$ rpki-client -vvf rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/CDE70CB2E52011EDB505E014C4F9AE02.roa File: CDE70CB2E52011EDB505E014C4F9AE02.roa (raw, json) Hash identifier: P7xeVkF9emdICYiycbS/SwtoKKwOg3DUAb73pIqVFKs= Subject key identifier: 5B:AD:63:FA:51:16:22:AC:A6:2C:DE:A9:EB:E5:FD:13:86:54:07:9E Certificate issuer: /CN=A9161065/serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7 Certificate serial: 34 Authority key identifier: C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/CDE70CB2E52011EDB505E014C4F9AE02.roa Signing time: Mon 31 Jul 2023 05:05:01 +0000 ROA not before: Mon 31 Jul 2023 05:05:01 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 40676 IP address blocks: 103.59.108.0/23 maxlen: 23 103.59.110.0/23 maxlen: 23 103.59.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161065/serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7 Validity Not Before: Jul 31 05:05:01 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c740fd-c977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:2b:bf:1c:52:b5:73:c4:16:49:47:7d:da: c3:98:1a:94:7b:4e:62:08:b3:07:14:8d:db:45:ee: 77:5c:73:c0:d0:31:83:be:00:08:a7:bc:31:0e:76: 15:5b:88:6c:16:89:d4:da:72:88:94:ae:84:cb:24: b5:de:fc:9d:49:77:52:3a:7f:d7:fd:67:36:ff:09: 3d:8e:69:9a:aa:71:a3:53:73:98:f1:58:db:2e:a2: fd:34:31:21:a8:3d:db:ca:0e:10:39:a3:dc:df:4e: 86:60:83:6f:b9:7f:d6:38:2f:4b:8a:ab:e1:a7:83: 1c:0e:9a:bc:85:1b:0d:83:56:c9:1f:a8:1b:53:83: 99:1a:b9:5a:bf:c2:c4:cd:ee:5b:25:b2:c3:03:b3: cb:e7:48:66:a6:2a:07:6f:21:70:03:a2:f4:d0:c0: cf:eb:47:47:ad:a7:a1:d8:93:83:78:f1:85:c6:48: 05:4f:3c:cc:50:9b:c5:ca:30:9b:c8:e9:e4:c1:56: be:b1:ff:43:09:70:d7:43:2c:4b:b3:41:dd:78:0d: 87:66:1b:66:38:86:46:d8:95:8d:dc:7b:23:4d:0c: 93:09:f9:75:89:b2:5f:f0:77:2a:c2:4d:13:fc:f7: ed:56:8a:23:34:e8:0d:82:8f:23:2a:d7:66:57:86: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AD:63:FA:51:16:22:AC:A6:2C:DE:A9:EB:E5:FD:13:86:54:07:9E X509v3 Authority Key Identifier: keyid:C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/CDE70CB2E52011EDB505E014C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.59.108.0/22 Signature Algorithm: sha256WithRSAEncryption 15:3a:e7:05:14:56:45:24:65:37:97:f2:15:51:6a:fe:0e:11: 05:98:f0:21:ad:04:ef:65:b2:55:be:5f:87:2d:d9:73:f0:be: 1e:d1:f3:06:c1:ca:60:33:18:12:76:45:0c:78:71:4b:c0:bd: f2:71:64:24:79:ba:a8:fd:1e:96:2a:2a:5f:04:22:7f:f3:f7: b5:50:41:6b:a6:42:57:bf:c6:72:d1:e2:bf:bd:8c:43:ae:fd: c0:93:9f:08:e1:2b:94:1f:5d:f9:cf:78:2f:8b:89:41:c7:f6: 20:cd:4b:b7:12:43:28:20:83:41:3c:50:9e:01:03:4e:43:2f: d0:71:89:ce:f3:4d:b7:3c:4e:b7:08:5d:02:ae:6c:ae:a6:c6: 55:88:af:31:27:01:5e:e6:ce:40:3f:2a:dc:c8:ba:26:29:1e: 96:a1:e0:8b:5a:6f:30:95:d4:c5:4d:57:96:b9:82:9d:4c:35: a8:b6:8c:36:e6:41:75:68:74:17:e3:02:68:7a:09:88:47:35: 32:20:e5:7d:c4:97:ba:1f:de:4e:64:ba:13:fe:fe:64:91:99: 55:29:6c:c0:77:01:24:8f:c0:02:40:cf:17:dd:06:6d:ce:df: 1c:e6:c9:1c:a4:93:c7:90:52:10:f1:3f:f8:37:6d:80:9e:15: fb:ce:50:39 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTA2NTExMC8GA1UEBRMoQzg3RkQzRTI0MDg4QTREOURGMUM1RDAyNjg1MjA4RTkw QTYxRUZGNzAeFw0yMzA3MzEwNTA1MDFaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY0Yzc0MGZkLWM5NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHSiu/HFK1c8QWSUd92sOYGpR7TmIIswcUjdtF7ndcc8DQMYO+AAinvDEOdhVb iGwWidTacoiUroTLJLXe/J1Jd1I6f9f9Zzb/CT2OaZqqcaNTc5jxWNsuov00MSGo PdvKDhA5o9zfToZgg2+5f9Y4L0uKq+GngxwOmryFGw2DVskfqBtTg5kauVq/wsTN 7lslssMDs8vnSGamKgdvIXADovTQwM/rR0etp6HYk4N48YXGSAVPPMxQm8XKMJvI 6eTBVr6x/0MJcNdDLEuzQd14DYdmG2Y4hkbYlY3ceyNNDJMJ+XWJsl/wdyrCTRP8 9+1WiiM06A2CjyMq12ZXhiUJAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUW61j+lEW IqymLN6p6+X9E4ZUB54wHwYDVR0jBBgwFoAUyH/T4kCIpNnfHF0CaFII6Qph7/cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxMDY1LzFBMjVEMjc0RTUx RDExRUQ4NTM4QjI0NkM0RjlBRTAyL3lIX1Q0a0NJcE5uZkhGMENhRklJNlFwaDdf Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveUhfVDRrQ0lwTm5mSEYwQ2FGSUk2UXBoN19jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTA2NS8xQTI1RDI3NEU1MUQxMUVEODUzOEIyNDZDNEY5QUUwMi9DREU3MENCMkU1 MjAxMUVEQjUwNUUwMTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmc7bDANBgkqhkiG9w0BAQsFAAOCAQEAFTrnBRRWRSRlN5fy FVFq/g4RBZjwIa0E72WyVb5fhy3Zc/C+HtHzBsHKYDMYEnZFDHhxS8C98nFkJHm6 qP0elioqXwQif/P3tVBBa6ZCV7/GctHiv72MQ679wJOfCOErlB9d+c94L4uJQcf2 IM1LtxJDKCCDQTxQngEDTkMv0HGJzvNNtzxOtwhdAq5srqbGVYivMScBXubOQD8q 3Mi6JikelqHgi1pvMJXUxU1XlrmCnUw1qLaMNuZBdWh0F+MCaHoJiEc1MiDlfcSX uh/eTmS6E/7+ZJGZVSlswHcBJI/AAkDPF90Gbc7fHObJHKSTx5BSEPE/+DdtgJ4V +85QOQ== -----END CERTIFICATE-----Generated at Sun May 5 08:39:04 2024 by rpki-client on console-fra.rpki-client.org