$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa File: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (raw, json) Hash identifier: gp+udg5aKDvJfv0u1ERjEcSRSYZfTfjPh4xkws+Lju0= Subject key identifier: 1E:4C:5D:3A:DA:C4:7C:4D:D4:01:FB:DE:C2:30:22:57:BA:82:89:2E Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 05AE Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa Signing time: Thu 28 Mar 2024 06:29:11 +0000 ROA not before: Thu 28 Mar 2024 06:29:11 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 141153 IP address blocks: 103.48.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1454 (0x5ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Mar 28 06:29:11 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=66050e37-f5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:ac:84:94:2a:e9:5d:f2:7e:bb:8c:dc:63: cf:a8:21:91:0f:55:75:50:92:e1:9a:9e:a7:96:be: 26:3c:85:f2:1e:ae:ce:e7:ae:d9:9f:ef:3e:72:76: 10:d3:3e:83:c1:bf:28:a3:11:6f:47:9c:17:a0:1b: 4c:d0:15:2f:1e:46:62:7d:b2:07:4b:a4:49:4b:c5: 7f:b1:94:ef:60:4b:53:22:1c:84:d6:78:72:4a:b0: 5a:ee:e3:36:37:7a:04:0b:6e:f1:d4:e0:53:e1:8f: 93:86:d0:87:87:2e:b0:cb:b4:f8:ec:6f:19:c9:54: 80:8c:f1:06:53:17:aa:b5:e9:23:0b:58:d3:5d:87: fd:ea:08:b7:6b:15:57:a5:a6:80:76:08:b4:03:43: b2:95:97:bb:48:53:a9:42:cc:3d:38:24:3e:1c:e7: ed:b6:68:45:5f:a7:52:f8:c8:b1:5e:44:eb:0c:d7: 50:38:7f:97:4a:ed:b7:22:7f:3a:da:65:c9:4a:12: 9e:6b:48:7d:8b:ae:be:fc:25:34:22:e7:29:ab:55: 5e:39:5b:40:cd:4e:aa:37:80:d3:4c:82:43:fd:96: 69:8a:25:9a:1a:49:13:38:52:9a:a3:ea:14:f7:46: b1:22:ed:7a:4c:f2:3a:14:aa:8e:88:6c:ce:28:11: cd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4C:5D:3A:DA:C4:7C:4D:D4:01:FB:DE:C2:30:22:57:BA:82:89:2E X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.171.0/24 Signature Algorithm: sha256WithRSAEncryption 64:b0:82:ac:59:d2:44:f1:69:73:06:f1:cb:a4:ba:4a:f8:d7: 79:aa:69:19:4f:11:d0:84:08:fb:3c:40:40:b7:89:65:92:f7: fe:44:88:6a:69:cc:66:f3:ca:19:db:af:ef:db:04:2c:f0:67: 0a:ad:53:88:52:a9:9f:0e:56:11:97:49:e8:41:08:48:2c:ab: 7d:11:a8:87:fa:99:a0:32:f5:59:15:de:81:6d:9d:1c:7d:5e: cd:c0:af:eb:7e:63:be:45:95:b9:ae:f3:6c:f4:00:d1:2a:c5: af:02:84:d4:ce:0e:72:13:fa:2c:52:95:e0:1a:55:ab:e4:6f: 00:06:a5:44:f2:6c:8b:b7:26:b2:11:de:71:ca:96:cb:15:95: e5:4c:86:80:25:78:14:a6:d3:6c:ea:40:19:ac:bd:3b:11:f6: 0d:d5:74:73:e1:eb:c6:39:e2:b0:c8:f6:4c:0d:ed:a1:61:b9: 5d:f8:d4:68:04:fc:45:f0:d8:8a:fa:f6:36:a7:9a:2c:1d:7c: 24:33:d6:16:de:d7:a9:69:a1:e1:fa:f9:83:e6:b7:0d:58:f7: 23:e2:db:7a:fe:1a:b9:0e:c0:9a:f4:33:ca:23:ca:be:76:c9: b8:58:12:9a:3d:61:2b:81:61:85:34:72:cf:fe:86:82:6d:a7: 7d:5b:51:eb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjQwMzI4MDYyOTExWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjA1MGUzNy1mNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn+shJQq6V3yfruM3GPPqCGRD1V1UJLhmp6nlr4mPIXyHq7O567Zn+8+cnYQ 0z6Dwb8ooxFvR5wXoBtM0BUvHkZifbIHS6RJS8V/sZTvYEtTIhyE1nhySrBa7uM2 N3oEC27x1OBT4Y+ThtCHhy6wy7T47G8ZyVSAjPEGUxeqtekjC1jTXYf96gi3axVX paaAdgi0A0OylZe7SFOpQsw9OCQ+HOfttmhFX6dS+MixXkTrDNdQOH+XSu23In86 2mXJShKea0h9i66+/CU0Iucpq1VeOVtAzU6qN4DTTIJD/ZZpiiWaGkkTOFKao+oU 90axIu16TPI6FKqOiGzOKBHNuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB5MXTra xHxN1AH73sIwIle6gokuMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvN0NGQ0QxMTBF Q0NDMTFFRThBQ0MyRjI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnMKswDQYJKoZIhvcNAQELBQADggEBAGSwgqxZ0kTxaXMG 8cukukr413mqaRlPEdCECPs8QEC3iWWS9/5EiGppzGbzyhnbr+/bBCzwZwqtU4hS qZ8OVhGXSehBCEgsq30RqIf6maAy9VkV3oFtnRx9Xs3Ar+t+Y75Flbmu82z0ANEq xa8ChNTODnIT+ixSleAaVavkbwAGpUTybIu3JrIR3nHKlssVleVMhoAleBSm02zq QBmsvTsR9g3VdHPh68Y54rDI9kwN7aFhuV341GgE/EXw2Ir69janmiwdfCQz1hbe 16lpoeH6+YPmtw1Y9yPi23r+GrkOwJr0M8ojyr52ybhYEpo9YSuBYYU0cs/+hoJt p31bUes= -----END CERTIFICATE-----Generated at Fri May 17 02:38:37 2024 by rpki-client on console-fra.rpki-client.org