$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/46779D40040411EC867E3B86C4F9AE02.roa File: 46779D40040411EC867E3B86C4F9AE02.roa (raw, json) Hash identifier: 15vQ2pIfS9i9mjbAz/xpatr9VQT9HF7kjMctrdXsgaw= Subject key identifier: 64:3A:81:FE:72:B3:8E:AB:CC:C2:19:B2:CB:63:0B:43:97:1C:C2:2E Certificate issuer: /CN=A91D8D21/serialNumber=57817D2BEC1FEFFFE412D9F334DF40428653BCAE Certificate serial: 04A7 Authority key identifier: 57:81:7D:2B:EC:1F:EF:FF:E4:12:D9:F3:34:DF:40:42:86:53:BC:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/46779D40040411EC867E3B86C4F9AE02.roa Signing time: Tue 08 Oct 2024 23:52:56 +0000 ROA not before: Tue 08 Oct 2024 23:52:56 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 135597 IP address blocks: 103.171.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.crl rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8D21/serialNumber=57817D2BEC1FEFFFE412D9F334DF40428653BCAE Validity Not Before: Oct 8 23:52:56 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6705c5d8-3cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1a:c0:5c:ed:53:4d:3b:5f:cc:a3:3b:84:a8: d2:93:b4:11:17:4d:42:a9:99:d7:72:d8:7c:5c:25: a3:2c:31:68:e2:17:0a:41:b3:e4:3d:73:84:f9:e9: ba:4f:04:c5:f7:54:c2:88:62:15:cb:d9:3e:fe:cc: ef:bb:fe:eb:f7:82:b3:d1:49:53:dc:10:8c:fc:32: 0e:e3:fc:56:02:91:56:ab:d6:bf:74:ee:a0:0c:b6: dd:97:af:ff:c8:5e:6b:a0:08:7a:f8:85:1c:7a:7c: c7:55:9b:5b:7f:62:96:12:9d:e3:e9:6b:94:bb:a5: 6e:b1:15:7b:ce:7c:89:e3:9b:56:ee:a7:55:55:36: 40:96:b4:cb:97:f9:27:69:b2:a4:1e:fc:19:57:2f: 9a:81:eb:7d:78:64:04:75:f5:34:6f:8f:21:a5:d5: 86:f5:ff:8e:91:64:16:e8:cf:7a:17:07:75:82:7b: c2:f7:cd:84:ee:e8:99:e1:4c:4e:0f:b8:fb:f2:71: c2:9f:9b:42:8d:76:58:80:07:41:4b:4d:1b:95:28: b5:cd:8c:bf:e1:2f:28:c0:d4:ef:30:dc:f3:45:95: 2f:5c:34:b0:12:d7:c3:ee:35:e9:d7:1a:8b:4b:9c: 41:be:b7:dc:70:e9:90:c6:08:ab:79:ec:30:08:6e: 86:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3A:81:FE:72:B3:8E:AB:CC:C2:19:B2:CB:63:0B:43:97:1C:C2:2E X509v3 Authority Key Identifier: keyid:57:81:7D:2B:EC:1F:EF:FF:E4:12:D9:F3:34:DF:40:42:86:53:BC:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/46779D40040411EC867E3B86C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.250.0/23 Signature Algorithm: sha256WithRSAEncryption 89:cb:e0:a6:8f:e2:47:91:af:93:92:9a:14:19:98:53:80:b2: fa:c0:55:fe:dd:4a:c5:79:ae:55:39:7c:01:67:7e:b8:b1:f5: bc:58:d3:0b:95:7d:ed:9f:d5:56:04:1e:9a:c6:83:59:23:7b: 98:01:d1:8a:98:31:c7:82:67:e6:6d:14:32:98:75:75:67:ed: 8f:ac:cb:01:e3:70:05:b6:19:17:51:12:f2:b2:11:2c:59:5a: 71:ca:85:bd:23:9e:96:00:74:d5:35:71:3e:c4:59:9a:27:8d: 32:87:97:9d:ca:99:9b:c4:d9:2f:de:23:8a:4e:e4:2f:3a:f9: 3b:fe:94:bb:52:66:03:f7:cd:7f:58:d5:e9:0a:26:a9:25:98: f2:16:a2:37:0a:2f:04:62:f4:81:8a:f4:50:59:90:e4:82:22: 21:09:37:ec:f7:cb:67:78:f3:d9:f2:7e:9f:b4:9a:bd:6a:e4: 36:29:ac:db:5e:26:c4:0c:a2:56:d2:01:28:63:89:24:df:14: 7c:db:cd:13:f0:35:a5:a8:cc:e9:3c:4c:f6:d6:72:92:a9:19: 8a:a4:77:f0:51:a2:db:b4:66:fc:9e:dd:2d:86:e6:fd:7f:7b: a7:9b:e9:66:d7:ea:65:3a:12:b8:59:e7:22:27:c1:cd:1e:48: eb:0e:cb:6b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhEMjExMTAvBgNVBAUTKDU3ODE3RDJCRUMxRkVGRkZFNDEyRDlGMzM0REY0MDQy ODY1M0JDQUUwHhcNMjQxMDA4MjM1MjU2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA1YzVkOC0zY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RrAXO1TTTtfzKM7hKjSk7QRF01CqZnXcth8XCWjLDFo4hcKQbPkPXOE+em6 TwTF91TCiGIVy9k+/szvu/7r94Kz0UlT3BCM/DIO4/xWApFWq9a/dO6gDLbdl6// yF5roAh6+IUcenzHVZtbf2KWEp3j6WuUu6VusRV7znyJ45tW7qdVVTZAlrTLl/kn abKkHvwZVy+aget9eGQEdfU0b48hpdWG9f+OkWQW6M96Fwd1gnvC982E7uiZ4UxO D7j78nHCn5tCjXZYgAdBS00blSi1zYy/4S8owNTvMNzzRZUvXDSwEtfD7jXp1xqL S5xBvrfccOmQxgireewwCG6G3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGQ6gf5y s46rzMIZsstjC0OXHMIuMB8GA1UdIwQYMBaAFFeBfSvsH+//5BLZ8zTfQEKGU7yu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEQyMS80NTBFQzVCRTAz RkExMUVDOERERTA4ODJDNEY5QUUwMi9WNEY5Sy13ZjdfX2tFdG56Tk45QVFvWlR2 SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y0RjlLLXdmN19fa0V0bnpOTjlBUW9aVHZLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDhEMjEvNDUwRUM1QkUwM0ZBMTFFQzhEREUwODgyQzRGOUFFMDIvNDY3NzlENDAw NDA0MTFFQzg2N0UzQjg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnq/owDQYJKoZIhvcNAQELBQADggEBAInL4KaP4keRr5OS mhQZmFOAsvrAVf7dSsV5rlU5fAFnfrix9bxY0wuVfe2f1VYEHprGg1kje5gB0YqY MceCZ+ZtFDKYdXVn7Y+sywHjcAW2GRdREvKyESxZWnHKhb0jnpYAdNU1cT7EWZon jTKHl53KmZvE2S/eI4pO5C86+Tv+lLtSZgP3zX9Y1ekKJqklmPIWojcKLwRi9IGK 9FBZkOSCIiEJN+z3y2d489nyfp+0mr1q5DYprNteJsQMolbSAShjiSTfFHzbzRPw NaWozOk8TPbWcpKpGYqkd/BRotu0Zvye3S2G5v1/e6eb6WbX6mU6ErhZ5yInwc0e SOsOy2s= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org