$ rpki-client -vvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/D360357CE66B11EE914F865EC4F9AE02.roa File: D360357CE66B11EE914F865EC4F9AE02.roa (raw, json) Hash identifier: 1JUqfa05MJsmEQMLJBHeRuxt4OjqJOiC52UPWlzvjPo= Subject key identifier: 0D:6D:5A:2F:F3:17:27:D2:A9:AC:C5:91:C0:D2:D6:48:E1:60:D2:8D Certificate issuer: /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Certificate serial: 083F Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/D360357CE66B11EE914F865EC4F9AE02.roa Signing time: Wed 20 Mar 2024 03:42:08 +0000 ROA not before: Wed 20 Mar 2024 03:42:08 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 38805 IP address blocks: 103.71.100.0/23 maxlen: 23 124.158.105.0/24 maxlen: 24 124.158.106.0/23 maxlen: 23 124.158.108.0/22 maxlen: 22 124.158.112.0/24 maxlen: 24 124.158.119.0/24 maxlen: 24 124.158.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2111 (0x83f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Validity Not Before: Mar 20 03:42:08 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65fa5b10-dbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:98:ed:b8:24:ad:ba:93:b5:06:87:94:eb: 79:ae:b8:78:92:31:24:f7:15:4b:db:1d:73:19:5e: c2:9d:ec:d0:00:b7:00:27:dc:d6:0f:54:6f:01:41: d7:bd:22:01:c5:af:da:04:30:c3:fe:e5:c4:2a:c7: 29:98:91:f0:f1:dc:c3:a0:3c:c5:90:b5:04:54:1d: f4:5e:23:f6:e2:84:ce:94:fb:a3:04:c9:56:c1:fc: 88:63:3b:05:49:87:fe:e2:cc:b0:0d:75:73:9b:cb: 83:41:d8:a0:f5:8d:22:9c:2b:60:cb:7e:0b:76:e5: e6:49:32:b0:a3:bc:d7:5b:c2:49:6a:45:24:3e:d0: 8f:1a:2e:c6:c3:fe:90:a8:72:03:a0:9d:b6:1d:b5: b6:50:ba:02:dd:b7:07:77:cd:30:32:f0:52:67:aa: 84:56:88:10:4f:65:e7:7d:7b:e0:60:cb:59:c6:b3: 34:fd:68:12:5c:8f:c9:40:9e:9d:9f:34:7c:ab:a6: e4:75:18:c6:3b:24:39:da:66:6d:7f:5b:a5:65:94: d4:62:a6:3e:56:3a:67:c0:fe:f0:da:7c:d5:ca:d5: e7:f1:2b:70:1b:00:3f:ee:21:0d:40:24:bf:a0:5c: 5b:26:d2:c6:55:4f:b8:28:b8:70:1f:6b:6d:14:02: f4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6D:5A:2F:F3:17:27:D2:A9:AC:C5:91:C0:D2:D6:48:E1:60:D2:8D X509v3 Authority Key Identifier: keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/D360357CE66B11EE914F865EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.71.100.0/23 124.158.105.0-124.158.112.255 124.158.119.0-124.158.127.255 Signature Algorithm: sha256WithRSAEncryption 62:66:6d:a8:c4:b8:7a:b6:0b:e4:20:6a:14:2b:df:80:90:55: 04:36:de:88:c9:45:80:ab:73:12:b5:03:f5:06:c6:f8:a7:94: 70:2e:7c:49:a8:8f:2b:7f:03:92:af:7e:e0:48:bb:46:3d:6f: 5e:f0:cb:5c:62:7f:bf:86:a3:dc:82:d1:19:83:24:87:d6:b9: f7:bf:d4:b0:99:6c:34:8e:8c:88:28:ae:50:f9:65:29:c9:f7: 68:a9:20:6a:3c:cc:ea:db:93:a2:07:e6:80:b1:d8:31:6f:39: b2:c5:a8:93:5d:77:1b:ce:af:94:de:eb:27:31:0c:b1:ef:09: 26:84:be:c2:67:68:28:f1:88:71:f4:75:5e:8a:14:ef:61:87: 9e:82:8e:99:34:3f:24:26:30:11:3e:eb:53:aa:cf:05:24:9c: 58:70:64:10:62:ed:be:85:c0:06:0f:2c:51:9b:48:0c:a1:58: 80:6b:03:1e:18:03:44:6f:af:52:33:57:89:87:c3:b9:c5:ab: 35:c8:ba:54:c1:4c:35:d3:8a:51:0f:7e:72:2a:4d:32:6e:a6: eb:c0:af:89:72:f6:b7:e8:4a:77:89:aa:b1:7d:d9:7b:15:13: 3d:73:1b:f5:c2:83:bf:f0:9a:49:57:d9:94:fe:02:82:7f:a5: 58:42:68:10 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3QkMxMTAvBgNVBAUTKERCNjI1MDY1N0ZFQkMxNjRFQjgyMUM3NjUyQUJFM0E4 NUZBOUFDRDQwHhcNMjQwMzIwMDM0MjA4WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWZhNWIxMC1kYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1KY7bgkrbqTtQaHlOt5rrh4kjEk9xVL2x1zGV7CnezQALcAJ9zWD1RvAUHX vSIBxa/aBDDD/uXEKscpmJHw8dzDoDzFkLUEVB30XiP24oTOlPujBMlWwfyIYzsF SYf+4sywDXVzm8uDQdig9Y0inCtgy34LduXmSTKwo7zXW8JJakUkPtCPGi7Gw/6Q qHIDoJ22HbW2ULoC3bcHd80wMvBSZ6qEVogQT2XnfXvgYMtZxrM0/WgSXI/JQJ6d nzR8q6bkdRjGOyQ52mZtf1ulZZTUYqY+VjpnwP7w2nzVytXn8StwGwA/7iENQCS/ oFxbJtLGVU+4KLhwH2ttFAL0fwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFA1tWi/z FyfSqazFkcDS1kjhYNKNMB8GA1UdIwQYMBaAFNtiUGV/68Fk64IcdlKr46hfqazU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTdCQy9BOENBRkJDMkFB MjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndXVHJnaHgyVXF2anFGLXBy TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIySlFaWF9yd1dUcmdoeDJVcXZqcUYtcHJOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTk3QkMvQThDQUZCQzJBQTI4MTFFQTgxQjE5NjgxQzRGOUFFMDIvRDM2MDM1N0NF NjZCMTFFRTkxNEY4NjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMCgEAgABMCIDBAFnR2QwDAMEAHyeaQMEAHyecDAMAwQAfJ53AwQHfJ4AMA0G CSqGSIb3DQEBCwUAA4IBAQBiZm2oxLh6tgvkIGoUK9+AkFUENt6IyUWAq3MStQP1 Bsb4p5RwLnxJqI8rfwOSr37gSLtGPW9e8MtcYn+/hqPcgtEZgySH1rn3v9SwmWw0 joyIKK5Q+WUpyfdoqSBqPMzq25OiB+aAsdgxbzmyxaiTXXcbzq+U3usnMQyx7wkm hL7CZ2go8Yhx9HVeihTvYYeego6ZND8kJjARPutTqs8FJJxYcGQQYu2+hcAGDyxR m0gMoViAawMeGANEb69SM1eJh8O5xas1yLpUwUw104pRD35yKk0ybqbrwK+Jcva3 6Ep3iaqxfdl7FRM9cxv1woO/8JpJV9mU/gKCf6VYQmgQ -----END CERTIFICATE-----Generated at Thu May 16 22:34:42 2024 by rpki-client on console-ams.rpki-client.org