$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/20DA8B7E571D11EEAA430244C4F9AE02.roa File: 20DA8B7E571D11EEAA430244C4F9AE02.roa (raw, json) Hash identifier: PNcLg+VvUtW05nZyDBF6Xyi0pL4/YgC1oHUsCQgLfJQ= Subject key identifier: FD:15:50:C3:58:CD:BB:98:43:D3:E9:83:00:46:12:B3:3E:BA:51:0A Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 09 Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/20DA8B7E571D11EEAA430244C4F9AE02.roa Signing time: Sat 23 Sep 2023 05:46:30 +0000 ROA not before: Sat 23 Sep 2023 05:46:30 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 135391 IP address blocks: 103.158.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: Sep 23 05:46:30 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=650e7bb6-4992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:94:0b:ab:73:52:40:b8:64:5c:81:e3:d7: 81:c1:05:d3:62:70:f6:82:3f:6b:ae:0f:fc:d0:fa: 75:54:f7:f7:83:45:24:a8:89:45:ef:f4:6a:a5:33: d1:85:a8:e9:9d:23:1d:96:f1:86:f3:3c:d2:64:0b: 7e:5b:2a:e8:fd:1f:6a:f6:62:d4:6d:46:30:c4:3f: 7f:46:6a:a6:f7:c8:e3:ed:1f:16:a7:9d:26:0b:7c: 61:eb:dd:44:3b:86:c0:a9:56:b3:f7:b9:ba:7d:0b: bf:83:01:ae:3c:d5:6f:d6:c8:5a:dc:30:66:6b:5a: 41:1f:2d:b4:6a:76:42:a6:61:92:d3:6a:8d:03:6c: 10:a9:1f:ed:32:eb:88:91:e5:50:31:b1:8f:61:1f: 01:32:8d:d4:af:2b:62:20:5c:ae:5c:09:f3:08:16: 11:a7:a3:f0:1e:da:7f:d7:0a:a3:52:36:94:0a:33: 7b:e8:c3:04:fc:ae:af:6f:58:e1:09:7b:2f:26:66: ff:4d:7d:40:ae:34:e0:57:a3:8c:f9:0a:ad:3d:35: 0c:2b:55:69:ca:c8:ef:cc:de:8b:3f:1c:87:75:74: b9:c4:cb:62:c1:7f:91:15:1a:3b:f8:14:1c:32:dc: 0e:80:8d:b4:14:88:3d:d3:a1:9c:0e:c2:8f:e5:ed: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:15:50:C3:58:CD:BB:98:43:D3:E9:83:00:46:12:B3:3E:BA:51:0A X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/20DA8B7E571D11EEAA430244C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.82.0/24 Signature Algorithm: sha256WithRSAEncryption bc:4f:68:0a:9d:eb:13:92:cc:18:a7:54:0a:06:e3:99:f0:cb: 3e:c7:51:07:1a:91:24:aa:21:ee:ef:75:56:c7:ab:00:90:7b: e8:de:26:85:b4:ba:91:ff:62:f7:4d:db:14:e0:db:fa:dd:e8: af:b8:d0:79:e9:80:20:87:4c:76:15:d3:40:00:21:ed:b9:0f: eb:c3:9b:bf:84:84:47:3f:d3:9f:17:d2:bb:ea:f5:39:4d:2a: b4:31:4a:e7:55:28:8f:1c:be:74:60:17:86:b9:7d:78:70:c0: 11:d2:7b:5b:6d:46:94:de:8b:32:7d:f8:57:c5:d5:cb:e6:83: 19:33:7e:3e:e2:e6:ca:d6:85:83:70:cf:4d:d5:e4:59:f9:05: 39:5b:6e:5e:dd:b1:c0:57:fc:a4:d6:2c:34:e7:4d:75:09:57: fe:2a:be:44:ba:74:69:91:67:ad:d3:8b:c2:32:44:24:3d:53: 15:ea:2b:65:b5:ee:df:ae:cb:99:cf:84:73:0b:f3:43:e9:4c: 61:07:87:cb:b8:7e:b4:9b:e3:f6:aa:2c:50:c7:e3:2c:90:30: e3:89:54:cf:d6:83:44:37:1b:b2:03:c5:f0:6f:0d:9f:3c:83: 07:81:a2:95:a3:e0:d1:f4:14:f4:70:d3:2d:a3:de:5e:65:8c: a9:f9:a3:46 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkNCMzExMC8GA1UEBRMoQUI0NURCRkMzNTU3N0YyN0M5OUZDRjQwQTM5QjM4NkIz MjM1MEFEQTAeFw0yMzA5MjMwNTQ2MzBaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MGU3YmI2LTQ5OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgcJQLq3NSQLhkXIHj14HBBdNicPaCP2uuD/zQ+nVU9/eDRSSoiUXv9GqlM9GF qOmdIx2W8YbzPNJkC35bKuj9H2r2YtRtRjDEP39Gaqb3yOPtHxannSYLfGHr3UQ7 hsCpVrP3ubp9C7+DAa481W/WyFrcMGZrWkEfLbRqdkKmYZLTao0DbBCpH+0y64iR 5VAxsY9hHwEyjdSvK2IgXK5cCfMIFhGno/Ae2n/XCqNSNpQKM3vowwT8rq9vWOEJ ey8mZv9NfUCuNOBXo4z5Cq09NQwrVWnKyO/M3os/HId1dLnEy2LBf5EVGjv4FBwy 3A6AjbQUiD3ToZwOwo/l7enhAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU/RVQw1jN u5hD0+mDAEYSsz66UQowHwYDVR0jBBgwFoAUq0Xb/DVXfyfJn89Ao5s4azI1Ctow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2Q0IzL0E1RkQ4NEYyNTcx QjExRUVCNDE4QUIzRUM0RjlBRTAyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTBYYl9EVlhmeWZKbjg5QW81czRhekkxQ3RvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi8yMERBOEI3RTU3 MUQxMUVFQUE0MzAyNDRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeeUjANBgkqhkiG9w0BAQsFAAOCAQEAvE9oCp3rE5LMGKdU CgbjmfDLPsdRBxqRJKoh7u91VserAJB76N4mhbS6kf9i903bFODb+t3or7jQeemA IIdMdhXTQAAh7bkP68Obv4SERz/TnxfSu+r1OU0qtDFK51Uojxy+dGAXhrl9eHDA EdJ7W21GlN6LMn34V8XVy+aDGTN+PuLmytaFg3DPTdXkWfkFOVtuXt2xwFf8pNYs NOdNdQlX/iq+RLp0aZFnrdOLwjJEJD1TFeorZbXu367Lmc+EcwvzQ+lMYQeHy7h+ tJvj9qosUMfjLJAw44lUz9aDRDcbsgPF8G8NnzyDB4GilaPg0fQU9HDTLaPeXmWM qfmjRg== -----END CERTIFICATE-----Generated at Fri Jun 7 08:56:38 2024 by rpki-client on console-fra.rpki-client.org