$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/AC7FAD34756D11EF8E0AC450C4F9AE02.roa File: AC7FAD34756D11EF8E0AC450C4F9AE02.roa (raw, json) Hash identifier: Zm4qbPETvWslp8RznHoUL+bcAgC3x8SPRlNir3l6sYs= Subject key identifier: E5:0C:D8:58:B8:C6:75:D1:56:57:99:44:EE:5E:FE:7A:D0:A3:50:B7 Certificate issuer: /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Certificate serial: 0480 Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/AC7FAD34756D11EF8E0AC450C4F9AE02.roa Signing time: Thu 19 Sep 2024 00:03:48 +0000 ROA not before: Thu 19 Sep 2024 00:03:48 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 4788 IP address blocks: 103.168.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1152 (0x480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Validity Not Before: Sep 19 00:03:48 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66eb6a64-ec3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:14:3b:19:83:15:b8:ad:c3:5c:c6:bd:d5: 4f:de:99:07:c0:bb:e1:e7:ed:dd:c8:e8:8f:2b:b3: 62:12:27:73:29:67:52:b1:d5:9a:66:4d:56:53:e6: 43:fe:fb:b2:e1:2d:39:b5:5c:4f:b3:7d:ab:ad:36: c1:48:bc:4b:49:e3:cc:40:47:7f:8b:f5:a9:fa:16: a4:1e:f4:32:c4:4f:0f:56:24:e4:06:d4:40:42:8e: ba:63:56:1c:5e:e9:9a:b0:83:ba:e2:cd:06:0a:18: 88:38:77:df:a4:85:81:03:37:1d:a5:5a:ab:9e:35: 81:c4:c0:bd:91:6b:a4:f0:0b:77:bf:0d:fe:1f:4a: b4:f1:ee:f0:7f:dd:5b:d3:09:61:8e:ca:d4:f1:08: 7c:1a:88:c1:68:dd:9e:35:b5:0c:7a:ee:bd:9f:7e: 61:89:2a:3a:43:f3:24:f3:91:a0:09:36:e6:bd:ca: 49:dd:02:8c:fa:20:03:4a:05:58:3a:d7:35:06:8b: 3f:4d:4d:4c:79:5d:e7:1a:c8:a0:c2:51:ad:5f:76: 4c:a7:5a:59:03:24:69:e4:4b:ea:e9:6c:f1:79:f5: b9:7b:f5:71:01:83:bc:b5:68:86:fe:2e:9e:d7:17: 51:0d:a2:8d:ec:63:6f:fd:bf:8b:ab:dd:63:e6:99: 0b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0C:D8:58:B8:C6:75:D1:56:57:99:44:EE:5E:FE:7A:D0:A3:50:B7 X509v3 Authority Key Identifier: keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/AC7FAD34756D11EF8E0AC450C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.104.0/24 Signature Algorithm: sha256WithRSAEncryption a8:d7:8d:5e:b2:25:f9:f7:c1:87:a8:86:42:f8:dd:f2:92:4f: c4:4d:2a:f5:b9:d2:16:da:00:3c:2b:90:55:dd:9b:31:4c:9c: 46:fd:17:03:07:0e:38:ab:9f:12:ae:e9:47:26:a6:3f:27:1c: 35:e8:43:e7:82:85:ba:08:79:02:fa:48:04:4f:34:3c:00:76: 67:d9:44:2e:6c:0a:a9:54:46:9c:48:9a:62:09:c7:e0:5b:75: 60:6e:8e:14:a7:40:43:29:67:82:dc:7f:ec:60:3e:82:66:03: 31:69:ea:47:3e:08:f8:88:60:da:6d:c3:db:8f:df:75:ff:dc: 0e:c5:72:5b:a3:e6:6d:c1:d8:40:39:e6:91:39:49:f6:63:08: 80:b8:4a:77:de:47:f4:f3:1e:45:59:bd:7d:8c:ff:78:06:5b: 85:48:cf:3d:09:fd:95:f6:ab:74:1d:47:65:a3:d5:48:1c:28: 15:0c:05:2b:8b:85:2a:d7:4e:bf:b6:32:19:e2:9c:e0:80:d5: e8:50:89:9d:c3:21:cd:63:70:21:72:6c:ec:0c:58:56:a7:c4: 39:a6:3c:69:c8:5d:ab:bb:8a:32:cf:b0:14:09:da:ce:46:4e: 17:5c:d4:81:43:a6:cf:70:4e:65:ca:ce:59:9a:5f:96:76:60: c0:7e:b0:77 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5 QTUzOUFDRTEwHhcNMjQwOTE5MDAwMzQ4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmViNmE2NC1lYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAup4UOxmDFbitw1zGvdVP3pkHwLvh5+3dyOiPK7NiEidzKWdSsdWaZk1WU+ZD /vuy4S05tVxPs32rrTbBSLxLSePMQEd/i/Wp+hakHvQyxE8PViTkBtRAQo66Y1Yc XumasIO64s0GChiIOHffpIWBAzcdpVqrnjWBxMC9kWuk8At3vw3+H0q08e7wf91b 0wlhjsrU8Qh8GojBaN2eNbUMeu69n35hiSo6Q/Mk85GgCTbmvcpJ3QKM+iADSgVY Otc1Bos/TU1MeV3nGsigwlGtX3ZMp1pZAyRp5Evq6WzxefW5e/VxAYO8tWiG/i6e 1xdRDaKN7GNv/b+Lq91j5pkLWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOUM2Fi4 xnXRVleZRO5e/nrQo1C3MB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQ5QkUvQjA5QzNDRTIxMTdCMTFFQzgwRTQyMTQzQzRGOUFFMDIvQUM3RkFEMzQ3 NTZEMTFFRjhFMEFDNDUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnqGgwDQYJKoZIhvcNAQELBQADggEBAKjXjV6yJfn3wYeo hkL43fKST8RNKvW50hbaADwrkFXdmzFMnEb9FwMHDjirnxKu6Ucmpj8nHDXoQ+eC hboIeQL6SARPNDwAdmfZRC5sCqlURpxImmIJx+BbdWBujhSnQEMpZ4Lcf+xgPoJm AzFp6kc+CPiIYNptw9uP33X/3A7Fcluj5m3B2EA55pE5SfZjCIC4SnfeR/TzHkVZ vX2M/3gGW4VIzz0J/ZX2q3QdR2Wj1UgcKBUMBSuLhSrXTr+2MhninOCA1ehQiZ3D Ic1jcCFybOwMWFanxDmmPGnIXau7ijLPsBQJ2s5GThdc1IFDps9wTmXKzlmaX5Z2 YMB+sHc= -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:19 2024 by rpki-client on console-fra.rpki-client.org