$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/9DF7DA5C557C11E7B34BCE81C4F9AE02.roa File: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (raw, json) Hash identifier: 7wlp2PECucp8Uy8l9Ief6GFTHn3kLULrFFBnhP6srUQ= Subject key identifier: 10:AF:2A:38:B2:91:1E:60:CC:87:97:50:D3:BE:65:33:FC:EB:50:E0 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 18E6 Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/9DF7DA5C557C11E7B34BCE81C4F9AE02.roa Signing time: Fri 06 Oct 2023 16:54:02 +0000 ROA not before: Fri 06 Oct 2023 16:54:02 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 134433 IP address blocks: 103.241.84.0/24 maxlen: 24 103.241.85.0/24 maxlen: 24 103.241.86.0/24 maxlen: 24 103.241.87.0/24 maxlen: 24 2407:d500::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6374 (0x18e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Oct 6 16:54:02 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65203baa-6b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:31:be:da:d9:5d:5f:95:97:ef:76:81:ae:98: 49:21:21:09:5f:44:04:17:83:ad:ca:b8:f6:73:57: ff:7b:55:5c:54:ae:8a:7a:f8:f6:16:aa:0c:82:cf: a2:ce:1e:ab:60:97:97:3c:0b:88:e7:67:88:d9:0f: 5e:46:32:1a:d1:2c:99:80:2c:73:59:97:39:b4:c0: 1f:db:d8:a5:04:80:a5:f8:06:7e:b0:b1:4a:93:35: 05:46:6f:71:a7:76:eb:f0:69:e9:9f:0b:08:72:70: 01:08:14:7c:51:8b:d1:47:73:fc:d4:03:cf:8a:d1: eb:41:2c:3a:00:1e:2d:99:65:59:fe:ff:87:bc:03: a4:b6:df:8f:ff:33:04:35:f7:18:ef:73:1b:a9:0c: 9d:05:31:74:74:09:3a:86:14:29:58:d9:0d:14:15: 9b:1f:6a:78:e6:34:0c:72:b3:b0:cf:31:fb:66:aa: 03:1e:18:0d:f9:39:08:b3:34:3f:0a:5d:ea:b3:4f: e4:d4:65:84:dd:d8:dc:9f:e2:7a:58:8a:2f:8f:62: 5b:5c:c5:de:5e:a3:16:17:8c:10:fe:5c:c4:2b:af: 27:a9:a8:10:41:8a:82:57:ab:44:11:1e:21:a3:84: 82:f4:af:6f:1c:ad:b1:6e:a0:16:d0:62:5e:61:6a: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AF:2A:38:B2:91:1E:60:CC:87:97:50:D3:BE:65:33:FC:EB:50:E0 X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/9DF7DA5C557C11E7B34BCE81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.241.84.0/22 IPv6: 2407:d500::/32 Signature Algorithm: sha256WithRSAEncryption 35:66:c3:c1:70:74:7f:6a:38:61:ff:4c:6b:bd:81:1e:31:41: 95:7e:6a:12:24:62:d1:19:91:8f:90:2a:39:a1:4c:4c:08:83: e9:a7:61:14:21:8c:93:0e:d5:95:87:8f:02:70:51:c3:85:34: f2:00:4f:63:0c:d7:79:61:a5:63:69:d3:3e:c8:8a:ef:d8:85: 1d:11:64:f5:f1:05:b3:03:6b:04:75:8c:8c:09:e1:4e:55:e4: c6:3d:f8:7f:e2:bc:db:88:a2:75:4c:5b:af:45:e4:fa:87:e3: fc:e8:0b:d5:d6:38:f1:3d:90:92:8f:cd:57:5f:e6:2f:79:8e: 50:77:32:9e:ca:bd:07:1f:c7:c2:c2:d9:26:7a:73:30:64:e8: 5c:84:51:51:77:e1:39:53:ba:91:8b:3d:f7:fd:dd:1c:7a:6c: 8c:c1:5f:e2:c4:0c:da:d7:e0:91:fc:96:ca:df:3b:b3:b0:78: 30:e0:07:ac:e9:28:3c:b4:8e:06:93:46:c8:7f:8f:97:87:b2: bc:f0:64:92:16:78:e4:71:78:67:ba:48:a5:b7:77:50:2b:97: 4e:45:9c:d9:70:00:1a:d4:aa:b5:04:d7:1d:de:69:d0:0f:fc: 2f:0d:6a:08:c0:99:68:26:3a:cc:63:a4:d0:74:2c:12:21:ae: 99:61:38:99 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICGOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjMxMDA2MTY1NDAyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTIwM2JhYS02YjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TG+2tldX5WX73aBrphJISEJX0QEF4Otyrj2c1f/e1VcVK6Kevj2FqoMgs+i zh6rYJeXPAuI52eI2Q9eRjIa0SyZgCxzWZc5tMAf29ilBICl+AZ+sLFKkzUFRm9x p3br8GnpnwsIcnABCBR8UYvRR3P81APPitHrQSw6AB4tmWVZ/v+HvAOktt+P/zME NfcY73MbqQydBTF0dAk6hhQpWNkNFBWbH2p45jQMcrOwzzH7ZqoDHhgN+TkIszQ/ Cl3qs0/k1GWE3djcn+J6WIovj2JbXMXeXqMWF4wQ/lzEK68nqagQQYqCV6tEER4h o4SC9K9vHK2xbqAW0GJeYWq1pwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBCvKjiy kR5gzIeXUNO+ZTP861DgMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvMkY4Qjg1NTI1NDg1MTFFN0IxRDg0NzEzQzRGOUFFMDIvOURGN0RBNUM1 NTdDMTFFN0IzNEJDRTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn8VQwDQQCAAIwBwMFACQH1QAwDQYJKoZIhvcNAQELBQAD ggEBADVmw8FwdH9qOGH/TGu9gR4xQZV+ahIkYtEZkY+QKjmhTEwIg+mnYRQhjJMO 1ZWHjwJwUcOFNPIAT2MM13lhpWNp0z7Iiu/YhR0RZPXxBbMDawR1jIwJ4U5V5MY9 +H/ivNuIonVMW69F5PqH4/zoC9XWOPE9kJKPzVdf5i95jlB3Mp7KvQcfx8LC2SZ6 czBk6FyEUVF34TlTupGLPff93Rx6bIzBX+LEDNrX4JH8lsrfO7OweDDgB6zpKDy0 jgaTRsh/j5eHsrzwZJIWeORxeGe6SKW3d1Arl05FnNlwABrUqrUE1x3eadAP/C8N agjAmWgmOsxjpNB0LBIhrplhOJk= -----END CERTIFICATE-----Generated at Thu May 16 17:51:52 2024 by rpki-client on console-ams.rpki-client.org