$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/4F467C58D3AA11ED91B0C532C4F9AE02.roa File: 4F467C58D3AA11ED91B0C532C4F9AE02.roa (raw, json) Hash identifier: 3TVSr4533KCeTr9n4si0My+MCE5XOLUQ499rzcPilqQ= Subject key identifier: 2E:DF:52:D0:3B:03:93:F2:30:C8:97:19:01:44:55:9F:E7:23:EC:06 Certificate issuer: /CN=A91DA389/serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29 Certificate serial: 0100 Authority key identifier: 48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/4F467C58D3AA11ED91B0C532C4F9AE02.roa Signing time: Sat 03 Aug 2024 05:16:02 +0000 ROA not before: Sat 03 Aug 2024 05:16:02 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 45352 IP address blocks: 43.228.244.0/22 maxlen: 24 103.67.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA389/serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29 Validity Not Before: Aug 3 05:16:02 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66adbd12-ed82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:27:83:e5:d6:fa:0e:61:e5:43:f4:42:fd: 95:a5:61:af:f5:bc:5f:ab:d3:52:89:c6:75:b7:5b: 1b:3e:04:30:1c:ef:e6:d5:16:a4:d0:a9:30:2b:d3: 94:e8:e8:b9:89:59:a1:e7:30:5b:aa:c5:27:84:f2: 75:9b:fa:59:f6:05:96:2b:ec:41:e6:a5:2e:83:ff: bf:b4:51:b7:5b:4e:b5:fd:d2:ea:f3:46:8c:88:93: 6e:ba:ce:a0:10:2a:d1:25:c1:5f:33:b6:7e:e8:7d: 89:91:89:df:55:79:2f:e5:ef:d7:a1:bc:1e:0d:cb: 85:a2:d5:31:93:16:0a:75:3a:d7:19:28:03:55:51: db:86:ee:0d:6c:3e:be:3a:0f:d0:74:80:31:39:58: 21:73:49:36:da:f0:26:ef:d7:9a:c9:0a:c4:1e:b3: 18:3a:27:58:72:fa:07:4e:ca:5b:84:53:6c:f5:e0: 12:d5:42:5a:d0:49:91:1c:a4:6a:5b:2d:e2:be:ac: 05:74:c6:76:8e:f4:f5:a5:e4:1b:54:c3:c3:22:49: b3:f6:84:9e:d3:62:ee:09:57:79:83:ce:47:a3:9c: 16:52:fe:34:6a:37:ce:89:12:a3:4f:90:1c:25:a8: 4f:ac:39:f8:79:2d:bc:e8:27:a4:11:ed:0a:5a:b6: 0c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DF:52:D0:3B:03:93:F2:30:C8:97:19:01:44:55:9F:E7:23:EC:06 X509v3 Authority Key Identifier: keyid:48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/4F467C58D3AA11ED91B0C532C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.244.0/22 103.67.36.0/22 Signature Algorithm: sha256WithRSAEncryption a2:46:d9:ab:87:fe:9f:fd:cb:06:13:9c:ed:92:27:18:6b:f8: b2:e1:38:c4:a4:32:e0:a1:96:84:cc:2e:d9:0a:8e:0a:56:c5: 9f:f1:17:32:7e:2e:b8:98:31:c6:06:4f:0b:7a:c2:af:6d:ba: 90:3c:fd:29:3f:89:17:1f:98:15:2b:63:bb:8c:c4:50:0b:30: f7:d7:db:54:7a:c8:31:3d:47:06:4e:82:62:6c:a4:17:b8:f7: 9a:d2:b5:20:2d:37:ae:b4:59:b6:d5:b1:03:e9:94:e3:1a:03: 5c:94:17:9c:cf:59:6f:ee:0c:32:5c:df:cf:50:2c:a2:79:3e: a9:b1:e1:8a:75:06:0f:80:72:6b:2a:bb:8f:13:00:a0:d5:c3: 28:09:9c:c4:5d:6f:8c:3f:cd:7e:45:59:67:e1:fe:a7:6f:01: dc:15:7e:35:ac:22:7b:62:e6:8c:96:b8:3e:54:0e:85:d9:87: 6d:cc:46:83:bb:42:5e:c2:d9:7f:14:d6:46:14:e9:6e:65:ea: b8:9c:7a:ec:58:79:34:9a:4a:79:3b:68:64:9c:15:0c:70:01: ed:80:da:03:bc:e2:fc:dc:fe:59:0f:0e:68:ad:11:6c:7c:48: f5:1c:71:c5:85:ae:04:df:58:29:4e:4f:54:00:61:b9:3d:ea: e6:1d:9f:28 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEzODkxMTAvBgNVBAUTKDQ4RjUwRTE2QjgzMDVBQTJDNzU2RDIxQzhGMEZENTA5 MzM4QTVDMjkwHhcNMjQwODAzMDUxNjAyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFkYmQxMi1lZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApg0ng+XW+g5h5UP0Qv2VpWGv9bxfq9NSicZ1t1sbPgQwHO/m1Rak0KkwK9OU 6Oi5iVmh5zBbqsUnhPJ1m/pZ9gWWK+xB5qUug/+/tFG3W061/dLq80aMiJNuus6g ECrRJcFfM7Z+6H2JkYnfVXkv5e/XobweDcuFotUxkxYKdTrXGSgDVVHbhu4NbD6+ Og/QdIAxOVghc0k22vAm79eayQrEHrMYOidYcvoHTspbhFNs9eAS1UJa0EmRHKRq Wy3ivqwFdMZ2jvT1peQbVMPDIkmz9oSe02LuCVd5g85Ho5wWUv40ajfOiRKjT5Ac JahPrDn4eS286CekEe0KWrYMnwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFC7fUtA7 A5PyMMiXGQFEVZ/nI+wGMB8GA1UdIwQYMBaAFEj1Dha4MFqix1bSHI8P1Qkzilwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTM4OS9CMjE3MEI3NEQz QTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dxTEhWdEljandfVkNUT0tY Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQVU9Gcmd3V3FMSFZ0SWNqd19WQ1RPS1hDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REEzODkvQjIxNzBCNzREM0EzMTFFRDg4MDZBQzExQzRGOUFFMDIvNEY0NjdDNThE M0FBMTFFRDkxQjBDNTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr5PQDBAJnQyQwDQYJKoZIhvcNAQELBQADggEBAKJG2auH /p/9ywYTnO2SJxhr+LLhOMSkMuChloTMLtkKjgpWxZ/xFzJ+LriYMcYGTwt6wq9t upA8/Sk/iRcfmBUrY7uMxFALMPfX21R6yDE9RwZOgmJspBe495rStSAtN660WbbV sQPplOMaA1yUF5zPWW/uDDJc389QLKJ5Pqmx4Yp1Bg+Acmsqu48TAKDVwygJnMRd b4w/zX5FWWfh/qdvAdwVfjWsInti5oyWuD5UDoXZh23MRoO7Ql7C2X8U1kYU6W5l 6riceuxYeTSaSnk7aGScFQxwAe2A2gO84vzc/lkPDmitEWx8SPUcccWFrgTfWClO T1QAYbk96uYdnyg= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org