$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/EC081D70FA4811EDA9C77777C4F9AE02.roa File: EC081D70FA4811EDA9C77777C4F9AE02.roa (raw, json) Hash identifier: Nd8Xg3w8bT1Gp6BbYLh8IpKdI4rHMo3hUB4EEQjEyVI= Subject key identifier: A7:54:9F:0D:60:39:68:BA:F2:E8:D7:D0:30:12:14:CB:88:0B:57:7C Certificate issuer: /CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Certificate serial: 0B Authority key identifier: 24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/EC081D70FA4811EDA9C77777C4F9AE02.roa Signing time: Wed 24 May 2023 15:37:43 +0000 ROA not before: Wed 24 May 2023 15:37:43 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 136969 IP address blocks: 103.199.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Validity Not Before: May 24 15:37:43 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=646e2f46-f6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:e3:43:97:7d:22:4b:77:e4:9d:b1:94:f2: b6:7f:58:e3:04:2a:51:48:b2:05:f1:69:19:d8:17: 31:33:90:b2:5c:76:f5:93:e3:4a:80:65:10:14:51: 2a:46:95:91:98:a2:9f:52:45:54:4e:40:e0:cb:59: a2:c8:95:3b:84:0c:d7:77:22:07:8c:30:d9:22:a0: bd:af:61:e7:a6:ad:7f:83:4a:5e:5e:56:9c:d9:45: 26:e7:7a:15:64:3c:6c:9e:8e:04:b7:a1:27:28:e7: a0:f6:cf:3f:17:64:c7:fd:d6:da:42:d3:a2:72:44: a1:33:5f:3a:73:6d:bc:6c:33:83:24:20:87:6d:e4: 10:69:5b:f9:61:16:78:83:e6:34:8d:39:27:c2:55: 6f:c8:f2:05:d5:4c:ff:3f:f8:c3:94:4d:97:2d:d5: d3:dd:f8:cd:53:16:51:e9:43:e1:76:76:51:f2:77: e5:fa:a8:63:da:0c:cc:57:1f:61:68:ae:88:f5:cb: 51:a9:2b:e3:09:45:86:c3:b1:37:bb:aa:50:96:ba: 92:57:b3:ad:f2:26:98:be:21:41:d3:3b:1e:1d:e3: 4a:51:4d:d5:6b:ac:24:ce:85:2f:76:62:53:6d:7e: 23:f1:b5:1f:62:84:0e:bd:63:fb:07:b0:ec:dd:4e: d2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:54:9F:0D:60:39:68:BA:F2:E8:D7:D0:30:12:14:CB:88:0B:57:7C X509v3 Authority Key Identifier: keyid:24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/EC081D70FA4811EDA9C77777C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.199.141.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:00:f6:b0:d1:2f:51:25:dd:07:b0:b9:ee:bb:27:0a:fc:2d: ec:78:78:68:c9:56:4d:c8:a3:f5:4f:56:73:55:fe:39:b4:35: 44:58:25:44:92:45:14:59:4a:52:eb:e6:b0:1f:18:a8:a5:43: 74:36:64:f2:26:e2:da:d3:6b:51:c6:78:c9:d0:e8:6e:5a:54: 21:87:63:02:a3:d2:2d:f8:da:67:c3:76:16:c1:7e:f6:d7:df: 3c:95:b0:98:83:b6:60:98:c7:1a:37:df:eb:20:69:94:66:00: cb:a9:c1:13:d7:c3:01:92:f8:ea:66:23:60:1a:f5:f8:c5:fb: e9:c3:3d:11:76:eb:3a:89:60:d6:66:74:bb:93:44:1d:51:c0: d9:84:02:31:38:88:13:cd:b9:ac:d4:97:8f:1e:75:59:3a:73: b8:6d:66:eb:df:e6:1e:66:0f:45:7a:9c:a5:eb:48:b5:81:e3: bc:9f:41:61:cb:02:d5:ca:c3:01:99:98:12:49:f7:53:b4:01: 09:37:da:b4:af:56:ac:db:65:70:96:d3:a0:b8:77:f9:0b:34: cc:a9:ba:6f:c2:2d:06:e4:ce:f9:95:e3:b4:b3:73:7a:b7:da: 40:54:36:9c:0f:1b:8c:cb:40:b5:5a:c1:e3:2b:a9:8f:f7:07: c2:45:e7:ee -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUUyNDExMC8GA1UEBRMoMjQyMjNEMEM3RDEwMURCN0FEN0UzQ0I4RERCMTcwNjI5 MzY1Q0FFRTAeFw0yMzA1MjQxNTM3NDNaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0NmUyZjQ2LWY2YjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCfONDl30iS3fknbGU8rZ/WOMEKlFIsgXxaRnYFzEzkLJcdvWT40qAZRAUUSpG lZGYop9SRVROQODLWaLIlTuEDNd3IgeMMNkioL2vYeemrX+DSl5eVpzZRSbnehVk PGyejgS3oSco56D2zz8XZMf91tpC06JyRKEzXzpzbbxsM4MkIIdt5BBpW/lhFniD 5jSNOSfCVW/I8gXVTP8/+MOUTZct1dPd+M1TFlHpQ+F2dlHyd+X6qGPaDMxXH2Fo roj1y1GpK+MJRYbDsTe7qlCWupJXs63yJpi+IUHTOx4d40pRTdVrrCTOhS92YlNt fiPxtR9ihA69Y/sHsOzdTtLZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUp1SfDWA5 aLry6NfQMBIUy4gLV3wwHwYDVR0jBBgwFoAUJCI9DH0QHbetfjy43bFwYpNlyu4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRTI0L0YyRjY3NUZFRjNG RjExRUQ5NTJENzQxQ0M0RjlBRTAyL0pDSTlESDBRSGJldGZqeTQzYkZ3WXBObHl1 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkNJOURIMFFIYmV0Zmp5NDNiRndZcE5seXU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUUyNC9GMkY2NzVGRUYzRkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9FQzA4MUQ3MEZB NDgxMUVEQTlDNzc3NzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfHjTANBgkqhkiG9w0BAQsFAAOCAQEAiwD2sNEvUSXdB7C5 7rsnCvwt7Hh4aMlWTcij9U9Wc1X+ObQ1RFglRJJFFFlKUuvmsB8YqKVDdDZk8ibi 2tNrUcZ4ydDoblpUIYdjAqPSLfjaZ8N2FsF+9tffPJWwmIO2YJjHGjff6yBplGYA y6nBE9fDAZL46mYjYBr1+MX76cM9EXbrOolg1mZ0u5NEHVHA2YQCMTiIE825rNSX jx51WTpzuG1m69/mHmYPRXqcpetItYHjvJ9BYcsC1crDAZmYEkn3U7QBCTfatK9W rNtlcJbToLh3+Qs0zKm6b8ItBuTO+ZXjtLNzerfaQFQ2nA8bjMtAtVrB4yupj/cH wkXn7g== -----END CERTIFICATE-----Generated at Tue May 7 07:01:19 2024 by rpki-client on console-fra.rpki-client.org