$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/CAADA49A5B9C11EF9AD89645C4F9AE02.roa File: CAADA49A5B9C11EF9AD89645C4F9AE02.roa (raw, json) Hash identifier: ok11TU/iv6LJLPAflEPHiwiFhyg6n0qqCM2K15cUC/8= Subject key identifier: A5:AA:8C:2A:11:10:51:4B:7F:7F:26:2A:86:BB:C0:03:03:25:B6:8E Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Certificate serial: 02 Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/CAADA49A5B9C11EF9AD89645C4F9AE02.roa Signing time: Fri 16 Aug 2024 06:57:25 +0000 ROA not before: Fri 16 Aug 2024 06:57:25 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 26658 IP address blocks: 103.204.252.0/22 maxlen: 22 203.76.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Validity Not Before: Aug 16 06:57:25 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66bef854-1883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:1a:ef:d7:70:18:bb:6c:2a:d0:16:84:4f: 3f:a8:77:f8:f2:9c:b2:cd:4e:fa:d2:b2:3f:08:0d: 2d:c0:53:d6:c7:94:45:96:5b:80:a0:78:d5:2f:d8: 93:10:48:d4:2e:5c:61:55:d4:a1:f6:b0:90:7e:0f: 2d:77:50:ee:d0:d7:16:00:b1:cb:8d:29:8b:14:ee: 03:07:69:f7:3c:a7:06:72:72:0d:ca:33:fc:55:83: 88:aa:21:69:5e:ca:82:ae:dc:20:b0:48:26:27:30: c6:4b:00:7f:4a:e5:65:f3:1e:64:d5:ea:3a:3e:51: 01:fe:6e:78:c9:85:21:57:59:80:ec:ff:26:c1:90: c9:3d:42:d0:43:a7:16:92:b9:71:3b:8f:4e:f6:88: c8:03:21:b8:32:5a:2a:3a:98:dd:a5:6b:d9:04:27: 06:85:9b:7a:89:94:0b:f6:a4:e0:85:c6:9d:15:c2: a8:e3:6a:e6:67:6c:e7:45:36:bb:59:7a:84:a2:2b: a3:a2:ba:49:38:66:2d:08:89:b8:7d:e6:34:58:d5: ce:81:b7:fa:16:29:f3:3d:97:27:25:58:67:86:90: d7:ee:87:ca:78:a5:07:6e:71:f6:87:82:1c:c1:83: ff:08:c0:ed:fd:ab:59:85:2b:39:0c:8e:c2:1d:ec: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AA:8C:2A:11:10:51:4B:7F:7F:26:2A:86:BB:C0:03:03:25:B6:8E X509v3 Authority Key Identifier: keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/CAADA49A5B9C11EF9AD89645C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.252.0/22 203.76.232.0/22 Signature Algorithm: sha256WithRSAEncryption 03:b6:66:ff:72:20:11:55:48:55:85:b9:50:d5:45:6e:71:be: ea:43:0f:83:35:af:35:58:3f:ab:5d:df:26:f4:95:70:95:a6: 14:cc:83:b9:61:4f:1b:c5:7d:69:ec:c2:35:d9:e7:d0:75:52: 43:8f:b9:84:e7:f1:f3:ae:51:dc:d5:15:bb:15:60:fb:6f:68: 03:c1:63:07:25:27:83:97:3c:1b:6c:38:11:73:1d:b5:de:55: c8:1e:84:60:47:95:14:0d:bc:0d:b1:18:10:3d:a1:c3:09:6b: 8e:fa:c7:c6:30:ef:39:0a:7f:fb:3e:4f:fc:b0:24:39:a9:2c: 9b:06:ad:6b:49:04:df:06:5b:09:f5:5d:64:e1:66:02:61:57: dc:2c:f5:04:31:61:90:21:c2:57:3f:90:d9:ad:78:cf:0c:e3: d8:ac:f3:1b:35:e3:55:17:d0:ce:ca:4d:48:50:e7:dd:4e:bc: 21:73:e3:21:25:f1:d7:8c:3c:eb:df:2e:3a:f4:5e:9f:8d:d3: 8a:f0:ac:5f:0b:43:59:25:57:96:95:25:4d:1f:6a:63:3a:df: 5f:de:d5:f9:88:7e:98:b3:ca:da:16:47:7f:10:c8:bb:98:a8: ea:3e:44:fb:39:ff:18:14:42:10:19:db:87:73:64:1c:4b:8e: 68:ff:36:ea -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NzdGMzExMC8GA1UEBRMoNjUxMTRCMTc0M0ZENjBERDc3MjhERUUxRTg1QjQ5RUVB MUJGMERBRDAeFw0yNDA4MTYwNjU3MjVaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmVmODU0LTE4ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLOBrv13AYu2wq0BaETz+od/jynLLNTvrSsj8IDS3AU9bHlEWWW4CgeNUv2JMQ SNQuXGFV1KH2sJB+Dy13UO7Q1xYAscuNKYsU7gMHafc8pwZycg3KM/xVg4iqIWle yoKu3CCwSCYnMMZLAH9K5WXzHmTV6jo+UQH+bnjJhSFXWYDs/ybBkMk9QtBDpxaS uXE7j072iMgDIbgyWio6mN2la9kEJwaFm3qJlAv2pOCFxp0VwqjjauZnbOdFNrtZ eoSiK6Oiukk4Zi0Iibh95jRY1c6Bt/oWKfM9lyclWGeGkNfuh8p4pQducfaHghzB g/8IwO39q1mFKzkMjsId7EoXAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUpaqMKhEQ UUt/fyYqhrvAAwMlto4wHwYDVR0jBBgwFoAUZRFLF0P9YN13KN7h6FtJ7qG/Da0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3N0YzLzk0RUZDQzBDNUI5 QzExRUY4Q0VBMzE0NUM0RjlBRTAyL1pSRkxGMFA5WU4xM0tON2g2RnRKN3FHX0Rh MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlJGTEYwUDlZTjEzS043aDZGdEo3cUdfRGEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdGMy85NEVGQ0MwQzVCOUMxMUVGOENFQTMxNDVDNEY5QUUwMi9DQUFEQTQ5QTVC OUMxMUVGOUFEODk2NDVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmfM/AMEAstM6DANBgkqhkiG9w0BAQsFAAOCAQEAA7Zm/3Ig EVVIVYW5UNVFbnG+6kMPgzWvNVg/q13fJvSVcJWmFMyDuWFPG8V9aezCNdnn0HVS Q4+5hOfx865R3NUVuxVg+29oA8FjByUng5c8G2w4EXMdtd5VyB6EYEeVFA28DbEY ED2hwwlrjvrHxjDvOQp/+z5P/LAkOaksmwata0kE3wZbCfVdZOFmAmFX3Cz1BDFh kCHCVz+Q2a14zwzj2KzzGzXjVRfQzspNSFDn3U68IXPjISXx14w8698uOvRen43T ivCsXwtDWSVXlpUlTR9qYzrfX97V+Yh+mLPK2hZHfxDIu5io6j5E+zn/GBRCEBnb h3NkHEuOaP826g== -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:26 2024 by rpki-client on console-fra.rpki-client.org