 23:02:22 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 9667 IP address blocks: 103.20.208.0/24 maxlen: 24 103.20.209.0/24 maxlen: 24 103.20.210.0/24 maxlen: 24 103.20.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 22:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1402 (0x57a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Validity Not Before: Nov 2 23:02:22 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6726af7e-980c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:5e:03:ad:ed:51:e8:ce:62:91:fb:a1:62: c7:ed:da:fa:87:3f:2c:73:aa:77:32:06:ef:08:01: 30:fe:07:bb:2e:a2:bf:06:75:6f:40:7f:6a:a9:a7: b6:03:07:e4:95:a7:d9:f0:1f:74:a1:08:3a:37:5b: 80:88:b1:29:14:eb:ff:50:04:94:d7:07:2d:3a:1b: bc:96:7b:39:cc:de:46:90:6a:52:80:f7:e4:92:a2: 1c:f9:0e:e3:f9:b6:e9:cd:6c:25:ed:3f:38:00:d7: 42:11:f7:92:49:2f:b0:a1:0a:12:c7:2e:12:51:8e: f2:f7:f4:b3:b8:38:ee:b5:03:90:e9:af:dd:0a:49: 69:9e:e3:ec:55:c3:87:0a:cf:88:e6:6a:38:94:dc: 8f:6d:1d:0c:a7:d0:ae:f9:41:10:6f:db:fd:af:3b: 76:3f:17:62:4d:8a:5b:9e:37:14:da:06:26:5b:a4: d6:19:29:e7:c6:26:53:a7:40:ab:a9:fd:8c:7e:c4: d8:e4:41:32:e7:1f:28:01:64:85:ba:79:e4:5f:2e: de:7d:d5:2a:0f:32:03:63:c2:44:68:d6:1d:7e:5a: cf:c2:72:36:9e:03:73:4b:e4:83:05:06:f9:7e:39: 73:30:4d:5b:d7:f6:55:50:44:6c:70:6b:a2:98:65: 76:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:88:5A:6B:93:24:50:92:4E:44:B5:2A:61:2B:58:AC:B9:51:89:90 X509v3 Authority Key Identifier: keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B9A42F96FEA211EDB9013076C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.208.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:94:ad:b1:71:22:71:00:0c:85:5e:ee:3a:7f:94:8b:98:a5: 7e:39:be:fd:7a:aa:a6:4e:b1:3c:6e:11:26:cd:60:80:b6:07: 82:e7:28:40:8d:f4:b9:93:d0:69:96:4d:59:2b:4e:56:bb:bb: 8a:73:e7:2e:3c:d9:01:5a:b9:82:73:de:35:bf:4a:9e:1f:5e: 3d:b3:c3:5a:e7:3f:b7:db:77:39:aa:51:ee:ab:59:1f:91:8c: da:88:93:ff:df:b5:0e:72:0b:db:d3:40:56:c2:04:d9:e3:48: dc:fd:5e:26:99:55:04:42:ba:f3:31:8a:52:a3:57:c0:88:d1: f1:04:40:38:53:7f:6d:8c:d5:84:8d:2b:70:0b:98:99:d0:3d: 54:75:f2:27:50:87:fb:a1:91:13:1e:87:69:66:5e:79:7b:24: 28:52:63:36:fd:d2:79:55:a3:26:16:58:06:5c:05:ad:23:fa: 1c:c3:d6:1d:e1:4f:95:5e:5e:17:8c:44:51:76:7f:e7:ff:2a: 91:60:61:b4:66:f3:1a:a7:0e:d9:6d:7c:90:98:0a:94:08:b1: c8:2a:36:c3:57:3c:3a:80:ff:c9:85:5a:62:8f:7d:92:e2:db: 12:78:de:07:a6:1d:3e:03:03:2a:6d:7f:e7:c6:bc:4c:6e:8a: dc:8e:ea:57 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzRjMxMTAvBgNVBAUTKDMxN0MzMDdGRkM2RUNCNkNGNjU2RjI2QjgyODJGRkI5 RTYyRjkzNjUwHhcNMjQxMTAyMjMwMjIyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2YWY3ZS05ODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFVeA63tUejOYpH7oWLH7dr6hz8sc6p3MgbvCAEw/ge7LqK/BnVvQH9qqae2 AwfklafZ8B90oQg6N1uAiLEpFOv/UASU1wctOhu8lns5zN5GkGpSgPfkkqIc+Q7j +bbpzWwl7T84ANdCEfeSSS+woQoSxy4SUY7y9/SzuDjutQOQ6a/dCklpnuPsVcOH Cs+I5mo4lNyPbR0Mp9Cu+UEQb9v9rzt2PxdiTYpbnjcU2gYmW6TWGSnnxiZTp0Cr qf2MfsTY5EEy5x8oAWSFunnkXy7efdUqDzIDY8JEaNYdflrPwnI2ngNzS+SDBQb5 fjlzME1b1/ZVUERscGuimGV2OQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPWIWmuT JFCSTkS1KmErWKy5UYmQMB8GA1UdIwQYMBaAFDF8MH/8bsts9lbya4KC/7nmL5Nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDNGMy9CMjU0NDgxQUNB MzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXkyejJWdkpyZ29MX3VlWXZr MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Yd3dmX3h1eTJ6MlZ2SnJnb0xfdWVZdmsyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQzRjMvQjI1NDQ4MUFDQTM0MTFFQjhDOTBEOTQxQzRGOUFFMDIvQjlBNDJGOTZG RUEyMTFFREI5MDEzMDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnFNAwDQYJKoZIhvcNAQELBQADggEBAF2UrbFxInEADIVe 7jp/lIuYpX45vv16qqZOsTxuESbNYIC2B4LnKECN9LmT0GmWTVkrTla7u4pz5y48 2QFauYJz3jW/Sp4fXj2zw1rnP7fbdzmqUe6rWR+RjNqIk//ftQ5yC9vTQFbCBNnj SNz9XiaZVQRCuvMxilKjV8CI0fEEQDhTf22M1YSNK3ALmJnQPVR18idQh/uhkRMe h2lmXnl7JChSYzb90nlVoyYWWAZcBa0j+hzD1h3hT5VeXheMRFF2f+f/KpFgYbRm 8xqnDtltfJCYCpQIscgqNsNXPDqA/8mFWmKPfZLi2xJ43gemHT4DAyptf+fGvExu ityO6lc= -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:23 2024 by rpki-client on console-ams.rpki-client.org