$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa File: CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa (raw, json) Hash identifier: SV6wn1ONKGUETn7phh6Jtm/x58pYdRu9KHlc2SCIoEM= Subject key identifier: 8E:B9:CE:D2:77:17:A7:50:69:68:BB:5B:17:40:D2:B7:65:50:66:C7 Certificate issuer: /CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Certificate serial: 07B8 Authority key identifier: 27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa Signing time: Sun 04 Jun 2023 22:34:11 +0000 ROA not before: Sun 04 Jun 2023 22:34:11 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 140678 IP address blocks: 103.151.174.0/24 maxlen: 24 2001:df3:ce80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1976 (0x7b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Validity Not Before: Jun 4 22:34:11 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=647d1163-b324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:26:32:4a:12:58:b3:bd:22:f4:fc:16:dc: 47:af:b3:b9:bb:a1:70:0a:5a:8f:65:f3:f8:0f:ea: ae:03:f3:9c:c5:6d:e9:8d:b5:4d:e2:81:28:96:8b: ce:0e:8b:d3:33:0a:6e:44:40:56:81:9e:83:65:9a: 70:fc:c7:0a:ee:6e:c7:29:13:2c:0a:30:73:6e:63: 16:7c:81:13:8f:f4:3b:14:6b:19:6f:be:59:1f:cb: a4:d9:5f:df:8c:fc:d7:93:e4:ba:b5:cf:84:ee:ef: e2:a2:15:17:f8:c5:22:8c:8b:62:ad:d4:7e:fc:37: 7a:26:f4:5f:4a:41:8a:07:34:ad:17:4c:41:d4:ae: d5:2d:c1:9b:1d:70:d6:04:2b:b1:f1:8b:00:fd:97: 2b:03:cd:f1:ad:8b:d8:e3:8e:11:a5:2b:2f:57:99: 72:af:64:50:27:a5:53:5a:ca:93:b0:7e:8e:06:23: 22:35:46:bc:42:cb:51:3e:92:b3:4e:1b:da:8f:e0: e7:5f:02:dc:18:ec:2d:e4:90:61:d5:90:aa:33:5a: 5c:c6:37:b6:35:67:03:b5:b5:23:02:11:d2:ab:57: 9b:9a:2c:12:b2:28:f5:02:7c:f0:0a:50:d7:f2:21: 83:76:a8:61:a9:bd:14:6d:19:cb:5e:8d:e1:18:4c: 85:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B9:CE:D2:77:17:A7:50:69:68:BB:5B:17:40:D2:B7:65:50:66:C7 X509v3 Authority Key Identifier: keyid:27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.174.0/24 IPv6: 2001:df3:ce80::/48 Signature Algorithm: sha256WithRSAEncryption 20:bf:b1:ec:25:21:1f:63:51:4e:85:cb:68:d9:87:b2:7d:61: 2c:75:cf:14:47:32:bd:fc:03:1b:f0:06:b5:bb:c9:74:52:ac: b2:b6:30:53:bd:ce:dc:7a:5a:8c:5f:5f:1b:4f:a6:93:f0:fa: cd:17:79:71:b8:43:15:c7:75:1e:0a:e0:7e:0d:16:e6:c4:73: cf:34:67:87:26:f0:ce:5f:ba:f0:ae:e1:41:f5:f0:3c:84:41: 42:b9:ee:1b:1b:77:ac:a5:9c:73:13:c2:07:ea:b1:89:f2:00: ef:77:92:72:70:4e:06:3d:81:c0:48:73:57:37:f5:72:e4:52: 19:ec:2c:8c:ed:92:0a:b4:30:b0:f2:1d:0e:1d:1e:5f:06:72: 7b:a3:dd:c5:d2:76:e4:86:f4:5f:e7:69:e2:f6:38:be:52:94: 8d:fd:28:cb:15:d7:28:bb:b0:8f:42:6c:b2:34:87:79:be:fc: 5b:61:cc:f7:7c:24:d3:46:db:59:d2:4f:c3:4c:b3:eb:be:03: 39:63:95:cc:13:2b:99:c8:51:35:82:43:46:6d:11:2e:f1:98: 4f:b9:49:25:79:4a:a4:35:3d:43:3e:13:41:69:1b:17:87:3c: be:13:bd:00:62:93:8a:23:11:8b:79:38:6e:45:53:51:48:8e: cf:78:fc:4d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMzRkQxMTAvBgNVBAUTKDI3REQ4QkJCOEZCNUZBQ0RDMTlGMjlEM0VDMjc0NUQ1 MTEwRDhBOUYwHhcNMjMwNjA0MjIzNDExWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdkMTE2My1iMzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAImMkoSWLO9IvT8FtxHr7O5u6FwClqPZfP4D+quA/OcxW3pjbVN4oEolovO DovTMwpuREBWgZ6DZZpw/McK7m7HKRMsCjBzbmMWfIETj/Q7FGsZb75ZH8uk2V/f jPzXk+S6tc+E7u/iohUX+MUijItirdR+/Dd6JvRfSkGKBzStF0xB1K7VLcGbHXDW BCux8YsA/ZcrA83xrYvY444RpSsvV5lyr2RQJ6VTWsqTsH6OBiMiNUa8QstRPpKz Thvaj+DnXwLcGOwt5JBh1ZCqM1pcxje2NWcDtbUjAhHSq1ebmiwSsij1AnzwClDX 8iGDdqhhqb0UbRnLXo3hGEyFYwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFI65ztJ3 F6dQaWi7WxdA0rdlUGbHMB8GA1UdIwQYMBaAFCfdi7uPtfrNwZ8p0+wnRdURDYqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzNGRC9BNkIzRDQ3ODlG MEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1zM0JueW5UN0NkRjFSRU5p cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o5Mkx1NC0xLXMzQm55blQ3Q2RGMVJFTmlwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkMzRkQvQTZCM0Q0Nzg5RjBFMTFFQTgwQjc1QjJDQzRGOUFFMDIvQ0MxREZCQUM5 RjBGMTFFQUE0NDE5RDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnl64wDwQCAAIwCQMHACABDfPOgDANBgkqhkiG9w0BAQsF AAOCAQEAIL+x7CUhH2NRToXLaNmHsn1hLHXPFEcyvfwDG/AGtbvJdFKssrYwU73O 3HpajF9fG0+mk/D6zRd5cbhDFcd1Hgrgfg0W5sRzzzRnhybwzl+68K7hQfXwPIRB QrnuGxt3rKWccxPCB+qxifIA73eScnBOBj2BwEhzVzf1cuRSGewsjO2SCrQwsPId Dh0eXwZye6PdxdJ25Ib0X+dp4vY4vlKUjf0oyxXXKLuwj0JssjSHeb78W2HM93wk 00bbWdJPw0yz674DOWOVzBMrmchRNYJDRm0RLvGYT7lJJXlKpDU9Qz4TQWkbF4c8 vhO9AGKTiiMRi3k4bkVTUUiOz3j8TQ== -----END CERTIFICATE-----Generated at Fri May 31 22:56:58 2024 by rpki-client on console-fra.rpki-client.org