$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/CF0AE642EBA711EA8980FC11C4F9AE02.roa File: CF0AE642EBA711EA8980FC11C4F9AE02.roa (raw, json) Hash identifier: y2XTFEwRS/mh9EHV1UnNAw7rkYKadJCDla0vE9Rf51k= Subject key identifier: 31:DE:76:32:28:78:02:29:60:26:D4:8C:AD:D1:BA:70:93:94:63:BA Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0A53 Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/CF0AE642EBA711EA8980FC11C4F9AE02.roa Signing time: Wed 22 Nov 2023 20:08:13 +0000 ROA not before: Wed 22 Nov 2023 20:08:13 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 17412 IP address blocks: 103.102.36.0/23 maxlen: 24 2001:def:8000::/48 maxlen: 48 2001:def:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2643 (0xa53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Nov 22 20:08:13 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=655e5fad-cb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c2:ce:c4:5d:de:86:22:d5:c3:e7:31:ee:64: f5:46:02:65:e5:bb:bb:d4:0b:f7:b6:e3:c1:a8:34: cb:0b:14:92:97:28:a9:c4:9e:13:9d:e7:03:3b:b2: 48:55:2d:39:37:e4:2a:d3:9e:a1:1d:79:93:db:5a: 3a:b9:65:a4:8b:8d:d3:02:38:52:f9:13:e9:36:11: 64:09:86:d1:07:07:0f:0e:d4:ac:2f:6e:51:09:d0: f2:9c:1c:f4:05:04:f2:15:e6:ef:0b:3a:1a:05:ad: 02:87:c9:7a:7e:53:9e:6b:f2:c9:be:88:a4:e5:5e: 78:22:90:07:45:ab:0a:18:0e:a6:1a:2a:ad:cd:eb: 44:8e:e4:3c:ca:b8:1d:3b:a2:f5:a9:1e:65:22:be: d9:db:59:a8:7c:d5:81:9f:34:cb:c7:27:1b:53:bf: ee:cb:ad:90:da:2c:76:e6:8f:4b:2c:39:a7:55:41: 97:9d:2a:93:1c:7a:36:74:90:88:28:c9:18:25:70: 78:e7:8b:fb:45:70:49:21:c6:39:95:86:e5:f9:63: c5:26:17:fc:dc:9f:e6:8e:7f:8d:27:6a:6e:98:d4: 99:f7:cd:a5:0a:fa:91:01:32:a2:b8:6f:51:79:bd: 31:72:72:c3:89:b4:69:f5:7e:ae:21:9a:be:21:dc: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DE:76:32:28:78:02:29:60:26:D4:8C:AD:D1:BA:70:93:94:63:BA X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/CF0AE642EBA711EA8980FC11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.36.0/23 IPv6: 2001:def:8000::/47 Signature Algorithm: sha256WithRSAEncryption 6c:60:7e:81:74:33:18:5d:c3:79:55:bc:32:64:89:2e:c2:00: 8d:f1:b4:9e:f0:84:94:45:93:44:9c:3e:6a:43:3e:dd:00:e6: f7:2a:91:76:62:e2:01:06:17:9c:38:46:44:b0:0b:9b:62:8e: d4:56:ae:8c:ba:19:b2:57:ae:b7:42:45:44:ec:3a:78:3c:f4: f2:59:e7:81:50:e5:56:8f:f5:14:b5:f5:d4:06:36:62:ab:0e: 68:05:ca:14:7a:ec:3b:4f:4b:29:1b:f1:f3:1b:98:cb:03:81: dd:60:a1:53:0e:0d:7f:b0:f0:03:e2:24:d3:30:c4:ba:39:fd: 34:97:85:c0:1a:68:b4:65:c3:eb:39:c9:f6:f2:63:a5:2d:47: cc:56:10:dc:8a:9e:82:45:25:f2:b0:f6:e6:81:56:81:cc:8f: 63:25:62:dd:f2:de:f5:df:a2:5e:85:e7:65:6a:dd:f5:30:93: ef:f3:e8:4e:49:ef:86:62:fa:c6:c9:f3:cc:b6:12:3d:e4:64: c1:81:35:23:24:d9:22:9c:7a:53:a8:0f:a6:b3:fe:e9:37:17: fb:ad:73:6b:72:b3:68:40:82:61:e0:fc:d2:f3:5c:34:ce:86: 9f:97:c1:65:71:c2:81:0a:60:1b:2b:2e:0e:8e:45:22:c8:d3: ec:1f:20:0e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICClMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjMxMTIyMjAwODEzWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTVlNWZhZC1jYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMLOxF3ehiLVw+cx7mT1RgJl5bu71Av3tuPBqDTLCxSSlyipxJ4TnecDO7JI VS05N+Qq056hHXmT21o6uWWki43TAjhS+RPpNhFkCYbRBwcPDtSsL25RCdDynBz0 BQTyFebvCzoaBa0Ch8l6flOea/LJvoik5V54IpAHRasKGA6mGiqtzetEjuQ8yrgd O6L1qR5lIr7Z21mofNWBnzTLxycbU7/uy62Q2ix25o9LLDmnVUGXnSqTHHo2dJCI KMkYJXB454v7RXBJIcY5lYbl+WPFJhf83J/mjn+NJ2pumNSZ982lCvqRATKiuG9R eb0xcnLDibRp9X6uIZq+IdxF8QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDHedjIo eAIpYCbUjK3RunCTlGO6MB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjhDQTYvOUJENjQwNTYzMjA2MTFFQUEyRjZCMzMyQzRGOUFFMDIvQ0YwQUU2NDJF QkE3MTFFQTg5ODBGQzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnZiQwDwQCAAIwCQMHASABDe+AADANBgkqhkiG9w0BAQsF AAOCAQEAbGB+gXQzGF3DeVW8MmSJLsIAjfG0nvCElEWTRJw+akM+3QDm9yqRdmLi AQYXnDhGRLALm2KO1FaujLoZsleut0JFROw6eDz08lnngVDlVo/1FLX11AY2YqsO aAXKFHrsO09LKRvx8xuYywOB3WChUw4Nf7DwA+Ik0zDEujn9NJeFwBpotGXD6znJ 9vJjpS1HzFYQ3IqegkUl8rD25oFWgcyPYyVi3fLe9d+iXoXnZWrd9TCT7/PoTknv hmL6xsnzzLYSPeRkwYE1IyTZIpx6U6gPprP+6TcX+61za3KzaECCYeD80vNcNM6G n5fBZXHCgQpgGysuDo5FIsjT7B8gDg== -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org