$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/AE8AEA702C3111EE94A5056FC4F9AE02.roa File: AE8AEA702C3111EE94A5056FC4F9AE02.roa (raw, json) Hash identifier: DhIch+RxWIpV0kjM6MCCA7OP7UDRbGyuOsypw/t/DWs= Subject key identifier: 38:E9:22:22:93:13:3E:72:96:11:3C:77:01:28:09:6E:06:0E:00:2D Certificate issuer: /CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Certificate serial: D1 Authority key identifier: D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/AE8AEA702C3111EE94A5056FC4F9AE02.roa Signing time: Fri 23 Aug 2024 05:07:41 +0000 ROA not before: Fri 23 Aug 2024 05:07:41 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 139304 IP address blocks: 103.140.253.0/24 maxlen: 24 2001:df0:e580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Validity Not Before: Aug 23 05:07:41 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66c8191d-ce35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:e0:6f:a1:d5:36:19:7a:28:b1:96:0b:58: 1f:7f:dd:0d:e7:f7:a5:f8:d2:17:54:62:95:a0:ac: cc:d8:69:ad:a1:51:5f:8a:83:8b:00:06:75:68:dc: 10:f0:2d:00:4f:50:2d:11:58:1d:3b:99:28:79:9a: f6:a5:a1:0d:ad:c7:29:9c:05:b6:53:1f:9e:c3:0c: 60:16:80:9e:c4:f4:51:d7:5e:e4:9e:fa:aa:ca:34: 49:d0:36:77:51:b4:5f:80:cc:01:0e:8d:96:a4:11: 3b:a5:92:cf:75:b2:ce:aa:4a:47:af:4b:a4:95:a2: 1d:9e:2a:a0:ef:8a:59:f4:ce:d5:66:e0:50:32:1a: 84:49:30:6e:a5:99:76:1d:1c:11:36:01:4b:68:27: b1:2d:6b:16:e7:c1:ab:c8:a4:4f:fd:6b:70:0a:f8: 0b:93:4a:2c:a1:91:d4:32:f5:5d:b6:a5:98:57:f1: 65:79:a9:32:08:59:43:0c:e9:e9:e5:a2:45:1a:4d: 9b:5a:95:0e:b1:a9:b0:62:ca:cc:de:47:90:da:fe: 46:ba:e1:a9:c6:cc:66:0f:95:d7:14:83:a7:dc:c5: 9e:1e:44:90:78:67:36:a3:e3:47:21:9a:42:90:3a: d1:b9:d2:5c:f8:e3:de:b3:30:74:51:97:31:7c:ba: ba:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E9:22:22:93:13:3E:72:96:11:3C:77:01:28:09:6E:06:0E:00:2D X509v3 Authority Key Identifier: keyid:D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/AE8AEA702C3111EE94A5056FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.253.0/24 IPv6: 2001:df0:e580::/48 Signature Algorithm: sha256WithRSAEncryption 0b:24:c3:34:c8:6b:b0:85:81:bc:94:69:79:77:d9:6d:97:e7: 76:48:08:20:87:44:13:5e:54:7e:7e:d7:15:3d:a0:7a:e4:bb: c6:e1:60:43:6f:3f:54:93:df:e3:63:ef:c2:7f:05:27:be:d8: 63:23:89:0a:87:47:4f:81:ff:9e:0b:d7:07:05:a2:9d:72:81: 89:6f:3e:2a:13:8c:4e:56:54:cd:99:fa:a1:37:bd:17:c7:e2: dc:37:60:ff:10:2e:70:72:a3:ad:be:33:fc:b3:4e:cf:f3:75: ce:fe:15:87:49:fe:25:18:2b:66:5a:3c:4a:95:49:6b:97:d1: 2f:7b:fa:5f:3c:70:92:cb:40:3c:22:e6:37:d9:ca:93:79:1d: ed:9e:3f:3e:50:99:fa:20:27:6a:b0:6a:1a:05:42:aa:48:c5: f8:d7:a7:69:07:74:9e:96:08:be:5e:48:b3:06:60:76:08:98: 08:05:8f:ff:97:29:cd:b6:da:3f:c7:0f:be:7c:7e:e0:4b:f9: 64:82:d9:b1:39:75:be:b7:c1:48:22:d9:c7:48:34:46:34:ce: a7:8b:09:37:74:65:96:92:e6:41:dc:04:f1:b9:49:27:8b:42: da:4a:48:15:1d:4e:fb:82:7b:0b:95:ce:df:c5:a7:3c:9d:71: 13:a5:4e:2b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QTUxMTAvBgNVBAUTKEQ2NUFBOTU1RDdFNjJDNzFDNUFCMkJCNzFBMEM5REMy NzJBQTk0NjUwHhcNMjQwODIzMDUwNzQxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM4MTkxZC1jZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz23gb6HVNhl6KLGWC1gff90N5/el+NIXVGKVoKzM2GmtoVFfioOLAAZ1aNwQ 8C0AT1AtEVgdO5koeZr2paENrccpnAW2Ux+ewwxgFoCexPRR117knvqqyjRJ0DZ3 UbRfgMwBDo2WpBE7pZLPdbLOqkpHr0uklaIdniqg74pZ9M7VZuBQMhqESTBupZl2 HRwRNgFLaCexLWsW58GryKRP/WtwCvgLk0osoZHUMvVdtqWYV/FleakyCFlDDOnp 5aJFGk2bWpUOsamwYsrM3keQ2v5GuuGpxsxmD5XXFIOn3MWeHkSQeGc2o+NHIZpC kDrRudJc+OPeszB0UZcxfLq6YwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDjpIiKT Ez5ylhE8dwEoCW4GDgAtMB8GA1UdIwQYMBaAFNZaqVXX5ixxxasrtxoMncJyqpRl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBNS80QTkzRjY0MjJD MzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxISEZxeXUzR2d5ZHduS3Fs R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFscXBWZGZtTEhIRnF5dTNHZ3lkd25LcWxHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI2QTUvNEE5M0Y2NDIyQzMxMTFFRTlDRTRGRjZEQzRGOUFFMDIvQUU4QUVBNzAy QzMxMTFFRTk0QTUwNTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnjP0wDwQCAAIwCQMHACABDfDlgDANBgkqhkiG9w0BAQsF AAOCAQEACyTDNMhrsIWBvJRpeXfZbZfndkgIIIdEE15Ufn7XFT2geuS7xuFgQ28/ VJPf42Pvwn8FJ77YYyOJCodHT4H/ngvXBwWinXKBiW8+KhOMTlZUzZn6oTe9F8fi 3Ddg/xAucHKjrb4z/LNOz/N1zv4Vh0n+JRgrZlo8SpVJa5fRL3v6XzxwkstAPCLm N9nKk3kd7Z4/PlCZ+iAnarBqGgVCqkjF+NenaQd0npYIvl5IswZgdgiYCAWP/5cp zbbaP8cPvnx+4Ev5ZILZsTl1vrfBSCLZx0g0RjTOp4sJN3RllpLmQdwE8blJJ4tC 2kpIFR1O+4J7C5XO38WnPJ1xE6VOKw== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org