$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/94817492A7AF11EE9ABC7953C4F9AE02.roa File: 94817492A7AF11EE9ABC7953C4F9AE02.roa (raw, json) Hash identifier: r8xTQZijVxBfTrzAxzSIebYBH5I/491FxaMTCA/JJHI= Subject key identifier: A1:30:D4:DC:C9:1F:20:2D:EB:4F:27:8F:84:A5:D0:89:EB:10:DA:D1 Certificate issuer: /CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Certificate serial: 0133 Authority key identifier: 8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/94817492A7AF11EE9ABC7953C4F9AE02.roa Signing time: Sun 01 Sep 2024 16:09:13 +0000 ROA not before: Sun 01 Sep 2024 16:09:13 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 150738 IP address blocks: 103.76.194.0/23 maxlen: 23 103.76.194.0/24 maxlen: 24 103.76.195.0/24 maxlen: 24 2001:df1:e1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Validity Not Before: Sep 1 16:09:13 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66d491a9-f01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:c3:1b:47:64:64:73:3a:41:31:6e:63:dc: c4:2e:f5:4a:fe:67:ef:28:80:0b:25:1a:e7:74:b7: 7c:25:19:70:87:7a:af:b4:c3:24:83:8a:70:48:2a: 1c:a3:d6:0a:e3:22:ff:76:d2:2d:12:66:52:63:d8: 5c:ba:5e:11:b7:b2:b5:ff:5b:6b:20:2b:1f:38:ba: 56:4d:97:36:4e:75:83:54:29:32:57:e0:da:f3:73: b1:2d:7e:4d:74:52:8e:60:6c:cc:b1:46:ef:77:05: ae:38:82:07:1b:cb:02:f5:31:f2:fb:b1:5b:e4:9b: 8d:a9:ce:48:43:5f:51:b8:d6:6d:bb:6a:ec:09:41: c3:e9:e1:14:7c:4b:ff:28:7d:16:c8:2e:e2:40:08: 17:75:f0:c8:d2:f3:e2:36:4b:82:5b:ef:07:ac:e0: 8e:b4:42:19:00:6c:f9:e0:14:7d:2e:c2:fa:56:b6: aa:df:fe:44:eb:76:83:9d:03:98:8e:6a:2b:33:7c: 0a:86:d4:e3:9d:11:ac:12:6a:8c:0f:6d:87:53:50: 8a:3f:d4:3c:ba:79:11:98:1d:d4:be:94:38:43:ff: db:b9:b2:fd:6a:d6:e9:b8:40:c7:ad:2b:f0:79:2b: 1e:0c:8f:36:6a:d0:ff:36:03:5d:50:2f:ae:2e:c6: 46:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:30:D4:DC:C9:1F:20:2D:EB:4F:27:8F:84:A5:D0:89:EB:10:DA:D1 X509v3 Authority Key Identifier: keyid:8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/94817492A7AF11EE9ABC7953C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.194.0/23 IPv6: 2001:df1:e1c0::/48 Signature Algorithm: sha256WithRSAEncryption 86:f4:78:64:34:62:c6:98:60:49:a1:93:4b:81:3e:36:1d:43: 02:9d:e3:1b:4d:1c:31:d1:e0:fb:45:c1:b7:51:a4:5d:cd:28: 63:40:ba:0f:3b:b2:9d:60:8d:59:1a:29:6c:2f:fd:66:a2:ba: d4:25:ac:c6:f3:70:82:94:a5:09:12:0a:73:ec:5e:24:61:2e: d5:e4:55:3c:5a:dd:cd:23:46:72:db:a2:60:ea:be:b1:4c:8a: 7b:24:33:59:b5:d7:09:45:15:91:cf:6a:f6:1c:e1:b2:05:6e: 41:45:f5:4e:bb:98:e7:9c:68:1d:54:80:12:60:38:46:41:89: 6b:07:bd:45:fd:60:f3:af:dc:69:ed:2b:42:c6:c6:e3:86:b0: 21:7a:c2:0f:3c:64:92:84:5b:a7:3f:f0:75:01:0b:76:c1:4d: 86:4e:57:c4:83:65:16:06:81:1c:d6:64:fd:87:81:ee:4c:cb: 77:e4:b3:e9:a8:ab:9b:6e:87:43:96:40:5d:aa:42:eb:9e:7c: 02:1b:14:47:bb:31:42:16:a1:4b:95:b0:a5:43:f8:1b:18:5f: 19:28:1d:ea:8b:f6:09:6b:01:87:29:0e:dc:6b:24:1c:a9:b1: 45:7e:65:20:62:51:4a:81:6e:6d:58:ce:c2:3f:a2:72:95:ef: 65:20:96:7f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTQxMTAvBgNVBAUTKDhBNzRFRjQwRTY1QTEyN0MwRTY2NkIxNEE2QzY1NzRB NTM2RjM2NzMwHhcNMjQwOTAxMTYwOTEzWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ0OTFhOS1mMDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcvDG0dkZHM6QTFuY9zELvVK/mfvKIALJRrndLd8JRlwh3qvtMMkg4pwSCoc o9YK4yL/dtItEmZSY9hcul4Rt7K1/1trICsfOLpWTZc2TnWDVCkyV+Da83OxLX5N dFKOYGzMsUbvdwWuOIIHG8sC9THy+7Fb5JuNqc5IQ19RuNZtu2rsCUHD6eEUfEv/ KH0WyC7iQAgXdfDI0vPiNkuCW+8HrOCOtEIZAGz54BR9LsL6Vraq3/5E63aDnQOY jmorM3wKhtTjnRGsEmqMD22HU1CKP9Q8unkRmB3UvpQ4Q//bubL9atbpuEDHrSvw eSseDI82atD/NgNdUC+uLsZGWwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKEw1NzJ HyAt608nj4Sl0InrENrRMB8GA1UdIwQYMBaAFIp070DmWhJ8DmZrFKbGV0pTbzZz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFNC8wNUZFRjQ0QTlF MEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVud09abXNVcHNaWFNsTnZO bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luVHZRT1phRW53T1ptc1Vwc1pYU2xOdk5uTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgzRTQvMDVGRUY0NEE5RTBDMTFFREJBOUQxRDI2QzRGOUFFMDIvOTQ4MTc0OTJB N0FGMTFFRTlBQkM3OTUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnTMIwDwQCAAIwCQMHACABDfHhwDANBgkqhkiG9w0BAQsF AAOCAQEAhvR4ZDRixphgSaGTS4E+Nh1DAp3jG00cMdHg+0XBt1GkXc0oY0C6Dzuy nWCNWRopbC/9ZqK61CWsxvNwgpSlCRIKc+xeJGEu1eRVPFrdzSNGctuiYOq+sUyK eyQzWbXXCUUVkc9q9hzhsgVuQUX1TruY55xoHVSAEmA4RkGJawe9Rf1g86/cae0r QsbG44awIXrCDzxkkoRbpz/wdQELdsFNhk5XxINlFgaBHNZk/YeB7kzLd+Sz6air m26HQ5ZAXapC6558AhsUR7sxQhahS5WwpUP4GxhfGSgd6ov2CWsBhykO3GskHKmx RX5lIGJRSoFubVjOwj+icpXvZSCWfw== -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org