$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/B9A66D88A22A11EFBF21F71FC4F9AE02.roa File: B9A66D88A22A11EFBF21F71FC4F9AE02.roa (raw, json) Hash identifier: sJ9rownef2CuWKRi/w4mxoVdH5UibFjmiR4ta9WSY3s= Subject key identifier: 1C:DE:A9:AD:C8:26:A4:A3:FA:28:5C:E9:8D:D6:6B:51:5F:34:6B:50 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0B1E Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/B9A66D88A22A11EFBF21F71FC4F9AE02.roa Signing time: Thu 14 Nov 2024 01:49:46 +0000 ROA not before: Thu 14 Nov 2024 01:49:46 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 5065 IP address blocks: 103.15.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2846 (0xb1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Nov 14 01:49:46 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6735573a-9a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:b8:9e:fe:7b:43:b7:a8:7b:f9:99:84:29: 1a:84:01:d7:aa:26:af:06:33:3c:5b:80:9d:50:9d: 4d:bb:f2:a3:95:2c:2d:3c:07:e5:2c:d0:0a:0a:2c: 01:42:43:d5:72:12:d2:ee:2f:d1:03:af:db:b8:58: 7c:9c:f5:b8:50:c3:61:f1:65:5a:a3:40:0b:97:b6: 68:b9:d1:3d:cf:f6:35:e6:fb:6f:51:9e:30:3c:57: 0d:f7:9e:d0:29:e3:5e:69:eb:02:40:a3:e4:d4:30: c3:84:4f:61:df:f6:4e:6c:48:e6:fe:ce:50:72:a0: 47:7e:7b:75:eb:31:cc:8a:02:cf:c0:a0:d2:b9:3c: 95:2e:a6:88:79:3f:be:53:94:de:8e:7d:35:c9:23: 63:ac:a9:05:cc:6f:26:ba:ee:db:51:df:81:ec:27: 9f:7f:19:60:f4:4c:cd:4e:f1:45:63:31:ea:cb:09: ff:fb:ee:97:de:34:36:67:28:6b:39:4e:26:6a:51: ae:fc:81:ec:82:f3:58:c9:eb:5d:f0:2d:58:78:56: 01:19:ea:31:12:7f:45:dc:fe:6d:26:a1:48:86:e4: 51:e1:b9:1d:bc:4e:26:46:43:ba:1f:98:19:bd:4b: 4f:76:ce:0d:18:d7:d6:d9:c3:53:15:12:dd:89:27: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DE:A9:AD:C8:26:A4:A3:FA:28:5C:E9:8D:D6:6B:51:5F:34:6B:50 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/B9A66D88A22A11EFBF21F71FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.32.0/24 Signature Algorithm: sha256WithRSAEncryption 78:ee:70:7f:92:d6:0d:70:3e:10:54:90:ca:52:8b:81:2b:b5: e0:ba:3b:d0:ad:84:b2:f2:05:0a:f7:4a:17:80:ec:ef:41:c5: 76:a9:41:c5:31:59:a7:14:32:86:cd:f1:a8:76:fb:d6:f4:62: 04:86:69:52:c7:4c:c4:14:0f:53:92:97:84:1c:b1:15:0d:2b: f1:8a:fe:04:3d:d1:f5:2c:11:e2:50:fe:3a:c6:f1:61:b3:38: 82:00:27:35:b2:16:68:c9:d3:28:cb:a7:74:62:d1:da:32:a3: 02:f7:1d:21:24:ec:a3:ac:38:16:e5:fb:3b:d3:a4:93:0a:92: 44:1d:d7:c8:71:6a:88:be:eb:dd:d7:9c:2f:b8:fe:ae:a8:29: f8:24:76:0b:90:3e:cd:13:0d:ee:12:aa:2f:0d:13:69:a1:c1: 1b:26:6e:db:c3:63:08:05:48:84:5a:1b:2d:77:e5:6d:d7:bc: 4c:ce:2b:ad:91:a7:dd:1c:f5:68:89:4e:c9:f1:57:52:2d:bb: c9:23:db:73:d3:c6:9c:72:23:8b:eb:f5:ea:ce:70:57:6a:5f: 4a:aa:c8:33:44:2a:17:31:ec:f8:2b:8a:80:7c:aa:69:a6:96: 95:35:f8:d7:6f:58:05:8d:8a:64:cc:26:b5:66:d3:62:f7:46: d7:a6:f5:a6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjQxMTE0MDE0OTQ2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NzM1NTczYS05YTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqO4nv57Q7eoe/mZhCkahAHXqiavBjM8W4CdUJ1Nu/KjlSwtPAflLNAKCiwB QkPVchLS7i/RA6/buFh8nPW4UMNh8WVao0ALl7ZoudE9z/Y15vtvUZ4wPFcN957Q KeNeaesCQKPk1DDDhE9h3/ZObEjm/s5QcqBHfnt16zHMigLPwKDSuTyVLqaIeT++ U5Tejn01ySNjrKkFzG8muu7bUd+B7Ceffxlg9EzNTvFFYzHqywn/++6X3jQ2Zyhr OU4malGu/IHsgvNYyetd8C1YeFYBGeoxEn9F3P5tJqFIhuRR4bkdvE4mRkO6H5gZ vUtPds4NGNfW2cNTFRLdiSdWiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBzeqa3I JqSj+ihc6Y3Wa1FfNGtQMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvQjlBNjZEODhB MjJBMTFFRkJGMjFGNzFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnDyAwDQYJKoZIhvcNAQELBQADggEBAHjucH+S1g1wPhBU kMpSi4ErteC6O9CthLLyBQr3SheA7O9BxXapQcUxWacUMobN8ah2+9b0YgSGaVLH TMQUD1OSl4QcsRUNK/GK/gQ90fUsEeJQ/jrG8WGzOIIAJzWyFmjJ0yjLp3Ri0doy owL3HSEk7KOsOBbl+zvTpJMKkkQd18hxaoi+693XnC+4/q6oKfgkdguQPs0TDe4S qi8NE2mhwRsmbtvDYwgFSIRaGy135W3XvEzOK62Rp90c9WiJTsnxV1Itu8kj23PT xpxyI4vr9erOcFdqX0qqyDNEKhcx7PgrioB8qmmmlpU1+NdvWAWNimTMJrVm02L3 Rtem9aY= -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:56 2024 by rpki-client on console-ams.rpki-client.org