$ rpki-client -vvf rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/7FAEDE3A03B411EBBB548A5EC4F9AE02.roa File: 7FAEDE3A03B411EBBB548A5EC4F9AE02.roa (raw, json) Hash identifier: er27YVYfgU7Qa2FTXbj/lK9/OoJ5L5A1uOvFRL1zqKs= Subject key identifier: CB:25:9A:82:B7:82:87:69:D4:1B:3E:E6:20:1F:A1:B4:B8:55:14:BD Certificate issuer: /CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5 Certificate serial: 06EB Authority key identifier: 7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/7FAEDE3A03B411EBBB548A5EC4F9AE02.roa Signing time: Wed 22 May 2024 23:02:06 +0000 ROA not before: Wed 22 May 2024 23:02:06 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 9288 IP address blocks: 103.90.212.0/22 maxlen: 22 103.90.212.0/24 maxlen: 24 103.90.213.0/24 maxlen: 24 103.90.214.0/24 maxlen: 24 103.90.215.0/24 maxlen: 24 123.253.0.0/22 maxlen: 22 123.253.0.0/24 maxlen: 24 123.253.1.0/24 maxlen: 24 123.253.2.0/24 maxlen: 24 123.253.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5 Validity Not Before: May 22 23:02:06 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=664e796d-53c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:a1:77:0c:a0:f9:af:1b:38:6a:11:c1:cb: 80:71:21:da:92:a4:76:4c:c9:81:34:38:7e:1f:be: b5:1e:d0:3f:8e:9d:5e:97:11:8d:77:e7:eb:ba:e6: 2c:b0:40:00:b1:f3:8d:ff:12:53:76:61:0d:10:af: 20:84:80:c6:40:f4:1d:da:7e:a4:29:ef:f8:0c:63: e0:41:38:59:11:d8:db:d0:f9:aa:0a:b2:03:b3:66: 1d:90:b3:c9:8c:0b:9a:3b:da:ca:aa:af:63:13:0b: b5:6f:85:57:6d:91:e7:d1:6e:4d:83:03:4c:f3:af: 08:74:41:84:28:60:2e:2d:d8:33:57:4d:6f:e2:bd: d6:e2:ff:72:fd:9c:72:82:d9:94:8b:a2:ee:5d:65: 7d:d8:8f:6d:2d:88:f1:9b:b0:55:ba:df:2e:29:fe: c4:d6:b3:50:67:b7:5f:fc:e0:ed:aa:ff:f1:68:da: d0:c0:9f:a2:15:e3:a0:fb:91:b7:8f:03:d7:bb:2b: 55:67:6e:88:d6:7f:59:66:12:5f:e5:94:e1:b6:3b: 7a:ce:42:be:c7:05:32:d8:3f:00:74:fb:5f:0a:ea: c4:09:92:28:e4:6e:21:e1:59:a6:0b:ee:ca:d8:18: f6:e3:b7:25:30:c4:6e:9b:04:da:de:4d:0c:74:a3: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:25:9A:82:B7:82:87:69:D4:1B:3E:E6:20:1F:A1:B4:B8:55:14:BD X509v3 Authority Key Identifier: keyid:7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/7FAEDE3A03B411EBBB548A5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.90.212.0/22 123.253.0.0/22 Signature Algorithm: sha256WithRSAEncryption 23:83:79:eb:60:72:b2:82:f1:37:93:95:65:33:78:73:7d:56: 