$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/2FD106D2B92711E99D48BA23C4F9AE02.roa File: 2FD106D2B92711E99D48BA23C4F9AE02.roa (raw, json) Hash identifier: 8nCNAcs27eO0GjTKs3H3HMysABQ6XV5irpVlWDxCRLE= Subject key identifier: D5:D8:65:65:C1:F6:4B:9E:3B:4C:74:13:C8:A8:F3:35:98:FF:D7:E9 Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Certificate serial: 0C72 Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/2FD106D2B92711E99D48BA23C4F9AE02.roa Signing time: Tue 08 Aug 2023 18:35:53 +0000 ROA not before: Tue 08 Aug 2023 18:35:53 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 133936 IP address blocks: 103.140.138.0/24 maxlen: 24 103.140.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3186 (0xc72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Validity Not Before: Aug 8 18:35:53 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64d28b09-7b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:8f:ad:13:37:1d:d3:ed:8f:13:18:4c:2d: 1a:02:8e:64:94:79:d3:c5:18:af:e8:50:d2:fc:f8: c5:b6:16:9a:da:18:6e:a1:1e:55:5d:14:81:95:af: 05:f2:44:24:77:aa:ce:8c:cd:aa:fd:6f:13:06:2e: 74:9b:d6:c5:09:28:43:2d:6f:3e:a6:d0:3f:34:c7: 7f:e6:c5:2a:1a:cf:39:e1:e5:e2:53:8e:9f:43:76: 05:a4:58:a6:05:13:f5:c7:c9:0b:09:be:67:b5:65: a5:6f:f0:20:e0:ab:e9:f3:af:ca:5a:ce:1a:e1:20: a5:aa:77:54:62:b4:40:51:8a:09:fb:3e:ec:21:d4: 8c:37:51:44:b8:40:f4:d2:18:d8:5d:27:5d:60:0a: c2:9b:ef:1f:b7:8d:f6:52:5a:15:91:b5:21:fe:ea: 85:0a:83:07:34:26:2b:12:a4:55:43:f9:73:44:87: aa:df:ca:8e:4f:2e:b7:19:4d:c2:e1:c3:ed:0c:54: ff:43:3c:b4:6c:51:76:29:aa:c6:d3:c9:e3:00:85: e5:2d:1c:41:e4:db:0a:8e:a0:4f:13:66:e5:c2:e6: 94:cc:95:d8:91:ee:0f:63:44:ff:cc:bc:d7:c8:aa: 3b:bf:df:e5:0a:da:07:21:94:59:d4:97:60:07:59: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D8:65:65:C1:F6:4B:9E:3B:4C:74:13:C8:A8:F3:35:98:FF:D7:E9 X509v3 Authority Key Identifier: keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/2FD106D2B92711E99D48BA23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.138.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:42:dd:b3:92:68:47:bb:64:5e:21:b6:7f:af:36:51:b5:98: 77:e8:26:37:1b:93:85:c5:97:95:4d:e9:5a:18:f5:50:d7:ce: da:23:95:1c:a1:31:32:ee:c4:3e:86:2f:bb:54:e1:69:47:23: 73:1d:9f:fe:c7:75:af:06:83:0e:64:94:6c:ba:4d:f9:d0:58: 01:11:5b:23:ca:57:33:13:3f:d3:6e:bc:c0:a0:70:41:09:38: d1:2b:5b:6e:37:ad:6b:b9:c9:c0:d6:d1:5e:5a:03:4c:19:2b: 38:83:08:2f:ee:25:20:10:a9:87:5a:45:cb:6e:07:1c:1e:8a: 86:82:fe:e6:13:6c:be:b5:07:50:f2:ad:4c:b6:35:02:2c:61: 8a:ed:a5:37:63:c3:7e:6d:b6:61:30:0a:1f:7c:c0:96:95:20: ac:aa:bd:b7:52:dd:d7:e1:8a:bc:42:10:0b:df:4d:7e:84:17: 59:0f:33:eb:b0:4c:cc:d7:bc:6b:4a:84:5a:c9:9c:44:c7:86: 35:f9:46:fb:73:f9:52:aa:f0:4f:59:1a:aa:a0:a2:ac:a3:86: 96:44:43:f7:b5:14:38:33:89:83:17:37:2e:d1:db:a0:f4:b3: c7:bd:67:fc:54:a0:4b:c2:21:8a:62:83:29:d5:82:eb:38:a8: 27:81:5f:29 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4 QzVGNjE5NjUwHhcNMjMwODA4MTgzNTUzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGQyOGIwOS03Yjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdePrRM3HdPtjxMYTC0aAo5klHnTxRiv6FDS/PjFthaa2hhuoR5VXRSBla8F 8kQkd6rOjM2q/W8TBi50m9bFCShDLW8+ptA/NMd/5sUqGs854eXiU46fQ3YFpFim BRP1x8kLCb5ntWWlb/Ag4Kvp86/KWs4a4SClqndUYrRAUYoJ+z7sIdSMN1FEuED0 0hjYXSddYArCm+8ft432UloVkbUh/uqFCoMHNCYrEqRVQ/lzRIeq38qOTy63GU3C 4cPtDFT/Qzy0bFF2KarG08njAIXlLRxB5NsKjqBPE2blwuaUzJXYke4PY0T/zLzX yKo7v9/lCtoHIZRZ1JdgB1nWDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNXYZWXB 9kueO0x0E8io8zWY/9fpMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5 MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkE5QjEvNUNBQ0Y2QThCOTI2MTFFOTk3NTI4OTIyQzRGOUFFMDIvMkZEMTA2RDJC OTI3MTFFOTlENDhCQTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjIowDQYJKoZIhvcNAQELBQADggEBAA1C3bOSaEe7ZF4h tn+vNlG1mHfoJjcbk4XFl5VN6VoY9VDXztojlRyhMTLuxD6GL7tU4WlHI3Mdn/7H da8Ggw5klGy6TfnQWAERWyPKVzMTP9NuvMCgcEEJONErW243rWu5ycDW0V5aA0wZ KziDCC/uJSAQqYdaRctuBxweioaC/uYTbL61B1DyrUy2NQIsYYrtpTdjw35ttmEw Ch98wJaVIKyqvbdS3dfhirxCEAvfTX6EF1kPM+uwTMzXvGtKhFrJnETHhjX5Rvtz +VKq8E9ZGqqgoqyjhpZEQ/e1FDgziYMXNy7R26D0s8e9Z/xUoEvCIYpigynVgus4 qCeBXyk= -----END CERTIFICATE-----Generated at Fri May 31 20:34:00 2024 by rpki-client on console-ams.rpki-client.org