$ rpki-client -vvf rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/D249CE5EFE8911EBA7BEB564C4F9AE02.roa File: D249CE5EFE8911EBA7BEB564C4F9AE02.roa (raw, json) Hash identifier: Kl/jYxUXqCil/0G6LuLn2peWneSNh/bHX1vc6KhRG0E= Subject key identifier: 9C:C0:8C:55:09:75:4E:64:B3:21:DB:23:BB:50:84:CE:CB:BC:53:FB Certificate issuer: /CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B Certificate serial: 04C1 Authority key identifier: 46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/D249CE5EFE8911EBA7BEB564C4F9AE02.roa Signing time: Fri 25 Oct 2024 00:14:37 +0000 ROA not before: Fri 25 Oct 2024 00:14:37 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 136427 IP address blocks: 103.155.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1217 (0x4c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B Validity Not Before: Oct 25 00:14:37 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671ae2ec-96e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:21:ee:15:d9:ed:2c:44:e8:8d:05:3e:d3: 1b:6f:b1:d9:99:8c:90:57:29:af:ef:c4:de:d4:33: 84:9c:c7:16:81:d4:61:92:c4:83:36:90:ad:25:56: 89:26:02:29:88:ed:d8:63:f8:e7:00:9a:b7:36:46: ce:f5:bb:2c:8c:c2:df:68:cb:9b:ae:7e:b3:93:16: de:3f:a7:83:7f:2c:35:ba:ec:e1:a9:8c:1e:77:e7: 9a:2d:ea:e1:e5:1d:4d:ee:35:1d:70:25:a9:fb:50: 66:05:ae:a1:9d:bc:ce:9b:d9:57:5e:d1:88:a0:39: 15:c8:20:01:66:58:95:ff:79:ac:38:47:a2:25:7d: 39:64:c5:46:1d:80:a2:e5:25:83:96:fe:c3:98:e0: a5:c4:03:ac:78:d3:71:e5:95:d8:cc:3b:77:1e:2d: 12:c2:a6:fe:30:5b:4b:85:b6:da:80:fa:46:82:5b: 7d:f9:50:b0:72:c5:df:54:b1:5d:3d:4e:fa:74:2b: 07:13:7c:6c:57:b0:c2:2c:cb:da:a2:8a:93:40:30: b3:ab:8b:1b:7a:79:25:85:95:19:39:9d:32:28:47: e7:44:03:5c:c1:d2:0a:64:15:10:ac:95:9d:71:0a: f1:57:9d:be:f7:34:58:06:f4:31:79:41:d5:92:32: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C0:8C:55:09:75:4E:64:B3:21:DB:23:BB:50:84:CE:CB:BC:53:FB X509v3 Authority Key Identifier: keyid:46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/D249CE5EFE8911EBA7BEB564C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.145.0/24 Signature Algorithm: sha256WithRSAEncryption 88:c9:13:33:bb:4d:26:c0:e0:be:6c:a1:41:28:a2:f2:6a:e8: 5e:2d:78:bd:1d:4e:41:2e:26:44:53:77:cc:78:bf:1b:ed:da: d1:b8:33:4d:64:8f:04:95:fb:4e:cb:52:f2:05:d4:88:81:a9: e4:a1:a3:d7:16:d5:13:2d:f1:81:83:bd:98:11:79:7a:2f:12: 60:f2:84:49:a9:9f:e6:01:ae:cf:ca:ec:ba:81:cc:d2:56:1b: 78:82:6c:65:d0:ab:4e:d8:0a:84:94:ed:79:b5:f1:fc:68:41: 06:18:86:1c:0c:28:a3:53:8b:2e:db:76:66:bb:e9:72:82:e9: a7:d7:e7:da:d9:31:a8:d4:b8:64:bc:d2:8c:5a:76:4d:d4:20: 1b:d7:58:22:42:a2:1e:eb:0b:0c:73:10:1d:c8:9e:2d:88:c7: ea:c1:1c:f6:31:78:8f:ed:39:74:54:5e:92:52:6b:97:de:c8: 2c:2b:31:78:03:ed:23:18:f0:25:6e:38:e4:ad:f6:ed:8e:50: 4a:d5:b7:2c:9c:0c:9f:0d:c4:a3:a3:03:4c:c3:ea:f9:3f:01: f1:f7:af:cf:c6:31:9b:8c:b0:e6:ad:35:39:d2:a5:16:da:c8: 43:32:08:c7:6c:55:d9:f7:dd:f8:c5:b8:7a:26:9a:91:37:18: 8e:97:b8:d7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyRkIxMTAvBgNVBAUTKDQ2NDlCMjQ5RTQyNkMyQjhGQUFGRjYyRjI3OTBGMkU2 N0IwMEZDNUIwHhcNMjQxMDI1MDAxNDM3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFhZTJlYy05NmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArf8h7hXZ7SxE6I0FPtMbb7HZmYyQVymv78Te1DOEnMcWgdRhksSDNpCtJVaJ JgIpiO3YY/jnAJq3NkbO9bssjMLfaMubrn6zkxbeP6eDfyw1uuzhqYwed+eaLerh 5R1N7jUdcCWp+1BmBa6hnbzOm9lXXtGIoDkVyCABZliV/3msOEeiJX05ZMVGHYCi 5SWDlv7DmOClxAOseNNx5ZXYzDt3Hi0Swqb+MFtLhbbagPpGglt9+VCwcsXfVLFd PU76dCsHE3xsV7DCLMvaooqTQDCzq4sbenklhZUZOZ0yKEfnRANcwdIKZBUQrJWd cQrxV52+9zRYBvQxeUHVkjKPTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJzAjFUJ dU5ksyHbI7tQhM7LvFP7MB8GA1UdIwQYMBaAFEZJsknkJsK4+q/2LyeQ8uZ7APxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJGQi85OTRENkRBNkZF ODcxMUVCQjlGQTcyNjNDNEY5QUUwMi9Sa215U2VRbXdyajZyX1l2SjVEeTVuc0Ff RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JrbXlTZVFtd3JqNnJfWXZKNUR5NW5zQV9Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTgyRkIvOTk0RDZEQTZGRTg3MTFFQkI5RkE3MjYzQzRGOUFFMDIvRDI0OUNFNUVG RTg5MTFFQkE3QkVCNTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnm5EwDQYJKoZIhvcNAQELBQADggEBAIjJEzO7TSbA4L5s oUEoovJq6F4teL0dTkEuJkRTd8x4vxvt2tG4M01kjwSV+07LUvIF1IiBqeSho9cW 1RMt8YGDvZgReXovEmDyhEmpn+YBrs/K7LqBzNJWG3iCbGXQq07YCoSU7Xm18fxo QQYYhhwMKKNTiy7bdma76XKC6afX59rZMajUuGS80oxadk3UIBvXWCJCoh7rCwxz EB3Ini2Ix+rBHPYxeI/tOXRUXpJSa5feyCwrMXgD7SMY8CVuOOSt9u2OUErVtyyc DJ8NxKOjA0zD6vk/AfH3r8/GMZuMsOatNTnSpRbayEMyCMdsVdn33fjFuHommpE3 GI6XuNc= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org