$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/1983150A3BB911EEB0CA4809C4F9AE02.roa File: 1983150A3BB911EEB0CA4809C4F9AE02.roa (raw, json) Hash identifier: dlJ7zH1d3oXPs3S0YirZQi1hSZzUrfDhpzP6MZkDSDk= Subject key identifier: F3:5B:17:43:F0:D2:75:ED:8E:EE:A6:F0:98:C3:5F:F8:93:E1:7E:5E Certificate issuer: /CN=A91ED73E/serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473 Certificate serial: 1350 Authority key identifier: 5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/1983150A3BB911EEB0CA4809C4F9AE02.roa Signing time: Thu 22 Aug 2024 17:15:09 +0000 ROA not before: Thu 22 Aug 2024 17:15:09 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 137972 IP address blocks: 103.146.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4944 (0x1350) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED73E/serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473 Validity Not Before: Aug 22 17:15:09 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c7721d-430e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:37:43:1b:ac:cf:83:fa:e2:9a:b4:a9:fe:da: e8:16:b3:9b:bb:a6:b6:a7:24:e8:b7:a3:36:17:60: c7:df:88:b8:a4:3f:71:a4:6f:6a:0b:3d:0f:ec:ce: 61:b2:7c:05:af:37:1e:fb:d2:e0:b2:04:5e:95:a9: 49:52:74:7a:a8:2d:5b:cf:82:fa:9a:83:13:62:6b: 8d:05:83:83:36:7b:a1:76:ab:02:2c:bc:5d:18:6c: e0:f2:b8:3a:2e:65:b2:98:ba:4f:85:b0:4e:d1:46: 1c:5a:3f:8c:5e:15:6a:dd:e8:d6:d0:f1:04:52:8e: 57:ec:bd:25:3c:bf:e9:81:77:0b:60:63:da:02:bc: fd:c8:26:8e:14:02:e0:52:89:01:0c:b9:93:01:c6: 10:8a:b1:9f:db:0b:85:f2:6f:0e:cb:3d:ad:6d:28: 0c:ec:5f:00:2c:6f:e2:21:f2:10:95:70:18:f8:80: 86:83:2e:22:bc:a6:5f:5e:6e:47:7b:08:f5:e1:17: b5:50:42:81:35:a5:d0:63:1b:5e:b5:84:b8:1c:a4: a7:32:f7:37:4f:28:99:7b:06:74:b0:7e:de:32:6a: 98:72:fb:d9:db:9b:80:8c:cc:cd:13:c3:e1:ae:d0: 8f:3a:7c:d2:c8:cd:4a:64:ba:73:0a:9b:f6:05:8f: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5B:17:43:F0:D2:75:ED:8E:EE:A6:F0:98:C3:5F:F8:93:E1:7E:5E X509v3 Authority Key Identifier: keyid:5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/1983150A3BB911EEB0CA4809C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.24.0/24 Signature Algorithm: sha256WithRSAEncryption 02:0a:fa:a5:e2:90:4d:9a:b1:0c:c7:d9:02:23:33:2f:2d:67: c6:ca:dc:1a:4e:e2:27:71:f7:7a:b6:0c:0a:a2:55:dc:9f:40: e9:5f:19:ce:08:ed:ba:50:06:69:65:ee:22:32:fb:b5:8a:c4: f4:f8:c2:8e:cf:24:89:6d:42:1f:6c:c4:8e:5d:25:2c:aa:7f: a6:75:f1:91:44:39:3a:95:40:82:62:63:f5:f5:cb:1b:a3:34: fd:ae:71:5f:f0:f7:9d:64:1b:b4:09:36:60:28:7e:9f:50:a7: b7:e6:65:03:3f:dc:a8:25:c4:2c:2b:88:24:39:18:a3:e7:13: 54:bf:84:99:f9:6b:c1:62:54:2b:66:1b:17:85:7f:42:ef:7e: a9:65:18:49:a6:7c:05:4c:0f:0c:2e:e0:e8:ab:d8:37:71:6a: b7:3c:74:ff:17:29:3f:f2:62:b3:ed:d3:93:fa:99:95:57:f3: aa:d2:81:5c:74:8e:15:85:ea:cf:73:4a:73:e8:5e:d5:6f:bf: 67:c2:75:97:5a:0e:52:00:be:48:df:b6:61:76:1e:46:a1:0b: 7b:ff:93:6b:9d:2a:4b:82:48:32:07:e6:2b:dd:39:eb:e5:c6: 4f:a7:ac:9b:77:f8:35:bd:cc:8c:c1:67:0b:fb:57:6d:19:07: c7:76:2c:20 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICE1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ3M0UxMTAvBgNVBAUTKDVDQUY0MUY2NEIzNzUyNjg3OThFMkE1REFBMEMxNDAw MDBDRDc0NzMwHhcNMjQwODIyMTcxNTA5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM3NzIxZC00MzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTdDG6zPg/rimrSp/troFrObu6a2pyTot6M2F2DH34i4pD9xpG9qCz0P7M5h snwFrzce+9LgsgRelalJUnR6qC1bz4L6moMTYmuNBYODNnuhdqsCLLxdGGzg8rg6 LmWymLpPhbBO0UYcWj+MXhVq3ejW0PEEUo5X7L0lPL/pgXcLYGPaArz9yCaOFALg UokBDLmTAcYQirGf2wuF8m8Oyz2tbSgM7F8ALG/iIfIQlXAY+ICGgy4ivKZfXm5H ewj14Re1UEKBNaXQYxtetYS4HKSnMvc3TyiZewZ0sH7eMmqYcvvZ25uAjMzNE8Ph rtCPOnzSyM1KZLpzCpv2BY9IvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPNbF0Pw 0nXtju6m8JjDX/iT4X5eMB8GA1UdIwQYMBaAFFyvQfZLN1JoeY4qXaoMFAAAzXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDczRS8wMUI4MjEwQTg5 ODkxMUU4Qjk4QkVDM0FDNEY5QUUwMi9YSzlCOWtzM1VtaDVqaXBkcWd3VUFBRE5k SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLOUI5a3MzVW1oNWppcGRxZ3dVQUFETmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUQ3M0UvMDFCODIxMEE4OTg5MTFFOEI5OEJFQzNBQzRGOUFFMDIvMTk4MzE1MEEz QkI5MTFFRUIwQ0E0ODA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkhgwDQYJKoZIhvcNAQELBQADggEBAAIK+qXikE2asQzH 2QIjMy8tZ8bK3BpO4idx93q2DAqiVdyfQOlfGc4I7bpQBmll7iIy+7WKxPT4wo7P JIltQh9sxI5dJSyqf6Z18ZFEOTqVQIJiY/X1yxujNP2ucV/w951kG7QJNmAofp9Q p7fmZQM/3KglxCwriCQ5GKPnE1S/hJn5a8FiVCtmGxeFf0LvfqllGEmmfAVMDwwu 4Oir2Ddxarc8dP8XKT/yYrPt05P6mZVX86rSgVx0jhWF6s9zSnPoXtVvv2fCdZda DlIAvkjftmF2HkahC3v/k2udKkuCSDIH5ivdOevlxk+nrJt3+DW9zIzBZwv7V20Z B8d2LCA= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org