$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa File: CD23AE8C403011EEA773CE47C4F9AE02.roa (raw, json) Hash identifier: YGzgYxvIKuIHYMQhUMjHIg3+2N/RfVf4heZ2M28nPAc= Subject key identifier: A3:8B:2B:74:E2:25:88:44:DD:E7:4A:D2:8D:11:1C:33:47:E4:37:78 Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Certificate serial: 91 Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa Signing time: Mon 21 Aug 2023 14:41:25 +0000 ROA not before: Mon 21 Aug 2023 14:41:25 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 134424 IP address blocks: 103.167.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 05:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Validity Not Before: Aug 21 14:41:25 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64e37794-e27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:1e:e9:45:f1:c5:5e:77:5a:46:de:c5:e7: c1:4f:f9:32:b2:4e:33:36:ad:a0:6f:bb:e7:11:72: 38:19:75:87:20:03:ee:7d:81:aa:d8:12:c8:61:d8: 26:91:26:2a:eb:a8:b4:f6:f9:d2:cc:5c:3f:aa:b2: 11:6a:32:ef:11:ce:4c:13:4b:3e:5e:90:53:ce:0a: 46:7f:25:b4:e3:3a:f3:7c:9e:78:39:28:2b:e6:0b: 68:a0:d1:da:34:b6:97:75:cc:ff:4c:2a:63:01:f5: 9f:e1:5f:2c:6a:fe:3e:60:d1:8f:4e:e6:5d:7d:f5: fa:a6:1c:17:bb:6b:2a:e0:15:d4:5c:71:18:fe:d9: 90:af:50:dc:61:61:0d:92:de:90:46:1b:96:3c:87: 3d:67:4b:49:80:c4:5c:a2:3e:76:79:68:44:de:1a: 4c:85:61:75:28:2a:83:36:79:04:02:ad:b1:8b:03: 68:cf:87:14:6b:c8:61:cd:66:b0:54:80:81:c3:56: 02:9b:10:47:93:48:6d:3c:5f:82:5a:8c:c2:27:1e: ef:90:a9:20:20:d5:2f:dd:61:96:25:29:82:3b:83: c7:4e:14:60:fa:87:be:d7:7f:8f:bd:58:df:7d:f9: f3:79:b4:2d:38:49:3b:0f:db:66:5a:9f:30:79:c7: 16:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8B:2B:74:E2:25:88:44:DD:E7:4A:D2:8D:11:1C:33:47:E4:37:78 X509v3 Authority Key Identifier: keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.209.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:e0:83:f6:41:73:1a:83:b1:33:5e:5e:47:6a:18:61:3b:78: 2a:12:dd:36:6b:d4:12:d1:07:22:a6:b4:bc:94:dd:69:ca:1f: 38:55:4c:7f:ad:87:00:3f:2f:c2:d5:ef:f0:f6:2b:a5:9c:be: c6:08:c7:af:2b:99:27:10:82:77:12:71:3c:9f:ee:85:be:6d: 3d:e5:9d:f4:7a:ed:8e:82:2c:51:e3:82:b9:38:ca:b0:13:a2: 6b:56:79:8a:e7:f3:99:02:12:3c:f6:80:a3:90:1a:f8:01:59: fa:a9:bc:d8:b5:cd:bb:d7:d1:d1:56:78:d5:7d:57:79:fb:6d: 79:1c:e2:aa:c9:14:91:92:35:2a:36:37:88:19:be:ef:2b:b2: 9d:b5:4c:ff:c5:a4:c1:9f:78:26:ad:08:c5:88:9d:7d:4c:68: a1:c8:87:5f:fd:af:b4:cb:02:90:c9:ae:8a:0b:7f:7c:f5:85: ca:f5:e1:2d:d5:e8:41:5d:6a:e3:0c:a6:d4:5d:5d:b5:0f:70: 08:fd:b9:67:23:ff:ff:ff:5a:90:ca:eb:29:87:49:bf:f9:18: 91:30:bb:fa:bf:22:03:61:7b:71:60:f1:f5:73:20:fa:d9:44: 68:94:e1:8f:14:83:a8:b6:1c:ef:2d:cd:17:08:c4:f8:c8:03: c9:ca:45:87 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw QkIyQzUwREIwHhcNMjMwODIxMTQ0MTI1WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGUzNzc5NC1lMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+Ie6UXxxV53WkbexefBT/kysk4zNq2gb7vnEXI4GXWHIAPufYGq2BLIYdgm kSYq66i09vnSzFw/qrIRajLvEc5ME0s+XpBTzgpGfyW04zrzfJ54OSgr5gtooNHa NLaXdcz/TCpjAfWf4V8sav4+YNGPTuZdffX6phwXu2sq4BXUXHEY/tmQr1DcYWEN kt6QRhuWPIc9Z0tJgMRcoj52eWhE3hpMhWF1KCqDNnkEAq2xiwNoz4cUa8hhzWaw VICBw1YCmxBHk0htPF+CWozCJx7vkKkgINUv3WGWJSmCO4PHThRg+oe+13+PvVjf ffnzebQtOEk7D9tmWp8weccWpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKOLK3Ti JYhE3edK0o0RHDNH5Dd4MB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODk2RDQvNUU5RTY0MzQ3Qjk2MTFFRDhCREZFMzExQzRGOUFFMDIvQ0QyM0FFOEM0 MDMwMTFFRUE3NzNDRTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnp9EwDQYJKoZIhvcNAQELBQADggEBAH3gg/ZBcxqDsTNe XkdqGGE7eCoS3TZr1BLRByKmtLyU3WnKHzhVTH+thwA/L8LV7/D2K6WcvsYIx68r mScQgncScTyf7oW+bT3lnfR67Y6CLFHjgrk4yrATomtWeYrn85kCEjz2gKOQGvgB WfqpvNi1zbvX0dFWeNV9V3n7bXkc4qrJFJGSNSo2N4gZvu8rsp21TP/FpMGfeCat CMWInX1MaKHIh1/9r7TLApDJrooLf3z1hcr14S3V6EFdauMMptRdXbUPcAj9uWcj ////WpDK6ymHSb/5GJEwu/q/IgNhe3Fg8fVzIPrZRGiU4Y8Ug6i2HO8tzRcIxPjI A8nKRYc= -----END CERTIFICATE-----Generated at Thu Jun 13 08:01:45 2024 by rpki-client on console-ams.rpki-client.org