$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/4C304B9EA12F11EFBF514933C4F9AE02.roa File: 4C304B9EA12F11EFBF514933C4F9AE02.roa (raw, json) Hash identifier: Jqcp5T0ksO4RQ2mAdiAMWxZ4GPG8Wt412/hc3ptQ9jk= Subject key identifier: CE:9D:FC:B1:73:BD:CE:DE:CD:BF:8E:8C:F5:FE:06:21:9E:4B:CF:34 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 048C Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/4C304B9EA12F11EFBF514933C4F9AE02.roa Signing time: Tue 12 Nov 2024 19:49:58 +0000 ROA not before: Tue 12 Nov 2024 19:49:58 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 9232 IP address blocks: 103.174.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1164 (0x48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: Nov 12 19:49:58 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6733b166-bd8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:80:30:8a:5f:28:1c:b3:38:68:87:d2:ff: 82:3f:67:db:28:cd:82:46:0a:d1:cd:5c:ad:44:ab: 53:4a:1b:57:e0:fc:e0:9a:10:b7:87:bd:97:ba:e2: ed:37:ea:38:7a:bb:36:79:05:58:c9:14:9b:dc:36: 31:ba:69:fa:73:e6:a3:26:ca:2d:0f:43:14:f2:01: 26:4d:fb:d0:fc:5e:29:30:f4:d3:9f:40:1f:65:d9: a7:36:76:90:36:54:ea:96:2c:2e:ef:78:ec:86:1b: 44:66:2f:2a:8c:da:29:19:67:8d:aa:42:6e:66:67: ba:97:9c:51:a1:cf:d9:96:9a:32:1d:ad:7b:1c:5a: 25:fe:bf:b6:04:ae:e2:66:00:7b:a0:36:13:0e:48: a0:e5:76:6c:61:8b:de:a0:ea:30:01:01:23:8b:6d: 78:4f:65:fc:d3:dd:d3:3e:ff:96:70:26:e3:95:15: 60:f4:52:54:ea:30:97:90:91:0e:e4:3a:1d:00:09: 03:09:23:dd:73:9b:fd:5f:d7:75:42:e0:8d:dd:1a: 68:3c:52:f4:fa:20:5c:a6:00:68:a7:19:24:75:b4: 06:e8:de:cb:55:9b:3d:07:a3:1a:cd:96:c5:39:cd: 15:ba:47:03:f3:47:a2:cb:79:0a:8a:c2:53:2a:44: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9D:FC:B1:73:BD:CE:DE:CD:BF:8E:8C:F5:FE:06:21:9E:4B:CF:34 X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/4C304B9EA12F11EFBF514933C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.96.0/23 Signature Algorithm: sha256WithRSAEncryption b2:16:9a:b2:e7:68:c2:c4:f3:53:47:41:75:eb:22:3c:cb:7a: 80:96:c3:65:45:9e:5a:7e:6a:07:20:c7:7a:e7:d6:1c:18:db: 80:b1:34:40:f3:25:32:da:10:75:d6:6e:67:89:1c:25:55:95: ee:e7:e0:e3:76:cf:da:5e:e0:dc:27:07:4b:f2:e2:80:f5:d7: 18:02:56:b1:c8:87:cc:eb:3e:a8:2e:7e:7d:8a:1f:12:18:9e: 27:4a:e8:ff:d5:64:54:36:01:50:48:cf:de:06:13:3f:51:4f: c0:24:89:c0:97:30:f9:69:ea:59:14:40:e0:ff:1f:dc:90:c2: 83:16:3e:d1:75:09:85:20:c1:42:90:16:bc:56:7b:32:2a:40: 51:bc:85:3d:ed:c1:67:87:48:2b:b6:cb:17:10:40:a2:4d:08: 21:52:d3:14:3f:0f:ed:0c:d6:6a:04:26:8e:89:1d:e3:f1:b6: e2:1a:fb:5c:0f:8a:bf:ec:09:dd:06:97:f3:1c:1a:79:a7:84: e0:93:f4:8a:26:62:45:0e:c8:ed:a7:93:a7:5a:fa:ff:70:7e: be:1e:e4:59:ab:a2:75:4c:1e:f6:44:41:85:a8:82:6f:26:f5: 5c:71:d9:d8:e4:d5:38:69:69:e3:6e:c5:ef:b7:7e:6f:fd:c7: 6f:11:95:24 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjQxMTEyMTk0OTU4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMzYjE2Ni1iZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5SAMIpfKByzOGiH0v+CP2fbKM2CRgrRzVytRKtTShtX4PzgmhC3h72XuuLt N+o4ers2eQVYyRSb3DYxumn6c+ajJsotD0MU8gEmTfvQ/F4pMPTTn0AfZdmnNnaQ NlTqliwu73jshhtEZi8qjNopGWeNqkJuZme6l5xRoc/ZlpoyHa17HFol/r+2BK7i ZgB7oDYTDkig5XZsYYveoOowAQEji214T2X8093TPv+WcCbjlRVg9FJU6jCXkJEO 5DodAAkDCSPdc5v9X9d1QuCN3RpoPFL0+iBcpgBopxkkdbQG6N7LVZs9B6MazZbF Oc0VukcD80eiy3kKisJTKkQ+NwIDAQABo4IClTCCApEwHQYDVR0OBBYEFM6d/LFz vc7ezb+OjPX+BiGeS880MB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjIzQjkvNzhDRUFDQkMyQjM2MTFFQ0FENTk1QjdDQzRGOUFFMDIvNEMzMDRCOUVB MTJGMTFFRkJGNTE0OTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrmAwDQYJKoZIhvcNAQELBQADggEBALIWmrLnaMLE81NH QXXrIjzLeoCWw2VFnlp+agcgx3rn1hwY24CxNEDzJTLaEHXWbmeJHCVVle7n4ON2 z9pe4NwnB0vy4oD11xgCVrHIh8zrPqgufn2KHxIYnidK6P/VZFQ2AVBIz94GEz9R T8AkicCXMPlp6lkUQOD/H9yQwoMWPtF1CYUgwUKQFrxWezIqQFG8hT3twWeHSCu2 yxcQQKJNCCFS0xQ/D+0M1moEJo6JHePxtuIa+1wPir/sCd0Gl/McGnmnhOCT9Iom YkUOyO2nk6da+v9wfr4e5FmronVMHvZEQYWogm8m9Vxx2djk1ThpaeNuxe+3fm/9 x28RlSQ= -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:59 2024 by rpki-client on console-ams.rpki-client.org