$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F69540BA810811ED9EA03683C4F9AE02.roa File: F69540BA810811ED9EA03683C4F9AE02.roa (raw, json) Hash identifier: AmVibyk3kyTCjjmayzEhVr/vWHjKhAHUPjsO+1Nf/Sw= Subject key identifier: 78:A2:1D:33:F1:8F:53:A1:3A:80:78:DD:5F:37:D2:4C:62:BB:41:55 Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Certificate serial: 0137 Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F69540BA810811ED9EA03683C4F9AE02.roa Signing time: Sat 03 Aug 2024 04:54:58 +0000 ROA not before: Sat 03 Aug 2024 04:54:58 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 16509 IP address blocks: 103.190.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Validity Not Before: Aug 3 04:54:58 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66adb822-ed2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:d0:8d:02:26:12:e8:03:8e:f6:7a:c0:73: 6f:4d:4e:02:6c:c1:b0:55:a6:f8:a1:a3:b1:57:24: ab:66:0b:5b:52:d5:4b:9d:b1:d8:e5:2b:14:a1:4d: ff:54:9f:e1:6d:43:6d:0c:24:8e:a5:9c:a4:26:10: 7d:e6:78:ea:3f:6b:85:fe:34:24:e9:3e:d1:f0:70: ec:d9:1f:ac:2d:8d:73:27:52:57:ff:31:c8:f7:3a: 1b:3f:93:f1:66:73:f2:b5:e0:1c:be:58:9a:c3:4f: 70:d2:14:d4:55:3f:2c:3a:dc:63:90:8b:e6:78:da: 10:98:70:d8:31:08:ca:a1:41:47:14:72:29:60:97: 2b:05:06:61:bd:f1:96:5b:8b:85:96:a3:5b:f7:9d: 97:3e:84:aa:75:b6:99:55:10:4d:27:4f:43:83:4c: 4d:77:a7:d4:5c:41:5e:e5:64:16:e7:ae:e8:cd:3c: 5c:4f:15:d0:39:b1:bf:03:95:49:2c:17:25:93:14: 1d:25:87:e4:cf:67:3d:13:01:4d:f1:15:2c:74:7d: 32:ad:c8:52:28:69:67:5f:34:bf:62:a2:38:8f:77: cd:4a:bf:ca:ad:8a:c7:9b:fa:e4:6b:d9:f9:e2:d1: 18:84:c1:55:21:b2:19:a7:70:20:50:10:6c:22:81: c1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A2:1D:33:F1:8F:53:A1:3A:80:78:DD:5F:37:D2:4C:62:BB:41:55 X509v3 Authority Key Identifier: keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F69540BA810811ED9EA03683C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.166.0/24 Signature Algorithm: sha256WithRSAEncryption 45:10:1c:7a:5f:9e:6c:b0:6f:a2:4b:ea:5a:79:c3:1c:9e:28: 66:c5:fc:2b:d2:98:2e:27:e1:41:9d:f1:27:43:93:68:e2:d4: f8:2b:86:de:84:d0:e1:56:90:e5:d6:6d:59:0d:34:ad:cb:1b: f7:4c:82:2c:08:c1:03:18:79:34:1b:7b:0b:db:1c:77:46:c5: 8e:28:1c:15:f9:ba:7c:10:18:ad:11:22:43:c3:72:f7:e6:64: 83:51:b0:0b:79:1f:fd:e4:c8:8f:11:a6:1f:86:fc:19:20:7f: c9:30:21:b3:4d:f2:55:03:7a:15:b1:e5:05:a1:0f:14:52:be: db:ad:f2:85:b0:c5:dc:d8:d4:c9:59:1c:d7:d4:a8:cf:fc:cd: c3:85:b1:b3:46:5f:89:b8:f7:e8:6c:91:19:5e:67:91:fa:d4: 20:e7:16:c3:b1:b3:03:83:b2:bf:a2:37:15:3b:6d:85:44:9c: 4f:34:a1:1e:cc:50:d0:5e:13:86:ec:08:91:3e:22:50:ac:ae: 99:17:27:99:42:eb:5d:5f:e9:e6:6c:61:9b:f6:e9:ff:0f:cd: 3d:2c:3a:5e:1a:75:5a:4f:b7:de:19:a6:09:42:7d:73:3c:7e: 01:03:44:aa:10:3d:c7:3f:c9:0b:92:a4:0d:cb:a2:1e:11:6e: a3:f2:65:5a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1 N0U4QzEzQ0UwHhcNMjQwODAzMDQ1NDU4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFkYjgyMi1lZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCjQjQImEugDjvZ6wHNvTU4CbMGwVab4oaOxVySrZgtbUtVLnbHY5SsUoU3/ VJ/hbUNtDCSOpZykJhB95njqP2uF/jQk6T7R8HDs2R+sLY1zJ1JX/zHI9zobP5Px ZnPyteAcvliaw09w0hTUVT8sOtxjkIvmeNoQmHDYMQjKoUFHFHIpYJcrBQZhvfGW W4uFlqNb952XPoSqdbaZVRBNJ09Dg0xNd6fUXEFe5WQW567ozTxcTxXQObG/A5VJ LBclkxQdJYfkz2c9EwFN8RUsdH0yrchSKGlnXzS/YqI4j3fNSr/KrYrHm/rka9n5 4tEYhMFVIbIZp3AgUBBsIoHBnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHiiHTPx j1OhOoB43V830kxiu0FVMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzgxQzAvMkYyODlFRDY4MTA0MTFFREJFQzY1MDg3QzRGOUFFMDIvRjY5NTQwQkE4 MTA4MTFFRDlFQTAzNjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnvqYwDQYJKoZIhvcNAQELBQADggEBAEUQHHpfnmywb6JL 6lp5wxyeKGbF/CvSmC4n4UGd8SdDk2ji1Pgrht6E0OFWkOXWbVkNNK3LG/dMgiwI wQMYeTQbewvbHHdGxY4oHBX5unwQGK0RIkPDcvfmZINRsAt5H/3kyI8Rph+G/Bkg f8kwIbNN8lUDehWx5QWhDxRSvtut8oWwxdzY1MlZHNfUqM/8zcOFsbNGX4m49+hs kRleZ5H61CDnFsOxswODsr+iNxU7bYVEnE80oR7MUNBeE4bsCJE+IlCsrpkXJ5lC 611f6eZsYZv26f8PzT0sOl4adVpPt94ZpglCfXM8fgEDRKoQPcc/yQuSpA3Loh4R bqPyZVo= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:43 2024 by rpki-client on console-ams.rpki-client.org