$ rpki-client -vvf rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/CBCD14C8471B11EEABCACF68C4F9AE02.roa File: CBCD14C8471B11EEABCACF68C4F9AE02.roa (raw, json) Hash identifier: 5ZmWg6xrJpfW5WC6wuJT+TOrF1Il/rYBPGPUIHa/1ds= Subject key identifier: 27:3C:22:74:64:01:33:F4:F2:6C:48:6E:09:F2:F7:57:E9:56:1C:C0 Certificate issuer: /CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D Certificate serial: 03D2 Authority key identifier: 61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/CBCD14C8471B11EEABCACF68C4F9AE02.roa Signing time: Sun 29 Oct 2023 01:33:35 +0000 ROA not before: Sun 29 Oct 2023 01:33:35 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 54339 IP address blocks: 103.101.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D Validity Not Before: Oct 29 01:33:35 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=653db66f-af46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:17:1f:fa:61:31:d3:5c:0e:35:c2:2d:7f:6b: 81:5e:c6:10:48:6a:eb:c5:a1:4e:44:e1:a6:d8:e7: ad:c1:3c:28:74:21:1b:22:ca:c6:d6:0e:9a:a8:1d: 52:e5:9f:c2:b4:52:90:b7:0b:f2:b0:4a:94:23:c0: cf:19:03:86:ae:b4:87:05:72:11:f8:ae:0d:7c:c5: 1e:e7:c3:c6:08:5d:9f:2e:b1:4e:d9:ba:7b:84:cc: ca:7c:ab:8d:a2:fb:ad:79:79:f4:e7:ab:6b:2e:a1: 72:37:3e:d0:8c:ec:d8:f9:a1:66:e8:f8:d7:ac:0f: 29:01:d9:01:2e:fa:25:ce:08:01:d9:21:06:4b:ae: 1c:d5:36:a4:5a:46:4c:23:13:ca:be:f6:7f:9d:86: d7:a3:30:f5:21:ca:98:ce:1c:45:73:20:08:d1:ca: 8d:98:f7:26:48:18:2f:ae:b1:12:63:db:38:c6:df: bd:f8:b1:02:d4:04:f1:f7:e5:dd:90:ab:1c:18:2c: 30:26:7f:f2:8b:e5:b6:0f:4f:d6:b5:aa:81:59:91: f9:82:8d:3b:5e:d5:ab:cd:03:1e:6d:5b:d6:5e:c5: da:35:40:b5:2b:16:72:00:da:c9:26:3a:d9:14:97: 10:11:35:de:97:44:de:83:ad:29:a9:f7:3d:bb:22: 0a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3C:22:74:64:01:33:F4:F2:6C:48:6E:09:F2:F7:57:E9:56:1C:C0 X509v3 Authority Key Identifier: keyid:61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/CBCD14C8471B11EEABCACF68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.87.0/24 Signature Algorithm: sha256WithRSAEncryption b3:c2:9a:76:dc:26:c2:cc:0f:33:6c:f5:ef:59:06:98:5b:58: 03:12:11:71:48:ae:e5:90:4a:de:4b:31:3d:27:3b:62:60:70: 02:0a:c3:3d:c4:bc:36:8b:2e:9f:1e:75:4b:29:9c:d4:e5:bc: 5b:99:94:11:2a:12:8a:5b:ef:01:b6:3c:66:3c:62:13:a4:89: 2d:cf:f3:49:d6:05:08:ab:e9:01:32:d7:0f:48:6a:ae:e2:d8: d1:9c:cd:45:2a:be:9c:83:81:73:73:86:18:69:e7:99:c8:33: 58:24:e5:ae:b0:14:a1:c8:8f:6f:63:bd:95:45:b6:d6:e5:e5: 44:25:26:62:0b:73:66:76:65:a7:01:06:22:dd:92:87:15:50: fd:d7:96:7b:00:93:bd:3d:d8:00:65:d7:48:db:26:9c:71:82: 8b:74:57:16:27:0d:f0:58:fb:13:2d:da:b0:b9:ff:97:d2:b7: c5:dc:27:4b:bc:f1:8f:84:42:56:43:df:5f:0f:22:84:1c:5f: ce:fa:6e:a1:21:66:0c:22:20:01:03:e7:bd:d4:62:65:14:99: 9b:7a:92:bc:27:64:54:ea:74:7d:21:c4:88:e2:b6:d1:b0:a6: bf:d4:6c:a9:56:d4:2f:7a:ea:ea:6d:f1:aa:81:37:23:16:04: 1f:3e:56:7a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczNzMxMTAvBgNVBAUTKDYxODQxRDFFREFCRjlGRjBGNjAxOEM2MTEwMTdBRjcx OTYyN0EyNEQwHhcNMjMxMDI5MDEzMzM1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNkYjY2Zi1hZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Bcf+mEx01wONcItf2uBXsYQSGrrxaFOROGm2OetwTwodCEbIsrG1g6aqB1S 5Z/CtFKQtwvysEqUI8DPGQOGrrSHBXIR+K4NfMUe58PGCF2fLrFO2bp7hMzKfKuN ovuteXn056trLqFyNz7QjOzY+aFm6PjXrA8pAdkBLvolzggB2SEGS64c1TakWkZM IxPKvvZ/nYbXozD1IcqYzhxFcyAI0cqNmPcmSBgvrrESY9s4xt+9+LEC1ATx9+Xd kKscGCwwJn/yi+W2D0/WtaqBWZH5go07XtWrzQMebVvWXsXaNUC1KxZyANrJJjrZ FJcQETXel0Teg60pqfc9uyIK4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCc8InRk ATP08mxIbgny91fpVhzAMB8GA1UdIwQYMBaAFGGEHR7av5/w9gGMYRAXr3GWJ6JN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM3My9CRkE5QzM2MjIz QUExMUVDQTgxMTZCMjdDNEY5QUUwMi9ZWVFkSHRxX25fRDJBWXhoRUJldmNaWW5v azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lZUWRIdHFfbl9EMkFZeGhFQmV2Y1pZbm9rMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTczNzMvQkZBOUMzNjIyM0FBMTFFQ0E4MTE2QjI3QzRGOUFFMDIvQ0JDRDE0Qzg0 NzFCMTFFRUFCQ0FDRjY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnZVcwDQYJKoZIhvcNAQELBQADggEBALPCmnbcJsLMDzNs 9e9ZBphbWAMSEXFIruWQSt5LMT0nO2JgcAIKwz3EvDaLLp8edUspnNTlvFuZlBEq Eopb7wG2PGY8YhOkiS3P80nWBQir6QEy1w9Iaq7i2NGczUUqvpyDgXNzhhhp55nI M1gk5a6wFKHIj29jvZVFttbl5UQlJmILc2Z2ZacBBiLdkocVUP3XlnsAk7092ABl 10jbJpxxgot0VxYnDfBY+xMt2rC5/5fSt8XcJ0u88Y+EQlZD318PIoQcX876bqEh ZgwiIAED573UYmUUmZt6krwnZFTqdH0hxIjittGwpr/UbKlW1C966upt8aqBNyMW BB8+Vno= -----END CERTIFICATE-----Generated at Fri May 17 03:16:58 2024 by rpki-client on console-fra.rpki-client.org