$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/4865D4707C3111EFBD9FF572C4F9AE02.roa File: 4865D4707C3111EFBD9FF572C4F9AE02.roa (raw, json) Hash identifier: 7uwYXhKRfTv8hcVKsiJZzsdcmoNATZHhHQFiXdFhROQ= Subject key identifier: A9:CF:49:18:25:5E:A7:AC:D2:0B:AF:7F:67:54:E3:60:74:49:04:EE Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Certificate serial: 0171 Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/4865D4707C3111EFBD9FF572C4F9AE02.roa Signing time: Thu 26 Sep 2024 18:00:58 +0000 ROA not before: Thu 26 Sep 2024 18:00:58 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 139358 IP address blocks: 103.37.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701 Validity Not Before: Sep 26 18:00:58 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66f5a15a-589d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:47:37:0c:65:0e:6e:4e:1e:33:c4:b9:96:7c: c6:32:2d:eb:e3:73:e8:32:0f:ec:f9:9b:1c:00:43: 34:6e:07:02:fb:ed:5c:b3:3c:fe:45:ae:cc:98:4d: 4e:cd:c4:1e:a7:80:b4:3e:e5:76:07:d7:ec:42:f6: dc:62:fa:d6:52:d2:52:fd:bc:40:b9:49:85:73:ce: 99:07:41:8b:00:24:11:69:b8:15:b1:c6:79:6f:0e: ac:a0:3d:8b:80:d7:ae:8a:d6:e6:50:1f:e1:24:87: d3:73:7f:86:3e:c0:8e:57:41:f6:69:dd:0a:2a:e3: 17:e0:a6:32:91:cd:c3:d8:03:c1:7a:3e:27:55:de: c3:f0:64:00:ef:37:eb:75:43:41:2b:14:fe:b7:88: 0a:69:7c:6c:28:d2:4b:ef:5d:33:50:2a:d3:6d:a3: dd:23:55:0d:6a:7a:88:62:1d:1c:de:18:88:c7:02: be:b8:4e:a1:4e:fa:62:bb:0b:4a:fd:21:ac:83:7e: cb:eb:9d:51:47:d2:3d:22:42:f5:b5:6b:c4:a4:29: d2:31:5f:93:bf:05:d5:40:87:0b:05:ae:32:2d:64: 3f:5b:9c:ad:20:47:ed:b1:71:98:a0:7c:6e:86:0d: bf:36:0b:24:cd:03:fb:16:9e:bc:9c:6a:cd:1c:1f: 5b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CF:49:18:25:5E:A7:AC:D2:0B:AF:7F:67:54:E3:60:74:49:04:EE X509v3 Authority Key Identifier: keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/4865D4707C3111EFBD9FF572C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.37.6.0/24 Signature Algorithm: sha256WithRSAEncryption 12:7a:ec:a4:26:c9:c7:6e:7e:00:c9:d8:30:46:3f:60:c1:7f: aa:a4:ba:a5:5f:31:8c:46:26:fa:32:39:30:b0:f1:54:e6:37: ee:55:7b:b7:00:7b:35:b6:d4:1a:c1:9b:f1:54:43:46:7c:40: 41:a5:8b:84:dc:be:69:d4:4c:b0:17:2d:08:63:8d:31:d8:60: 0b:a9:3f:4d:33:cf:f0:3d:48:26:33:a5:8b:d2:6b:00:fe:93: 27:24:9b:73:68:ab:73:8c:83:05:d9:79:9b:bb:86:5a:89:8d: e4:86:06:64:e5:5e:ea:01:1c:9b:10:52:00:23:25:03:1c:36: 26:35:68:70:2d:52:23:19:c1:98:71:3b:cd:97:d6:8e:3b:fd: 69:24:16:87:ed:f9:a6:7e:b2:aa:2d:9d:f8:1e:2c:91:72:f7: 14:6c:89:33:57:76:f2:b0:48:ae:6f:09:f7:66:d2:22:64:6e: 52:c1:9d:83:ff:71:d4:5a:6f:dd:38:c1:a1:0b:cb:23:4b:2e: fe:fd:15:b1:b7:5c:5a:51:e2:fe:d5:f4:0e:90:64:fb:f4:e1: ae:ab:bb:31:ee:29:cc:4f:b4:e7:30:44:f2:30:e3:02:b7:de: 47:c9:7e:fc:ce:a9:fb:f8:c7:39:b0:39:a3:03:6a:5d:cb:a0: 3c:9b:6c:22 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMTAxMTAvBgNVBAUTKEI4RUE3MUQwNEVDODM2RTgxODA4NzNDOUU5RDQwQ0Qy RTM1NTM3MDEwHhcNMjQwOTI2MTgwMDU4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY1YTE1YS01ODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEc3DGUObk4eM8S5lnzGMi3r43PoMg/s+ZscAEM0bgcC++1cszz+Ra7MmE1O zcQep4C0PuV2B9fsQvbcYvrWUtJS/bxAuUmFc86ZB0GLACQRabgVscZ5bw6soD2L gNeuitbmUB/hJIfTc3+GPsCOV0H2ad0KKuMX4KYykc3D2APBej4nVd7D8GQA7zfr dUNBKxT+t4gKaXxsKNJL710zUCrTbaPdI1UNanqIYh0c3hiIxwK+uE6hTvpiuwtK /SGsg37L651RR9I9IkL1tWvEpCnSMV+TvwXVQIcLBa4yLWQ/W5ytIEftsXGYoHxu hg2/NgskzQP7Fp68nGrNHB9bVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKnPSRgl Xqes0guvf2dU42B0SQTuMB8GA1UdIwQYMBaAFLjqcdBOyDboGAhzyenUDNLjVTcB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YxMC9FQzY3MzMzRTYw OTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51Z1lDSFBKNmRRTTB1TlZO d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPcHgwRTdJTnVnWUNIUEo2ZFFNMHVOVk53RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0NGMTAvRUM2NzMzM0U2MDkwMTFFREE2NzkxQTBEQzRGOUFFMDIvNDg2NUQ0NzA3 QzMxMTFFRkJEOUZGNTcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnJQYwDQYJKoZIhvcNAQELBQADggEBABJ67KQmycdufgDJ 2DBGP2DBf6qkuqVfMYxGJvoyOTCw8VTmN+5Ve7cAezW21BrBm/FUQ0Z8QEGli4Tc vmnUTLAXLQhjjTHYYAupP00zz/A9SCYzpYvSawD+kyckm3Noq3OMgwXZeZu7hlqJ jeSGBmTlXuoBHJsQUgAjJQMcNiY1aHAtUiMZwZhxO82X1o47/WkkFoft+aZ+sqot nfgeLJFy9xRsiTNXdvKwSK5vCfdm0iJkblLBnYP/cdRab904waELyyNLLv79FbG3 XFpR4v7V9A6QZPv04a6ruzHuKcxPtOcwRPIw4wK33kfJfvzOqfv4xzmwOaMDal3L oDybbCI= -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:05 2024 by rpki-client on console-fra.rpki-client.org