$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/317CF2A634E811EFA8BEA738C4F9AE02.roa File: 317CF2A634E811EFA8BEA738C4F9AE02.roa (raw, json) Hash identifier: Uo0DI8uu4MaKQTtSGimWFCEZqnoAxk8F8R7u5G4FQ3c= Subject key identifier: 88:E7:EA:F6:A6:07:C1:D0:51:82:96:80:41:24:51:06:00:83:55:7A Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Certificate serial: 1EA0 Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/317CF2A634E811EFA8BEA738C4F9AE02.roa Signing time: Mon 30 Sep 2024 16:23:47 +0000 ROA not before: Mon 30 Sep 2024 16:23:47 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 45424 IP address blocks: 103.213.124.0/22 maxlen: 24 182.54.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7840 (0x1ea0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Validity Not Before: Sep 30 16:23:47 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fad093-0bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:33:43:09:93:59:f6:d9:3e:63:f1:7d:22: 0f:d9:01:a7:26:72:2d:17:e7:1e:03:c6:9f:18:38: 30:e8:28:51:dd:b1:ed:57:39:76:f6:9b:9b:4e:87: f2:99:9d:f6:6a:93:cd:a4:9a:dc:a3:a7:ba:19:b4: 8f:cb:bd:8b:64:4f:9c:e1:59:52:74:b7:2d:d8:3e: 29:7a:da:9f:24:26:d7:8d:62:08:3b:bf:12:31:bd: f7:a1:aa:71:db:f6:f6:39:5b:0b:59:ab:e5:65:45: 39:bf:bd:43:ea:35:8f:6d:41:e9:e7:bf:c1:7b:ef: 83:7e:b8:22:af:e3:e3:7c:c2:65:a5:d4:f8:d9:d6: 79:54:86:26:1a:2d:39:aa:cc:b8:a0:33:4b:e1:7c: 30:1a:b9:46:72:b8:7f:d7:37:dc:1f:fb:9c:e6:a2: 25:f5:16:e8:47:2a:dc:54:a5:dd:49:d6:bb:49:a0: 29:fd:6a:f4:ab:22:59:76:ae:ed:77:0e:10:dc:f9: ec:6e:a4:e2:b4:1f:52:a6:b5:b4:b4:ae:9c:8d:59: cc:df:94:84:1c:f0:f1:ff:cb:ec:98:20:44:86:bd: c4:0b:3c:e0:1c:f6:b2:8a:61:8a:f6:2b:07:fb:79: eb:db:4b:dd:46:58:cc:58:35:8d:d2:91:8e:5d:99: 85:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E7:EA:F6:A6:07:C1:D0:51:82:96:80:41:24:51:06:00:83:55:7A X509v3 Authority Key Identifier: keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/317CF2A634E811EFA8BEA738C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.213.124.0/22 182.54.156.0/22 Signature Algorithm: sha256WithRSAEncryption 27:89:54:85:28:f5:7e:34:4a:d8:b4:af:56:6d:52:59:f9:fd: f1:a7:8a:25:7f:46:fa:78:fc:b4:9c:2a:e8:fc:88:79:33:82: 4f:bd:33:41:d4:5b:48:4d:cc:59:46:3d:db:cd:a0:69:92:86: 49:ff:c1:c5:ea:e7:0d:1d:c4:9f:1d:68:bf:2b:54:23:3e:99: b1:a0:4c:27:4a:cc:51:1f:33:fa:96:e3:4b:9f:58:e2:3d:01: d2:f3:62:c7:6d:5e:35:24:bb:1c:32:1c:44:15:90:2c:e5:53: cc:6f:62:83:1b:cb:8e:1b:6c:c9:58:9f:14:86:50:33:b8:eb: 7e:4f:8e:d6:cf:e4:2b:db:e9:d5:34:7c:aa:c9:4d:e0:08:9b: 79:67:8e:b4:ff:1f:14:38:27:0f:0b:4d:1e:6b:77:dc:b5:b4: 88:f3:9f:4e:4b:64:fb:13:43:07:2a:9f:e2:4a:89:97:b6:0a: ed:2f:e9:5b:ea:04:1f:84:4f:82:7c:b9:14:ae:e1:dc:e1:00: d9:9f:b2:3b:12:b0:7d:fa:af:4a:6c:a0:d4:36:e4:52:89:8d: 3b:4c:77:8b:a9:03:db:71:55:10:69:9c:cf:0f:1d:51:cd:0e: 5e:09:9b:d0:c7:89:04:b0:37:4c:83:3c:4b:d4:7f:1d:5b:9f: 84:d3:04:b3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxRUExMTAvBgNVBAUTKEQ1Njc5MkQ1OTdFOUNERDAyQkZDMTZEMEI0OTJEQTNE QUFFMDgwRkMwHhcNMjQwOTMwMTYyMzQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZhZDA5My0wYmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCwzQwmTWfbZPmPxfSIP2QGnJnItF+ceA8afGDgw6ChR3bHtVzl29pubTofy mZ32apPNpJrco6e6GbSPy72LZE+c4VlSdLct2D4petqfJCbXjWIIO78SMb33oapx 2/b2OVsLWavlZUU5v71D6jWPbUHp57/Be++Dfrgir+PjfMJlpdT42dZ5VIYmGi05 qsy4oDNL4XwwGrlGcrh/1zfcH/uc5qIl9RboRyrcVKXdSda7SaAp/Wr0qyJZdq7t dw4Q3PnsbqTitB9SprW0tK6cjVnM35SEHPDx/8vsmCBEhr3ECzzgHPayimGK9isH +3nr20vdRljMWDWN0pGOXZmFlwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIjn6vam B8HQUYKWgEEkUQYAg1V6MB8GA1UdIwQYMBaAFNVnktWX6c3QK/wW0LSS2j2q4ID8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzFFQS85QUYzRUQyODVF RUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpkQXJfQmJRdEpMYVBhcmdn UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXZVMxWmZwemRBcl9CYlF0SkxhUGFyZ2dQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzMxRUEvOUFGM0VEMjg1RUVDMTFFNjg4NkVDNTFCQzRGOUFFMDIvMzE3Q0YyQTYz NEU4MTFFRkE4QkVBNzM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn1XwDBAK2NpwwDQYJKoZIhvcNAQELBQADggEBACeJVIUo 9X40Sti0r1ZtUln5/fGniiV/Rvp4/LScKuj8iHkzgk+9M0HUW0hNzFlGPdvNoGmS hkn/wcXq5w0dxJ8daL8rVCM+mbGgTCdKzFEfM/qW40ufWOI9AdLzYsdtXjUkuxwy HEQVkCzlU8xvYoMby44bbMlYnxSGUDO4635PjtbP5Cvb6dU0fKrJTeAIm3lnjrT/ HxQ4Jw8LTR5rd9y1tIjzn05LZPsTQwcqn+JKiZe2Cu0v6VvqBB+ET4J8uRSu4dzh ANmfsjsSsH36r0psoNQ25FKJjTtMd4upA9txVRBpnM8PHVHNDl4Jm9DHiQSwN0yD PEvUfx1bn4TTBLM= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org