$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/F3DC25C41E4511EFBB4DF80DC4F9AE02.roa File: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (raw, json) Hash identifier: 4K1AhY9g2ySc0ysIrXTw5HOO4AeH3GPRlqEzwlH2eL4= Subject key identifier: E0:32:41:5F:95:26:37:4D:63:5D:BF:D6:D9:E9:BC:1D:31:8B:69:D8 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 3441 Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/F3DC25C41E4511EFBB4DF80DC4F9AE02.roa Signing time: Tue 08 Oct 2024 15:31:16 +0000 ROA not before: Tue 08 Oct 2024 15:31:16 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 58445 IP address blocks: 103.11.136.0/22 maxlen: 24 116.206.132.0/22 maxlen: 24 2001:df0:29f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13377 (0x3441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: Oct 8 15:31:16 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67055044-1428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:df:41:37:3d:8d:32:9c:14:b4:c1:f3:f1:eb: 56:63:33:52:5c:ed:4f:ee:d8:b3:33:56:e0:41:c5: d4:d6:65:a2:ff:b9:71:d6:58:ad:ec:9e:64:b9:b6: d2:45:86:a2:c2:a7:91:75:29:90:6e:a2:43:39:d4: ba:f0:2d:b8:23:fc:94:09:df:1f:20:9b:73:34:a2: 58:1a:1d:15:54:38:67:dd:f0:13:10:48:6e:ae:06: ba:9e:ed:35:66:96:6d:2a:7b:9b:fd:21:01:1c:0a: 39:ec:0d:db:00:9e:15:91:9a:d9:6f:d4:85:cc:26: 91:73:5d:58:73:f0:80:c3:58:01:c1:47:25:4f:c1: 0a:a8:b2:d1:90:b8:87:9f:97:63:f1:9b:25:31:7a: e4:2a:62:7c:49:ec:c1:4b:f8:42:4a:42:c8:e9:cd: d4:c0:ea:99:9c:8c:83:31:55:1f:b4:8e:ac:5c:99: de:ae:54:db:8a:79:30:4a:14:78:bb:9b:f7:09:73: 7f:01:fc:91:d5:63:1e:7a:6c:35:e4:ba:da:0b:02: 30:6e:b9:6f:6b:88:4f:6d:24:8d:9a:12:18:8b:10: a5:52:30:61:8f:36:66:07:40:6d:8a:09:83:4f:c5: f9:b1:02:b7:3b:12:68:47:c1:22:e2:dd:07:08:96: 10:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:32:41:5F:95:26:37:4D:63:5D:BF:D6:D9:E9:BC:1D:31:8B:69:D8 X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/F3DC25C41E4511EFBB4DF80DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.11.136.0/22 116.206.132.0/22 IPv6: 2001:df0:29f::/48 Signature Algorithm: sha256WithRSAEncryption a5:b1:97:4a:99:33:04:20:ad:1d:a3:11:9e:bb:52:64:bb:91: 45:bc:c6:85:63:7c:e8:83:e4:1d:ab:8a:40:cf:78:26:37:6f: 93:27:05:57:b7:70:57:d3:fa:83:04:ab:ee:a3:b6:f8:c8:77: 45:72:1f:05:e4:53:8b:f7:86:7b:27:95:7d:02:62:00:b1:16: 05:13:70:2d:bc:99:47:7d:d4:9d:ed:34:5f:6e:94:b2:23:7c: 8f:45:81:ef:16:4d:52:47:18:6b:b4:ea:56:3b:28:39:3d:ec: b8:e8:cc:c9:08:67:32:2c:63:62:b4:49:c4:43:ee:aa:7c:3b: b4:c4:9a:64:ab:98:0c:72:0f:e0:a9:70:3f:cf:5a:4b:c3:4f: eb:6b:2a:1c:b5:d0:29:53:c3:af:3a:00:98:a0:9f:51:85:e8: f3:9a:54:46:ae:78:84:df:bc:45:09:e3:c9:4f:78:60:e6:dc: e1:eb:9a:cf:cd:6b:a9:ac:3a:27:9c:f4:e9:c9:ce:3c:35:ec: b4:b4:e8:0c:fa:2c:25:2e:3f:de:9f:ad:0c:c3:7b:b4:0b:5d: 51:9b:9a:70:57:9c:08:f1:cf:e0:01:0b:86:72:b9:37:f9:76: 2f:32:7f:33:29:a9:10:4d:d9:d4:b1:42:0c:0b:dd:d7:a2:be: 62:a0:d3:9b -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICNEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjQxMDA4MTUzMTE2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA1NTA0NC0xNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxN9BNz2NMpwUtMHz8etWYzNSXO1P7tizM1bgQcXU1mWi/7lx1lit7J5kubbS RYaiwqeRdSmQbqJDOdS68C24I/yUCd8fIJtzNKJYGh0VVDhn3fATEEhurga6nu01 ZpZtKnub/SEBHAo57A3bAJ4VkZrZb9SFzCaRc11Yc/CAw1gBwUclT8EKqLLRkLiH n5dj8ZslMXrkKmJ8SezBS/hCSkLI6c3UwOqZnIyDMVUftI6sXJnerlTbinkwShR4 u5v3CXN/AfyR1WMeemw15LraCwIwbrlva4hPbSSNmhIYixClUjBhjzZmB0BtigmD T8X5sQK3OxJoR8Ei4t0HCJYQXwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFOAyQV+V JjdNY12/1tnpvB0xi2nYMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTY0N0EvNzk0OEVBMUMxREE5MTFFMkJBMTQ4NEE0MDhCMDJDRDIvRjNEQzI1QzQx RTQ1MTFFRkJCNERGODBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAJnC4gDBAJ0zoQwDwQCAAIwCQMHACABDfACnzANBgkqhkiG 9w0BAQsFAAOCAQEApbGXSpkzBCCtHaMRnrtSZLuRRbzGhWN86IPkHauKQM94Jjdv kycFV7dwV9P6gwSr7qO2+Mh3RXIfBeRTi/eGeyeVfQJiALEWBRNwLbyZR33Une00 X26UsiN8j0WB7xZNUkcYa7TqVjsoOT3suOjMyQhnMixjYrRJxEPuqnw7tMSaZKuY DHIP4KlwP89aS8NP62sqHLXQKVPDrzoAmKCfUYXo85pURq54hN+8RQnjyU94YObc 4euaz81rqaw6J5z06cnOPDXstLToDPosJS4/3p+tDMN7tAtdUZuacFecCPHP4AEL hnK5N/l2LzJ/MympEE3Z1LFCDAvd16K+YqDTmw== -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org