$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa File: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (raw, json) Hash identifier: TdSkmklXk1H4TogCKQu6LKS6MtXDIHAbYnJtQJNtXOk= Subject key identifier: 3C:0B:D0:19:7C:39:0A:B8:73:15:1D:42:97:5B:34:7D:88:81:85:1C Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Certificate serial: 02E5 Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa Signing time: Wed 21 Aug 2024 15:52:43 +0000 ROA not before: Wed 21 Aug 2024 15:52:43 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136451 IP address blocks: 103.184.136.0/24 maxlen: 24 2001:df0:9140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Validity Not Before: Aug 21 15:52:43 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66c60d4a-753d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:b2:49:ea:59:02:b9:4a:d5:8b:51:a9:69: df:af:0b:f1:41:0a:22:db:b1:3e:69:eb:27:8b:1d: 34:2c:83:85:9b:02:bd:8b:01:b9:29:41:56:9f:25: 4c:72:63:4c:05:08:3b:97:10:1b:7c:d8:2f:fb:b9: 8e:44:53:4c:18:94:03:ab:05:7b:0e:4b:e7:84:00: 0a:51:f5:4e:fb:97:9c:0e:63:ab:01:72:1a:3b:15: 0b:10:90:d7:8b:ec:54:cd:15:ad:60:ff:43:ce:e0: 32:e2:83:76:a0:96:9b:8e:50:a6:39:02:52:ee:da: df:d7:ca:7b:a7:f3:13:bf:bf:3e:0d:bd:ce:5c:30: b7:e6:0b:75:3e:1f:83:e3:0a:60:af:86:9f:14:65: 09:af:01:c3:2b:a1:67:cf:31:e5:aa:82:6c:fa:fc: 44:22:58:e9:96:84:2a:9d:75:43:80:c3:ef:66:e5: 33:1d:40:34:1c:d4:de:7b:f9:10:7a:a7:89:ab:c2: 4f:23:0d:5f:a8:3d:77:67:95:65:5a:c0:97:d7:57: ce:dd:6b:ca:b9:65:a0:0a:23:fc:5a:af:c2:45:06: ff:c6:e6:4b:0a:57:ee:ef:2a:fb:19:12:15:34:36: 6d:19:a3:b1:3f:07:99:ef:ed:da:7a:3e:7f:fc:8b: b8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0B:D0:19:7C:39:0A:B8:73:15:1D:42:97:5B:34:7D:88:81:85:1C X509v3 Authority Key Identifier: keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.184.136.0/24 IPv6: 2001:df0:9140::/48 Signature Algorithm: sha256WithRSAEncryption b8:e7:cb:4d:5d:f5:3c:4a:24:44:66:76:ec:0e:dc:47:0f:7e: 02:05:07:01:51:9c:6c:04:f2:a5:e3:a9:a3:51:f3:03:d7:48: c8:52:87:e0:e8:fd:c2:39:c5:27:3b:62:89:d4:bc:1e:e6:62: 3e:6e:ec:03:59:1c:46:51:86:5d:4e:e9:35:fb:de:bb:d7:0f: 71:33:02:2b:e9:89:95:2c:02:66:e7:f3:b1:5c:ca:64:14:33: 70:10:a8:d4:6e:08:5d:c6:98:d5:61:88:9b:47:cd:2a:1c:05: b1:bc:d3:47:6a:a4:87:6b:3b:53:1b:55:3d:8a:86:87:56:ed: 7b:40:7e:70:83:8a:7d:ba:b6:e4:74:36:54:5d:b9:6b:86:71: b7:54:bf:6a:af:ee:ae:7c:8c:88:83:f7:c6:5b:6f:af:6e:ab: 38:1c:dd:3c:75:ca:95:04:3b:5f:07:df:4c:a0:06:5c:ec:65: c8:52:95:4f:b9:9b:f3:64:f5:6d:68:a5:4c:0b:56:a5:44:37: bd:af:f8:58:f2:02:46:a9:68:a7:96:05:da:14:72:3b:ce:20: f5:8b:c6:8f:53:dc:1c:11:0f:a8:ce:6d:30:79:ca:95:c0:64: c3:b9:f3:40:ea:88:2c:16:80:43:01:19:3b:16:75:e7:61:c1: 05:e7:c2:ce -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG NTczOEY5MEEwHhcNMjQwODIxMTU1MjQzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM2MGQ0YS03NTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9uySepZArlK1YtRqWnfrwvxQQoi27E+aesnix00LIOFmwK9iwG5KUFWnyVM cmNMBQg7lxAbfNgv+7mORFNMGJQDqwV7DkvnhAAKUfVO+5ecDmOrAXIaOxULEJDX i+xUzRWtYP9DzuAy4oN2oJabjlCmOQJS7trf18p7p/MTv78+Db3OXDC35gt1Ph+D 4wpgr4afFGUJrwHDK6FnzzHlqoJs+vxEIljploQqnXVDgMPvZuUzHUA0HNTee/kQ eqeJq8JPIw1fqD13Z5VlWsCX11fO3WvKuWWgCiP8Wq/CRQb/xuZLClfu7yr7GRIV NDZtGaOxPweZ7+3aej5//Iu4wwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDwL0Bl8 OQq4cxUdQpdbNH2IgYUcMB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkRDN0MvNkFFNzYxNTJBQjM4MTFFQzhCREI4QzNDQzRGOUFFMDIvODJGRjQ4QjRB QjNDMTFFQzlENkMxNjY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnuIgwDwQCAAIwCQMHACABDfCRQDANBgkqhkiG9w0BAQsF AAOCAQEAuOfLTV31PEokRGZ27A7cRw9+AgUHAVGcbATypeOpo1HzA9dIyFKH4Oj9 wjnFJztiidS8HuZiPm7sA1kcRlGGXU7pNfveu9cPcTMCK+mJlSwCZufzsVzKZBQz cBCo1G4IXcaY1WGIm0fNKhwFsbzTR2qkh2s7UxtVPYqGh1bte0B+cIOKfbq25HQ2 VF25a4Zxt1S/aq/urnyMiIP3xltvr26rOBzdPHXKlQQ7XwffTKAGXOxlyFKVT7mb 82T1bWilTAtWpUQ3va/4WPICRqlop5YF2hRyO84g9YvGj1PcHBEPqM5tMHnKlcBk w7nzQOqILBaAQwEZOxZ152HBBefCzg== -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:39 2024 by rpki-client on console-ams.rpki-client.org