$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/4967CEF66AD311EF88752B40C4F9AE02.roa File: 4967CEF66AD311EF88752B40C4F9AE02.roa (raw, json) Hash identifier: mExQ3y5a1BiPyGxUiz0th88kHUb2w/I4+la/1SBd/cQ= Subject key identifier: 63:24:E1:1B:6B:E9:95:CA:3B:DE:94:54:70:68:80:A7:D5:49:20:2C Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Certificate serial: 0922 Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/4967CEF66AD311EF88752B40C4F9AE02.roa Signing time: Wed 04 Sep 2024 15:35:18 +0000 ROA not before: Wed 04 Sep 2024 15:35:18 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 147302 IP address blocks: 103.72.0.0/24 maxlen: 24 103.72.2.0/24 maxlen: 24 103.72.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 20:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2338 (0x922) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Validity Not Before: Sep 4 15:35:18 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=66d87e35-590a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5c:b6:07:f6:06:77:3a:f8:2a:65:97:b0:1f: 4a:3f:d6:31:9c:72:3c:41:57:65:a2:3f:66:09:e2: 37:85:22:53:2b:eb:80:70:32:6e:50:62:0e:b3:d6: c8:39:7d:02:68:cc:da:1b:0a:f8:be:c0:59:64:28: a4:e5:cb:99:00:d1:88:1a:45:75:73:3d:8f:67:25: 7a:1b:44:fe:0d:5a:aa:33:32:6f:a5:2c:09:26:50: 6e:83:46:64:07:1a:bb:8a:cc:46:37:2d:22:30:14: 1d:b4:60:7c:b1:1a:54:5d:2c:75:ff:6b:a2:f0:02: 7f:a4:8f:96:a6:58:c5:db:28:af:25:d4:17:d7:9f: e3:54:f4:29:85:79:43:37:6c:4a:45:72:96:15:d2: 23:d6:f2:2e:bb:b0:7b:ea:1d:92:74:19:3f:4f:9c: 21:7c:d5:3e:d5:30:49:2e:73:a8:1e:50:4d:06:8f: 27:dc:e4:1e:55:bd:39:d2:09:67:19:fd:24:8d:18: 7d:12:7d:20:11:01:97:fb:a2:78:a5:07:f9:c8:20: 24:8e:0d:91:4b:3d:9e:60:ee:c8:b4:8b:c7:a4:fd: 63:46:44:4d:4b:66:99:e5:8c:67:22:11:46:5d:46: 66:64:07:4d:7d:8e:0a:b4:89:92:b6:46:4c:35:57: 42:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:24:E1:1B:6B:E9:95:CA:3B:DE:94:54:70:68:80:A7:D5:49:20:2C X509v3 Authority Key Identifier: keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/4967CEF66AD311EF88752B40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.0.0/24 103.72.2.0/23 Signature Algorithm: sha256WithRSAEncryption 72:c6:10:d8:d9:4f:50:ea:76:20:1e:57:3a:c5:0c:7e:47:d6: 6a:fe:90:7c:60:da:cc:6e:f2:03:6b:73:cb:2a:ef:8f:4f:31: ff:79:e8:4b:3a:71:f3:c0:1e:8a:0c:e8:b3:86:69:cc:ed:9e: 70:7e:93:c9:01:74:91:84:d2:9a:77:60:d1:d6:a2:e0:04:17: 81:bb:50:b6:93:2d:9c:89:44:e1:cc:b5:d3:e1:c6:f9:c6:90: d6:d9:59:81:05:bb:4b:dc:0f:e2:a2:9d:30:4d:57:e8:2d:bb: 3b:07:8f:e9:d4:f8:bc:f7:eb:e0:13:b5:8d:e4:d8:e6:24:86: 8d:ca:c3:08:a6:15:67:5a:3b:6e:6d:9b:c8:8b:31:e8:24:1f: 47:cb:ed:ad:7d:34:f2:29:38:34:a5:90:1f:50:a1:e6:38:e0: ba:80:78:60:5a:2f:e8:a1:14:cf:12:5e:58:f7:72:d8:32:7b: 57:b2:f7:f6:87:f4:a4:89:9f:e9:45:e3:43:4c:82:7c:ef:9b: 0a:cc:fb:e7:3a:83:4a:1d:45:1b:f0:3f:29:c7:2e:a2:0c:ed: a9:2d:11:b4:25:26:e3:e7:21:8e:96:39:a8:fd:cb:0b:c0:63: 4d:1c:65:bc:16:6f:bd:12:c3:dd:ec:95:5d:f0:16:44:46:ff: cb:c6:d7:88 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3 NDdFQTAyNjAwHhcNMjQwOTA0MTUzNTE4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4N2UzNS01OTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoly2B/YGdzr4KmWXsB9KP9YxnHI8QVdloj9mCeI3hSJTK+uAcDJuUGIOs9bI OX0CaMzaGwr4vsBZZCik5cuZANGIGkV1cz2PZyV6G0T+DVqqMzJvpSwJJlBug0Zk Bxq7isxGNy0iMBQdtGB8sRpUXSx1/2ui8AJ/pI+WpljF2yivJdQX15/jVPQphXlD N2xKRXKWFdIj1vIuu7B76h2SdBk/T5whfNU+1TBJLnOoHlBNBo8n3OQeVb050gln Gf0kjRh9En0gEQGX+6J4pQf5yCAkjg2RSz2eYO7ItIvHpP1jRkRNS2aZ5YxnIhFG XUZmZAdNfY4KtImStkZMNVdCawIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGMk4Rtr 6ZXKO96UVHBogKfVSSAsMB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUZGMTUvQjQ3ODVCRTg4RDRDMTFFQUJCREQzQTc0QzRGOUFFMDIvNDk2N0NFRjY2 QUQzMTFFRjg4NzUyQjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnSAADBAFnSAIwDQYJKoZIhvcNAQELBQADggEBAHLGENjZ T1DqdiAeVzrFDH5H1mr+kHxg2sxu8gNrc8sq749PMf956Es6cfPAHooM6LOGaczt nnB+k8kBdJGE0pp3YNHWouAEF4G7ULaTLZyJROHMtdPhxvnGkNbZWYEFu0vcD+Ki nTBNV+gtuzsHj+nU+Lz36+ATtY3k2OYkho3KwwimFWdaO25tm8iLMegkH0fL7a19 NPIpODSlkB9QoeY44LqAeGBaL+ihFM8SXlj3ctgye1ey9/aH9KSJn+lF40NMgnzv mwrM++c6g0odRRvwPynHLqIM7aktEbQlJuPnIY6WOaj9ywvAY00cZbwWb70Sw93s lV3wFkRG/8vG14g= -----END CERTIFICATE-----Generated at Tue Oct 22 21:15:12 2024 by rpki-client on console-ams.rpki-client.org