$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/FEA1EB7219FA11EBA0F82851C4F9AE02.roa File: FEA1EB7219FA11EBA0F82851C4F9AE02.roa (raw, json) Hash identifier: C9vLSGVg6El1e8HTKC16Xnhfbc65KgLg2/+AFVeGHkg= Subject key identifier: 2E:61:D9:0A:88:D9:B5:A8:70:09:A2:06:FC:30:C6:1F:61:BA:15:28 Certificate issuer: /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8 Certificate serial: 0690 Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/FEA1EB7219FA11EBA0F82851C4F9AE02.roa Signing time: Tue 30 Jan 2024 23:41:54 +0000 ROA not before: Tue 30 Jan 2024 23:41:54 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 141377 IP address blocks: 103.157.248.0/24 maxlen: 24 103.157.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8 Validity Not Before: Jan 30 23:41:54 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65b98941-0b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:6b:a3:12:4b:6a:08:8d:af:0e:96:bb:ba: 11:9f:11:fb:a5:cb:33:1c:f9:75:8c:0d:ec:49:10: 09:f7:e1:09:a3:2e:8a:cf:c0:94:45:d3:27:24:00: d8:3a:62:8e:53:18:8c:46:7b:17:76:df:71:14:7a: ec:0c:e4:fd:c2:d6:75:d7:58:11:44:d8:2f:d5:10: 01:d1:f0:39:26:10:13:1f:47:59:a2:5b:a5:53:82: 71:4c:37:31:18:d4:1f:7a:41:13:38:7d:df:5d:90: 20:3a:31:77:a2:4d:cd:3d:51:40:02:43:5f:0b:b0: 84:95:e7:41:b9:ab:4e:e8:2c:f7:cf:19:36:70:43: d0:08:25:95:23:e0:cc:58:e9:01:99:72:ef:40:a5: cf:26:57:d1:ac:3e:6f:42:74:8d:43:4b:4d:fe:db: d7:97:3a:cc:25:31:2a:dc:e1:a0:fd:55:2c:00:9e: 62:0f:e7:6a:64:a0:60:ae:c3:7b:fc:00:64:32:78: 6e:bc:2f:b8:5e:2b:b1:05:5b:12:f5:a0:51:74:fd: 3f:2c:72:e1:a5:55:a7:a0:96:fd:6d:ea:12:0c:2e: 9e:68:e7:d8:b5:97:e4:d6:14:95:64:fb:07:52:68: 25:bc:e5:aa:a8:a6:a4:26:40:bc:23:97:23:5d:af: 0f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:61:D9:0A:88:D9:B5:A8:70:09:A2:06:FC:30:C6:1F:61:BA:15:28 X509v3 Authority Key Identifier: keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/FEA1EB7219FA11EBA0F82851C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.248.0/23 Signature Algorithm: sha256WithRSAEncryption c4:72:44:08:37:ed:dc:28:de:8e:92:71:83:b8:ca:e3:f3:57: cf:4a:a2:79:6b:bb:7b:72:df:c0:57:15:42:2d:7d:81:41:39: 64:cc:6c:5d:ca:28:04:b0:4d:e8:21:1d:43:d1:8b:63:1a:8e: d5:e9:88:16:fc:97:c4:75:a8:b0:eb:21:d5:da:cf:5d:9b:6c: 96:03:06:74:7d:3c:2a:b1:db:fb:b8:18:39:45:c8:f0:4d:90: c7:5b:37:03:b4:a1:b6:21:dd:13:fe:e3:52:6c:6d:ce:d8:ef: c1:a3:50:9b:41:3c:c5:63:c8:d4:a1:98:d1:52:76:88:1f:57: 7d:fb:c1:c5:62:c7:93:a0:c3:cb:f5:9f:68:bb:19:b0:ed:86: 66:6e:37:b3:15:36:f7:26:7a:70:71:db:68:84:e1:d9:e4:69: 3b:e2:e5:00:10:54:4e:d8:a2:96:09:34:2d:14:81:8d:3c:18: ff:d1:c5:f0:1a:96:e4:3f:34:74:81:48:1f:ab:92:37:2b:bf: bc:a0:21:9b:30:04:c0:cb:da:b3:37:8e:7a:54:84:40:ea:2d: 5d:97:3e:22:bb:9f:b3:62:6e:1d:7c:5e:35:aa:b4:69:5f:50: 6e:b3:f1:37:f6:68:d9:ee:e0:d8:97:ee:df:1b:55:9c:4b:60: e8:8e:4a:1e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM2REMxMTAvBgNVBAUTKEJDMDJCMDA1Q0NBQTA0NTNGQzlCODE3QkI3OENCQTkx NUYyN0MyQTgwHhcNMjQwMTMwMjM0MTU0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5ODk0MS0wYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4hroxJLagiNrw6Wu7oRnxH7pcszHPl1jA3sSRAJ9+EJoy6Kz8CURdMnJADY OmKOUxiMRnsXdt9xFHrsDOT9wtZ111gRRNgv1RAB0fA5JhATH0dZolulU4JxTDcx GNQfekETOH3fXZAgOjF3ok3NPVFAAkNfC7CEledBuatO6Cz3zxk2cEPQCCWVI+DM WOkBmXLvQKXPJlfRrD5vQnSNQ0tN/tvXlzrMJTEq3OGg/VUsAJ5iD+dqZKBgrsN7 /ABkMnhuvC+4XiuxBVsS9aBRdP0/LHLhpVWnoJb9beoSDC6eaOfYtZfk1hSVZPsH UmglvOWqqKakJkC8I5cjXa8PZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC5h2QqI 2bWocAmiBvwwxh9huhUoMB8GA1UdIwQYMBaAFLwCsAXMqgRT/JuBe7eMupFfJ8Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzZEQy9CMDQzNjQ3QTE5 RjkxMUVCQjhDREVENEZDNEY5QUUwMi92QUt3QmN5cUJGUDhtNEY3dDR5NmtWOG53 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZBS3dCY3lxQkZQOG00Rjd0NHk2a1Y4bndxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM2REMvQjA0MzY0N0ExOUY5MTFFQkI4Q0RFRDRGQzRGOUFFMDIvRkVBMUVCNzIx OUZBMTFFQkEwRjgyODUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnfgwDQYJKoZIhvcNAQELBQADggEBAMRyRAg37dwo3o6S cYO4yuPzV89Konlru3ty38BXFUItfYFBOWTMbF3KKASwTeghHUPRi2MajtXpiBb8 l8R1qLDrIdXaz12bbJYDBnR9PCqx2/u4GDlFyPBNkMdbNwO0obYh3RP+41Jsbc7Y 78GjUJtBPMVjyNShmNFSdogfV337wcVix5Ogw8v1n2i7GbDthmZuN7MVNvcmenBx 22iE4dnkaTvi5QAQVE7YopYJNC0UgY08GP/RxfAaluQ/NHSBSB+rkjcrv7ygIZsw BMDL2rM3jnpUhEDqLV2XPiK7n7Nibh18XjWqtGlfUG6z8Tf2aNnu4NiX7t8bVZxL YOiOSh4= -----END CERTIFICATE-----Generated at Sat Jun 1 00:32:59 2024 by rpki-client on console-fra.rpki-client.org