$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/CFD605CC8E6011EC93F6710FC4F9AE02.roa File: CFD605CC8E6011EC93F6710FC4F9AE02.roa (raw, json) Hash identifier: C3Z8uyv87Fr4LSIUMfrdpfjs+vlcYD0NZXPlFdAyO8U= Subject key identifier: 2A:C4:8D:C7:60:5A:A2:B7:ED:A5:2C:C3:C1:5D:E5:BB:E0:51:0F:4F Certificate issuer: /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76 Certificate serial: 0547 Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/CFD605CC8E6011EC93F6710FC4F9AE02.roa Signing time: Fri 23 Feb 2024 00:43:10 +0000 ROA not before: Fri 23 Feb 2024 00:43:10 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 58715 IP address blocks: 103.106.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1351 (0x547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76 Validity Not Before: Feb 23 00:43:10 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65d7ea1e-874b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:55:8f:0e:49:3a:18:6c:2f:4a:c4:31:cf:29: 7b:c7:a7:93:72:c6:c2:cf:51:12:92:d2:36:fd:3c: 63:cc:db:d1:27:62:4c:75:13:2f:1f:ef:4b:49:30: 9a:9a:1b:4d:0e:dc:8f:03:3d:c8:c3:91:ce:40:2e: 4e:6f:dc:cc:f8:6c:c3:15:66:2b:17:23:80:5c:65: 8c:94:12:2f:df:eb:90:2e:04:94:27:ce:8c:cd:b6: b8:e6:76:74:bd:81:ee:9a:c5:81:5e:f9:c0:5c:a9: 97:02:a1:c7:45:fd:96:52:06:ea:a7:14:6e:4d:93: dc:ea:ba:6d:c9:b9:f4:97:f4:b5:b4:f0:94:e4:fb: 0d:99:88:bb:7d:dc:dc:47:38:f5:81:c8:30:c6:e0: 02:c3:4d:5b:8d:95:37:8e:e7:a4:66:57:aa:2d:85: c4:96:90:07:70:c4:fc:aa:ae:9f:ba:e6:e4:5e:1d: 31:96:be:3c:d8:93:e6:15:21:9d:78:96:09:b3:c4: 83:7c:61:fd:2b:83:b6:32:d5:db:21:db:e7:b6:63: 01:d6:c4:30:9d:fd:07:02:a7:1f:af:66:a9:f9:ca: 02:b3:fc:4e:98:a1:23:bb:96:e4:63:7f:c1:2c:97: 39:45:ea:6e:af:d4:33:6d:e6:95:6b:ad:c3:a0:19: b4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C4:8D:C7:60:5A:A2:B7:ED:A5:2C:C3:C1:5D:E5:BB:E0:51:0F:4F X509v3 Authority Key Identifier: keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/CFD605CC8E6011EC93F6710FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.118.0/23 Signature Algorithm: sha256WithRSAEncryption 05:35:83:de:b1:cb:87:7d:19:f6:b6:3c:b0:3b:9d:72:99:4c: 19:ae:a0:be:f4:eb:d0:61:38:a7:c8:43:46:c0:83:04:da:75: fc:42:52:8d:59:7c:78:67:45:bf:f2:ee:6c:ed:d1:5a:08:52: bc:7f:cd:6f:d6:22:18:14:00:b3:48:3f:dd:5c:ef:71:18:8b: e7:42:f7:ca:5b:9b:8e:3e:1e:db:5b:e8:70:ef:1f:d9:73:5f: 9c:2d:af:af:93:00:55:90:ee:26:f4:03:5f:df:66:84:9d:4b: 7d:72:9b:25:86:f4:05:3b:71:73:f2:16:c8:d3:85:0e:e0:50: 41:59:ea:7e:23:d2:67:a2:c9:6b:96:19:7c:1c:4f:16:2d:3d: a3:32:30:65:6e:55:97:cb:12:2a:47:97:f1:2e:75:b3:d7:8f: 32:1c:2b:a1:19:00:35:4a:c1:62:59:24:c7:c2:b1:28:f5:e0: 9a:69:84:16:9c:f7:e2:b2:5f:e8:eb:6e:be:01:fb:2b:da:fe: 12:cc:86:dd:f1:c4:c6:4e:d2:d2:97:c9:97:b3:b6:cb:c0:aa: b4:d2:1f:9e:fe:da:f2:b9:a4:63:7b:a3:1a:58:51:66:cb:f8: b7:49:b8:33:f5:a5:44:c3:00:98:61:2d:7f:24:8e:3d:df:26: 43:8c:80:9e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQkQxMTAvBgNVBAUTKEQyRTc4RTUyQzVEQkNCRjVFMTg0MURBQ0U1MjdBRUFB ODk0QTlBNzYwHhcNMjQwMjIzMDA0MzEwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ3ZWExZS04NzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulWPDkk6GGwvSsQxzyl7x6eTcsbCz1ESktI2/TxjzNvRJ2JMdRMvH+9LSTCa mhtNDtyPAz3Iw5HOQC5Ob9zM+GzDFWYrFyOAXGWMlBIv3+uQLgSUJ86Mzba45nZ0 vYHumsWBXvnAXKmXAqHHRf2WUgbqpxRuTZPc6rptybn0l/S1tPCU5PsNmYi7fdzc Rzj1gcgwxuACw01bjZU3juekZleqLYXElpAHcMT8qq6fuubkXh0xlr482JPmFSGd eJYJs8SDfGH9K4O2MtXbIdvntmMB1sQwnf0HAqcfr2ap+coCs/xOmKEju5bkY3/B LJc5Repur9QzbeaVa63DoBm0nQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCrEjcdg WqK37aUsw8Fd5bvgUQ9PMB8GA1UdIwQYMBaAFNLnjlLF28v14YQdrOUnrqqJSpp2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJCRC9EM0YxMUYwRTk5 MTMxMUVCODYwRERCM0RDNEY5QUUwMi8wdWVPVXNYYnlfWGhoQjJzNVNldXFvbEtt blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1ZU9Vc1hieV9YaGhCMnM1U2V1cW9sS21uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQkQvRDNGMTFGMEU5OTEzMTFFQjg2MEREQjNEQzRGOUFFMDIvQ0ZENjA1Q0M4 RTYwMTFFQzkzRjY3MTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnanYwDQYJKoZIhvcNAQELBQADggEBAAU1g96xy4d9Gfa2 PLA7nXKZTBmuoL7069BhOKfIQ0bAgwTadfxCUo1ZfHhnRb/y7mzt0VoIUrx/zW/W IhgUALNIP91c73EYi+dC98pbm44+Httb6HDvH9lzX5wtr6+TAFWQ7ib0A1/fZoSd S31ymyWG9AU7cXPyFsjThQ7gUEFZ6n4j0meiyWuWGXwcTxYtPaMyMGVuVZfLEipH l/EudbPXjzIcK6EZADVKwWJZJMfCsSj14JpphBac9+KyX+jrbr4B+yva/hLMht3x xMZO0tKXyZeztsvAqrTSH57+2vK5pGN7oxpYUWbL+LdJuDP1pUTDAJhhLX8kjj3f JkOMgJ4= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:23 2024 by rpki-client on console-fra.rpki-client.org