$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/BD61E6A2B36D11E992BC3F0BC4F9AE02.roa File: BD61E6A2B36D11E992BC3F0BC4F9AE02.roa (raw, json) Hash identifier: RnwEhFdSsDTYs7JASMXXEqAIxLKExPIM9GyDMqe1oDc= Subject key identifier: A8:6F:71:F7:B4:B2:ED:17:CB:B0:FC:E0:9D:D9:F1:43:F1:9B:D0:62 Certificate issuer: /CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Certificate serial: 0CCF Authority key identifier: 0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/BD61E6A2B36D11E992BC3F0BC4F9AE02.roa Signing time: Tue 14 Nov 2023 18:45:29 +0000 ROA not before: Tue 14 Nov 2023 18:45:29 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 58689 IP address blocks: 103.141.174.0/23 maxlen: 23 103.141.174.0/24 maxlen: 24 103.141.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3279 (0xccf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Validity Not Before: Nov 14 18:45:29 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6553c048-8293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:47:a3:2a:09:57:bd:9c:d2:3d:fd:b5:7d:34: 27:44:fa:99:0b:28:8a:e9:dc:04:96:f0:40:d5:00: f5:90:d7:75:db:09:d6:52:1c:ac:c5:80:f9:2b:88: 7b:1d:45:5a:09:2b:4f:6f:57:6c:27:5a:41:7a:16: 57:1e:ff:0f:44:7a:6d:76:9b:82:13:19:21:92:3e: 39:d9:ce:c7:06:11:ad:25:e8:74:5f:c2:54:e5:3c: a1:79:c5:01:24:a9:f7:cc:6b:1c:8e:77:6a:4a:a0: 65:7f:14:80:df:f6:a2:6d:d9:a6:d2:34:cb:00:af: ed:a2:4e:98:c9:78:54:14:f1:93:d5:d2:82:46:be: ed:31:5b:53:f2:fc:56:a4:7f:f7:e1:25:e1:57:28: 58:76:27:55:04:d8:d5:aa:9f:cc:69:ca:54:66:ba: 3d:8e:39:11:79:16:f9:91:11:ac:d1:7f:5c:cb:ad: 73:84:6a:d6:d3:43:4d:7b:01:b1:fc:20:98:41:40: 9e:5b:b2:6e:ec:d1:c1:3e:9f:c9:65:c1:df:d7:36: cc:39:9d:ca:dc:3d:e5:46:a3:3a:bf:c1:10:97:bd: 55:ca:10:2c:a2:da:71:52:18:ed:c2:4b:0e:12:5e: 39:86:13:a2:51:5f:20:5a:5b:38:d2:7c:56:69:cb: fa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6F:71:F7:B4:B2:ED:17:CB:B0:FC:E0:9D:D9:F1:43:F1:9B:D0:62 X509v3 Authority Key Identifier: keyid:0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/BD61E6A2B36D11E992BC3F0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.174.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:f2:b9:74:af:d7:20:0c:05:90:7a:b9:f3:10:5b:00:4e:f8: 19:9f:a0:7e:72:b3:92:58:63:60:67:1d:fd:47:79:c8:75:ca: bb:06:09:b8:5b:f5:43:36:80:f5:23:d0:bc:a3:1f:e8:b5:07: fc:2a:e8:77:79:43:2c:48:4f:8f:2c:f7:e9:21:da:91:0a:16: 94:2c:4d:03:6d:4c:b0:ed:05:ab:a1:9f:43:c3:43:60:6f:90: 00:c3:82:53:0b:3b:53:65:c2:b1:7b:2c:96:cd:a7:88:32:bd: a4:ba:7f:53:1b:77:e5:b9:69:3e:f1:c7:90:13:ec:bf:58:98: e9:ff:3f:40:47:e7:4d:7c:7b:db:da:b9:4d:6f:83:78:82:0b: 71:61:24:62:15:9a:fa:10:34:4c:5d:f6:d2:4d:b9:db:61:c0: d9:77:b2:d2:c2:94:24:7c:b3:8a:47:b3:40:81:6d:07:e7:f4: ee:64:d4:f3:69:05:03:11:ed:17:db:55:bd:9f:f0:e4:5d:b9: 6a:3c:83:6d:cd:74:17:db:81:da:cc:11:e8:d2:a6:f0:3b:a2: be:f0:6f:8f:47:fa:00:06:59:8b:5c:bd:cb:46:e8:2d:64:2d: 4e:f4:1d:d5:c4:06:05:fd:98:2f:4c:d3:0e:b6:7a:29:ce:37: 9d:a8:8e:f9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcyQ0MxMTAvBgNVBAUTKDBERjk5RTMyNEIwRTNBNTNFOEU1NkQ3MDIwRkY2RkJD NUJGMUNCMDIwHhcNMjMxMTE0MTg0NTI5WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTUzYzA0OC04MjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00ejKglXvZzSPf21fTQnRPqZCyiK6dwElvBA1QD1kNd12wnWUhysxYD5K4h7 HUVaCStPb1dsJ1pBehZXHv8PRHptdpuCExkhkj452c7HBhGtJeh0X8JU5TyhecUB JKn3zGscjndqSqBlfxSA3/aibdmm0jTLAK/tok6YyXhUFPGT1dKCRr7tMVtT8vxW pH/34SXhVyhYdidVBNjVqp/MacpUZro9jjkReRb5kRGs0X9cy61zhGrW00NNewGx /CCYQUCeW7Ju7NHBPp/JZcHf1zbMOZ3K3D3lRqM6v8EQl71VyhAsotpxUhjtwksO El45hhOiUV8gWls40nxWacv6hwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKhvcfe0 su0Xy7D84J3Z8UPxm9BiMB8GA1UdIwQYMBaAFA35njJLDjpT6OVtcCD/b7xb8csC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09sUG81VzF3SVA5dnZGdnh5 d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmbWVNa3NPT2xQbzVXMXdJUDl2dkZ2eHl3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDcyQ0MvNDMzMEFDOUNCMzZEMTFFOTgyNDZFRDBBQzRGOUFFMDIvQkQ2MUU2QTJC MzZEMTFFOTkyQkMzRjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnja4wDQYJKoZIhvcNAQELBQADggEBAH/yuXSv1yAMBZB6 ufMQWwBO+BmfoH5ys5JYY2BnHf1Hech1yrsGCbhb9UM2gPUj0LyjH+i1B/wq6Hd5 QyxIT48s9+kh2pEKFpQsTQNtTLDtBauhn0PDQ2BvkADDglMLO1NlwrF7LJbNp4gy vaS6f1Mbd+W5aT7xx5AT7L9YmOn/P0BH5018e9vauU1vg3iCC3FhJGIVmvoQNExd 9tJNudthwNl3stLClCR8s4pHs0CBbQfn9O5k1PNpBQMR7RfbVb2f8ORduWo8g23N dBfbgdrMEejSpvA7or7wb49H+gAGWYtcvctG6C1kLU70HdXEBgX9mC9M0w62einO N52ojvk= -----END CERTIFICATE-----Generated at Fri May 31 20:34:17 2024 by rpki-client on console-ams.rpki-client.org