$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa File: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (raw, json) Hash identifier: YOnwHdL+VM4WZZwYTJ66mt2t+UeBiT+rfThROtawpHU= Subject key identifier: D3:48:04:F9:89:54:1B:4F:45:DB:BD:E3:AB:FB:A0:F6:75:4D:5E:55 Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1978 Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa Signing time: Tue 02 Jul 2024 17:03:56 +0000 ROA not before: Tue 02 Jul 2024 17:03:56 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 133450 IP address blocks: 103.94.128.0/22 maxlen: 22 103.94.128.0/23 maxlen: 23 103.94.128.0/24 maxlen: 24 103.94.129.0/24 maxlen: 24 103.94.130.0/23 maxlen: 23 103.94.130.0/24 maxlen: 24 103.94.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6520 (0x1978) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: Jul 2 17:03:56 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=668432fb-0866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:24:b9:fa:09:83:f5:8a:7d:b7:50:e0:6d: c4:b2:31:f1:8e:43:97:c8:27:14:d9:9f:22:eb:93: ac:b5:cd:be:03:ed:2d:9d:fa:12:3f:b9:f9:34:d5: 3c:15:dd:98:27:72:3b:90:1b:fb:c5:65:14:99:d9: 2c:c1:71:43:3c:0d:b2:0c:6c:e7:44:96:a5:46:65: b6:34:9b:7e:65:17:94:28:bf:74:76:eb:34:f8:46: 1a:4e:01:48:cf:93:03:49:ed:6a:14:77:7b:f8:74: 16:31:48:fc:ab:3b:1e:87:91:79:7c:a1:36:c2:e7: 1c:29:39:ce:53:b3:b5:11:c4:20:bf:3e:33:44:eb: 2c:fa:19:2b:db:7e:0c:12:0c:78:23:ae:d7:48:bb: f7:1a:97:e0:71:43:7e:2f:50:08:7c:d6:8e:99:9d: ac:eb:9d:18:e3:ff:e1:92:8f:c4:4e:2e:13:69:4e: 41:ff:e1:92:4a:84:3d:86:51:26:ce:a9:d4:06:0f: 71:b3:56:f7:7a:e9:09:d9:1e:a6:1e:2f:02:9c:e0: 49:a4:a1:db:fd:32:9c:3e:e0:bf:ac:c5:4d:0a:fb: a1:2b:2a:1d:1f:d0:b6:ef:95:f5:7f:2f:39:b5:ab: 22:9e:b5:bf:60:e4:71:1e:d6:12:76:40:72:13:c7: 1b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:48:04:F9:89:54:1B:4F:45:DB:BD:E3:AB:FB:A0:F6:75:4D:5E:55 X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.128.0/22 Signature Algorithm: sha256WithRSAEncryption 93:af:f6:62:17:f8:8e:99:d7:c2:cc:80:19:94:39:ff:12:45: 21:3a:0c:ce:75:8d:81:cf:3a:ee:95:d1:5d:a5:54:6d:20:8a: fb:06:9c:58:33:21:39:77:21:98:df:01:70:63:e2:0a:c6:ef: 8b:eb:de:b2:86:d5:c4:7e:e7:02:d0:d6:f9:74:00:fa:bf:de: b3:ad:3a:8c:17:38:10:96:93:5e:6a:d2:3d:6e:47:6c:b7:9d: c9:ff:95:b6:8e:0a:32:d4:b0:07:ce:1e:b2:35:b1:ae:21:1f: 68:19:89:4e:39:5b:b7:9f:1d:2d:e0:9f:8f:2f:a9:0c:40:cf: 6e:00:fd:83:48:01:18:bf:26:1d:8b:a4:02:67:0e:ad:b7:38: 0b:8b:8d:fd:a6:a0:0f:7e:bd:8d:fa:f2:f7:65:27:c5:d2:e5: ca:e8:44:da:70:57:41:9e:2a:46:b4:53:1c:b9:7e:a7:5f:7f: ce:c9:ae:76:c4:8f:f3:ab:2c:10:3f:d5:c3:87:d1:84:ab:5c: 6c:18:0a:f1:fd:fd:f0:e0:5b:23:f3:61:50:cc:b1:d4:c8:fc: f9:33:c2:fd:a1:e6:31:79:76:c6:5c:18:c5:49:7a:26:38:f6: 07:10:5c:94:bc:96:0e:0a:21:b5:f2:4a:a3:0a:3c:09:b2:14: 55:f4:86:6d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjQwNzAyMTcwMzU2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0MzJmYi0wODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrMkufoJg/WKfbdQ4G3EsjHxjkOXyCcU2Z8i65Ostc2+A+0tnfoSP7n5NNU8 Fd2YJ3I7kBv7xWUUmdkswXFDPA2yDGznRJalRmW2NJt+ZReUKL90dus0+EYaTgFI z5MDSe1qFHd7+HQWMUj8qzseh5F5fKE2wuccKTnOU7O1EcQgvz4zROss+hkr234M Egx4I67XSLv3GpfgcUN+L1AIfNaOmZ2s650Y4//hko/ETi4TaU5B/+GSSoQ9hlEm zqnUBg9xs1b3eukJ2R6mHi8CnOBJpKHb/TKcPuC/rMVNCvuhKyodH9C275X1fy85 tasinrW/YORxHtYSdkByE8cb7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFNNIBPmJ VBtPRdu946v7oPZ1TV5VMB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA1QUIvMDUyNDNBQzY0QzI4MTFFNzk2OEFEMjExQzRGOUFFMDIvNEVGNDgzQzY0 QzI5MTFFNzhCRjFCRDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnXoAwDQYJKoZIhvcNAQELBQADggEBAJOv9mIX+I6Z18LM gBmUOf8SRSE6DM51jYHPOu6V0V2lVG0givsGnFgzITl3IZjfAXBj4grG74vr3rKG 1cR+5wLQ1vl0APq/3rOtOowXOBCWk15q0j1uR2y3ncn/lbaOCjLUsAfOHrI1sa4h H2gZiU45W7efHS3gn48vqQxAz24A/YNIARi/Jh2LpAJnDq23OAuLjf2moA9+vY36 8vdlJ8XS5croRNpwV0GeKka0Uxy5fqdff87JrnbEj/OrLBA/1cOH0YSrXGwYCvH9 /fDgWyPzYVDMsdTI/Pkzwv2h5jF5dsZcGMVJeiY49gcQXJS8lg4KIbXySqMKPAmy FFX0hm0= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:02 2024 by rpki-client on console-ams.rpki-client.org