$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa File: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (raw, json) Hash identifier: WP0Cxklh3HNdj+FSDjyYK8dBUxC8tFYElxiXLoTsDfw= Subject key identifier: 20:94:19:F4:9E:D1:C8:BB:44:F1:04:6D:C3:8A:CE:B8:C3:DC:80:16 Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3 Certificate serial: 06CA Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa Signing time: Thu 12 Oct 2023 22:10:04 +0000 ROA not before: Thu 12 Oct 2023 22:10:04 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 9930 IP address blocks: 103.243.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1738 (0x6ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3 Validity Not Before: Oct 12 22:10:04 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65286ebc-135f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:56:c7:45:ec:2f:d9:45:64:38:f7:99:e7:31: 25:bf:76:5b:fb:68:d8:0a:8e:93:f7:cb:ab:16:5e: 0f:0a:81:45:b1:8f:3e:8f:36:82:49:eb:4b:33:d3: 38:43:fe:d2:c1:39:32:4d:d2:d2:4f:17:63:5e:b1: 95:86:09:5b:52:c3:e0:23:ad:ba:47:16:1a:c0:08: da:82:31:3b:a7:8d:f9:15:ab:a3:93:09:19:c7:12: e4:3a:df:17:c3:4a:d0:e2:d8:c0:54:20:51:ff:e1: ce:2f:04:b2:e1:f7:93:b9:fe:5e:d8:15:d6:01:6e: 3b:1f:52:87:44:16:1c:bd:d4:74:85:2e:15:d9:d9: bb:47:42:b0:6b:b4:9e:ba:0b:2a:70:a1:0d:04:00: 5e:a3:7c:48:69:c7:56:ca:57:46:72:97:40:f6:f1: 28:79:d4:01:12:a0:87:ab:63:f3:b0:4a:b6:4b:e2: 7c:b9:fd:b3:61:08:7f:bd:65:19:60:d7:57:16:d0: 50:56:ba:f0:3a:5c:8f:de:30:8f:5f:d2:c6:9d:e4: 2a:25:a0:ea:96:50:5f:86:61:9f:5d:a0:ea:d0:06: dd:31:c5:ce:13:b5:03:d0:f7:04:55:4e:47:3b:e7: 29:0b:14:d3:1d:68:bb:f9:62:43:1f:41:a2:82:08: 4d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:94:19:F4:9E:D1:C8:BB:44:F1:04:6D:C3:8A:CE:B8:C3:DC:80:16 X509v3 Authority Key Identifier: keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.156.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:28:c2:a7:74:21:bb:81:16:78:34:ef:03:9b:c4:5d:fe:4e: 2c:5c:3f:e5:8c:84:e3:e4:d2:34:6c:f5:83:1b:6f:e0:e2:f5: 24:e9:35:f3:95:a3:21:ad:28:38:0b:0f:28:96:66:46:57:08: 46:55:96:d7:9d:28:4a:76:28:e8:03:9a:f5:16:96:c6:92:94: 89:01:fd:d5:b8:11:ab:35:4d:20:7e:4d:43:c5:ea:d0:92:b4: 2b:4d:e3:0f:0f:16:b4:e8:04:93:d1:6a:fa:03:8d:81:38:b5: 45:ad:7e:2d:68:72:04:ef:25:90:1d:b3:e6:f4:6b:80:e0:bc: 62:e2:f0:1b:6c:a6:28:e1:4d:14:dc:45:94:19:1f:59:1c:84: 33:94:a3:ab:81:db:9b:24:04:d6:ec:75:f9:64:01:4c:89:fb: b7:1b:f9:6f:d4:b6:a8:78:af:dd:bf:7f:19:5a:8b:ea:d6:41: 9c:48:31:c4:89:04:7d:c3:9a:96:a6:53:14:7d:75:df:2b:f9: 32:c5:af:9d:1d:59:ff:31:f5:03:5b:a8:7e:76:c8:ff:93:e4: ae:34:9f:fe:3c:69:8a:d0:1e:08:a9:ed:d5:da:79:7c:36:91: 3d:01:d4:8a:4c:53:fa:d1:dc:8d:22:cb:08:02:3d:e7:1d:10: 2c:31:c0:05 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBBQUIxMTAvBgNVBAUTKDAwNUZBQUFEMkFFMzBFNzc1MjU2QUZCQkJCMjhCNjI0 OTE3MkFCRTMwHhcNMjMxMDEyMjIxMDA0WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTI4NmViYy0xMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlbHRewv2UVkOPeZ5zElv3Zb+2jYCo6T98urFl4PCoFFsY8+jzaCSetLM9M4 Q/7SwTkyTdLSTxdjXrGVhglbUsPgI626RxYawAjagjE7p435FaujkwkZxxLkOt8X w0rQ4tjAVCBR/+HOLwSy4feTuf5e2BXWAW47H1KHRBYcvdR0hS4V2dm7R0Kwa7Se ugsqcKENBABeo3xIacdWyldGcpdA9vEoedQBEqCHq2PzsEq2S+J8uf2zYQh/vWUZ YNdXFtBQVrrwOlyP3jCPX9LGneQqJaDqllBfhmGfXaDq0AbdMcXOE7UD0PcEVU5H O+cpCxTTHWi7+WJDH0GigghNuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCCUGfSe 0ci7RPEEbcOKzrjD3IAWMB8GA1UdIwQYMBaAFABfqq0q4w53Ulavu7sotiSRcqvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEFBQi8wNUVFMTc5NEUz OEIxMUVBODgxMjZCNUNDNEY5QUUwMi9BRi1xclNyakRuZFNWcS03dXlpMkpKRnlx LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FGLXFyU3JqRG5kU1ZxLTd1eWkySkpGeXEtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBBQUIvMDVFRTE3OTRFMzhCMTFFQTg4MTI2QjVDQzRGOUFFMDIvRjlDNzM2RThF MzhCMTFFQUE0RERFQzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn85wwDQYJKoZIhvcNAQELBQADggEBAH4owqd0IbuBFng0 7wObxF3+TixcP+WMhOPk0jRs9YMbb+Di9STpNfOVoyGtKDgLDyiWZkZXCEZVlted KEp2KOgDmvUWlsaSlIkB/dW4Eas1TSB+TUPF6tCStCtN4w8PFrToBJPRavoDjYE4 tUWtfi1ocgTvJZAds+b0a4DgvGLi8BtspijhTRTcRZQZH1kchDOUo6uB25skBNbs dflkAUyJ+7cb+W/Utqh4r92/fxlai+rWQZxIMcSJBH3DmpamUxR9dd8r+TLFr50d Wf8x9QNbqH52yP+T5K40n/48aYrQHgip7dXaeXw2kT0B1IpMU/rR3I0iywgCPecd ECwxwAU= -----END CERTIFICATE-----Generated at Thu May 16 23:39:13 2024 by rpki-client on console-ams.rpki-client.org