$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa File: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (raw, json) Hash identifier: Rzehxr0+uq4wGOaC52117Iqt090HmyAUS/NU7NUpmFQ= Subject key identifier: 92:2F:7D:23:F7:E7:4B:6E:2C:07:B9:8C:86:BE:16:2F:B4:1F:9F:36 Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Certificate serial: 04 Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa Signing time: Fri 20 Oct 2023 07:47:45 +0000 ROA not before: Fri 20 Oct 2023 07:47:45 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 151355 IP address blocks: 103.209.212.0/24 maxlen: 24 103.209.213.0/24 maxlen: 24 2001:df2:7f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Validity Not Before: Oct 20 07:47:45 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=653230a1-36d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:f6:10:95:bd:20:96:4c:f0:b2:77:12:56: 16:62:15:a0:ac:bb:2d:36:84:97:8b:31:3b:4a:2a: 62:c3:77:4d:e4:21:9d:04:99:60:86:02:e0:06:ba: 14:de:31:2c:00:97:9b:19:ee:2d:1b:31:3c:f1:9b: 53:a0:a3:24:73:fb:fc:74:84:eb:7c:e3:42:5e:08: 1d:06:31:d4:e2:50:5e:e1:47:7b:50:22:c9:21:97: e5:7b:fd:16:79:1a:4f:0c:0e:34:d0:f5:f7:1b:70: 53:1e:00:85:31:04:2c:33:0a:48:74:43:f9:e6:7f: 6a:45:63:35:40:d4:f2:6e:f0:aa:8c:a2:57:dc:15: 0d:a0:29:2d:7b:92:7f:55:ad:d2:4a:a6:d5:45:24: 8a:c1:fa:c0:c4:3a:e9:2f:2a:16:9a:dc:aa:ea:04: 7e:1c:c1:89:72:c9:a6:7c:12:ed:38:39:b3:f2:ae: dc:75:9e:e0:ee:9a:fe:29:20:4a:70:49:95:27:a9: d9:0e:43:f0:f6:a4:61:d6:b6:32:0b:53:ff:80:b6: 20:7f:5d:1f:22:2f:21:1c:68:30:87:be:f7:7f:19: 46:0a:66:94:44:18:57:ce:d7:34:5b:ce:bc:0a:78: 77:db:0c:7e:2d:a3:28:77:61:f5:ca:30:7d:55:99: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2F:7D:23:F7:E7:4B:6E:2C:07:B9:8C:86:BE:16:2F:B4:1F:9F:36 X509v3 Authority Key Identifier: keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.212.0/23 IPv6: 2001:df2:7f40::/48 Signature Algorithm: sha256WithRSAEncryption 36:17:99:0c:cc:49:52:40:a4:a9:55:4b:35:33:42:05:b8:99: ae:c2:e3:9a:92:32:02:88:8c:13:33:0c:a7:53:1c:56:b6:61: 83:0b:82:91:d4:14:83:21:04:2a:a0:bb:d4:83:d6:71:66:89: 7a:4b:75:b0:2c:97:70:93:d7:52:61:13:e1:f2:4b:6e:46:f2: dc:00:e6:c0:d2:0d:d6:f7:72:a4:de:5e:9b:55:96:f5:b5:f7: 3c:f7:b3:7d:87:b1:f4:c0:a8:3e:d8:0a:b0:df:46:f8:c3:a0: 4a:17:ea:88:c4:a3:40:d3:a7:f8:7b:c3:da:df:a6:2d:d8:8c: 59:94:e8:54:2f:04:3c:56:d1:36:f8:49:9b:2d:7a:13:83:d2: 48:b2:6f:ea:b0:22:df:45:d7:93:5a:a7:2f:27:4d:03:da:79: db:79:84:f7:4e:6f:63:34:80:fb:7e:cc:89:bf:b1:40:72:99: d4:0e:52:c5:7f:f4:61:04:c1:d8:45:93:65:52:d0:f1:f9:b5: f0:e3:8c:61:63:e5:03:b3:cd:60:31:0a:83:a6:0d:60:8c:e8: 11:84:c8:90:cf:db:37:cd:9e:ff:de:b7:64:ae:7e:c4:f2:90: 73:be:f3:39:95:7c:8d:14:62:8a:23:87:af:e9:8f:2d:27:b0: 56:f4:91:2d -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE M0Y3OTExMC8GA1UEBRMoMjVGOURCNjAwN0FERjZGNTdFQzRFRkY3QTYyQkY0RDQy REE3NUVDNTAeFw0yMzEwMjAwNzQ3NDVaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MzIzMGExLTM2ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDkPYQlb0glkzwsncSVhZiFaCsuy02hJeLMTtKKmLDd03kIZ0EmWCGAuAGuhTe MSwAl5sZ7i0bMTzxm1OgoyRz+/x0hOt840JeCB0GMdTiUF7hR3tQIskhl+V7/RZ5 Gk8MDjTQ9fcbcFMeAIUxBCwzCkh0Q/nmf2pFYzVA1PJu8KqMolfcFQ2gKS17kn9V rdJKptVFJIrB+sDEOukvKhaa3KrqBH4cwYlyyaZ8Eu04ObPyrtx1nuDumv4pIEpw SZUnqdkOQ/D2pGHWtjILU/+AtiB/XR8iLyEcaDCHvvd/GUYKZpREGFfO1zRbzrwK eHfbDH4toyh3YfXKMH1VmXsrAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUki99I/fn S24sB7mMhr4WL7QfnzYwHwYDVR0jBBgwFoAUJfnbYAet9vV+xO/3piv01C2nXsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzRjc5L0ZBMzFBMkIyNkYx QTExRUU4RDMyRTA2NEM0RjlBRTAyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmZuYllBZXQ5dlYteE9fM3BpdjAxQzJuWHNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y3OS9GQTMxQTJCMjZGMUExMUVFOEQzMkUwNjRDNEY5QUUwMi9GNENEQ0U2NjZG MUMxMUVFOENBM0YyNkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWfR1DAPBAIAAjAJAwcAIAEN8n9AMA0GCSqGSIb3DQEBCwUA A4IBAQA2F5kMzElSQKSpVUs1M0IFuJmuwuOakjICiIwTMwynUxxWtmGDC4KR1BSD IQQqoLvUg9ZxZol6S3WwLJdwk9dSYRPh8ktuRvLcAObA0g3W93Kk3l6bVZb1tfc8 97N9h7H0wKg+2Aqw30b4w6BKF+qIxKNA06f4e8Pa36Yt2IxZlOhULwQ8VtE2+Emb LXoTg9JIsm/qsCLfRdeTWqcvJ00D2nnbeYT3Tm9jNID7fsyJv7FAcpnUDlLFf/Rh BMHYRZNlUtDx+bXw44xhY+UDs81gMQqDpg1gjOgRhMiQz9s3zZ7/3rdkrn7E8pBz vvM5lXyNFGKKI4ev6Y8tJ7BW9JEt -----END CERTIFICATE-----Generated at Fri May 31 10:42:52 2024 by rpki-client on console-fra.rpki-client.org