$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/2A08F1A4369211EAA64E320BC4F9AE02.roa File: 2A08F1A4369211EAA64E320BC4F9AE02.roa (raw, json) Hash identifier: WLvpzyVvkwly7jhKzvT+NzxvXbv7OUtGq6ZpNKqDGzo= Subject key identifier: 31:47:E3:09:4E:E2:3B:5B:8D:87:B7:53:CB:B2:BE:C7:85:6D:F1:2B Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0917 Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/2A08F1A4369211EAA64E320BC4F9AE02.roa Signing time: Tue 30 Aug 2022 08:57:16 +0000 ROA not before: Tue 30 Aug 2022 08:57:16 +0000 ROA not after: Tue 31 Oct 2023 00:00:00 +0000 asID: 58895 IP address blocks: 103.72.84.0/22 maxlen: 22 103.72.84.0/24 maxlen: 24 103.72.85.0/24 maxlen: 24 103.72.86.0/24 maxlen: 24 103.72.87.0/24 maxlen: 24 203.3.132.0/24 maxlen: 24 203.11.65.0/24 maxlen: 24 203.142.218.0/24 maxlen: 24 203.161.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Mar 2023 20:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2327 (0x917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: Aug 30 08:57:16 2022 GMT Not After : Oct 31 00:00:00 2023 GMT Subject: CN=630dd0eb-36b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:24:a9:2d:09:1c:67:54:4a:5f:9c:cd:c0: 33:2f:65:b5:65:c6:51:e2:fe:20:03:c0:38:bb:f1: f3:aa:de:31:1c:28:70:45:d3:93:bc:4b:fa:0e:6f: 78:63:84:9f:23:79:0f:a8:f9:ef:86:9f:ef:5c:0d: 3b:f9:d3:da:c0:dc:75:ab:ef:d4:e3:c2:f3:ee:25: 10:93:00:e7:71:1c:de:c0:b2:4a:d1:84:64:d2:5c: 91:8e:6f:7c:72:cc:ab:4b:7e:96:16:3a:8f:4e:a1: e8:70:28:2d:58:2b:2f:e6:16:c0:92:6f:94:36:04: df:d5:8a:a9:53:61:b3:ff:33:e1:04:ff:da:72:ce: 9d:82:6e:34:08:51:7f:2d:fd:b5:07:10:09:54:d2: 22:0a:ea:02:8c:0d:a0:4c:1d:d8:df:b7:9a:11:35: 8b:e6:d3:de:12:f0:09:84:d4:2b:63:b6:c4:e8:ca: 57:f7:68:04:2d:e1:e8:9e:5b:fb:a2:75:cf:9b:26: 4a:7c:0e:80:8c:b1:ee:f5:3b:4a:4e:6f:54:0c:76: ae:e7:7c:6b:b8:7c:1c:e7:e5:7e:71:1f:21:f0:3b: 72:86:12:16:55:47:41:9f:f0:c7:b9:f1:0b:cc:70: 73:ed:7b:40:57:8f:0f:fa:af:a9:c6:03:0a:54:5b: 48:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:47:E3:09:4E:E2:3B:5B:8D:87:B7:53:CB:B2:BE:C7:85:6D:F1:2B X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/2A08F1A4369211EAA64E320BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.84.0/22 203.3.132.0/24 203.11.65.0/24 203.142.218.0/24 203.161.179.0/24 Signature Algorithm: sha256WithRSAEncryption 75:af:3c:e5:d4:d3:d2:07:80:03:be:d2:9e:11:ed:cf:49:c2: a1:6d:47:13:69:84:49:c7:0a:61:b2:8d:58:82:62:5a:84:68: c1:13:f0:df:7f:eb:8e:e2:ea:9f:37:0b:25:a2:4e:41:2c:4f: a3:87:1d:2f:64:d1:35:b2:1e:c3:86:ec:ba:05:e0:db:5a:f3: fe:a0:1c:8b:b9:70:df:19:31:63:0d:c9:36:f9:de:54:96:5e: 38:ad:09:37:ab:54:31:9a:22:30:7c:c8:0b:9e:3d:a4:c4:03: 6b:30:1a:e6:44:67:f1:d7:f3:1a:4a:67:21:e6:57:f4:45:b5: a9:0d:ef:4a:bd:ad:c0:1c:92:79:3e:b0:13:64:ba:25:46:7e: cd:d9:b0:59:aa:69:ff:4b:73:f5:00:ba:d9:fc:61:13:f6:99: d8:e0:4e:20:4c:27:18:52:f8:37:ac:96:2c:7a:00:8d:fb:68: 08:85:e3:82:3b:1e:ea:4b:ac:16:70:a3:91:14:53:d5:2d:73: d5:d0:4d:76:22:41:fe:0a:aa:d4:9a:a8:dd:35:bf:3f:c4:8f: dd:73:7d:ed:d6:72:a2:f2:75:2f:6b:bf:1f:94:eb:4c:7f:ed: 06:08:3d:3e:d0:d5:fc:c4:d2:5d:d8:77:15:27:be:f2:44:b5: 76:53:bc:7d -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICCRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjIwODMwMDg1NzE2WhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02MzBkZDBlYi0zNmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApb0kqS0JHGdUSl+czcAzL2W1ZcZR4v4gA8A4u/Hzqt4xHChwRdOTvEv6Dm94 Y4SfI3kPqPnvhp/vXA07+dPawNx1q+/U48Lz7iUQkwDncRzewLJK0YRk0lyRjm98 csyrS36WFjqPTqHocCgtWCsv5hbAkm+UNgTf1YqpU2Gz/zPhBP/acs6dgm40CFF/ Lf21BxAJVNIiCuoCjA2gTB3Y37eaETWL5tPeEvAJhNQrY7bE6MpX92gELeHonlv7 onXPmyZKfA6AjLHu9TtKTm9UDHau53xruHwc5+V+cR8h8DtyhhIWVUdBn/DHufEL zHBz7XtAV48P+q+pxgMKVFtItQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDFH4wlO 4jtbjYe3U8uyvseFbfErMB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUwRkEvQUFBMEVCRTAzNjhFMTFFQUE3NjhGQzdFQzRGOUFFMDIvMkEwOEYxQTQz NjkyMTFFQUE2NEUzMjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAJnSFQDBADLA4QDBADLC0EDBADLjtoDBADLobMwDQYJKoZI hvcNAQELBQADggEBAHWvPOXU09IHgAO+0p4R7c9JwqFtRxNphEnHCmGyjViCYlqE aMET8N9/647i6p83CyWiTkEsT6OHHS9k0TWyHsOG7LoF4Nta8/6gHIu5cN8ZMWMN yTb53lSWXjitCTerVDGaIjB8yAuePaTEA2swGuZEZ/HX8xpKZyHmV/RFtakN70q9 rcAcknk+sBNkuiVGfs3ZsFmqaf9Lc/UAutn8YRP2mdjgTiBMJxhS+Deslix6AI37 aAiF44I7HupLrBZwo5EUU9Utc9XQTXYiQf4KqtSaqN01vz/Ej91zfe3WcqLydS9r vx+U60x/7QYIPT7Q1fzE0l3YdxUnvvJEtXZTvH0= -----END CERTIFICATE-----Generated at Wed Mar 15 11:44:01 2023 by rpki-client on console-ams.rpki-client.org