$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/196C52A8D0F711EC8673072FC4F9AE02.roa File: 196C52A8D0F711EC8673072FC4F9AE02.roa (raw, json) Hash identifier: 0NV2mILZ5njEWOtQc6fkT3mCAuwk33B3V5S922VQ35Y= Subject key identifier: 81:E9:2B:42:01:41:EB:D2:37:E0:3B:F4:35:FA:F1:17:08:21:18:70 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 01EB Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/196C52A8D0F711EC8673072FC4F9AE02.roa Signing time: Thu 21 Sep 2023 02:44:07 +0000 ROA not before: Thu 21 Sep 2023 02:44:07 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 131251 IP address blocks: 103.244.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 04:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: Sep 21 02:44:07 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=650badf7-a787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:f2:25:ea:6d:f3:ff:9e:ed:25:15:26:a9: e6:7f:ec:d4:74:62:21:3d:55:31:35:56:9b:ba:9b: 16:bd:b2:4f:eb:c6:45:d6:47:4b:21:c0:63:b9:df: aa:ae:b8:4b:18:7d:a1:3a:20:a8:b5:16:ad:df:18: fd:f5:d6:8e:19:b4:71:be:d3:e9:b2:bf:7a:9e:62: c8:d5:27:3d:d1:3e:ca:5a:6a:31:bc:36:d5:3d:f6: 71:40:79:a9:94:67:66:79:9e:8b:8a:81:0c:8e:4a: e7:75:c3:30:d0:ec:37:27:cf:09:7e:3d:35:a9:8b: d7:fd:4f:b4:eb:bc:d0:1a:1e:32:fd:28:fa:d6:9c: e9:d1:d4:d3:3d:7c:36:77:05:eb:bd:49:02:63:c6: 1f:2d:7c:8a:2b:59:50:6b:39:cb:16:67:59:3f:ae: 52:54:b7:4c:c2:79:ee:48:38:1a:b3:43:bc:79:a7: 32:9b:84:90:4b:5c:7a:f8:c2:2a:78:13:f7:a7:98: ff:68:d0:2d:13:3e:26:22:2e:15:4a:7b:47:b7:39: 19:3d:fb:d5:b7:78:78:0d:b6:24:3c:45:c6:8f:bc: e9:4b:17:72:40:13:5b:42:a3:db:6a:dc:bf:b9:02: c7:d0:65:ab:92:6a:7a:bb:7f:19:2b:7d:45:bd:de: 3f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E9:2B:42:01:41:EB:D2:37:E0:3B:F4:35:FA:F1:17:08:21:18:70 X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/196C52A8D0F711EC8673072FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.244.192.0/24 Signature Algorithm: sha256WithRSAEncryption 81:13:7b:42:e8:36:50:70:31:0d:27:23:3b:93:90:2b:f0:27: 4f:c7:d3:90:9e:48:fb:ec:22:14:ef:d7:19:58:43:8a:29:50: aa:8e:14:41:af:94:48:c6:df:a6:b8:5c:02:1f:28:19:a7:f5: 82:f9:c6:c8:2c:de:93:96:8d:aa:0d:11:75:e5:ab:5c:67:d6: 3d:92:fd:72:69:06:be:8a:d1:96:b2:93:8f:8c:db:33:9d:25: 7a:99:01:31:5f:28:87:16:ad:ed:6e:92:75:a0:2d:17:90:10: b8:b8:9d:08:85:7b:9b:bb:fd:71:77:7b:16:93:86:4b:59:0a: 5e:fa:e5:3e:7a:8b:4d:05:3d:7f:92:0f:36:fd:98:0a:cc:4c: ac:8d:60:cc:39:32:92:07:ea:6d:24:aa:9d:3d:ed:c2:09:3b: 9d:8f:dd:8f:bd:39:0a:9d:2f:13:d8:6e:93:cc:1d:ea:f8:63: d5:3f:05:05:2a:37:bd:49:5e:70:14:64:bd:c6:64:7e:66:8f: fd:e8:3c:67:50:7d:df:66:4c:92:7e:dd:69:5c:a4:be:ee:94: ba:04:68:c1:b3:96:39:aa:1b:9c:25:01:2c:62:b7:63:25:e8: f5:95:14:3b:b2:97:e1:4a:bf:af:f8:9b:8f:1b:76:ad:69:dd: 7b:86:ca:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjMwOTIxMDI0NDA3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTBiYWRmNy1hNzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc3yJept8/+e7SUVJqnmf+zUdGIhPVUxNVabupsWvbJP68ZF1kdLIcBjud+q rrhLGH2hOiCotRat3xj99daOGbRxvtPpsr96nmLI1Sc90T7KWmoxvDbVPfZxQHmp lGdmeZ6LioEMjkrndcMw0Ow3J88Jfj01qYvX/U+067zQGh4y/Sj61pzp0dTTPXw2 dwXrvUkCY8YfLXyKK1lQaznLFmdZP65SVLdMwnnuSDgas0O8eacym4SQS1x6+MIq eBP3p5j/aNAtEz4mIi4VSntHtzkZPfvVt3h4DbYkPEXGj7zpSxdyQBNbQqPbaty/ uQLH0GWrkmp6u38ZK31Fvd4/QQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIHpK0IB QevSN+A79DX68RcIIRhwMB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQ2QjEvOUEwRUNFMTBEMEYwMTFFQzhFQ0RCRjYzQzRGOUFFMDIvMTk2QzUyQThE MEY3MTFFQzg2NzMwNzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn9MAwDQYJKoZIhvcNAQELBQADggEBAIETe0LoNlBwMQ0n IzuTkCvwJ0/H05CeSPvsIhTv1xlYQ4opUKqOFEGvlEjG36a4XAIfKBmn9YL5xsgs 3pOWjaoNEXXlq1xn1j2S/XJpBr6K0Zayk4+M2zOdJXqZATFfKIcWre1uknWgLReQ ELi4nQiFe5u7/XF3exaThktZCl765T56i00FPX+SDzb9mArMTKyNYMw5MpIH6m0k qp097cIJO52P3Y+9OQqdLxPYbpPMHer4Y9U/BQUqN71JXnAUZL3GZH5mj/3oPGdQ fd9mTJJ+3WlcpL7ulLoEaMGzljmqG5wlASxit2Ml6PWVFDuyl+FKv6/4m48bdq1p 3XuGyl0= -----END CERTIFICATE-----Generated at Fri Jun 7 05:32:03 2024 by rpki-client on console-fra.rpki-client.org