$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/439C75C021ED11ED945CE952C4F9AE02.roa File: 439C75C021ED11ED945CE952C4F9AE02.roa (raw, json) Hash identifier: dAxhVmKdUzxjyuhMI1B6G6rZR2kFZRrMrstnUBVwWn0= Subject key identifier: AB:44:E2:36:97:F1:9A:78:FF:51:DA:5F:D4:31:5B:B6:EC:5E:56:9C Certificate issuer: /CN=A91A45A0/serialNumber=8308A0E50ED276B6AE11A3482BC2BBD040E59F1A Certificate serial: 09FA Authority key identifier: 83:08:A0:E5:0E:D2:76:B6:AE:11:A3:48:2B:C2:BB:D0:40:E5:9F:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/439C75C021ED11ED945CE952C4F9AE02.roa Signing time: Tue 02 Jul 2024 20:27:53 +0000 ROA not before: Tue 02 Jul 2024 20:27:53 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 135097 IP address blocks: 103.142.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.crl rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2554 (0x9fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45A0/serialNumber=8308A0E50ED276B6AE11A3482BC2BBD040E59F1A Validity Not Before: Jul 2 20:27:53 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=668462c8-1c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:94:1c:e5:13:b4:60:83:1e:d2:e9:98:4b:64: c7:0e:76:e4:e7:ba:b6:ba:5f:d4:ae:f0:17:7b:65: f8:c7:31:e5:55:15:df:ea:5f:17:9b:d0:0b:98:12: 44:5d:33:40:43:d3:53:83:2c:90:5e:76:c5:23:5c: 82:aa:dd:cb:1f:79:1e:78:f9:0f:28:96:7d:04:58: d9:33:5b:ba:68:00:0b:3e:5d:75:24:bc:18:82:a9: 33:38:ec:43:a8:d8:54:68:f2:ea:82:c4:dc:a8:d1: ac:ee:21:59:69:4b:46:69:84:30:a9:bc:51:3f:ee: e3:f3:43:07:14:17:d1:12:e5:a8:8b:b8:b4:fc:4d: 0d:af:57:c6:57:9e:86:4b:d8:7c:fa:09:6e:ec:31: f0:7b:59:83:e7:fc:62:14:2c:91:a6:05:32:d2:0b: 2e:47:ca:b6:b4:00:6e:f5:9c:f0:25:08:9a:cc:71: 46:f3:35:77:59:5d:c3:1d:dc:aa:0f:50:2f:26:1c: 38:eb:c0:9e:2e:47:49:03:e2:e2:19:7d:f3:8b:4c: cd:66:ec:eb:5c:06:ac:0b:2e:9d:49:19:ec:f8:d1: 7a:fe:e0:60:12:97:d0:36:98:0f:08:74:f3:69:4b: 3f:ca:30:b5:b0:9d:20:ef:82:2b:9a:de:fa:3e:df: 61:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:44:E2:36:97:F1:9A:78:FF:51:DA:5F:D4:31:5B:B6:EC:5E:56:9C X509v3 Authority Key Identifier: keyid:83:08:A0:E5:0E:D2:76:B6:AE:11:A3:48:2B:C2:BB:D0:40:E5:9F:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/439C75C021ED11ED945CE952C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.230.0/24 Signature Algorithm: sha256WithRSAEncryption 99:15:20:45:53:b7:39:0f:e2:5c:ac:6e:9e:01:7b:10:79:d6: