$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/C5FC427C5C1911E997A2ED42C4F9AE02.roa File: C5FC427C5C1911E997A2ED42C4F9AE02.roa (raw, json) Hash identifier: E7M9ff2lqZ9KItEYB6uL3gelJHB2f4xodQAgicwzP+4= Subject key identifier: 49:BB:1A:7A:55:9E:6A:83:94:AE:A1:40:1F:15:65:58:F0:A9:08:D3 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0F28 Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/C5FC427C5C1911E997A2ED42C4F9AE02.roa Signing time: Wed 02 Oct 2024 17:56:01 +0000 ROA not before: Wed 02 Oct 2024 17:56:01 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 17547 IP address blocks: 103.14.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3880 (0xf28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Oct 2 17:56:01 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fd8931-fef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:50:f3:9d:71:09:d5:08:0d:0b:d7:e9:11:8c: a7:1b:35:16:d2:d4:fd:10:57:8f:af:8d:18:0a:ff: 53:93:95:7a:29:b8:2d:40:0a:49:d9:b4:9e:af:db: db:b9:9a:5e:0d:31:da:d1:4f:a0:73:45:8b:9c:d2: 17:d4:a9:ef:ff:d1:56:f5:67:0c:ca:79:2b:33:0b: 95:33:76:24:8b:ff:ae:8f:1b:43:bf:c0:cc:66:fd: b4:ec:ad:5a:6a:61:7e:a3:70:94:a7:5b:e0:66:57: ba:e8:a9:de:a7:9d:4f:5a:43:4d:e3:c0:33:b3:99: bc:8b:ed:28:6a:03:21:6e:22:dc:4a:6e:cb:50:99: b6:d2:2d:7a:bd:95:cc:fa:c2:94:f2:e4:48:48:3f: 3f:04:30:d6:ad:1f:bc:a4:47:19:e7:5b:cd:5d:cc: da:ba:b2:b3:87:ee:a8:55:92:35:59:c4:f4:12:09: 38:c8:a8:bc:4c:8c:37:93:91:7d:84:85:06:ba:94: 75:07:97:cc:0b:52:42:8f:90:ce:28:30:af:a1:5a: ca:de:8f:ff:d9:88:35:d7:95:ab:43:70:12:4b:df: 50:7a:4b:ff:12:51:80:db:3d:54:0d:34:39:a0:44: 58:22:44:2b:ac:ca:5e:72:da:65:1f:ef:23:eb:2f: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BB:1A:7A:55:9E:6A:83:94:AE:A1:40:1F:15:65:58:F0:A9:08:D3 X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/C5FC427C5C1911E997A2ED42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.14.236.0/22 Signature Algorithm: sha256WithRSAEncryption 03:23:4d:67:1d:99:89:45:1f:ec:cc:f9:d9:b0:1a:7a:a8:15: e7:c7:61:73:30:4c:96:12:90:62:c8:24:c6:5f:86:fc:de:45: 16:02:b1:0d:b4:dd:c4:b8:4f:31:1c:37:b0:83:92:03:46:d5: a1:43:d8:7d:97:97:2d:11:3b:e5:77:41:b5:ba:4b:f9:b6:a9: 13:69:bd:0d:7d:14:9a:59:c3:cc:d6:90:bc:29:96:9f:05:df: 6e:1e:3a:67:03:62:ca:a9:37:2e:50:6d:4a:71:5e:93:6c:30: bd:c9:27:e6:eb:fd:19:ea:1b:7b:48:b8:f8:ca:8f:53:43:8d: eb:ad:e5:0f:b9:b6:4f:76:80:46:43:b8:e7:41:a8:5f:6d:f5: 6b:93:d4:9c:63:0b:b9:3a:d5:72:65:6e:5f:75:0d:5f:09:d1: fc:11:23:cb:0a:c6:c5:ea:39:7e:8d:79:ed:02:c7:2f:a2:71: 77:6f:02:97:73:ec:7c:c2:48:cf:db:ff:4f:e5:7d:b1:8c:60: 1c:e9:09:da:c7:5b:d6:c2:ca:16:26:47:e0:44:46:41:be:57: ae:26:f6:f8:c8:37:a9:dc:6e:a1:f0:97:92:65:a9:0d:25:bb: 84:9d:9a:4b:5e:a2:d3:c6:5f:34:3c:d4:17:0b:30:6c:ba:95: 83:65:e4:12 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjQxMDAyMTc1NjAxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkODkzMS1mZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01DznXEJ1QgNC9fpEYynGzUW0tT9EFePr40YCv9Tk5V6KbgtQApJ2bSer9vb uZpeDTHa0U+gc0WLnNIX1Knv/9FW9WcMynkrMwuVM3Yki/+ujxtDv8DMZv207K1a amF+o3CUp1vgZle66Knep51PWkNN48Azs5m8i+0oagMhbiLcSm7LUJm20i16vZXM +sKU8uRISD8/BDDWrR+8pEcZ51vNXczaurKzh+6oVZI1WcT0Egk4yKi8TIw3k5F9 hIUGupR1B5fMC1JCj5DOKDCvoVrK3o//2Yg115WrQ3ASS99Qekv/ElGA2z1UDTQ5 oERYIkQrrMpectplH+8j6y9JmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEm7GnpV nmqDlK6hQB8VZVjwqQjTMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThBRjEvQ0ExQTAzQzI1QzE4MTFFOUIzMDc0MzQxQzRGOUFFMDIvQzVGQzQyN0M1 QzE5MTFFOTk3QTJFRDQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnDuwwDQYJKoZIhvcNAQELBQADggEBAAMjTWcdmYlFH+zM +dmwGnqoFefHYXMwTJYSkGLIJMZfhvzeRRYCsQ203cS4TzEcN7CDkgNG1aFD2H2X ly0RO+V3QbW6S/m2qRNpvQ19FJpZw8zWkLwplp8F324eOmcDYsqpNy5QbUpxXpNs ML3JJ+br/RnqG3tIuPjKj1NDjeut5Q+5tk92gEZDuOdBqF9t9WuT1JxjC7k61XJl bl91DV8J0fwRI8sKxsXqOX6Nee0Cxy+icXdvApdz7HzCSM/b/0/lfbGMYBzpCdrH W9bCyhYmR+BERkG+V64m9vjIN6ncbqHwl5JlqQ0lu4SdmkteotPGXzQ81BcLMGy6 lYNl5BI= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org