$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/498ED6046FD011EDA007D478C4F9AE02.roa File: 498ED6046FD011EDA007D478C4F9AE02.roa (raw, json) Hash identifier: lwkH9V+4ruYpDtKVAny/uyyCWO7r9GoTBPNu4gEXlEg= Subject key identifier: 9E:E8:69:64:17:41:79:85:53:49:27:62:EE:5B:B3:BA:65:27:E4:EA Certificate issuer: /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Certificate serial: 0B98 Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/498ED6046FD011EDA007D478C4F9AE02.roa Signing time: Mon 12 Aug 2024 19:17:10 +0000 ROA not before: Mon 12 Aug 2024 19:17:10 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 137959 IP address blocks: 103.31.178.0/23 maxlen: 24 103.118.76.0/22 maxlen: 24 2403:2e40:1::/48 maxlen: 48 2403:2e40:2::/48 maxlen: 48 2403:2e40:3::/48 maxlen: 48 2403:2e40:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2968 (0xb98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Validity Not Before: Aug 12 19:17:10 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ba5fb6-5797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:cb:81:3c:fa:37:25:21:60:0c:b9:4e:06: 5a:3f:cc:8f:f8:9e:4e:be:96:07:e8:95:c9:9b:89: 67:0c:db:57:c2:6e:52:fb:92:cc:9e:96:2d:4d:b1: 6c:5f:4d:f7:6f:cf:8e:9d:3e:48:f9:cc:d2:73:1e: 5a:6d:44:08:b8:b9:ed:35:81:f0:b2:7f:b3:95:f2: 56:6a:58:f3:7f:a0:31:61:13:06:87:d0:c7:bb:bf: f1:67:ba:7a:78:0b:5e:f7:db:3b:b0:cd:72:98:64: c0:f2:25:b2:50:b0:5a:ea:76:4d:f5:45:cd:54:6a: 9f:12:ce:4f:11:24:e4:23:94:c7:f1:3f:0b:9e:11: 17:c3:47:67:a0:a4:bd:8a:19:8b:1b:f8:7e:a5:e1: 67:f3:91:65:26:dd:dc:fd:4b:a6:88:31:8c:31:3f: 86:9f:3b:49:3b:e6:36:04:aa:66:df:f4:b5:32:e9: a6:a0:15:de:52:2a:af:6c:ef:4e:0d:13:bf:b3:2b: 9e:6b:2d:29:9c:f3:91:72:f2:75:d9:69:88:d4:25: c5:a8:23:dc:57:5f:e1:e7:87:e9:7c:5f:66:2c:9c: a9:92:b8:5e:50:ed:2c:b0:a2:53:c1:4a:ad:a3:1b: fb:e0:9f:b6:7d:ff:c9:e5:c8:1d:22:d2:3b:34:96: 68:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E8:69:64:17:41:79:85:53:49:27:62:EE:5B:B3:BA:65:27:E4:EA X509v3 Authority Key Identifier: keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/498ED6046FD011EDA007D478C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.31.178.0/23 103.118.76.0/22 IPv6: 2403:2e40:1::-2403:2e40:3:ffff:ffff:ffff:ffff:ffff 2403:2e40:10::/48 Signature Algorithm: sha256WithRSAEncryption 37:49:42:cc:70:5e:6c:d7:a1:a9:00:76:d2:67:1b:26:fa:18: 16:51:04:66:57:b0:b4:1e:b4:2f:e2:a6:50:2a:7c:d7:65:1f: 