$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/4CDACDE4623711EA981B4B0DC4F9AE02.roa File: 4CDACDE4623711EA981B4B0DC4F9AE02.roa (raw, json) Hash identifier: XiZfAWFkjoqFW9ua9fCc03HXRleBI1XvTHdjfLUylPA= Subject key identifier: A5:CF:12:E3:68:CD:68:49:CB:0F:6E:27:91:93:5A:B4:84:85:66:13 Certificate issuer: /CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Certificate serial: 0A01 Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/4CDACDE4623711EA981B4B0DC4F9AE02.roa Signing time: Sat 08 Jul 2023 19:56:22 +0000 ROA not before: Sat 08 Jul 2023 19:56:22 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 396982 IP address blocks: 103.20.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2561 (0xa01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Validity Not Before: Jul 8 19:56:22 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64a9bf66-8b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d0:5e:da:00:2f:ad:2d:7b:9c:23:4b:02:6b: e8:fa:57:d0:cf:a6:de:74:5a:47:12:61:0e:00:b2: 75:77:e2:81:76:00:cd:ce:bd:0b:e8:48:ce:bd:54: d4:4a:39:6c:5c:5e:0c:b0:87:c8:13:48:b4:ac:23: be:1c:f9:ca:55:71:96:8e:fa:00:c5:d7:a2:8d:b0: 58:b6:53:b5:36:15:0f:fa:be:ff:2a:84:21:3e:9a: 83:69:2d:ac:57:d2:90:bf:d9:c9:ae:d5:67:5a:7f: f9:7e:ef:f1:db:df:55:3e:ae:6e:96:f5:c7:c4:7b: 89:d4:28:02:89:a7:15:db:3b:d2:d7:6f:7d:fc:43: 1f:ee:87:44:dd:a6:46:4f:ed:85:84:04:8a:8e:a4: 25:48:d8:1c:f8:64:f5:97:05:17:df:81:34:4d:31: c4:ea:f4:41:f1:d7:50:30:f3:eb:5f:88:c2:e3:ab: 69:98:16:b6:26:d6:46:0b:1e:03:de:a6:7b:85:85: 26:ce:8b:e5:08:bb:98:1e:8d:d4:22:4d:ba:7b:83: 58:f2:b7:91:d2:61:c1:29:82:d6:83:57:34:3a:51: 56:76:b1:3f:59:96:ca:dc:72:64:8a:a6:da:4e:7f: f7:ab:b1:66:e5:3d:7e:21:6e:06:ad:d9:f8:02:54: 65:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CF:12:E3:68:CD:68:49:CB:0F:6E:27:91:93:5A:B4:84:85:66:13 X509v3 Authority Key Identifier: keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/4CDACDE4623711EA981B4B0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.245.0/24 Signature Algorithm: sha256WithRSAEncryption 58:45:82:77:fa:68:71:45:fc:db:36:47:21:0f:e2:e5:8a:fd: 91:c0:b7:09:29:62:43:fc:49:04:79:d6:38:79:bf:49:0c:d8: 8e:a3:a9:90:18:bb:c7:3e:d0:83:2d:56:ee:18:ec:fe:3a:22: 1f:9d:da:3e:27:20:ca:69:52:ed:be:08:d4:01:db:66:7c:a9: 7c:2a:aa:a5:1f:fb:88:bf:a5:f3:af:61:8e:17:2e:6a:8c:5d: 73:9c:cb:5c:4a:68:68:01:20:6d:41:64:6d:10:b8:34:3a:81: e8:54:22:02:47:64:ae:10:05:14:fa:ef:94:33:e1:5b:6a:90: eb:62:c0:df:97:57:c7:00:e8:eb:d3:04:bb:43:ea:61:3e:f3: ee:7c:7d:1f:2c:65:c6:99:0d:70:4b:00:15:24:a7:bb:fa:98: 4e:a4:dd:fe:21:c1:64:ab:be:08:02:5c:95:2f:0c:4f:61:7f: 7b:f3:bf:36:2f:30:a8:b5:0f:93:e6:ba:fd:c2:5b:07:f0:c3: 3a:81:f9:4e:a2:ff:72:28:f8:fd:23:49:75:6f:03:b2:f3:06: b2:42:0e:ab:ba:f3:e8:e8:f9:16:b1:f7:6e:5c:e7:22:e2:4d: 5d:65:b5:50:98:41:94:c2:c7:de:e9:53:c2:0e:fe:4a:3b:82: 9b:8a:bb:58 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdEODUxMTAvBgNVBAUTKDU4MjdFNEJEODcwMjc3RURGMEVCMTA1NjNBOUI0MUMx RTRCRTdDODEwHhcNMjMwNzA4MTk1NjIyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE5YmY2Ni04Yjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9Be2gAvrS17nCNLAmvo+lfQz6bedFpHEmEOALJ1d+KBdgDNzr0L6EjOvVTU SjlsXF4MsIfIE0i0rCO+HPnKVXGWjvoAxdeijbBYtlO1NhUP+r7/KoQhPpqDaS2s V9KQv9nJrtVnWn/5fu/x299VPq5ulvXHxHuJ1CgCiacV2zvS1299/EMf7odE3aZG T+2FhASKjqQlSNgc+GT1lwUX34E0TTHE6vRB8ddQMPPrX4jC46tpmBa2JtZGCx4D 3qZ7hYUmzovlCLuYHo3UIk26e4NY8reR0mHBKYLWg1c0OlFWdrE/WZbK3HJkiqba Tn/3q7Fm5T1+IW4Grdn4AlRlDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKXPEuNo zWhJyw9uJ5GTWrSEhWYTMB8GA1UdIwQYMBaAFFgn5L2HAnft8OsQVjqbQcHkvnyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Q4NS82MkNFRDQ4RTMz RTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2QtM3c2eEJXT3B0QndlUy1m SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDZmt2WWNDZC0zdzZ4QldPcHRCd2VTLWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTdEODUvNjJDRUQ0OEUzM0UyMTFFQUE0OTMyODg0QzRGOUFFMDIvNENEQUNERTQ2 MjM3MTFFQTk4MUI0QjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnFPUwDQYJKoZIhvcNAQELBQADggEBAFhFgnf6aHFF/Ns2 RyEP4uWK/ZHAtwkpYkP8SQR51jh5v0kM2I6jqZAYu8c+0IMtVu4Y7P46Ih+d2j4n IMppUu2+CNQB22Z8qXwqqqUf+4i/pfOvYY4XLmqMXXOcy1xKaGgBIG1BZG0QuDQ6 gehUIgJHZK4QBRT675Qz4VtqkOtiwN+XV8cA6OvTBLtD6mE+8+58fR8sZcaZDXBL ABUkp7v6mE6k3f4hwWSrvggCXJUvDE9hf3vzvzYvMKi1D5Pmuv3CWwfwwzqB+U6i /3Io+P0jSXVvA7LzBrJCDqu68+jo+Rax925c5yLiTV1ltVCYQZTCx97pU8IO/ko7 gpuKu1g= -----END CERTIFICATE-----Generated at Sat May 4 21:33:00 2024 by rpki-client on console-fra.rpki-client.org