$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/3EAA12E2396811ED8AF52966C4F9AE02.roa File: 3EAA12E2396811ED8AF52966C4F9AE02.roa (raw, json) Hash identifier: A4Vjdj02sAdMTWXmHWvjF6Tlm0O4U6o+nFtk8u+txVM= Subject key identifier: AA:17:9A:9C:5D:45:63:3A:1C:82:F6:A3:AC:AF:BA:B5:FE:3E:90:AC Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 01BE Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/3EAA12E2396811ED8AF52966C4F9AE02.roa Signing time: Wed 09 Oct 2024 02:16:25 +0000 ROA not before: Wed 09 Oct 2024 02:16:25 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150318 IP address blocks: 103.1.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Oct 9 02:16:25 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6705e779-7bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fb:d5:82:cf:d8:2d:6d:d0:1e:be:18:ea:77: 73:e5:f6:9d:f8:fc:e3:d1:ed:7c:33:56:78:e7:b5: 16:22:5a:b3:34:93:6c:02:c5:45:6b:dd:b5:b7:4b: 96:aa:bd:b7:19:5f:2b:89:da:b7:1d:d6:31:f1:5c: 79:ff:6b:b9:ed:ed:5b:54:59:2b:1d:57:93:4f:b3: 4e:6c:f2:62:37:73:45:72:5a:6a:68:4d:7c:63:8e: fc:ef:07:db:c5:51:e5:b0:89:6a:e1:8a:ed:51:15: f1:fb:c3:3e:1b:15:5c:cd:14:60:d5:ba:e3:56:b2: b2:57:e7:b0:b5:8e:88:b0:2b:aa:18:4c:41:61:d3: 81:03:a9:57:53:56:55:fc:fb:cd:34:e0:2a:83:d6: 40:7e:86:01:61:31:91:7c:76:aa:ee:85:62:d2:06: 67:af:6f:61:fa:dc:47:a0:82:5a:6d:ea:ae:e2:d7: 14:5f:02:d2:03:3c:58:72:9a:6b:1a:21:0f:fb:9a: 65:d8:fa:4e:b8:8d:a1:f6:9a:4c:5f:13:d9:67:7c: d5:0a:bb:7a:99:c9:60:87:be:8c:51:51:93:9c:ba: f4:95:f9:49:9d:c5:c1:cc:59:af:19:98:25:68:68: 60:27:4c:ee:61:df:cb:50:9b:bb:ed:da:91:70:6f: 05:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:17:9A:9C:5D:45:63:3A:1C:82:F6:A3:AC:AF:BA:B5:FE:3E:90:AC X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/3EAA12E2396811ED8AF52966C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.1.159.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:f3:e0:d1:d2:41:18:42:67:0f:f8:b6:85:a8:43:af:48:b1: 61:98:dd:00:f7:a9:3d:8b:a7:c7:92:c2:9d:5e:bb:dc:cd:61: d7:63:0d:05:c1:30:20:46:20:d9:d4:45:f7:2f:e4:d4:90:4f: e5:54:22:79:43:9e:a2:07:45:f6:ed:66:cd:6d:55:32:d6:c1: e9:4a:8b:75:f5:0e:bb:81:4b:15:ee:2f:52:06:fc:55:8d:fb: 7b:9d:5c:d7:44:3a:9d:5d:ef:99:44:50:13:3a:4d:e1:8b:aa: 0f:9e:8d:9a:e8:03:07:91:d6:3d:df:e3:7c:0c:91:22:43:bb: 0c:70:da:3d:0a:59:20:75:5a:4c:aa:ef:f8:fe:7f:59:71:59: 7e:73:78:b2:3e:ef:64:98:33:33:32:00:f5:1e:d9:68:dc:a3: ee:32:e7:92:ee:2b:ee:87:2a:c4:1b:8b:76:e3:53:d2:2c:80: 62:8a:0d:d4:5a:ab:66:5f:27:58:7b:ff:ae:af:b4:44:89:fa: 47:1e:10:17:72:1f:f5:4c:1d:e4:e7:1c:73:2c:a0:d5:8f:8b: 21:4e:8d:bd:d4:12:ad:2a:c9:15:6a:bd:9b:32:95:78:24:2c: 67:8c:26:0e:a5:90:2a:c4:08:9f:72:a6:40:cf:55:23:42:8a: de:3e:70:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjQxMDA5MDIxNjI1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA1ZTc3OS03YmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PvVgs/YLW3QHr4Y6ndz5fad+Pzj0e18M1Z457UWIlqzNJNsAsVFa921t0uW qr23GV8ridq3HdYx8Vx5/2u57e1bVFkrHVeTT7NObPJiN3NFclpqaE18Y4787wfb xVHlsIlq4YrtURXx+8M+GxVczRRg1brjVrKyV+ewtY6IsCuqGExBYdOBA6lXU1ZV /PvNNOAqg9ZAfoYBYTGRfHaq7oVi0gZnr29h+txHoIJabequ4tcUXwLSAzxYcppr GiEP+5pl2PpOuI2h9ppMXxPZZ3zVCrt6mclgh76MUVGTnLr0lflJncXBzFmvGZgl aGhgJ0zuYd/LUJu77dqRcG8F2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFKoXmpxd RWM6HIL2o6yvurX+PpCsMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA4N0YvRjczMTk2QUEzM0UxMTFFREIzQTBFQTU4QzRGOUFFMDIvM0VBQTEyRTIz OTY4MTFFRDhBRjUyOTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnAZ8wDQYJKoZIhvcNAQELBQADggEBAHzz4NHSQRhCZw/4 toWoQ69IsWGY3QD3qT2Lp8eSwp1eu9zNYddjDQXBMCBGINnURfcv5NSQT+VUInlD nqIHRfbtZs1tVTLWwelKi3X1DruBSxXuL1IG/FWN+3udXNdEOp1d75lEUBM6TeGL qg+ejZroAweR1j3f43wMkSJDuwxw2j0KWSB1Wkyq7/j+f1lxWX5zeLI+72SYMzMy APUe2Wjco+4y55LuK+6HKsQbi3bjU9IsgGKKDdRaq2ZfJ1h7/66vtESJ+kceEBdy H/VMHeTnHHMsoNWPiyFOjb3UEq0qyRVqvZsylXgkLGeMJg6lkCrECJ9ypkDPVSNC it4+cM8= -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:36 2024 by rpki-client on console-ams.rpki-client.org