$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/CF6AFFD26BC811EFA6FA8373C4F9AE02.roa File: CF6AFFD26BC811EFA6FA8373C4F9AE02.roa (raw, json) Hash identifier: GPAJwU4kVAVnD7HV2JprN8mWja7fNOgKoIeaDugLjxE= Subject key identifier: 40:BD:B1:4C:07:8E:5D:83:75:6B:B9:86:D1:6B:39:D3:CA:0C:C8:73 Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Certificate serial: 0164 Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/CF6AFFD26BC811EFA6FA8373C4F9AE02.roa Signing time: Thu 05 Sep 2024 20:52:49 +0000 ROA not before: Thu 05 Sep 2024 20:52:49 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 209829 IP address blocks: 103.104.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Validity Not Before: Sep 5 20:52:49 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66da1a21-8526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:c9:00:9e:f5:d5:4d:2d:0b:c0:d3:c5:42: b0:ef:2c:c3:be:15:22:57:eb:db:48:fd:c7:e3:e0: 68:cc:c1:70:c1:17:5b:98:15:72:33:a0:4e:fc:b6: ff:36:e1:b5:9b:15:be:2f:6f:68:da:26:18:c2:ff: de:b9:27:6b:4c:d6:cb:61:c2:2f:64:b3:4b:e9:42: 6d:5e:ba:dc:41:65:b3:75:68:ff:f3:6c:50:c7:16: e8:a0:8a:0c:26:1f:a3:c9:ab:d2:c9:87:6b:fd:b8: d4:1c:37:d5:c5:95:d7:7e:a0:ec:21:1b:40:83:6a: da:36:1e:50:37:5c:c6:fd:c5:1b:99:fb:85:38:d7: 28:d8:ab:73:d7:e3:84:d0:4d:95:04:90:ff:94:e3: cb:c9:a9:58:55:ba:a0:bc:d3:2d:24:3d:e6:55:8f: 92:2f:5f:e6:f6:20:13:10:ef:5b:48:0c:9c:2c:8c: ad:3a:3b:cd:ef:ae:fa:f6:d4:a8:bb:43:37:8e:6e: 5c:2e:b2:d8:8a:df:6b:e9:82:95:48:6f:13:75:1e: 5c:8e:40:11:0e:7a:75:53:14:c0:2e:42:ef:45:b8: 60:dd:07:1f:95:d1:82:d3:39:b0:1d:e5:a8:c6:62: 58:5a:80:1f:bf:48:b8:cd:6e:bc:6e:88:1b:0b:e6: 6a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BD:B1:4C:07:8E:5D:83:75:6B:B9:86:D1:6B:39:D3:CA:0C:C8:73 X509v3 Authority Key Identifier: keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/CF6AFFD26BC811EFA6FA8373C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.246.0/24 Signature Algorithm: sha256WithRSAEncryption 81:44:c1:25:b6:56:eb:92:1a:75:d2:13:34:96:27:fb:31:5e: c3:33:aa:a9:da:9c:cf:4e:92:49:5b:ca:f2:ae:66:a5:94:28: 09:ef:cf:fe:8c:74:9e:e5:b7:ff:30:9c:64:e5:33:3a:0d:4d: 9c:48:65:2f:b5:57:61:60:2d:09:66:7d:53:5c:05:20:70:a0: c5:5f:47:60:d3:81:3d:c5:82:06:65:29:35:df:05:be:25:68: fc:51:a3:52:86:dc:16:2d:36:8f:a2:68:ee:f7:b6:25:45:b1: 02:42:e2:be:28:5a:cb:36:8a:5e:2c:a9:7e:49:f9:4a:a9:d3: ee:54:3c:20:d1:0d:0b:00:02:c9:e9:73:7e:99:3c:cc:ca:48: 89:c6:10:a1:b6:39:86:a2:52:14:9d:d1:36:5b:cf:58:29:f5: 3f:4d:13:33:10:8b:1d:1f:19:65:c9:88:d6:cc:d0:98:89:0a: 12:bc:d5:a9:7c:dd:03:3f:b4:55:e2:c1:fe:39:5b:73:d3:67: 6d:01:27:62:f0:d1:32:26:5f:5d:4d:6e:4f:43:85:67:af:fa: df:dd:d1:53:7f:fb:a0:47:f9:9b:1d:d2:f9:1e:f2:85:29:8f: 56:60:32:a5:33:08:4d:df:8d:78:eb:cc:51:3a:7d:57:b0:42: e0:cb:ce:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzkxMTAvBgNVBAUTKDI1MzgwMEVEMTZFRDBGRjMzN0Y3MDQwRDBFM0RGMTE0 MUMxNjE2MUMwHhcNMjQwOTA1MjA1MjQ5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmRhMWEyMS04NTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscHJAJ711U0tC8DTxUKw7yzDvhUiV+vbSP3H4+BozMFwwRdbmBVyM6BO/Lb/ NuG1mxW+L29o2iYYwv/euSdrTNbLYcIvZLNL6UJtXrrcQWWzdWj/82xQxxbooIoM Jh+jyavSyYdr/bjUHDfVxZXXfqDsIRtAg2raNh5QN1zG/cUbmfuFONco2Ktz1+OE 0E2VBJD/lOPLyalYVbqgvNMtJD3mVY+SL1/m9iATEO9bSAycLIytOjvN76769tSo u0M3jm5cLrLYit9r6YKVSG8TdR5cjkARDnp1UxTALkLvRbhg3QcfldGC0zmwHeWo xmJYWoAfv0i4zW68bogbC+ZqGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEC9sUwH jl2DdWu5htFrOdPKDMhzMB8GA1UdIwQYMBaAFCU4AO0W7Q/zN/cEDQ498RQcFhYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOS8yMTk3QjA5MjU4 M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERfTTM5d1FORGozeEZCd1dG aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pUZ0E3UmJ0RF9NMzl3UU5EajN4RkJ3V0Zody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkI4QzkvMjE5N0IwOTI1ODNGMTFFRDgxODFFNTdCQzRGOUFFMDIvQ0Y2QUZGRDI2 QkM4MTFFRkE2RkE4MzczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnaPYwDQYJKoZIhvcNAQELBQADggEBAIFEwSW2VuuSGnXS EzSWJ/sxXsMzqqnanM9OkklbyvKuZqWUKAnvz/6MdJ7lt/8wnGTlMzoNTZxIZS+1 V2FgLQlmfVNcBSBwoMVfR2DTgT3FggZlKTXfBb4laPxRo1KG3BYtNo+iaO73tiVF sQJC4r4oWss2il4sqX5J+Uqp0+5UPCDRDQsAAsnpc36ZPMzKSInGEKG2OYaiUhSd 0TZbz1gp9T9NEzMQix0fGWXJiNbM0JiJChK81al83QM/tFXiwf45W3PTZ20BJ2Lw 0TImX11Nbk9DhWev+t/d0VN/+6BH+Zsd0vke8oUpj1ZgMqUzCE3fjXjrzFE6fVew QuDLzg0= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:59 2024 by rpki-client on console-ams.rpki-client.org