$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/F4DE3470979B11EE901E210BC4F9AE02.roa File: F4DE3470979B11EE901E210BC4F9AE02.roa (raw, json) Hash identifier: BpTqVyaZfhk7DC0LDlR07+Ko0MWhCjJuGPs7Ot3oTvI= Subject key identifier: 3A:99:C6:D1:4B:80:E2:F7:25:3A:CD:CF:09:E8:BC:96:E3:4B:60:8B Certificate issuer: /CN=A91DB782/serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3 Certificate serial: 04 Authority key identifier: 56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/F4DE3470979B11EE901E210BC4F9AE02.roa Signing time: Mon 11 Dec 2023 02:53:30 +0000 ROA not before: Mon 11 Dec 2023 02:53:30 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 135344 IP address blocks: 103.214.204.0/24 maxlen: 24 103.214.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB782/serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3 Validity Not Before: Dec 11 02:53:30 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=657679aa-e230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2d:9f:5e:c1:91:1d:29:95:af:b6:c1:d1:78: f3:03:59:38:33:98:f7:73:fd:19:31:87:fc:8d:1f: a3:7f:a2:e7:ee:29:10:93:84:b9:f8:89:48:a4:98: 98:09:a5:a8:99:51:dd:8d:2c:95:24:8e:0d:cd:4c: 01:af:5f:04:4a:62:ca:a2:0c:99:95:13:5b:01:a4: 51:31:b7:19:3e:4f:e0:e6:80:f1:c1:2e:7c:90:76: 72:21:df:79:e0:63:e0:2a:f7:21:5c:c4:d9:d5:12: 40:a3:e8:c3:d7:f4:24:34:96:66:ef:36:9c:f3:e1: 4b:2b:d1:65:6f:e6:81:f2:3a:e6:06:25:91:86:47: 9d:5c:5f:54:7d:37:40:4b:2d:a5:f2:b1:1d:99:d9: 00:04:c3:58:8e:9c:80:7e:62:19:00:5b:ee:15:59: f3:65:0c:54:04:f4:8d:94:ab:f1:9c:97:74:96:bb: 74:37:7e:5e:95:d5:75:84:b8:a1:8b:fe:05:f3:96: ed:fd:d3:88:39:71:43:84:05:28:bf:f9:c4:3c:0c: fe:61:ad:a0:dc:63:44:d0:5c:c7:13:ba:90:ac:83: 3d:f7:0c:eb:8b:bc:01:1b:29:15:44:68:21:57:5b: a0:8c:b9:54:62:5f:72:dc:d0:11:e4:d1:e9:e6:e8: fd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:99:C6:D1:4B:80:E2:F7:25:3A:CD:CF:09:E8:BC:96:E3:4B:60:8B X509v3 Authority Key Identifier: keyid:56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/F4DE3470979B11EE901E210BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.214.204.0/23 Signature Algorithm: sha256WithRSAEncryption 90:89:9e:d1:a7:1f:58:a0:d0:75:d4:91:7f:a2:0b:dd:22:4c: d9:f0:c4:01:66:78:24:bb:6c:ba:af:10:77:92:64:ed:b5:8c: 5e:86:21:47:53:2d:b4:74:d2:41:2c:27:af:ee:ca:cc:e7:c5: 57:45:1a:e9:0c:e4:d1:ca:b8:1a:d4:0d:2f:25:f3:4f:8c:07: ed:04:3b:35:4e:75:09:21:28:0a:55:13:6c:de:df:c6:8d:7a: 76:c9:8a:3f:43:a3:60:c6:fb:20:b5:a0:07:0d:d9:79:ad:20: 53:19:e1:57:38:da:72:c3:f7:39:f8:c8:3c:f3:01:26:f0:2c: 45:42:71:87:99:9c:b0:84:1f:14:71:53:cd:11:a4:3f:b0:30: 79:11:4f:99:85:14:0e:4d:d2:75:ba:df:0e:4e:28:fe:bb:fa: bf:66:c4:ca:35:7a:f2:20:78:9f:e3:41:e6:84:99:70:4a:13: 26:66:50:43:a5:fc:c9:c8:f5:89:d9:bc:f3:d8:be:7b:f3:09: 04:75:8c:e2:b7:91:3a:f5:54:4b:2b:95:9e:9f:1b:08:92:b3: 3a:85:27:77:85:ea:28:61:6c:f3:04:d9:4d:06:fd:b6:69:b3: ba:82:f7:4f:d6:6a:fb:5f:2a:a2:05:e8:0f:0c:8c:2f:b6:2f: 0e:a2:ec:7b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qjc4MjExMC8GA1UEBRMoNTZCNjVCODA5RjVEQUIzQTVBQjE1N0NBMDU3OUZEOEUx NkVEQ0ZCMzAeFw0yMzEyMTEwMjUzMzBaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NzY3OWFhLWUyMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqLZ9ewZEdKZWvtsHRePMDWTgzmPdz/Rkxh/yNH6N/oufuKRCThLn4iUikmJgJ paiZUd2NLJUkjg3NTAGvXwRKYsqiDJmVE1sBpFExtxk+T+DmgPHBLnyQdnIh33ng Y+Aq9yFcxNnVEkCj6MPX9CQ0lmbvNpzz4Usr0WVv5oHyOuYGJZGGR51cX1R9N0BL LaXysR2Z2QAEw1iOnIB+YhkAW+4VWfNlDFQE9I2Uq/Gcl3SWu3Q3fl6V1XWEuKGL /gXzlu3904g5cUOEBSi/+cQ8DP5hraDcY0TQXMcTupCsgz33DOuLvAEbKRVEaCFX W6CMuVRiX3Lc0BHk0enm6P1DAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUOpnG0UuA 4vclOs3PCei8luNLYIswHwYDVR0jBBgwFoAUVrZbgJ9dqzpasVfKBXn9jhbtz7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCNzgyLzlGRURDRjVDOTc5 QjExRUU5ODlFNjAwQUM0RjlBRTAyL1ZyWmJnSjlkcXpwYXNWZktCWG45amhidHo3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVnJaYmdKOWRxenBhc1ZmS0JYbjlqaGJ0ejdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qjc4Mi85RkVEQ0Y1Qzk3OUIxMUVFOTg5RTYwMEFDNEY5QUUwMi9GNERFMzQ3MDk3 OUIxMUVFOTAxRTIxMEJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWfWzDANBgkqhkiG9w0BAQsFAAOCAQEAkIme0acfWKDQddSR f6IL3SJM2fDEAWZ4JLtsuq8Qd5Jk7bWMXoYhR1MttHTSQSwnr+7KzOfFV0Ua6Qzk 0cq4GtQNLyXzT4wH7QQ7NU51CSEoClUTbN7fxo16dsmKP0OjYMb7ILWgBw3Zea0g UxnhVzjacsP3OfjIPPMBJvAsRUJxh5mcsIQfFHFTzRGkP7AweRFPmYUUDk3Sdbrf Dk4o/rv6v2bEyjV68iB4n+NB5oSZcEoTJmZQQ6X8ycj1idm889i+e/MJBHWM4reR OvVUSyuVnp8bCJKzOoUnd4XqKGFs8wTZTQb9tmmzuoL3T9Zq+18qogXoDwyML7Yv DqLsew== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:34 2024 by rpki-client on console-ams.rpki-client.org