$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/4482148613E611EE8ECA2D3CC4F9AE02.roa File: 4482148613E611EE8ECA2D3CC4F9AE02.roa (raw, json) Hash identifier: CdGumyD+dxyUx7Arkr24lgzoLZyjPLu4SVH4NeTvk7A= Subject key identifier: DB:77:B8:31:76:E6:20:72:6C:CD:3B:CB:38:98:15:62:20:94:FE:A3 Certificate issuer: /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Certificate serial: 05B2 Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/4482148613E611EE8ECA2D3CC4F9AE02.roa Signing time: Thu 17 Oct 2024 05:29:22 +0000 ROA not before: Thu 17 Oct 2024 05:29:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 139691 IP address blocks: 103.166.40.0/24 maxlen: 24 103.166.41.0/24 maxlen: 24 2001:df6:7c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Validity Not Before: Oct 17 05:29:22 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6710a0b2-845c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:4b:5c:c5:c7:53:4f:60:66:78:b3:73:08: a7:5b:d8:5d:74:93:e6:f9:22:08:0a:49:28:09:d3: 33:82:08:38:e9:a4:fb:e3:30:25:b2:3d:ff:56:93: 5e:c6:2d:16:6c:81:56:17:46:8c:9e:cc:1d:5b:4c: 28:6c:66:4b:e0:7b:f8:46:96:3f:3c:a7:dc:e6:a6: da:57:3e:7c:0f:27:71:a1:ad:c4:6e:e6:b2:d7:68: c5:ae:30:b6:28:d9:53:26:6b:9a:29:e3:e0:fa:16: 2e:83:06:5a:b3:d7:78:b2:5e:72:06:b1:48:33:9a: 3e:fc:af:cf:ce:13:4e:82:93:5d:cf:ca:71:da:19: cb:f2:f5:56:e4:e0:01:de:7e:9f:d4:b5:9e:0f:1b: 92:33:90:d5:5d:f7:bf:91:91:00:be:9e:f1:22:cb: b0:c7:f0:3e:85:4c:9b:02:01:ba:47:33:fa:5f:97: c8:cc:f7:3d:16:39:37:04:1a:05:7a:90:f5:d0:3b: 8e:eb:28:14:a7:7b:36:9a:a9:9f:40:e8:cf:d9:e2: 7e:9c:1e:3e:01:ac:0d:d5:b1:f9:c7:81:56:02:86: c1:2b:16:8b:ed:45:f3:6e:70:53:ca:c7:2f:9f:8a: bd:27:46:80:b7:66:cd:3a:2f:03:72:e8:91:5a:b9: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:77:B8:31:76:E6:20:72:6C:CD:3B:CB:38:98:15:62:20:94:FE:A3 X509v3 Authority Key Identifier: keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/4482148613E611EE8ECA2D3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.40.0/23 IPv6: 2001:df6:7c80::/48 Signature Algorithm: sha256WithRSAEncryption a2:18:d5:cc:fc:43:dd:80:d8:65:7c:25:d0:75:5a:1b:48:02: 9b:f9:11:a9:23:69:eb:c3:38:b5:e5:ce:d8:bf:df:cd:77:5d: 01:15:e8:ca:64:70:d8:f0:2f:40:04:66:2b:9e:87:91:9c:97: aa:c9:f3:7c:4c:b8:72:a1:68:86:d6:a6:37:b8:bb:48:17:d4: b1:71:05:e0:d1:cf:02:38:f7:f8:4c:49:5a:1d:53:6b:7c:5a: 5e:29:c9:d4:71:27:a3:00:56:58:15:0c:79:fe:b1:f0:47:cb: a7:08:70:d7:1f:5c:27:78:17:6a:8b:54:d8:c1:c7:9c:03:16: 69:32:0e:7f:61:11:7b:02:2c:c8:90:68:ac:77:fd:ee:f9:66: a9:ca:33:0f:91:a4:73:3c:4e:01:02:9c:86:ff:36:8c:c4:36: 6e:01:e6:87:6c:21:95:2e:1e:0a:5e:95:4d:c6:e1:bd:7a:c2: 17:47:a7:68:cc:89:a5:b4:9e:5a:99:48:ee:af:41:6f:c8:23: bb:d0:53:ed:7b:44:88:aa:3c:55:71:02:1d:3b:57:2f:c6:4e: 79:05:f8:04:d5:2b:55:f4:7d:2e:1d:b2:1c:ce:6f:33:69:c3: 33:c0:c4:f4:e3:f0:92:56:6c:ad:0d:96:fa:b5:ee:ad:7a:62: fd:93:dc:31 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCQkYxMTAvBgNVBAUTKEJGNEQ4MDEzREI5N0I4RUYwMEY4Q0U4QzZEQkVBRkIw NTFFMTk0QkMwHhcNMjQxMDE3MDUyOTIyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEwYTBiMi04NDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6hLXMXHU09gZnizcwinW9hddJPm+SIICkkoCdMzggg46aT74zAlsj3/VpNe xi0WbIFWF0aMnswdW0wobGZL4Hv4RpY/PKfc5qbaVz58Dydxoa3Ebuay12jFrjC2 KNlTJmuaKePg+hYugwZas9d4sl5yBrFIM5o+/K/PzhNOgpNdz8px2hnL8vVW5OAB 3n6f1LWeDxuSM5DVXfe/kZEAvp7xIsuwx/A+hUybAgG6RzP6X5fIzPc9Fjk3BBoF epD10DuO6ygUp3s2mqmfQOjP2eJ+nB4+AawN1bH5x4FWAobBKxaL7UXzbnBTyscv n4q9J0aAt2bNOi8DcuiRWrlVewIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNt3uDF2 5iBybM07yziYFWIglP6jMB8GA1UdIwQYMBaAFL9NgBPbl7jvAPjOjG2+r7BR4ZS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUJCRi8xMjZCOTA5QTlE QkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVPOEEtTTZNYmI2dnNGSGhs THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YwMkFFOXVYdU84QS1NNk1iYjZ2c0ZIaGxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFCQkYvMTI2QjkwOUE5REJEMTFFQjhBMUYwQjMyQzRGOUFFMDIvNDQ4MjE0ODYx M0U2MTFFRThFQ0EyRDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnpigwDwQCAAIwCQMHACABDfZ8gDANBgkqhkiG9w0BAQsF AAOCAQEAohjVzPxD3YDYZXwl0HVaG0gCm/kRqSNp68M4teXO2L/fzXddARXoymRw 2PAvQARmK56HkZyXqsnzfEy4cqFohtamN7i7SBfUsXEF4NHPAjj3+ExJWh1Ta3xa XinJ1HEnowBWWBUMef6x8EfLpwhw1x9cJ3gXaotU2MHHnAMWaTIOf2ERewIsyJBo rHf97vlmqcozD5GkczxOAQKchv82jMQ2bgHmh2whlS4eCl6VTcbhvXrCF0enaMyJ pbSeWplI7q9Bb8gju9BT7XtEiKo8VXECHTtXL8ZOeQX4BNUrVfR9Lh2yHM5vM2nD M8DE9OPwklZsrQ2W+rXurXpi/ZPcMQ== -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:45 2024 by rpki-client on console-ams.rpki-client.org