$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa File: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (raw, json) Hash identifier: 6L60AAj2lTmMuUfie+8gmkdZ9wTJGKc1X+KnYu5hWQc= Subject key identifier: 31:8A:CA:FB:81:B7:5D:CD:B3:CE:22:E4:BB:65:C3:79:AA:F2:47:A8 Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Certificate serial: 0B9E Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa Signing time: Sat 24 Aug 2024 19:07:28 +0000 ROA not before: Sat 24 Aug 2024 19:07:28 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 58665 IP address blocks: 103.12.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2974 (0xb9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Validity Not Before: Aug 24 19:07:28 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ca2f6f-425f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:91:25:1e:54:8c:95:d5:bc:f8:dc:83:52: d3:53:f4:52:52:fa:72:47:ca:32:06:e9:ee:6f:35: 75:30:d0:dc:77:e9:82:20:67:5a:95:e3:e4:3f:0e: 08:cf:07:e3:d8:c9:3b:e1:8e:ab:94:45:48:3a:26: 67:c4:04:41:d5:52:e3:8f:23:fc:7a:c4:72:38:db: 1d:bc:f6:98:b1:92:0b:17:19:59:78:b4:2c:d5:89: 38:6b:3f:b5:cb:c2:c5:8f:19:0a:ee:8c:a2:5b:2b: 78:dd:03:17:e3:f8:fc:9d:dd:d4:3f:64:0a:69:97: 87:b1:82:29:53:75:28:52:b4:4e:01:49:8a:b3:70: 21:98:8c:bf:4b:d0:39:4b:6d:ec:1a:7b:a2:32:0a: e5:06:6c:89:96:d4:4a:e7:d4:d2:20:c0:3b:51:84: c9:3c:53:36:83:62:46:0a:6e:e2:8c:4a:a7:10:18: 54:ee:da:91:01:2b:77:d5:c2:5a:63:c1:de:b3:9e: 36:0e:6c:39:93:9d:36:2b:87:47:84:d5:76:7e:70: a5:e5:fc:d6:7f:d6:f6:b6:47:6d:6a:ef:60:f4:a6: 1e:e3:45:73:7c:33:87:dc:14:87:ad:4e:e4:92:59: 35:c7:f0:9a:05:65:bc:f9:36:5d:dd:c5:e1:71:a3: 96:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8A:CA:FB:81:B7:5D:CD:B3:CE:22:E4:BB:65:C3:79:AA:F2:47:A8 X509v3 Authority Key Identifier: keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.228.0/22 Signature Algorithm: sha256WithRSAEncryption 68:0a:4d:3a:8c:b7:4b:12:94:e2:21:16:4c:d5:e2:f9:ae:68: b2:48:1c:66:32:9b:b0:52:ea:03:49:13:eb:ac:be:f8:78:f9: 59:3e:61:6d:ff:19:ac:56:05:85:ba:3c:7c:0a:56:50:22:33: 16:c9:2f:5e:3c:6e:2e:d0:01:b7:dc:31:90:f2:95:e3:b3:43: 30:72:77:f1:e4:a4:05:75:ca:43:59:6b:90:24:74:99:44:89: 7c:01:54:f0:68:65:fa:81:b6:d0:d5:40:c9:7f:2f:0d:3d:0f: db:f2:66:b8:b0:c3:cc:7f:db:c5:7c:d0:07:b3:96:2f:d3:4a: c6:f1:31:7e:07:27:7e:3c:25:6b:76:0b:ef:e4:fe:38:e2:5d: b7:2d:ee:cd:8a:f2:6e:54:a5:94:5f:45:c2:8f:c9:64:96:6a: 51:85:73:cc:56:3d:4c:b8:b1:bd:e3:fc:30:1a:6f:ec:b6:8c: e0:a6:88:3a:29:d2:72:cc:a4:44:18:40:f3:9e:d5:0a:85:e9: c2:b8:7e:74:1c:3d:bb:bc:ec:0a:a4:bf:17:5e:37:dd:23:a2: d7:30:2e:95:49:dd:4f:16:b1:ca:85:9a:82:90:b4:7d:49:8c: ff:d3:64:7a:c6:85:bb:1a:f6:71:d9:6b:02:2a:f3:a3:0f:fd: 93:c4:63:26 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDNDExMTAvBgNVBAUTKEJERDVFQjE1NjMzODM5M0Q3NDREQUUyRkM1MzJENTgz MkJDNzg1QkYwHhcNMjQwODI0MTkwNzI4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNhMmY2Zi00MjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAuRJR5UjJXVvPjcg1LTU/RSUvpyR8oyBunubzV1MNDcd+mCIGdalePkPw4I zwfj2Mk74Y6rlEVIOiZnxARB1VLjjyP8esRyONsdvPaYsZILFxlZeLQs1Yk4az+1 y8LFjxkK7oyiWyt43QMX4/j8nd3UP2QKaZeHsYIpU3UoUrROAUmKs3AhmIy/S9A5 S23sGnuiMgrlBmyJltRK59TSIMA7UYTJPFM2g2JGCm7ijEqnEBhU7tqRASt31cJa Y8Hes542Dmw5k502K4dHhNV2fnCl5fzWf9b2tkdtau9g9KYe40VzfDOH3BSHrU7k klk1x/CaBWW8+TZd3cXhcaOWiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDGKyvuB t13Ns84i5Ltlw3mq8keoMB8GA1UdIwQYMBaAFL3V6xVjODk9dE2uL8Uy1YMrx4W/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0M0MS9FNkJBNTQ0ODA5 RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9UMTBUYTR2eFRMVmd5dkho YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZkWHJGV000T1QxMFRhNHZ4VExWZ3l2SGhiOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNDNDEvRTZCQTU0NDgwOUQ2MTFFQTlEMjk5RTFDQzRGOUFFMDIvNjc0MDA5QUUw OUQ4MTFFQTlCQ0ZDRTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnDOQwDQYJKoZIhvcNAQELBQADggEBAGgKTTqMt0sSlOIh FkzV4vmuaLJIHGYym7BS6gNJE+usvvh4+Vk+YW3/GaxWBYW6PHwKVlAiMxbJL148 bi7QAbfcMZDyleOzQzByd/HkpAV1ykNZa5AkdJlEiXwBVPBoZfqBttDVQMl/Lw09 D9vyZriww8x/28V80Aezli/TSsbxMX4HJ348JWt2C+/k/jjiXbct7s2K8m5UpZRf RcKPyWSWalGFc8xWPUy4sb3j/DAab+y2jOCmiDop0nLMpEQYQPOe1QqF6cK4fnQc Pbu87AqkvxdeN90jotcwLpVJ3U8WscqFmoKQtH1JjP/TZHrGhbsa9nHZawIq86MP /ZPEYyY= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org