$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/865246208A7311EE9A63E50AC4F9AE02.roa File: 865246208A7311EE9A63E50AC4F9AE02.roa (raw, json) Hash identifier: v9ZGdlOjZStV7I7ytsGRkV0jUz2dkwvsMI8HDzxGUnQ= Subject key identifier: B7:7C:39:1F:E5:A4:06:68:D4:32:E2:B4:B2:E2:3E:8D:ED:5F:80:FB Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4552 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/865246208A7311EE9A63E50AC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:14 +0000 ROA not before: Thu 05 Sep 2024 03:32:14 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131421 IP address blocks: 103.17.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17746 (0x4552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:14 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9263e-c8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c8:a2:41:22:9d:92:87:6c:13:bf:24:2e:eb: 35:0c:45:b3:57:46:78:34:38:a4:fc:95:67:f9:be: a1:b8:91:47:88:cb:db:d2:ea:95:aa:fa:c9:02:93: f3:b6:b0:df:41:44:ed:b8:f0:19:c9:78:9a:38:8f: 5a:6a:83:3b:54:54:92:b0:83:62:76:48:3d:03:95: 80:2a:b2:8d:07:5e:57:29:3f:2c:57:a8:2f:39:a2: fc:1f:c1:cd:98:3f:db:4a:e6:a4:ca:0e:16:24:c3: 49:97:e8:0a:98:27:99:78:4d:0f:9d:0f:20:54:4f: a8:1e:6c:55:30:4a:0a:f0:5a:ee:89:75:f8:80:81: 9c:bc:f3:7b:81:85:56:50:3f:f0:12:eb:a6:02:84: 6a:99:75:90:0a:2b:a7:14:80:d2:d8:b8:a4:8b:86: aa:64:1a:8f:25:3c:5c:ae:9a:d7:9e:49:ac:39:5a: 98:3b:20:f3:a6:e9:ed:b5:45:10:23:50:ce:b8:34: 0c:f6:eb:15:87:65:85:03:f6:ce:88:be:e9:82:ff: cc:23:7a:3c:23:58:54:76:a2:2c:99:e6:0b:60:c5: 2a:6a:c4:85:34:2a:47:80:5e:03:f8:71:f0:06:de: ef:87:7e:7f:e8:de:27:e3:e7:d0:45:8b:60:99:20: e5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7C:39:1F:E5:A4:06:68:D4:32:E2:B4:B2:E2:3E:8D:ED:5F:80:FB X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/865246208A7311EE9A63E50AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.17.236.0/22 Signature Algorithm: sha256WithRSAEncryption a3:b8:89:e0:85:62:d6:3f:17:73:f6:b9:e4:a7:1f:a8:64:ad: b7:26:ef:23:c8:69:1b:96:81:ef:85:81:b3:96:60:d9:cc:70: 3f:66:5f:9e:c8:b9:fe:e2:87:79:75:04:4f:a1:3d:af:e2:91: 9c:af:ef:4a:fd:f4:0e:81:74:6c:42:65:7a:11:1f:f1:17:aa: bb:61:05:23:66:e0:0b:ed:39:ad:e7:ba:e4:c7:48:00:5d:9b: bd:53:b5:13:b5:65:8c:83:c8:d1:4a:52:33:64:49:94:c2:7b: 5e:18:79:d2:15:45:ee:2e:fc:46:39:07:2e:e5:0e:c7:48:c4: a4:6c:7d:e4:29:82:9c:13:81:2d:c9:c4:02:74:8b:e1:b3:39: 07:f2:69:90:e2:0f:1b:0d:2e:68:69:b0:8c:89:0e:5a:a0:e8: 0b:91:01:f0:2d:61:43:41:05:9a:f6:75:68:ab:bc:f8:a7:6b: 74:58:4e:17:86:b0:d8:22:ea:ae:bd:d5:b4:9b:b8:01:c9:be: 7e:64:f4:f5:e1:7c:cd:90:13:51:90:a1:82:20:03:36:e0:fd: ac:3f:40:48:76:64:7d:bb:55:64:23:23:8f:a0:6a:47:03:2a: d2:76:f5:54:8c:a7:bd:2a:c8:2b:56:eb:79:83:2b:72:a5:c7: be:48:e4:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICRVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjE0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjYzZS1jOGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8iiQSKdkodsE78kLus1DEWzV0Z4NDik/JVn+b6huJFHiMvb0uqVqvrJApPz trDfQUTtuPAZyXiaOI9aaoM7VFSSsINidkg9A5WAKrKNB15XKT8sV6gvOaL8H8HN mD/bSuakyg4WJMNJl+gKmCeZeE0PnQ8gVE+oHmxVMEoK8FruiXX4gIGcvPN7gYVW UD/wEuumAoRqmXWQCiunFIDS2Liki4aqZBqPJTxcrprXnkmsOVqYOyDzpunttUUQ I1DOuDQM9usVh2WFA/bOiL7pgv/MI3o8I1hUdqIsmeYLYMUqasSFNCpHgF4D+HHw Bt7vh35/6N4n4+fQRYtgmSDlSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLd8OR/l pAZo1DLitLLiPo3tX4D7MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODY1MjQ2MjA4 QTczMTFFRTlBNjNFNTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnEewwDQYJKoZIhvcNAQELBQADggEBAKO4ieCFYtY/F3P2 ueSnH6hkrbcm7yPIaRuWge+FgbOWYNnMcD9mX57Iuf7ih3l1BE+hPa/ikZyv70r9 9A6BdGxCZXoRH/EXqrthBSNm4AvtOa3nuuTHSABdm71TtRO1ZYyDyNFKUjNkSZTC e14YedIVRe4u/EY5By7lDsdIxKRsfeQpgpwTgS3JxAJ0i+GzOQfyaZDiDxsNLmhp sIyJDlqg6AuRAfAtYUNBBZr2dWirvPina3RYTheGsNgi6q691bSbuAHJvn5k9PXh fM2QE1GQoYIgAzbg/aw/QEh2ZH27VWQjI4+gakcDKtJ29VSMp70qyCtW63mDK3Kl x75I5BY= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org