$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/BA7F7BA892C211EBBBF0055FC4F9AE02.roa File: BA7F7BA892C211EBBBF0055FC4F9AE02.roa (raw, json) Hash identifier: xxTbwjHg1QikAjf8vr4+JJb23plKRbhPg2PJNBw2Jn0= Subject key identifier: 37:AF:78:5D:B9:0A:6C:A7:29:33:31:F1:A2:87:83:51:0C:8D:30:56 Certificate issuer: /CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Certificate serial: 0577 Authority key identifier: 67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/BA7F7BA892C211EBBBF0055FC4F9AE02.roa Signing time: Wed 15 May 2024 01:04:53 +0000 ROA not before: Wed 15 May 2024 01:04:53 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136256 IP address blocks: 103.165.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1399 (0x577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Validity Not Before: May 15 01:04:53 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66440a35-79b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2a:71:57:b9:4a:90:43:f3:51:32:85:b7:1f: bb:ef:34:5b:25:fb:67:5e:d6:71:56:e0:24:e6:1f: 23:92:be:90:98:ed:27:b4:59:18:ba:2b:1b:49:a8: f9:d7:01:32:1f:0c:fa:a8:19:25:38:10:a2:0b:c7: 28:f7:dc:2b:c6:bb:de:2a:7a:1a:8f:8a:88:d4:b1: 89:69:99:b0:6d:9f:f0:e1:96:d4:7f:0e:f5:9c:6a: 15:b3:b3:88:3f:9a:6f:9b:9e:73:b4:fe:6a:ac:d7: f0:7a:b2:04:e4:3e:1d:8d:96:08:ea:00:f2:f3:53: ff:e5:98:ea:0f:ad:bd:24:d3:6b:07:92:2f:a2:c1: 1e:84:cc:62:23:12:ae:04:4b:a0:7c:60:32:b6:10: e7:ad:e9:d4:de:24:44:b1:57:83:f0:98:68:a8:32: fb:e0:6c:94:aa:8f:7b:15:ca:db:76:7e:47:39:37: af:23:c9:6c:49:e4:bd:01:db:c6:82:48:5f:6a:9d: 3d:96:73:e9:bf:03:56:a5:31:a0:67:cb:22:05:66: 10:4b:9a:37:fe:1d:fe:d5:2f:5a:a7:0d:34:48:1c: e0:e5:a4:07:d1:44:e5:48:01:42:bc:5c:32:b8:a4: 2d:42:23:ff:db:02:fb:0e:11:f1:27:a3:f7:d7:02: 56:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AF:78:5D:B9:0A:6C:A7:29:33:31:F1:A2:87:83:51:0C:8D:30:56 X509v3 Authority Key Identifier: keyid:67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/BA7F7BA892C211EBBBF0055FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.50.0/23 Signature Algorithm: sha256WithRSAEncryption 15:c6:e4:ff:c9:26:17:c8:b4:f0:a4:4c:00:42:e6:28:37:62: 88:43:68:ca:41:da:73:e7:7d:ae:4e:25:28:5e:9b:14:b3:49: d6:04:4d:32:20:53:4b:87:cf:70:9e:b9:99:67:4b:cc:42:b3: 31:74:6c:82:d4:72:83:f0:6d:04:04:0e:f2:d7:d7:36:e8:47: 32:96:ee:82:58:b6:8d:e2:80:2a:7f:cf:56:ec:e9:7b:fd:e3: f6:58:62:42:17:2a:73:31:bd:da:fa:f4:e1:73:65:54:8a:bf: 22:f8:13:e1:2e:00:e2:bf:d9:0e:92:27:6e:12:11:1e:17:f8: cb:5b:ff:d1:21:bd:4d:5b:55:a2:34:e9:10:1e:e0:2d:5f:30: ba:59:11:bc:8d:cc:8a:54:29:19:4a:63:e6:ec:ae:be:61:2e: 68:b5:d5:d6:d2:ec:6c:e8:d3:bb:bd:15:b1:5c:7a:6d:24:0a: 8b:8a:c5:60:ee:55:6c:16:1a:7b:e9:40:d2:bd:ea:cc:02:81: d9:44:d0:6f:e4:c7:00:d9:e0:68:c6:14:80:87:41:51:6a:1d: f9:07:80:7e:ad:32:d7:70:d1:a7:01:ca:29:03:c9:8f:d5:f9: 61:f1:e3:5b:27:9b:0f:b6:59:00:89:64:3d:76:60:ab:e1:25: 5a:fa:57:ba -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNTAxMTAvBgNVBAUTKDY3Mzc4NjI1MTFBMTc0Q0REMzg5RDM1M0YwRTBFNzJD OTc3M0NFODQwHhcNMjQwNTE1MDEwNDUzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ0MGEzNS03OWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SpxV7lKkEPzUTKFtx+77zRbJftnXtZxVuAk5h8jkr6QmO0ntFkYuisbSaj5 1wEyHwz6qBklOBCiC8co99wrxrveKnoaj4qI1LGJaZmwbZ/w4ZbUfw71nGoVs7OI P5pvm55ztP5qrNfwerIE5D4djZYI6gDy81P/5ZjqD629JNNrB5IvosEehMxiIxKu BEugfGAythDnrenU3iREsVeD8JhoqDL74GyUqo97Fcrbdn5HOTevI8lsSeS9AdvG gkhfap09lnPpvwNWpTGgZ8siBWYQS5o3/h3+1S9apw00SBzg5aQH0UTlSAFCvFwy uKQtQiP/2wL7DhHxJ6P31wJWDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDeveF25 CmynKTMx8aKHg1EMjTBWMB8GA1UdIwQYMBaAFGc3hiURoXTN04nTU/Dg5yyXc86E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE1MC81ODQyRTlFMDky QzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRNM1RpZE5UOE9EbkxKZHp6 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6ZUdKUkdoZE0zVGlkTlQ4T0RuTEpkenpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTcxNTAvNTg0MkU5RTA5MkMwMTFFQjhBQTVBOTIwQzRGOUFFMDIvQkE3RjdCQTg5 MkMyMTFFQkJCRjAwNTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnpTIwDQYJKoZIhvcNAQELBQADggEBABXG5P/JJhfItPCk TABC5ig3YohDaMpB2nPnfa5OJShemxSzSdYETTIgU0uHz3CeuZlnS8xCszF0bILU coPwbQQEDvLX1zboRzKW7oJYto3igCp/z1bs6Xv94/ZYYkIXKnMxvdr69OFzZVSK vyL4E+EuAOK/2Q6SJ24SER4X+Mtb/9EhvU1bVaI06RAe4C1fMLpZEbyNzIpUKRlK Y+bsrr5hLmi11dbS7Gzo07u9FbFcem0kCouKxWDuVWwWGnvpQNK96swCgdlE0G/k xwDZ4GjGFICHQVFqHfkHgH6tMtdw0acByikDyY/V+WHx41snmw+2WQCJZD12YKvh JVr6V7o= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org