$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DF4500C268FA11EFB2CB6E60C4F9AE02.roa File: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (raw, json) Hash identifier: PwHeC5ltmG9V4AsHfpA7j8F4h70QgYXDX48SxKdGKVI= Subject key identifier: DC:10:79:79:D5:F5:34:BA:D1:94:72:F1:05:56:03:89:0F:4B:08:36 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 027C Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DF4500C268FA11EFB2CB6E60C4F9AE02.roa Signing time: Mon 02 Sep 2024 07:13:37 +0000 ROA not before: Mon 02 Sep 2024 07:13:37 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 152461 IP address blocks: 103.40.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 636 (0x27c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Sep 2 07:13:37 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66d565a1-9dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:81:fe:44:20:40:87:8d:bf:29:08:ee:58:c0: 05:76:4d:07:61:59:17:70:2a:a2:2a:33:27:70:97: 01:d2:59:df:65:b3:34:2c:4f:37:bb:22:b6:d2:fd: b5:a3:92:e0:a5:74:93:73:35:76:4e:c2:2b:72:d2: 2b:be:38:cc:7f:f2:5b:0f:55:26:80:b5:47:5c:ae: 7b:a7:d8:94:97:74:20:08:0a:4e:31:1d:0a:b0:51: e5:1e:4e:93:91:05:67:62:e1:4b:65:5b:dd:90:15: 4d:fb:cf:da:6d:dd:e4:05:a3:f8:65:a1:03:b7:00: 66:27:16:44:e7:ad:0c:10:4b:51:f1:c6:d4:1c:8b: de:24:e9:1a:2b:98:ce:15:08:b7:0f:a1:42:03:c1: 1f:69:cf:32:c9:16:ff:bd:14:14:de:40:f2:3b:67: 10:6d:f6:49:62:6b:17:6c:b4:42:ee:d4:a4:3b:de: 6e:ed:89:dc:7e:10:01:26:06:8e:e9:99:bf:17:4b: 8e:79:cc:e9:18:cc:88:86:6c:38:d1:7b:13:14:0d: 67:61:24:24:f0:cc:f7:03:fa:7b:e0:52:87:fb:7b: d4:bf:8e:3e:83:23:ab:86:77:55:ab:ac:a2:37:cc: cf:87:2a:cf:98:82:fd:d1:c7:26:6f:cc:98:92:33: d7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:10:79:79:D5:F5:34:BA:D1:94:72:F1:05:56:03:89:0F:4B:08:36 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DF4500C268FA11EFB2CB6E60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.181.0/24 Signature Algorithm: sha256WithRSAEncryption 54:3a:d4:63:54:c2:d8:2e:c7:ff:f4:1e:98:98:45:aa:76:fd: 0b:66:55:5f:bc:19:53:c9:73:5f:c8:24:8d:86:83:e1:ad:2b: 8e:06:a5:aa:d3:b1:05:3c:42:74:a5:ca:04:af:f2:f9:59:2d: d2:83:4b:78:62:47:7b:73:5d:3e:59:6f:c2:54:3c:63:51:78: 12:ae:14:d9:b7:2f:4f:7c:ab:31:55:77:29:6b:f4:73:79:e1: 52:f7:42:84:af:10:99:91:69:6b:c6:d3:4b:bb:bc:23:2a:e5: 69:16:62:50:a4:92:2d:ff:a7:aa:06:e8:c0:cc:26:fb:3f:10: e1:ed:9f:dc:5d:29:75:31:ae:5a:e3:c8:07:e5:65:0c:0d:73: 19:98:74:c9:b7:2b:32:74:7d:21:b0:ca:98:dd:e9:c7:f2:d3: 88:10:05:9c:fa:07:14:c5:13:ec:cf:32:fa:b5:3e:23:d9:64: ba:93:46:7c:97:f4:2b:aa:84:f2:3b:e4:94:68:ac:c5:3f:ca: bc:f4:b5:5a:72:fd:63:39:20:f4:2d:0b:e4:21:aa:e5:db:d3: 94:97:0c:9d:56:84:c1:ec:28:99:f2:0d:96:21:85:8e:3e:8e: 7b:32:0a:b9:e7:60:b4:68:2c:76:e3:26:0a:54:98:d9:53:7a: 14:87:cc:ff -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjQwOTAyMDcxMzM3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ1NjVhMS05ZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4H+RCBAh42/KQjuWMAFdk0HYVkXcCqiKjMncJcB0lnfZbM0LE83uyK20v21 o5LgpXSTczV2TsIrctIrvjjMf/JbD1UmgLVHXK57p9iUl3QgCApOMR0KsFHlHk6T kQVnYuFLZVvdkBVN+8/abd3kBaP4ZaEDtwBmJxZE560MEEtR8cbUHIveJOkaK5jO FQi3D6FCA8Efac8yyRb/vRQU3kDyO2cQbfZJYmsXbLRC7tSkO95u7YncfhABJgaO 6Zm/F0uOeczpGMyIhmw40XsTFA1nYSQk8Mz3A/p74FKH+3vUv44+gyOrhndVq6yi N8zPhyrPmIL90ccmb8yYkjPXVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNwQeXnV 9TS60ZRy8QVWA4kPSwg2MB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvREY0NTAwQzI2 OEZBMTFFRkIyQ0I2RTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnKLUwDQYJKoZIhvcNAQELBQADggEBAFQ61GNUwtgux//0 HpiYRap2/QtmVV+8GVPJc1/IJI2Gg+GtK44GparTsQU8QnSlygSv8vlZLdKDS3hi R3tzXT5Zb8JUPGNReBKuFNm3L098qzFVdylr9HN54VL3QoSvEJmRaWvG00u7vCMq 5WkWYlCkki3/p6oG6MDMJvs/EOHtn9xdKXUxrlrjyAflZQwNcxmYdMm3KzJ0fSGw ypjd6cfy04gQBZz6BxTFE+zPMvq1PiPZZLqTRnyX9CuqhPI75JRorMU/yrz0tVpy /WM5IPQtC+QhquXb05SXDJ1WhMHsKJnyDZYhhY4+jnsyCrnnYLRoLHbjJgpUmNlT ehSHzP8= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:31 2024 by rpki-client on console-fra.rpki-client.org