$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4D4EE370408A11EE91A09746C4F9AE02.roa File: 4D4EE370408A11EE91A09746C4F9AE02.roa (raw, json) Hash identifier: UTYjHSz5SE59HBE6AfuL7f7eaZUIfrBMXMIusaSKFx0= Subject key identifier: C6:0C:6A:F7:7B:AF:13:2B:45:A5:E9:AD:74:F3:0D:56:6A:F2:80:AB Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 350A Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4D4EE370408A11EE91A09746C4F9AE02.roa Signing time: Wed 08 Nov 2023 00:18:19 +0000 ROA not before: Wed 08 Nov 2023 00:18:19 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 14618 IP address blocks: 103.104.86.0/24 maxlen: 24 144.48.40.0/22 maxlen: 24 211.44.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 14:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13578 (0x350a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Nov 8 00:18:19 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=654ad3cb-197b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:fb:f8:fa:54:32:ea:18:5c:47:4e:40:42: 18:5b:7b:9d:94:ba:20:eb:9a:5b:1e:f1:c9:37:23: 9d:2f:5a:53:d9:40:f4:46:8e:84:38:1e:69:c6:c9: c0:6a:78:50:13:e4:76:88:32:b6:0f:b9:2a:d8:ae: 0e:31:9b:a1:a3:7b:e1:b0:b7:19:a4:f2:60:a3:6a: a5:fa:74:a1:60:f6:63:bb:51:3a:6c:9b:03:70:61: f8:d5:d4:fc:60:df:1e:52:27:54:e2:12:31:a3:d8: e2:b7:72:c1:06:74:26:74:8d:82:75:f9:40:75:6a: 44:84:99:6a:90:c5:50:79:ee:4a:24:05:fe:67:9e: 32:eb:cb:5e:97:ec:03:55:ab:89:75:fa:98:a1:23: e7:9a:3c:c0:be:db:b7:70:a9:a0:26:8a:b7:06:e5: 7e:50:2d:32:59:bc:1a:58:01:36:21:ac:74:06:44: 0b:92:3e:c7:53:a2:f9:19:eb:50:d3:85:d1:a4:90: 71:0f:aa:93:cc:6e:2e:eb:90:94:5b:95:26:2a:32: 3d:1e:53:71:1a:44:b1:65:f3:b6:d8:95:91:c4:ca: 8b:4f:fd:4b:a6:38:c9:6f:cd:0d:28:3c:39:d6:3a: 15:99:ab:af:c8:78:2d:d2:bb:b2:7a:ce:8d:2d:20: 02:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0C:6A:F7:7B:AF:13:2B:45:A5:E9:AD:74:F3:0D:56:6A:F2:80:AB X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4D4EE370408A11EE91A09746C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.86.0/24 144.48.40.0/22 211.44.103.0/24 Signature Algorithm: sha256WithRSAEncryption 43:ab:f7:8c:5f:63:b9:fe:c2:97:5a:3b:94:d8:88:82:c3:a0: 20:7a:17:8a:42:79:82:86:d5:24:7c:58:5c:78:67:de:6a:bf: 87:40:3b:75:5b:08:f6:20:0d:5d:d8:69:48:a3:4e:e7:f4:69: 9c:92:f0:2a:d5:f2:d0:d6:84:68:a8:3b:9d:be:04:38:41:c9: f7:9a:2d:50:19:35:85:58:bf:7e:d4:2f:ef:e1:f2:a9:7f:c5: 40:f3:84:07:0d:32:17:3b:e1:c6:a4:14:6d:17:27:a7:09:14: c7:cc:16:b5:4d:db:c3:73:66:4a:1e:85:fd:fc:11:94:df:93: db:86:ba:5b:20:b5:19:1a:26:d7:4b:8e:c8:05:08:81:81:2a: 95:d7:b7:c6:f3:7c:cd:25:0a:96:6c:1c:2c:41:c3:f2:b3:ac: 37:55:bf:9e:af:65:9c:1d:1d:a7:90:39:22:d9:ca:a2:c3:5a: 5b:bf:f7:2e:ce:8e:98:87:52:98:b4:49:98:62:6f:38:5b:0b: 18:ae:d2:b5:10:11:f7:0e:af:bf:9d:c3:7e:57:15:f1:36:7e: 42:6b:fc:8a:e1:46:4d:3d:79:4c:06:f7:67:c0:0f:04:89:90: ac:d8:65:ae:d2:d6:ca:23:c1:59:5c:30:50:59:7d:dc:8a:e1: 32:34:28:e2 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjMxMTA4MDAxODE5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTRhZDNjYi0xOTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLn7+PpUMuoYXEdOQEIYW3udlLog65pbHvHJNyOdL1pT2UD0Ro6EOB5pxsnA anhQE+R2iDK2D7kq2K4OMZuho3vhsLcZpPJgo2ql+nShYPZju1E6bJsDcGH41dT8 YN8eUidU4hIxo9jit3LBBnQmdI2CdflAdWpEhJlqkMVQee5KJAX+Z54y68tel+wD VauJdfqYoSPnmjzAvtu3cKmgJoq3BuV+UC0yWbwaWAE2Iax0BkQLkj7HU6L5GetQ 04XRpJBxD6qTzG4u65CUW5UmKjI9HlNxGkSxZfO22JWRxMqLT/1LpjjJb80NKDw5 1joVmauvyHgt0ruyes6NLSACwQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMYMavd7 rxMrRaXprXTzDVZq8oCrMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNEQ0RUUzNzA0 MDhBMTFFRTkxQTA5NzQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnaFYDBAKQMCgDBADTLGcwDQYJKoZIhvcNAQELBQADggEB AEOr94xfY7n+wpdaO5TYiILDoCB6F4pCeYKG1SR8WFx4Z95qv4dAO3VbCPYgDV3Y aUijTuf0aZyS8CrV8tDWhGioO52+BDhByfeaLVAZNYVYv37UL+/h8ql/xUDzhAcN Mhc74cakFG0XJ6cJFMfMFrVN28NzZkoehf38EZTfk9uGulsgtRkaJtdLjsgFCIGB KpXXt8bzfM0lCpZsHCxBw/KzrDdVv56vZZwdHaeQOSLZyqLDWlu/9y7OjpiHUpi0 SZhibzhbCxiu0rUQEfcOr7+dw35XFfE2fkJr/IrhRk09eUwG92fADwSJkKzYZa7S 1sojwVlcMFBZfdyK4TI0KOI= -----END CERTIFICATE-----Generated at Tue Apr 30 15:52:30 2024 by rpki-client on console-fra.rpki-client.org