$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa File: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (raw, json) Hash identifier: NQ/FdiHnsEgbWZrTY0bF8wpVYSqrTS9zjB5bxmcmsw4= Subject key identifier: 34:BF:32:78:64:4B:7F:05:F9:5D:E1:04:30:0A:18:78:B3:FE:06:B4 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 01FE Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa Signing time: Wed 25 Sep 2024 02:05:48 +0000 ROA not before: Wed 25 Sep 2024 02:05:48 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150129 IP address blocks: 103.154.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Sep 25 02:05:48 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66f36ffc-906f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:a6:57:1b:df:a9:19:da:4f:1b:3e:a3:87: fa:b3:61:1c:75:d2:c4:8c:b8:64:81:ed:89:f2:6b: fa:31:30:51:e6:b7:32:ff:a3:40:23:54:11:a0:d4: 05:61:49:b9:4c:8d:47:3d:96:26:25:77:f7:25:19: 81:0a:67:65:7a:90:22:31:dc:f6:c1:08:e7:4e:57: 45:25:16:72:e6:2a:b5:fb:fd:2a:1c:47:36:21:52: 3f:b6:1b:25:95:79:72:d5:35:0c:3c:6a:67:f8:c1: 7b:87:e4:1c:5a:a8:ac:5e:05:52:2a:7f:9d:07:cf: 78:32:17:c9:73:8e:e8:4c:26:73:1d:3d:7c:ea:94: a0:34:2b:87:da:84:38:34:dc:d3:e0:17:e6:10:5a: f2:fd:f7:e3:0f:2a:af:87:a3:92:2e:e1:53:a5:65: 77:10:71:c7:98:f6:5e:bc:22:14:90:65:94:61:ba: 80:6b:22:a8:84:7e:f0:54:66:4a:47:7d:8e:c0:08: 28:aa:cd:14:90:64:00:38:42:e3:53:2b:69:e1:39: 17:1e:6e:65:ac:81:3a:bf:7d:60:e2:17:27:5c:ab: 1c:2c:6d:5b:5e:54:c9:65:cf:8e:9d:a4:12:a9:d2: 5e:9d:c5:62:05:eb:2c:4a:a8:6b:af:8c:f0:34:d0: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BF:32:78:64:4B:7F:05:F9:5D:E1:04:30:0A:18:78:B3:FE:06:B4 X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.64.0/24 Signature Algorithm: sha256WithRSAEncryption 41:0d:5d:52:b3:ed:71:ac:28:a1:9f:ad:cc:4b:1d:bd:73:72: 65:db:1f:87:ec:a1:f0:72:50:82:eb:97:e3:29:ae:e3:66:ea: aa:d1:1c:96:6e:6a:0a:c7:a1:6d:24:c8:05:3f:8d:78:69:4d: c4:47:0e:75:35:54:a3:06:0b:a5:05:96:00:22:2c:4a:f6:68: 73:d8:24:8c:0a:8e:e1:71:52:a1:75:d2:2e:f2:23:83:9e:41: 54:4b:3a:8c:91:41:35:35:18:72:bd:4b:0f:7c:be:8a:a0:8d: 8e:a0:81:e7:cb:c9:f2:84:ba:16:fb:cb:43:c7:41:e8:0c:4b: 24:ba:f0:d1:a9:90:4d:cd:b0:92:1e:4e:28:a8:eb:ad:3e:24: 4f:f2:b5:39:a6:51:27:cc:61:69:ce:cd:a2:3f:94:43:9d:10: 52:e8:8c:f5:9d:b7:11:27:44:53:fa:84:36:fe:b2:14:59:d6: 1b:cf:61:f2:7a:e8:42:58:d8:7f:60:8c:d2:85:ea:16:e2:33: 37:13:54:21:18:e5:6f:fc:dd:44:dc:88:96:f5:fe:d5:e9:1f: c3:18:cd:43:35:35:89:0f:57:c2:03:21:2a:73:9c:62:85:b9: e5:67:86:dc:dc:d0:5b:e1:55:fe:45:b9:10:4d:ce:b2:c6:86: db:cd:d3:fe -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjQwOTI1MDIwNTQ4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYzNmZmYy05MDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnaimVxvfqRnaTxs+o4f6s2EcddLEjLhkge2J8mv6MTBR5rcy/6NAI1QRoNQF YUm5TI1HPZYmJXf3JRmBCmdlepAiMdz2wQjnTldFJRZy5iq1+/0qHEc2IVI/thsl lXly1TUMPGpn+MF7h+QcWqisXgVSKn+dB894MhfJc47oTCZzHT186pSgNCuH2oQ4 NNzT4BfmEFry/ffjDyqvh6OSLuFTpWV3EHHHmPZevCIUkGWUYbqAayKohH7wVGZK R32OwAgoqs0UkGQAOELjUytp4TkXHm5lrIE6v31g4hcnXKscLG1bXlTJZc+OnaQS qdJencViBessSqhrr4zwNNDxvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDS/Mnhk S38F+V3hBDAKGHiz/ga0MB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE4RTgvOTAzOTc4MzAxMEQ5MTFFRDgwQjgwRDI5QzRGOUFFMDIvQ0UxQTUyNDIx MEREMTFFREJDN0VBMzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnmkAwDQYJKoZIhvcNAQELBQADggEBAEENXVKz7XGsKKGf rcxLHb1zcmXbH4fsofByUILrl+MpruNm6qrRHJZuagrHoW0kyAU/jXhpTcRHDnU1 VKMGC6UFlgAiLEr2aHPYJIwKjuFxUqF10i7yI4OeQVRLOoyRQTU1GHK9Sw98voqg jY6ggefLyfKEuhb7y0PHQegMSyS68NGpkE3NsJIeTiio660+JE/ytTmmUSfMYWnO zaI/lEOdEFLojPWdtxEnRFP6hDb+shRZ1hvPYfJ66EJY2H9gjNKF6hbiMzcTVCEY 5W/83UTciJb1/tXpH8MYzUM1NYkPV8IDISpznGKFueVnhtzc0FvhVf5FuRBNzrLG htvN0/4= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:59 2024 by rpki-client on console-ams.rpki-client.org