$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa File: C4D92628BF0611EC889EE54DC4F9AE02.roa (raw, json) Hash identifier: BvphW8GQefBp/8DXLCl2BncweDLlkh/4b7wlnYsIFRE= Subject key identifier: CF:ED:BC:B4:D9:17:CE:19:F7:C6:A3:0F:2F:0B:CE:8F:74:E2:1B:0A Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 467C Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:36:32 +0000 ROA not before: Thu 05 Sep 2024 03:36:32 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 63736 IP address blocks: 103.207.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18044 (0x467c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:36:32 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92740-9617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:e1:ed:d6:fc:76:d3:34:1d:fa:ca:f1:72: a6:1f:b6:b4:19:1e:e7:69:4a:ab:48:8c:11:76:78: b5:6a:82:ab:41:fa:88:d0:00:d4:a7:fd:e4:31:c9: bf:7c:0c:f1:82:55:d2:c1:70:aa:03:eb:e3:df:18: 3c:d6:f3:42:7d:13:07:5b:77:38:67:b8:6e:02:79: 5d:47:98:d9:5a:14:ab:07:4d:fa:e2:b0:d9:e9:e1: d1:f9:39:76:15:a7:db:bb:c2:e3:f6:0f:01:43:8b: db:88:79:44:57:6c:ee:22:dd:cb:36:5c:a1:a4:6e: 4a:a3:92:b8:ed:8b:05:30:2c:0c:09:25:e0:cf:18: a3:ed:45:8e:97:06:fb:fa:18:7a:5c:e4:38:4b:a7: d0:90:a1:ec:53:81:18:62:72:5a:7a:41:57:cf:a7: 1b:91:92:82:c1:90:b2:9b:dd:ee:e4:6f:1d:88:23: 3b:f7:9d:54:b9:42:4a:0c:94:00:2a:f0:e0:f0:5c: 68:9f:d3:ae:7f:8c:70:fc:bc:b4:6c:7b:6f:e1:bf: b7:54:d3:cf:d2:4b:81:6d:38:72:cb:20:8a:da:cf: 30:7e:2e:77:91:6b:e0:1e:4c:91:d5:52:82:53:80: b8:cd:11:ae:e9:07:44:33:3d:50:c4:5c:90:a0:48: c6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:ED:BC:B4:D9:17:CE:19:F7:C6:A3:0F:2F:0B:CE:8F:74:E2:1B:0A X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.207.32.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:fe:47:33:2a:69:7a:0c:8e:d9:cb:8c:63:30:cc:84:2b:2a: 90:2d:91:2c:dc:85:1b:cc:56:e8:fb:cb:15:1f:1b:ab:a4:a1: 1a:ee:1d:1f:b5:eb:0c:1e:5a:4a:45:ee:d3:96:85:37:00:b1: 83:8e:26:86:1d:08:8e:49:a6:85:48:1b:f9:9d:ca:fa:8d:1f: a1:87:d3:4f:42:fa:5a:0b:89:d8:91:45:9b:d9:4d:01:2c:1f: b8:67:85:95:b3:69:4e:9b:90:e3:d3:ad:84:16:3b:33:64:e0: 0d:0c:0d:9a:2a:e6:53:e2:bc:63:06:a4:fc:ba:86:27:35:fa: ce:29:aa:1b:9b:75:7c:0d:22:2d:03:4d:06:a8:8c:29:6d:69: 2f:12:26:94:e9:6f:cc:5d:02:ce:d5:10:03:97:59:67:2d:d7: c8:0c:fe:ff:f0:9c:ea:c5:ce:0b:16:53:8e:4e:f3:ae:04:57: 6d:e8:ea:da:52:88:4b:ae:7b:e9:a0:9b:8d:02:fc:1a:b8:00: 03:b0:c4:01:39:ed:c0:93:2d:3c:ad:2d:e6:00:6b:20:9b:98: a2:42:f5:df:12:d0:17:7a:17:3c:be:d3:c8:9d:e2:48:da:7a: d6:54:f8:08:74:42:d0:82:26:2d:3d:ff:7b:49:c6:bc:5a:13: ed:d9:e7:e9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICRnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNjMyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5Mjc0MC05NjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0vh7db8dtM0HfrK8XKmH7a0GR7naUqrSIwRdni1aoKrQfqI0ADUp/3kMcm/ fAzxglXSwXCqA+vj3xg81vNCfRMHW3c4Z7huAnldR5jZWhSrB0364rDZ6eHR+Tl2 Fafbu8Lj9g8BQ4vbiHlEV2zuIt3LNlyhpG5Ko5K47YsFMCwMCSXgzxij7UWOlwb7 +hh6XOQ4S6fQkKHsU4EYYnJaekFXz6cbkZKCwZCym93u5G8diCM7951UuUJKDJQA KvDg8Fxon9Ouf4xw/Ly0bHtv4b+3VNPP0kuBbThyyyCK2s8wfi53kWvgHkyR1VKC U4C4zRGu6QdEMz1QxFyQoEjGqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM/tvLTZ F84Z98ajDy8Lzo904hsKMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzREOTI2MjhC RjA2MTFFQzg4OUVFNTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnzyAwDQYJKoZIhvcNAQELBQADggEBAG3+RzMqaXoMjtnL jGMwzIQrKpAtkSzchRvMVuj7yxUfG6ukoRruHR+16wweWkpF7tOWhTcAsYOOJoYd CI5JpoVIG/mdyvqNH6GH009C+loLidiRRZvZTQEsH7hnhZWzaU6bkOPTrYQWOzNk 4A0MDZoq5lPivGMGpPy6hic1+s4pqhubdXwNIi0DTQaojCltaS8SJpTpb8xdAs7V EAOXWWct18gM/v/wnOrFzgsWU45O864EV23o6tpSiEuue+mgm40C/Bq4AAOwxAE5 7cCTLTytLeYAayCbmKJC9d8S0Bd6Fzy+08id4kjaetZU+Ah0QtCCJi09/3tJxrxa E+3Z5+k= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org