$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/7DD0E8845A3211EDB637E665C4F9AE02.roa File: 7DD0E8845A3211EDB637E665C4F9AE02.roa (raw, json) Hash identifier: +N1y5bDOglcr1W0dY9YE7HSszK5l7COAH3jW70e1QEA= Subject key identifier: 2E:8F:ED:CD:5F:FF:BE:3A:7D:E6:E4:8C:E2:80:F2:00:4C:39:DC:FF Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Certificate serial: D9 Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/7DD0E8845A3211EDB637E665C4F9AE02.roa Signing time: Wed 29 Nov 2023 04:54:52 +0000 ROA not before: Wed 29 Nov 2023 04:54:52 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 150377 IP address blocks: 103.23.252.0/23 maxlen: 23 103.23.252.0/24 maxlen: 24 103.23.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Validity Not Before: Nov 29 04:54:52 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6566c41b-ba95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:30:8d:39:a2:f7:18:68:fe:e6:17:b0:26: d2:e3:51:2b:23:0d:e0:21:7d:52:0f:a8:6a:15:7e: b4:9a:ed:71:fc:16:90:56:eb:34:6d:dc:d3:9a:82: 7e:e9:37:99:e7:68:a9:e5:8a:25:9c:69:ad:32:59: 94:b6:7e:f9:3d:8a:ab:a5:a8:9a:cd:57:0b:f8:3a: 01:0a:3e:37:0f:bc:aa:46:a4:4a:3f:62:9b:35:fe: 42:ff:1e:fb:c7:ef:13:8a:ac:d6:13:c0:22:ce:f1: 9f:fc:be:b6:6d:15:d7:99:ea:73:2f:2d:a6:fc:dd: 8c:9d:e4:fd:91:68:51:44:1f:0a:87:5f:88:19:7f: dc:d2:97:fa:d0:ad:eb:6e:0a:63:e2:c0:35:45:49: 56:c3:40:d7:5f:65:39:20:c5:60:ae:cf:ec:81:5c: 0d:0b:d6:8d:ec:35:26:9a:ac:03:3d:0d:58:9f:12: a6:32:30:5b:cb:71:48:9a:1e:98:8a:87:d4:e9:6f: 50:88:c8:d2:e3:cf:f2:99:56:b3:4b:8a:82:80:0f: 8f:7f:e6:d5:4c:0d:3b:2d:32:5e:ff:d5:9d:eb:23: 84:ff:b3:3c:a3:59:85:fc:50:6c:f3:47:de:d5:f9: ae:7e:12:9a:70:42:d4:9c:09:9e:a3:c0:07:72:18: c7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8F:ED:CD:5F:FF:BE:3A:7D:E6:E4:8C:E2:80:F2:00:4C:39:DC:FF X509v3 Authority Key Identifier: keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/7DD0E8845A3211EDB637E665C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.252.0/23 Signature Algorithm: sha256WithRSAEncryption 60:e4:4f:0a:69:f1:4e:b5:51:c1:db:8b:09:fb:e7:4c:3e:b9: c6:db:db:42:ec:e4:6f:c6:41:06:a2:8e:6f:2c:d3:9e:fa:59: 9a:cf:a1:7a:ee:f4:fb:58:1b:7f:9a:d9:aa:83:63:94:1e:f2: 75:c6:04:50:74:11:fa:65:3d:bf:39:a5:20:be:6a:8d:5e:e0: cc:a8:74:6e:b4:6f:51:5d:de:41:a8:2e:6d:01:f3:69:53:a8: 28:84:39:00:37:31:1c:f8:0a:84:ae:a2:f0:86:fa:a5:20:dc: a9:18:3e:9f:40:a2:d6:d3:60:30:c3:d7:29:1a:40:54:71:5b: cd:0b:69:9a:e2:fc:76:66:18:db:a4:7d:46:98:88:cd:67:aa: a0:e6:e5:90:1f:86:5a:16:68:20:4a:b3:78:56:2f:f7:e3:a9: de:a0:a4:9c:f1:9a:87:22:a6:66:5b:d8:91:34:23:73:69:f5: f4:b8:e7:37:50:f7:13:4d:aa:18:13:60:42:7c:5a:79:6e:c6: 67:44:eb:da:8f:ef:d6:3a:3b:31:35:b1:ee:fb:a6:1b:c5:98: 84:f3:1a:48:90:61:c9:36:29:89:e9:bf:71:8a:a8:ef:8d:b3: 83:57:1a:0c:96:32:c8:03:ef:5b:15:99:42:c3:f6:e6:29:94: 0b:a8:31:30 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1 Rjg1MDNCMTQwHhcNMjMxMTI5MDQ1NDUyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY2YzQxYi1iYTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu80wjTmi9xho/uYXsCbS41ErIw3gIX1SD6hqFX60mu1x/BaQVus0bdzTmoJ+ 6TeZ52ip5YolnGmtMlmUtn75PYqrpaiazVcL+DoBCj43D7yqRqRKP2KbNf5C/x77 x+8TiqzWE8AizvGf/L62bRXXmepzLy2m/N2MneT9kWhRRB8Kh1+IGX/c0pf60K3r bgpj4sA1RUlWw0DXX2U5IMVgrs/sgVwNC9aN7DUmmqwDPQ1YnxKmMjBby3FImh6Y iofU6W9QiMjS48/ymVazS4qCgA+Pf+bVTA07LTJe/9Wd6yOE/7M8o1mF/FBs80fe 1fmufhKacELUnAmeo8AHchjHTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC6P7c1f /746febkjOKA8gBMOdz/MB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzE0QkMvN0ZEMDE2NkM1QTJGMTFFREExOUU1RTYxQzRGOUFFMDIvN0REMEU4ODQ1 QTMyMTFFREI2MzdFNjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnF/wwDQYJKoZIhvcNAQELBQADggEBAGDkTwpp8U61UcHb iwn750w+ucbb20Ls5G/GQQaijm8s0576WZrPoXru9PtYG3+a2aqDY5Qe8nXGBFB0 EfplPb85pSC+ao1e4MyodG60b1Fd3kGoLm0B82lTqCiEOQA3MRz4CoSuovCG+qUg 3KkYPp9AotbTYDDD1ykaQFRxW80LaZri/HZmGNukfUaYiM1nqqDm5ZAfhloWaCBK s3hWL/fjqd6gpJzxmocipmZb2JE0I3Np9fS45zdQ9xNNqhgTYEJ8WnluxmdE69qP 79Y6OzE1se77phvFmITzGkiQYck2KYnpv3GKqO+Ns4NXGgyWMsgD71sVmULD9uYp lAuoMTA= -----END CERTIFICATE-----Generated at Thu Jun 13 06:58:27 2024 by rpki-client on console-fra.rpki-client.org