$ rpki-client -vvf rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/4DD8750E69A611EF84A27584C4F9AE02.roa File: 4DD8750E69A611EF84A27584C4F9AE02.roa (raw, json) Hash identifier: nmm+UaDTVZk1W14gJbVOSNyGWuVq3wHsOrXGhKoBHSk= Subject key identifier: 20:C4:EA:72:16:7D:68:92:DE:AB:8E:1C:42:1A:B4:07:8D:6F:F7:87 Certificate issuer: /CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A Certificate serial: 2A Authority key identifier: 99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/4DD8750E69A611EF84A27584C4F9AE02.roa Signing time: Mon 11 Nov 2024 05:48:50 +0000 ROA not before: Mon 11 Nov 2024 05:48:50 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 147313 IP address blocks: 103.174.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A Validity Not Before: Nov 11 05:48:50 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67319ac2-5f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3e:06:dd:50:80:2b:e7:e1:a4:0f:f6:44:f9: b7:0e:be:1a:68:09:2e:53:ec:16:bb:72:13:0e:de: 75:bd:4f:2c:5c:7b:db:7b:2b:93:52:cf:1c:12:f2: 70:37:99:c8:08:7f:20:66:66:42:2e:dc:d2:cf:e0: ce:91:21:ef:52:1a:2f:7e:ec:12:72:e1:af:c9:3c: 8d:1d:43:04:18:29:c2:3a:ec:5b:26:e2:2c:4d:63: 82:6f:5c:11:6e:2a:e5:a2:b8:1c:44:67:23:fb:45: a4:b6:80:43:6b:fc:c4:76:bd:a3:6c:8d:6d:20:75: 2b:2f:28:61:ce:36:a6:4f:c3:92:a8:2a:f0:21:86: dc:eb:a1:df:f1:65:67:c7:8a:e3:9d:50:df:22:54: 1b:ab:94:5f:56:0e:bb:89:c6:8d:f5:f3:c7:b4:54: 73:ff:4f:74:e0:f1:ca:d9:c4:24:7a:5c:60:ee:8b: 33:84:ef:fa:37:9a:ba:31:62:97:bd:71:07:14:80: e3:75:05:5b:27:0f:c1:75:98:da:f2:26:34:e3:20: 4b:23:18:bc:5c:cf:03:13:b1:60:69:e6:d4:4a:c1: 1c:28:3a:c4:cd:0d:dd:f3:c8:f9:c4:20:98:35:2e: 27:fc:c9:41:ec:2d:02:73:8e:ae:f7:0a:07:f3:78: 30:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C4:EA:72:16:7D:68:92:DE:AB:8E:1C:42:1A:B4:07:8D:6F:F7:87 X509v3 Authority Key Identifier: keyid:99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/4DD8750E69A611EF84A27584C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.204.0/23 Signature Algorithm: sha256WithRSAEncryption 21:3c:52:2f:ed:99:c7:85:6f:52:58:42:4d:e2:cc:80:fd:26: 4e:ae:43:cb:9f:3b:da:53:df:0d:1a:e1:9d:2f:ab:b3:b0:b6: 36:46:fe:80:4e:1d:48:87:01:af:7c:0f:60:dc:1b:8c:16:45: 01:02:63:51:20:c8:4e:29:1c:e6:96:dc:b7:a5:62:8a:54:6d: 2e:b5:9b:ff:9f:8e:27:e5:aa:dc:27:8e:76:f7:58:e2:c5:40: b7:37:f5:bb:1e:b3:04:c6:d9:b3:90:c4:dc:a9:bf:e2:08:3f: 67:9a:ac:9b:6e:d6:95:da:3b:e4:33:b0:4c:2b:3d:84:de:a7: 01:de:94:ef:e7:64:c0:59:2f:66:dc:8d:e9:f3:00:73:a9:34: fd:c0:6f:2e:b9:72:bc:bd:07:bd:58:f1:5a:0d:29:cf:1f:89: ed:5c:1c:12:c9:ac:50:44:1e:8a:59:38:b7:b6:90:21:32:a0: 50:0f:0d:e1:5a:fc:96:56:87:b6:40:c1:e6:99:19:6d:de:ea: 8c:3e:f0:6d:ac:69:53:18:b0:69:e4:2b:a8:94:9a:15:7e:a4: 80:1f:89:54:60:0c:65:48:84:ac:48:37:84:d7:6f:5f:2e:09: 6d:65:5e:37:53:f3:ef:37:94:a3:9a:01:81:0a:78:93:37:25: f7:33:3a:fd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTUwMTExMC8GA1UEBRMoOTlBNzY2RDRDRkE0NUE5RjlFMzc3ODI1MDQ5OEIxMjc2 OEM0MUUxQTAeFw0yNDExMTEwNTQ4NTBaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MzE5YWMyLTVmMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzPgbdUIAr5+GkD/ZE+bcOvhpoCS5T7Ba7chMO3nW9Tyxce9t7K5NSzxwS8nA3 mcgIfyBmZkIu3NLP4M6RIe9SGi9+7BJy4a/JPI0dQwQYKcI67Fsm4ixNY4JvXBFu KuWiuBxEZyP7RaS2gENr/MR2vaNsjW0gdSsvKGHONqZPw5KoKvAhhtzrod/xZWfH iuOdUN8iVBurlF9WDruJxo3188e0VHP/T3Tg8crZxCR6XGDuizOE7/o3mroxYpe9 cQcUgON1BVsnD8F1mNryJjTjIEsjGLxczwMTsWBp5tRKwRwoOsTNDd3zyPnEIJg1 Lif8yUHsLQJzjq73CgfzeDAJAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUIMTqchZ9 aJLeq44cQhq0B41v94cwHwYDVR0jBBgwFoAUmadm1M+kWp+eN3glBJixJ2jEHhow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NTAxLzI2ODhFMzAyNjhE RjExRUY4MzA4OUUwQkM0RjlBRTAyL21hZG0xTS1rV3AtZU4zZ2xCSml4SjJqRUho by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWFkbTFNLWtXcC1lTjNnbEJKaXhKMmpFSGhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTUwMS8yNjg4RTMwMjY4REYxMUVGODMwODlFMEJDNEY5QUUwMi80REQ4NzUwRTY5 QTYxMUVGODRBMjc1ODRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeuzDANBgkqhkiG9w0BAQsFAAOCAQEAITxSL+2Zx4VvUlhC TeLMgP0mTq5Dy5872lPfDRrhnS+rs7C2Nkb+gE4dSIcBr3wPYNwbjBZFAQJjUSDI Tikc5pbct6ViilRtLrWb/5+OJ+Wq3CeOdvdY4sVAtzf1ux6zBMbZs5DE3Km/4gg/ Z5qsm27Wldo75DOwTCs9hN6nAd6U7+dkwFkvZtyN6fMAc6k0/cBvLrlyvL0HvVjx Wg0pzx+J7VwcEsmsUEQeilk4t7aQITKgUA8N4Vr8llaHtkDB5pkZbd7qjD7wbaxp UxiwaeQrqJSaFX6kgB+JVGAMZUiErEg3hNdvXy4JbWVeN1Pz7zeUo5oBgQp4kzcl 9zM6/Q== -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org