ba:35:67:a3:86:c3:45:be:f2:1f:94:79:5b:7e:d5:88:97:b7: d0:e3:f9:fd:23:50:03:fa:7d:35:ec:8c:00:0b:6a:3c:41:f6: 54:0b:6c:da:29:7f:d6:9a:a8:f5:8a:f1:3b:f3:33:12:94:8e: 64:1b:19:43:90:92:ca:bc:76:85:2e:c2:33:ce:20:87:47:6c: 70:54:c8:95:19:bd:b9:ba:a3:ed:a5:57:64:1c:7b:72:ca:f7: 13:31:e9:3b:37:60:64:ee:fc:d4:19:d6:15:67:5a:63:3f:90: 09:55:84:68:be:8a:80:6c:a0:f4:45:9f:d9:72:87:76:3e:19: cf:08:3c:7f:24:cc:09:b9:e3:b0:76:c2:a4:cc:c6:34:2b:70: a5:a7:f1:3f:b9:ef:3a:e8:70:c3:55:88:6e:47:e0:63:c3:fc: a4:a1:38:9a:a8:5b:85:15:89:4a:89:05:3b:5e:bc:c1:6b:b2: 67:22:a9:05:f5:b5:66:de:68:6b:f6:e0:5d:8e:fe:cc:fe:0f: 1f:9c:b0:b7:6e:df:53:e7:f2:c4:a0:c5:3c:04:7d:c0:f9:09: 46:8e:b3:a4:64:d2:55:79:97:cd:47:f8:72:bf:9f:91:84:d9: 50:b8:3b:fb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1QTAxMTAvBgNVBAUTKDgzMDhBMEU1MEVEMjc2QjZBRTExQTM0ODJCQzJCQkQw NDBFNTlGMUEwHhcNMjQwNzAyMjAyNzUzWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0NjJjOC0xYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJQc5RO0YIMe0umYS2THDnbk57q2ul/UrvAXe2X4xzHlVRXf6l8Xm9ALmBJE XTNAQ9NTgyyQXnbFI1yCqt3LH3keePkPKJZ9BFjZM1u6aAALPl11JLwYgqkzOOxD qNhUaPLqgsTcqNGs7iFZaUtGaYQwqbxRP+7j80MHFBfREuWoi7i0/E0Nr1fGV56G S9h8+glu7DHwe1mD5/xiFCyRpgUy0gsuR8q2tABu9ZzwJQiazHFG8zV3WV3DHdyq D1AvJhw468CeLkdJA+LiGX3zi0zNZuzrXAasCy6dSRns+NF6/uBgEpfQNpgPCHTz aUs/yjC1sJ0g74Irmt76Pt9h8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFKtE4jaX 8Zp4/1HaX9QxW7bsXlacMB8GA1UdIwQYMBaAFIMIoOUO0na2rhGjSCvCu9BA5Z8a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVBMC9CRjMxNDcxMjU2 RjAxMUVBQTZFOThENDJDNEY5QUUwMi9nd2lnNVE3U2RyYXVFYU5JSzhLNzBFRGxu eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3aWc1UTdTZHJhdUVhTklLOEs3MEVEbG54by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ1QTAvQkYzMTQ3MTI1NkYwMTFFQUE2RTk4RDQyQzRGOUFFMDIvNDM5Qzc1QzAy MUVEMTFFRDk0NUNFOTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnjuYwDQYJKoZIhvcNAQELBQADggEBAJkVIEVTtzkP4lys bp4BexB51ro1Z6OGw0W+8h+UeVt+1YiXt9Dj+f0jUAP6fTXsjAALajxB9lQLbNop f9aaqPWK8TvzMxKUjmQbGUOQksq8doUuwjPOIIdHbHBUyJUZvbm6o+2lV2Qce3LK 9xMx6Ts3YGTu/NQZ1hVnWmM/kAlVhGi+ioBsoPRFn9lyh3Y+Gc8IPH8kzAm547B2 wqTMxjQrcKWn8T+57zrocMNViG5H4GPD/KShOJqoW4UViUqJBTtevMFrsmciqQX1 tWbeaGv24F2O/sz+Dx+csLdu31Pn8sSgxTwEfcD5CUaOs6Rk0lV5l81H+HK/n5GE 2VC4O/s= -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:56 2024 by rpki-client on console-ams.rpki-client.org