$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/4C93B0C80F8E11EEA5B58045C4F9AE02.roa File: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (raw, json) Hash identifier: LAaO1vZcTPGfjnPzmYmWNC40SxBUckX2iI6WDTxLjTo= Subject key identifier: AB:F9:49:A9:D7:B5:DB:8C:C7:34:F7:FE:62:4E:1E:F4:CA:0F:3B:F4 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: D9 Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/4C93B0C80F8E11EEA5B58045C4F9AE02.roa Signing time: Thu 01 Aug 2024 05:46:56 +0000 ROA not before: Thu 01 Aug 2024 05:46:56 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 141153 IP address blocks: 103.155.90.0/23 maxlen: 23 103.155.90.0/24 maxlen: 24 103.155.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: Aug 1 05:46:56 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66ab2150-9caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1a:55:89:f7:17:05:70:86:cd:3e:d7:f8:50: 67:0d:3f:09:96:48:c6:89:17:0e:a6:05:5a:a3:13: 1b:f2:a7:4a:15:9a:ef:85:d5:80:97:a1:99:5a:13: 06:2e:b8:d2:57:b8:aa:11:7c:8d:8f:57:16:13:42: 8c:0d:6b:14:4c:2b:87:e8:33:1d:73:1e:1b:cd:b1: 92:65:42:75:9c:66:ca:2f:14:97:ee:58:b2:ec:5e: 2e:c7:69:cb:ac:c1:43:da:20:56:03:8d:ce:e9:d7: f3:c5:6a:3d:3b:7f:67:f1:f3:20:37:e2:a5:01:08: 6e:b8:a7:9a:62:e2:2a:c9:68:d5:5e:e5:e4:6f:e2: b1:7f:95:8f:27:64:0a:d9:82:21:6d:44:37:33:44: ad:5e:55:47:22:28:03:c8:02:d7:26:c3:61:5f:6a: 21:08:8a:1a:77:a7:37:82:74:e7:7f:ad:74:14:21: f2:3c:56:82:9c:93:1f:7f:74:e9:09:6c:01:98:f5: d4:97:d8:fa:ff:78:72:31:7b:44:3c:b7:f0:25:8b: 2d:a6:f1:3c:4a:db:01:59:28:91:f0:f2:05:0c:2e: 38:34:e3:75:88:21:37:cb:d5:b2:25:75:04:fd:d4: dd:5e:65:bd:bf:e3:a4:f1:f5:04:0d:42:9f:23:16: e8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F9:49:A9:D7:B5:DB:8C:C7:34:F7:FE:62:4E:1E:F4:CA:0F:3B:F4 X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/4C93B0C80F8E11EEA5B58045C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.90.0/23 Signature Algorithm: sha256WithRSAEncryption 49:e3:c5:ec:09:15:d8:30:57:15:0f:73:60:44:41:c8:29:cf: e1:8d:cd:82:14:5d:03:c6:6c:e0:7c:74:7e:83:c3:08:f4:3c: 8c:ae:76:fa:f8:a5:95:55:7d:d8:d4:95:78:55:c7:cd:90:1c: 2d:93:75:09:36:88:de:f1:37:1e:fe:1b:82:b0:44:8f:0e:de: de:95:6e:55:ca:30:69:98:a5:78:14:9f:6d:ba:36:93:3d:2f: 73:34:1c:c0:79:56:42:8b:ab:96:6c:fc:f9:76:cf:6b:b1:fb: 81:9c:92:28:06:0d:35:bc:9c:f1:3b:b8:61:9c:8c:df:e9:ac: bf:f8:37:f2:a7:51:73:d3:bd:2f:73:ba:71:f2:52:f7:78:ff: 4f:67:7f:cb:6f:a7:ec:39:b3:53:7a:f3:69:30:55:af:24:3d: dd:c0:89:7b:7a:81:ce:87:af:a0:ef:b1:31:7e:bd:86:6f:57: c6:77:e4:a5:30:12:7d:2f:8a:0f:79:4c:9e:42:eb:39:6e:e1: 49:89:5a:ed:0d:60:e6:27:f4:73:b2:23:9e:1a:ae:e7:f5:14: f2:16:7a:61:b8:ac:75:3e:f3:52:20:26:f9:26:2f:37:42:2e: 45:58:6b:e3:92:d1:76:06:1d:d6:e3:29:3e:09:ad:9f:f9:ea: 46:fd:e5:8f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjQwODAxMDU0NjU2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFiMjE1MC05Y2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xpVifcXBXCGzT7X+FBnDT8JlkjGiRcOpgVaoxMb8qdKFZrvhdWAl6GZWhMG LrjSV7iqEXyNj1cWE0KMDWsUTCuH6DMdcx4bzbGSZUJ1nGbKLxSX7liy7F4ux2nL rMFD2iBWA43O6dfzxWo9O39n8fMgN+KlAQhuuKeaYuIqyWjVXuXkb+Kxf5WPJ2QK 2YIhbUQ3M0StXlVHIigDyALXJsNhX2ohCIoad6c3gnTnf610FCHyPFaCnJMff3Tp CWwBmPXUl9j6/3hyMXtEPLfwJYstpvE8StsBWSiR8PIFDC44NON1iCE3y9WyJXUE /dTdXmW9v+Ok8fUEDUKfIxboPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKv5SanX tduMxzT3/mJOHvTKDzv0MB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA2Q0UvRTkwQkQ2NjgwRjg2MTFFRUE1NkVCQjIyQzRGOUFFMDIvNEM5M0IwQzgw RjhFMTFFRUE1QjU4MDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnm1owDQYJKoZIhvcNAQELBQADggEBAEnjxewJFdgwVxUP c2BEQcgpz+GNzYIUXQPGbOB8dH6Dwwj0PIyudvr4pZVVfdjUlXhVx82QHC2TdQk2 iN7xNx7+G4KwRI8O3t6VblXKMGmYpXgUn226NpM9L3M0HMB5VkKLq5Zs/Pl2z2ux +4GckigGDTW8nPE7uGGcjN/prL/4N/KnUXPTvS9zunHyUvd4/09nf8tvp+w5s1N6 82kwVa8kPd3AiXt6gc6Hr6DvsTF+vYZvV8Z35KUwEn0vig95TJ5C6zlu4UmJWu0N YOYn9HOyI54aruf1FPIWemG4rHU+81IgJvkmLzdCLkVYa+OS0XYGHdbjKT4JrZ/5 6kb95Y8= -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:06 2024 by rpki-client on console-ams.rpki-client.org