$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CD0B290A232111EF8E1B807FC4F9AE02.roa File: CD0B290A232111EF8E1B807FC4F9AE02.roa (raw, json) Hash identifier: LBTuC9yWjJvg/GZ23+7h0Kpoc2FfkF84houmHqXZRxU= Subject key identifier: 5D:16:52:40:8D:8F:03:C8:B3:99:FA:02:0F:E7:22:E2:A2:E3:7B:6D Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Certificate serial: 0624 Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CD0B290A232111EF8E1B807FC4F9AE02.roa Signing time: Wed 05 Jun 2024 09:55:56 +0000 ROA not before: Wed 05 Jun 2024 09:55:55 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 136933 IP address blocks: 103.42.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1572 (0x624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Validity Not Before: Jun 5 09:55:55 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6660362b-a06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:ca:6f:8f:23:94:6e:40:e3:34:06:03:af: 2a:8e:50:46:9f:60:92:60:1d:3b:c1:38:36:60:83: c2:2f:fa:05:18:e2:0b:7e:d0:86:c4:9a:38:32:15: ec:d9:cc:94:11:e3:f2:20:32:ec:82:6a:72:79:57: d3:da:16:e0:df:97:86:87:81:6f:7c:08:87:ae:2e: bf:3c:aa:3d:cf:ad:12:28:26:15:01:6a:2d:da:18: a0:60:c4:16:13:0e:93:ad:91:98:be:2a:9c:78:41: d5:46:da:8e:16:a3:89:3b:98:6b:9a:95:4f:f3:50: 19:66:ac:6d:9e:03:a6:22:c3:68:a1:1b:f4:67:54: f2:74:8b:f2:b7:66:b3:fe:ea:e5:d8:68:a2:aa:14: 82:dd:c5:35:37:25:4f:c3:84:9f:f8:04:7a:48:c7: c3:ba:d8:3a:21:8d:36:ca:b0:51:5c:a7:74:4a:c3: 62:22:34:91:65:98:8d:8a:4d:74:65:a5:ef:6b:0b: b9:3c:0d:af:7f:95:eb:14:ee:17:0b:66:ff:8c:c3: 89:15:70:30:6d:3f:e7:57:6c:1e:b6:b1:93:82:86: 7a:c4:57:2f:f7:d0:ac:9f:03:74:66:8b:5d:dc:fd: eb:06:b3:56:04:80:51:ca:d1:2b:23:35:1f:92:9a: e6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:16:52:40:8D:8F:03:C8:B3:99:FA:02:0F:E7:22:E2:A2:E3:7B:6D X509v3 Authority Key Identifier: keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CD0B290A232111EF8E1B807FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.182.0/24 Signature Algorithm: sha256WithRSAEncryption 52:46:80:72:57:1a:dd:65:93:b1:cd:78:38:0b:d2:0a:9b:76: 41:e6:04:8a:e4:8b:42:71:d9:de:d2:48:30:35:97:5a:b0:c6: fe:2b:ab:50:7a:d0:09:16:3c:a2:16:f3:4d:5f:aa:94:e8:80: e1:b7:c8:7e:68:37:90:1b:0b:f4:3f:0e:d6:6d:93:57:5a:be: 3f:5d:39:b0:0d:55:84:3a:82:43:84:3d:ec:db:ef:90:01:1c: 1d:c9:58:43:eb:3f:62:53:77:52:2d:5d:b9:4c:7d:b3:de:02: af:ca:44:6d:8d:78:07:36:07:28:d4:74:b2:24:03:74:f3:9e: 2e:bc:0a:d4:44:bb:46:e2:c1:aa:10:18:f9:93:56:16:58:31: 3f:7b:a3:df:0f:53:2e:7a:fa:3f:8d:ee:e6:61:85:ae:ab:ca: b0:7d:2e:60:5c:a6:c5:32:e5:94:f8:9e:fd:12:ab:cc:7a:42: 92:6a:db:bf:69:ce:3e:f2:43:f2:a9:8b:11:bc:5c:1b:22:3e: 13:4f:49:8f:f4:1b:8f:f7:ec:31:0a:cb:dc:82:00:74:5a:bc: ed:a3:69:40:cb:67:0a:1a:c7:29:02:07:4f:1e:96:b8:75:58: 69:69:b9:b0:20:e8:6d:b7:21:89:17:67:b0:86:99:3a:69:25: 81:b3:b1:08 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz MzJEQTQzQ0IwHhcNMjQwNjA1MDk1NTU1WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NjYwMzYyYi1hMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycPKb48jlG5A4zQGA68qjlBGn2CSYB07wTg2YIPCL/oFGOILftCGxJo4MhXs 2cyUEePyIDLsgmpyeVfT2hbg35eGh4FvfAiHri6/PKo9z60SKCYVAWot2higYMQW Ew6TrZGYviqceEHVRtqOFqOJO5hrmpVP81AZZqxtngOmIsNooRv0Z1TydIvyt2az /url2GiiqhSC3cU1NyVPw4Sf+AR6SMfDutg6IY02yrBRXKd0SsNiIjSRZZiNik10 ZaXvawu5PA2vf5XrFO4XC2b/jMOJFXAwbT/nV2wetrGTgoZ6xFcv99CsnwN0Zotd 3P3rBrNWBIBRytErIzUfkprmlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF0WUkCN jwPIs5n6Ag/nIuKi43ttMB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdDMDQvQTBEQjM1NTI1RkI0MTFFQkFCN0M2QTIzQzRGOUFFMDIvQ0QwQjI5MEEy MzIxMTFFRjhFMUI4MDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnKrYwDQYJKoZIhvcNAQELBQADggEBAFJGgHJXGt1lk7HN eDgL0gqbdkHmBIrki0Jx2d7SSDA1l1qwxv4rq1B60AkWPKIW801fqpTogOG3yH5o N5AbC/Q/DtZtk1davj9dObANVYQ6gkOEPezb75ABHB3JWEPrP2JTd1ItXblMfbPe Aq/KRG2NeAc2ByjUdLIkA3Tzni68CtREu0biwaoQGPmTVhZYMT97o98PUy56+j+N 7uZhha6ryrB9LmBcpsUy5ZT4nv0Sq8x6QpJq279pzj7yQ/KpixG8XBsiPhNPSY/0 G4/37DEKy9yCAHRavO2jaUDLZwoaxykCB08elrh1WGlpubAg6G23IYkXZ7CGmTpp JYGzsQg= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:53 2024 by rpki-client on console-ams.rpki-client.org