$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/413CAD964D6011EE80905941C4F9AE02.roa File: 413CAD964D6011EE80905941C4F9AE02.roa (raw, json) Hash identifier: 47tmswHBTa3/FL2MnwZbuEJdMTNY6qleScdQXHL84Wk= Subject key identifier: 33:DD:9E:3A:E9:35:C2:05:8B:24:D2:F7:81:AB:EB:FF:98:28:04:19 Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Certificate serial: 41 Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/413CAD964D6011EE80905941C4F9AE02.roa Signing time: Mon 01 Jan 2024 06:47:49 +0000 ROA not before: Mon 01 Jan 2024 06:47:49 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 205676 IP address blocks: 103.176.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Validity Not Before: Jan 1 06:47:49 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65926015-8758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bd:6b:c7:d5:0d:8f:03:6c:c8:7e:0c:1f:ba: 64:2c:30:54:72:91:a1:2f:bd:28:96:07:97:11:f7: a4:8b:08:18:6e:9e:c9:2d:aa:0f:ed:a0:61:fa:a7: ca:85:5f:8a:44:d2:9c:e9:17:0e:8a:4e:8a:b2:ce: cc:a3:97:d0:72:ee:ac:13:ef:a3:f8:86:d0:e4:0f: 0a:b4:5e:ef:0b:e2:88:f7:87:dd:71:34:55:04:79: 2a:46:70:fe:0c:7f:81:71:41:ff:09:20:57:f0:18: a9:f9:ee:8d:b2:f8:9e:60:1b:9c:b4:5f:42:23:d0: 1f:0a:b1:65:ab:75:90:ba:46:0b:b1:9b:b9:a5:07: 8e:12:bf:a8:92:ed:85:9e:a4:98:23:4d:e3:46:e4: 72:c0:89:08:0c:f2:b3:ba:08:2f:3c:5d:4c:eb:74: 4d:7c:9f:a8:fd:55:29:5f:8d:ce:62:74:a4:47:94: a8:c1:6d:bb:b8:03:a5:b4:c4:95:e5:56:69:e2:c3: 65:8c:1b:3d:93:34:01:ab:9c:44:f7:57:6a:d2:5e: e0:01:d0:1f:49:98:bf:ac:a0:0e:66:e5:42:19:ac: 69:a8:4a:dc:89:79:93:97:5a:ac:cd:16:84:33:95: f1:e3:96:b3:44:23:ca:cd:61:5c:9c:c2:6f:b3:27: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DD:9E:3A:E9:35:C2:05:8B:24:D2:F7:81:AB:EB:FF:98:28:04:19 X509v3 Authority Key Identifier: keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/413CAD964D6011EE80905941C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.152.0/24 Signature Algorithm: sha256WithRSAEncryption 22:bd:29:aa:a8:77:cb:c8:5c:ed:4a:43:d0:12:7c:d8:28:0d: 58:0c:c6:2a:55:64:72:6c:09:52:fe:a6:ce:b6:aa:ba:95:1a: d0:55:54:46:12:fd:95:dd:23:f4:50:81:76:62:d6:ba:7c:79: a5:09:1d:a5:fb:30:41:7c:41:b6:9d:bd:9a:b7:db:2b:63:7a: d9:b3:77:f9:ca:6f:e2:a5:b8:b9:ba:8b:29:31:04:2f:fa:bb: 37:3e:ce:e8:3e:2e:a2:6c:dd:92:6c:ca:b2:02:24:1a:3e:23: ea:40:2e:ec:99:23:76:2d:cb:16:39:4f:ae:8f:9d:34:ed:de: 43:49:2a:14:1e:b5:57:6f:39:f3:c9:7f:ca:30:4b:af:43:b0: c1:5b:d7:c0:c0:be:58:d6:23:9f:f2:0d:35:b6:f2:e6:0b:77: b4:f6:0f:e2:2e:7b:39:59:a9:df:aa:89:e3:9b:7b:29:cf:d1: ad:cc:e1:b6:9e:9f:09:6f:4e:3f:d8:98:4d:5b:16:63:9e:21: cb:f3:99:98:07:71:dd:68:40:ff:73:94:71:2d:d8:02:21:96: 06:d9:c2:09:b9:01:c1:c6:5e:26:bb:d1:80:d5:c1:8a:3f:04: 12:68:ae:d5:40:a3:5f:3b:f2:fd:3b:de:ae:45:be:24:a2:f4: d4:46:58:99 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzdBQzExMC8GA1UEBRMoMjNERDFFNkI4MzQ0OTYzQjA0NTBCOTI5MzM3NjlENDRB NzMyNTE2QjAeFw0yNDAxMDEwNjQ3NDlaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1OTI2MDE1LTg3NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgvWvH1Q2PA2zIfgwfumQsMFRykaEvvSiWB5cR96SLCBhunsktqg/toGH6p8qF X4pE0pzpFw6KToqyzsyjl9By7qwT76P4htDkDwq0Xu8L4oj3h91xNFUEeSpGcP4M f4FxQf8JIFfwGKn57o2y+J5gG5y0X0Ij0B8KsWWrdZC6Rguxm7mlB44Sv6iS7YWe pJgjTeNG5HLAiQgM8rO6CC88XUzrdE18n6j9VSlfjc5idKRHlKjBbbu4A6W0xJXl Vmniw2WMGz2TNAGrnET3V2rSXuAB0B9JmL+soA5m5UIZrGmoStyJeZOXWqzNFoQz lfHjlrNEI8rNYVycwm+zJ3B3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUM92eOuk1 wgWLJNL3gavr/5goBBkwHwYDVR0jBBgwFoAUI90ea4NEljsEULkpM3adRKcyUWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzN0FDLzAyNTZFQjk2NEQ2 MDExRUU4Mzg1RjA0MEM0RjlBRTAyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTkwZWE0TkVsanNFVUxrcE0zYWRSS2N5VVdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi80MTNDQUQ5NjRE NjAxMUVFODA5MDU5NDFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGewmDANBgkqhkiG9w0BAQsFAAOCAQEAIr0pqqh3y8hc7UpD 0BJ82CgNWAzGKlVkcmwJUv6mzraqupUa0FVURhL9ld0j9FCBdmLWunx5pQkdpfsw QXxBtp29mrfbK2N62bN3+cpv4qW4ubqLKTEEL/q7Nz7O6D4uomzdkmzKsgIkGj4j 6kAu7Jkjdi3LFjlPro+dNO3eQ0kqFB61V28588l/yjBLr0OwwVvXwMC+WNYjn/IN Nbby5gt3tPYP4i57OVmp36qJ45t7Kc/Rrczhtp6fCW9OP9iYTVsWY54hy/OZmAdx 3WhA/3OUcS3YAiGWBtnCCbkBwcZeJrvRgNXBij8EEmiu1UCjXzvy/TverkW+JKL0 1EZYmQ== -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:55 2024 by rpki-client on console-fra.rpki-client.org