$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/180DF9BE93C711EDB3D8A867C4F9AE02.roa File: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (raw, json) Hash identifier: QypSaOJWNZPEYJNaUp+tgMHOgSp9cYSc6zUXtXVCQpg= Subject key identifier: 70:89:3F:6D:D6:EB:FB:4A:28:51:DA:51:CC:17:1A:2F:D4:D1:3A:72 Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Certificate serial: 0537 Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/180DF9BE93C711EDB3D8A867C4F9AE02.roa Signing time: Sat 31 Aug 2024 01:04:01 +0000 ROA not before: Sat 31 Aug 2024 01:04:01 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 7545 IP address blocks: 103.168.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1335 (0x537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Validity Not Before: Aug 31 01:04:01 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66d26c01-d811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6e:9f:17:32:9a:a9:2e:32:a1:41:85:c6:8b: 5a:b7:ff:66:5a:0e:cf:66:6a:c6:40:17:28:54:c2: 97:b7:5b:99:7a:67:4b:e8:9e:c4:32:fd:a1:52:b9: 2e:34:e1:7a:8d:71:86:d7:90:a7:cb:fc:b1:e0:2f: 36:19:32:7c:dc:1b:f0:27:18:61:61:4b:05:cf:0b: ef:4f:50:eb:fe:27:64:07:97:de:1a:34:16:a8:2e: b7:37:88:96:a7:68:8d:9f:de:15:da:38:0d:73:1f: 76:d4:43:7e:65:1f:03:4e:fc:7e:83:e5:7a:dc:08: b7:e0:28:71:2c:3b:c4:24:c6:89:cb:3d:e4:3c:1d: 09:b0:58:a7:d9:ec:18:d3:3a:b4:97:f5:ba:28:84: 1a:fc:2c:8d:77:f8:c5:7e:0e:0d:f9:3d:b3:39:11: e8:90:7b:4e:82:db:5a:01:e0:c4:2e:91:34:26:8e: 71:81:34:e5:79:53:7e:fb:46:f1:aa:55:43:b6:0a: 29:1c:47:9c:63:d3:0c:04:36:a8:c3:1f:86:00:f4: b6:82:36:77:7d:78:41:5f:8e:66:8e:49:c4:54:d8: 11:72:ca:f6:8c:75:7d:51:81:80:42:f8:24:13:37: 69:09:33:44:ea:78:44:6b:24:f3:70:00:70:e1:0b: a4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:89:3F:6D:D6:EB:FB:4A:28:51:DA:51:CC:17:1A:2F:D4:D1:3A:72 X509v3 Authority Key Identifier: keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/180DF9BE93C711EDB3D8A867C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.43.0/24 Signature Algorithm: sha256WithRSAEncryption 50:90:76:6a:43:2e:8b:13:67:63:3b:bf:fc:07:b3:14:f7:f8: 87:fd:8b:ae:a1:56:26:69:a8:4e:96:cb:9d:2d:4d:39:52:64: 00:70:3e:b6:ee:a0:b5:fb:19:98:58:9d:95:74:51:6b:e0:93: 3a:8f:fc:30:e9:11:d7:d8:7f:a6:83:d9:9e:71:45:b4:46:5f: b3:99:66:44:d0:ff:b2:b7:04:9c:d7:53:2f:e8:19:2f:2b:46: a2:9c:00:78:ca:49:3c:75:2a:71:57:68:6c:47:52:ae:df:88: f6:01:39:d8:43:bf:c9:2b:52:90:5c:88:82:52:78:f2:d8:c2: ca:37:24:72:29:76:7e:6f:84:a9:91:25:aa:32:1a:e3:24:0c: dd:c4:67:4d:25:fe:d6:ca:00:29:39:57:32:54:6f:c3:4d:da: d9:ff:7c:eb:2c:be:4f:41:29:9e:62:fb:85:2f:f8:30:4a:5b: 1a:fa:f6:61:99:37:10:f7:52:a6:51:33:45:83:c6:05:e1:2b: f0:70:b4:23:e7:21:fc:ee:38:ef:c7:87:36:93:97:d6:55:e1: 9f:c2:c0:f4:1c:45:01:72:47:6e:21:9e:ff:0b:4c:88:39:6a: 09:3f:0e:03:5d:c0:70:a6:81:24:1a:a1:fb:9d:82:67:8a:c9: 8a:aa:a3:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC RTFFRjY4N0IwHhcNMjQwODMxMDEwNDAxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQyNmMwMS1kODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4G6fFzKaqS4yoUGFxotat/9mWg7PZmrGQBcoVMKXt1uZemdL6J7EMv2hUrku NOF6jXGG15Cny/yx4C82GTJ83BvwJxhhYUsFzwvvT1Dr/idkB5feGjQWqC63N4iW p2iNn94V2jgNcx921EN+ZR8DTvx+g+V63Ai34ChxLDvEJMaJyz3kPB0JsFin2ewY 0zq0l/W6KIQa/CyNd/jFfg4N+T2zORHokHtOgttaAeDELpE0Jo5xgTTleVN++0bx qlVDtgopHEecY9MMBDaowx+GAPS2gjZ3fXhBX45mjknEVNgRcsr2jHV9UYGAQvgk EzdpCTNE6nhEayTzcABw4QukpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHCJP23W 6/tKKFHaUcwXGi/U0TpyMB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBFRjgvQzkzOEQxMDZDQjU0MTFFQkEzRDM2QzVCQzRGOUFFMDIvMTgwREY5QkU5 M0M3MTFFREIzRDhBODY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnqCswDQYJKoZIhvcNAQELBQADggEBAFCQdmpDLosTZ2M7 v/wHsxT3+If9i66hViZpqE6Wy50tTTlSZABwPrbuoLX7GZhYnZV0UWvgkzqP/DDp EdfYf6aD2Z5xRbRGX7OZZkTQ/7K3BJzXUy/oGS8rRqKcAHjKSTx1KnFXaGxHUq7f iPYBOdhDv8krUpBciIJSePLYwso3JHIpdn5vhKmRJaoyGuMkDN3EZ00l/tbKACk5 VzJUb8NN2tn/fOssvk9BKZ5i+4Uv+DBKWxr69mGZNxD3UqZRM0WDxgXhK/BwtCPn IfzuOO/HhzaTl9ZV4Z/CwPQcRQFyR24hnv8LTIg5agk/DgNdwHCmgSQaofudgmeK yYqqo6A= -----END CERTIFICATE-----Generated at Wed Nov 20 23:56:01 2024 by rpki-client on console-ams.rpki-client.org