12:b7:1b:5f:87:3e:b6:01:d1:b6:49:1b:bd:ff:4a:5b:a4:7d: c8:ac:f5:d2:68:d2:8e:4a:d0:a9:7b:c6:17:79:6b:58:f2:b6: ee:7b:a4:66:6a:c4:c9:3d:18:2a:8e:ac:0a:2f:72:63:d2:c6: 59:d1:ac:b7:2c:c0:fe:1a:51:37:c2:7e:07:fa:b1:f5:b4:a6: 04:2c:d6:0d:9a:15:1c:d4:db:42:c7:d8:a4:ed:c6:ad:3c:f2: 97:a0:39:9a:9f:6a:59:1c:53:bd:39:f1:58:36:a1:34:50:bf: 8d:b8:ee:c8:32:fe:f2:82:9d:9e:3b:47:63:cc:45:1e:3f:f1: 68:33:b4:52:46:3f:c0:06:6d:ab:38:58:c7:56:b6:6f:64:87: 41:ef:02:8e:25:e1:60:b1:e9:85:69:e5:49:87:c1:21:11:c5: f3:03:c8:38:3d:c0:7f:8a:6a:3b:fc:ff:4f:18:15:a7:41:26: 06:17:1e:62:99:85:b5:d5:8c:22:18:3c:a2:d2:12:c6:8c:a2: 15:f6:77:4c:ab:14:f0:29:ea:4e:f3:1d:6d:60:04:03:3e:99: 4f:df:3d:09:7e:69:82:47:de:5c:05:d7:49:d8:70:03:89:db: 4c:71:0c:cc -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMwNjAxMTAvBgNVBAUTKDdGREY2MjE4RkEwMTVEMEEwMDc0QTg0NDI0NTE4MDZB MjhGOURERjUwHhcNMjQwNTIyMjMwMjA2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRlNzk2ZC01M2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWKhdwyg+a8bOGoRwcuAcSHakqR2TMmBNDh+H761HtA/jp1elxGNd+fruuYs sEAAsfON/xJTdmENEK8ghIDGQPQd2n6kKe/4DGPgQThZEdjb0PmqCrIDs2YdkLPJ jAuaO9rKqq9jEwu1b4VXbZHn0W5NgwNM868IdEGEKGAuLdgzV01v4r3W4v9y/Zxy gtmUi6LuXWV92I9tLYjxm7BVut8uKf7E1rNQZ7df/ODtqv/xaNrQwJ+iFeOg+5G3 jwPXuytVZ26I1n9ZZhJf5ZThtjt6zkK+xwUy2D8AdPtfCurECZIo5G4h4VmmC+7K 2Bj247clMMRumwTa3k0MdKPfVwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMslmoK3 godp1Bs+5iAfobS4VRS9MB8GA1UdIwQYMBaAFH/fYhj6AV0KAHSoRCRRgGoo+d31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzA2MC9BNzI1ODZCMDAz QjExMUVCODQzQTc3NTZDNEY5QUUwMi9mOTlpR1BvQlhRb0FkS2hFSkZHQWFpajUz ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5OWlHUG9CWFFvQWRLaEVKRkdBYWlqNTNmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzMwNjAvQTcyNTg2QjAwM0IxMTFFQjg0M0E3NzU2QzRGOUFFMDIvN0ZBRURFM0Ew M0I0MTFFQkJCNTQ4QTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnWtQDBAJ7/QAwDQYJKoZIhvcNAQELBQADggEBACODeetg crKC8TeTlWUzeHN9VhK3G1+HPrYB0bZJG73/Slukfcis9dJo0o5K0Kl7xhd5a1jy tu57pGZqxMk9GCqOrAovcmPSxlnRrLcswP4aUTfCfgf6sfW0pgQs1g2aFRzU20LH 2KTtxq088pegOZqfalkcU7058Vg2oTRQv4247sgy/vKCnZ47R2PMRR4/8WgztFJG P8AGbas4WMdWtm9kh0HvAo4l4WCx6YVp5UmHwSERxfMDyDg9wH+Kajv8/08YFadB JgYXHmKZhbXVjCIYPKLSEsaMohX2d0yrFPAp6k7zHW1gBAM+mU/fPQl+aYJH3lwF 10nYcAOJ20xxDMw= -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:15 2024 by rpki-client on console-ams.rpki-client.org