29:ee:88:ac:14:a5:46:6d:6d:45:83:cd:20:20:b9:c4:fc:f0: 72:3e:e4:63:8c:a0:a8:5c:3a:d9:2f:4f:9d:b8:53:41:f1:5c: 7f:c5:30:51:2f:68:b0:9c:a8:6f:32:e8:b9:bf:a7:26:88:95: 38:78:97:73:7d:e5:10:24:70:77:d0:ba:13:3b:80:02:e7:18: da:42:8f:01:4a:00:13:38:9e:9e:8f:47:4a:29:74:59:07:1d: 7e:37:f1:ec:03:57:f9:96:74:52:32:fe:7b:70:dc:fa:9d:92: 61:db:33:4a:ea:79:0e:a1:d4:13:67:db:38:36:5d:1b:e3:f8: dd:f7:23:db:46:16:11:e7:2b:2e:b1:45:46:55:5d:34:ba:8e: 05:e9:f3:f4:aa:d7:83:8c:dc:aa:de:dd:5a:33:4c:a8:57:d3: bf:7e:76:1d:cd:1f:f9:81:26:27:6e:b5:ef:c2:13:ec:34:31: e8:4a:fd:b0:34:bf:6e:be:00:da:a0:5c:79:f7:55:d0:4c:9e: 19:76:a6:a7:88:09:ad:85:5c:8d:55:b1:66:b7:e0:f0:7e:40: 0b:ed:56:8f -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICC5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQkYxMTAvBgNVBAUTKEQwQjk3REMwMUQ4OUYyM0E4MDVGQkU1ODYxRUUzN0JG MDk5QzNGRjAwHhcNMjQwODEyMTkxNzEwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJhNWZiNi01Nzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAvLgTz6NyUhYAy5TgZaP8yP+J5OvpYH6JXJm4lnDNtXwm5S+5LMnpYtTbFs X033b8+OnT5I+czScx5abUQIuLntNYHwsn+zlfJWaljzf6AxYRMGh9DHu7/xZ7p6 eAte99s7sM1ymGTA8iWyULBa6nZN9UXNVGqfEs5PESTkI5TH8T8LnhEXw0dnoKS9 ihmLG/h+peFn85FlJt3c/UumiDGMMT+GnztJO+Y2BKpm3/S1MummoBXeUiqvbO9O DRO/syueay0pnPORcvJ12WmI1CXFqCPcV1/h54fpfF9mLJypkrheUO0ssKJTwUqt oxv74J+2ff/J5cgdItI7NJZoFwIDAQABo4ICwDCCArwwHQYDVR0OBBYEFJ7oaWQX QXmFU0knYu5bs7plJ+TqMB8GA1UdIwQYMBaAFNC5fcAdifI6gF++WGHuN78JnD/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJCRi80NEVDNTEwNjEw MzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhqcUFYNzVZWWU0M3Z3bWNQ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMbDl3QjJKOGpxQVg3NVlZZTQzdndtY1BfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYyQkYvNDRFQzUxMDYxMDMwMTFFQUIxMTJBMjMyQzRGOUFFMDIvNDk4RUQ2MDQ2 RkQwMTFFREEwMDdENDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E OzA5MBIEAgABMAwDBAFnH7IDBAJndkwwIwQCAAIwHTASAwcAJAMuQAABAwcCJAMu QAAAAwcAJAMuQAAQMA0GCSqGSIb3DQEBCwUAA4IBAQA3SULMcF5s16GpAHbSZxsm +hgWUQRmV7C0HrQv4qZQKnzXZR8p7oisFKVGbW1Fg80gILnE/PByPuRjjKCoXDrZ L0+duFNB8Vx/xTBRL2iwnKhvMui5v6cmiJU4eJdzfeUQJHB30LoTO4AC5xjaQo8B SgATOJ6ej0dKKXRZBx1+N/HsA1f5lnRSMv57cNz6nZJh2zNK6nkOodQTZ9s4Nl0b 4/jd9yPbRhYR5ysusUVGVV00uo4F6fP0qteDjNyq3t1aM0yoV9O/fnYdzR/5gSYn brXvwhPsNDHoSv2wNL9uvgDaoFx591XQTJ4ZdqaniAmthVyNVbFmt+DwfkAL7VaP -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org