$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa File: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (raw, json) Hash identifier: hbGM0H2MCBcXGdiy+u5XBSECyzJz0AJtwU9Q9LxYAHY= Subject key identifier: 79:2C:85:F4:B3:66:CE:2C:10:34:99:1D:FF:FB:A3:7B:0B:BA:91:C2 Certificate issuer: /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Certificate serial: 078C Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa Signing time: Thu 26 Sep 2024 21:20:16 +0000 ROA not before: Thu 26 Sep 2024 21:20:16 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 140993 IP address blocks: 103.154.156.0/23 maxlen: 23 103.154.156.0/24 maxlen: 24 103.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1932 (0x78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Validity Not Before: Sep 26 21:20:16 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f5d010-36b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:6e:ea:d4:7b:4b:ca:37:60:25:75:e0:39: 13:0f:53:5e:5b:0b:b6:19:2f:be:b0:7b:5c:06:49: 21:c6:83:83:0b:e2:de:0c:02:9e:5f:c2:55:08:9e: 67:ad:25:f9:65:95:ef:da:e2:1e:6e:a6:fc:bb:2c: a6:10:ce:db:b8:f0:cb:12:4f:9b:4f:e8:07:ad:f4: 45:6d:32:ea:b4:8b:5c:4e:01:15:43:2d:e6:1e:b3: 4c:8a:a0:03:9b:20:14:aa:c5:b0:58:a6:1c:16:d5: ca:5f:af:8b:46:9d:fc:e3:6a:c2:d7:14:fa:54:d2: 77:cc:c7:de:3c:40:14:75:94:60:1b:81:ec:b6:48: 5e:30:26:93:b9:ac:ba:30:ea:b2:50:b8:80:df:9b: 6b:65:0a:cc:a9:ae:0b:15:4c:06:3b:f0:3d:e6:a3: 5f:73:7a:2c:44:a9:a2:1f:6f:0c:39:e5:3b:ea:57: a0:64:c0:33:bb:4f:1e:53:23:a2:26:c7:dd:00:6c: 15:ee:b3:27:6e:07:6c:65:9c:0b:02:5c:fd:bb:fc: 29:fa:bd:f4:61:5f:12:7b:08:10:91:55:86:2b:21: 58:b0:60:fa:71:d1:a0:d1:4d:ed:ea:54:eb:21:ad: 25:fe:10:da:3c:69:70:ff:e1:f8:48:88:39:57:ec: 0d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2C:85:F4:B3:66:CE:2C:10:34:99:1D:FF:FB:A3:7B:0B:BA:91:C2 X509v3 Authority Key Identifier: keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.156.0/23 Signature Algorithm: sha256WithRSAEncryption b6:e1:ef:da:dd:f9:08:62:a5:4c:76:90:4e:02:e7:12:23:d3: b4:47:d0:55:b8:fc:09:db:de:12:73:6e:7f:a9:b5:36:2c:72: b6:24:3e:fd:27:ba:bb:8d:15:b5:5d:76:c9:41:79:ed:49:ef: 0a:53:3b:77:14:b0:22:7e:4d:03:03:5a:62:f3:5a:35:8b:e0: 07:d6:c1:ac:73:86:a7:1d:6b:6b:4b:33:ac:8e:46:b3:f4:5b: c4:93:35:a0:b1:18:2f:e7:8c:a2:b7:c1:f6:51:ee:06:80:7c: d2:3e:89:34:ca:e7:f7:f5:9a:ca:ad:61:ee:a2:e3:aa:f0:c5: 5c:83:dc:b8:03:d7:89:47:ed:1b:48:cf:83:46:0e:bc:58:81: 12:cc:08:22:80:47:d5:cb:06:aa:3c:21:d3:37:28:f6:5f:39: 26:2a:6a:4d:8e:23:f6:e4:09:3d:93:b7:c8:43:ed:ba:88:b6: 3e:54:79:16:1f:25:3e:0c:f7:2b:01:91:53:65:42:8d:6e:1d: e6:62:42:05:7f:6e:8f:f3:d5:71:86:f6:a9:65:24:67:bf:3d: 5e:a8:2c:a0:d5:32:4c:a0:07:84:91:28:d8:64:01:55:d9:44: 35:9c:95:83:f8:78:ff:64:d3:3c:81:2d:c2:b4:bb:7b:5e:82: ec:ea:30:6d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMwRDAxMTAvBgNVBAUTKEFERDdFOUZCOTU2QkJFRThGMDEyRURERTk1NDI0OEQ5 QjVENjU4QzYwHhcNMjQwOTI2MjEyMDE2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY1ZDAxMC0zNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqc9u6tR7S8o3YCV14DkTD1NeWwu2GS++sHtcBkkhxoODC+LeDAKeX8JVCJ5n rSX5ZZXv2uIebqb8uyymEM7buPDLEk+bT+gHrfRFbTLqtItcTgEVQy3mHrNMiqAD myAUqsWwWKYcFtXKX6+LRp3842rC1xT6VNJ3zMfePEAUdZRgG4HstkheMCaTuay6 MOqyULiA35trZQrMqa4LFUwGO/A95qNfc3osRKmiH28MOeU76legZMAzu08eUyOi JsfdAGwV7rMnbgdsZZwLAlz9u/wp+r30YV8SewgQkVWGKyFYsGD6cdGg0U3t6lTr Ia0l/hDaPGlw/+H4SIg5V+wNkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHkshfSz Zs4sEDSZHf/7o3sLupHCMB8GA1UdIwQYMBaAFK3X6fuVa77o8BLt3pVCSNm11ljG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzBEMC85ODc5OUM2Q0Uy MDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1andFdTNlbFVKSTJiWFdX TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkZnAtNVZydnVqd0V1M2VsVUpJMmJYV1dNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzMwRDAvOTg3OTlDNkNFMjA3MTFFQUI4QTBDQjYwQzRGOUFFMDIvQTQ3MTFDNEEy M0JBMTFFRkE4QkFDRjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmpwwDQYJKoZIhvcNAQELBQADggEBALbh79rd+QhipUx2 kE4C5xIj07RH0FW4/Anb3hJzbn+ptTYscrYkPv0nuruNFbVddslBee1J7wpTO3cU sCJ+TQMDWmLzWjWL4AfWwaxzhqcda2tLM6yORrP0W8STNaCxGC/njKK3wfZR7gaA fNI+iTTK5/f1msqtYe6i46rwxVyD3LgD14lH7RtIz4NGDrxYgRLMCCKAR9XLBqo8 IdM3KPZfOSYqak2OI/bkCT2Tt8hD7bqItj5UeRYfJT4M9ysBkVNlQo1uHeZiQgV/ bo/z1XGG9qllJGe/PV6oLKDVMkygB4SRKNhkAVXZRDWclYP4eP9k0zyBLcK0u3te guzqMG0= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:23 2024 by rpki-client on console-ams.rpki-client.org