$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa File: CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa (raw, json) Hash identifier: c8qsy6Ai7aK2W2nI3RvEEZhRhyIrZcGTRTKb5B3tQmc= Subject key identifier: 16:45:CF:34:B6:EB:5E:16:AE:C0:80:BF:96:F3:81:DB:25:B9:1A:52 Certificate issuer: /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Certificate serial: D6 Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa Signing time: Sat 09 Mar 2024 05:17:41 +0000 ROA not before: Sat 09 Mar 2024 05:17:41 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 141421 IP address blocks: 103.84.56.0/24 maxlen: 24 103.84.57.0/24 maxlen: 24 2400:dce0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 05:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Validity Not Before: Mar 9 05:17:41 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65ebf0f4-45fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:24:bb:a3:e4:18:24:0d:0c:f1:d1:b0:e7: 8f:8b:76:3b:39:f0:6a:95:29:89:a2:8a:e7:cf:5c: 23:98:ac:d6:f9:98:69:0b:ae:2c:32:91:93:bb:e4: d5:dd:ff:41:13:c9:e4:44:f1:9e:79:05:a3:9c:49: 0c:a0:dc:0c:47:2a:c0:c0:a4:83:84:6a:6e:51:3d: 06:06:9a:9a:f9:c0:a1:3a:03:a7:98:5d:5f:2e:d5: b9:eb:b0:d9:0f:20:a6:b0:53:cb:71:3b:41:f5:fe: 46:3c:51:75:36:64:75:86:b8:0d:77:75:04:40:44: 4a:a4:e9:f8:78:5c:c8:2d:dd:ac:4f:49:03:6b:43: ac:59:a4:57:d8:04:d3:bb:3c:7d:c4:23:7d:93:05: 35:17:8f:6e:84:18:9b:02:4b:ef:2c:d9:7e:23:5a: 51:d6:3f:c5:6b:a2:c1:91:76:ed:a4:a9:1e:2e:91: f2:0b:51:e0:4e:1c:1f:1f:a7:00:3a:1b:fe:8c:0b: 98:1a:8c:1d:6e:f8:8e:e9:0d:a9:17:61:b0:55:15: 1f:13:73:ca:0f:47:fc:ad:80:e5:74:19:23:52:25: 0c:2f:3b:f7:10:7a:35:31:0d:b7:a7:12:78:e4:80: 7c:e4:2c:34:25:5a:81:b0:f5:ef:ea:29:73:e9:a8: 4d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:45:CF:34:B6:EB:5E:16:AE:C0:80:BF:96:F3:81:DB:25:B9:1A:52 X509v3 Authority Key Identifier: keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.56.0/23 IPv6: 2400:dce0::/48 Signature Algorithm: sha256WithRSAEncryption 9e:aa:1e:11:60:5e:fd:09:bc:44:92:82:5e:59:0a:16:66:2b: db:2c:32:50:44:95:2b:22:7b:6d:3f:57:1a:d5:b7:bc:15:1a: 9f:fa:1a:fa:35:3d:b7:c4:96:b0:f6:2f:f9:ae:90:9e:0d:a4: 69:d9:98:b0:da:23:d6:00:5f:be:9c:40:7d:6a:6a:50:6f:a5: ce:0d:7a:c7:47:f0:65:37:ad:f1:c0:0d:fb:a3:11:3c:8a:41: fc:29:8e:1a:e7:b1:0e:36:44:ee:c8:8d:84:3d:ca:cb:9b:5c: a4:dd:77:84:55:ab:50:0f:3a:ae:34:b2:9d:4e:2e:89:f0:f9: 86:c1:6b:33:fb:06:bf:c3:00:c0:37:4e:a2:28:51:07:60:89: 31:9f:0f:20:7c:e1:77:46:80:cb:38:ae:0d:9b:bc:a0:83:8b: f2:97:e4:03:30:29:2f:08:60:7a:ff:9e:5f:d9:40:c4:18:f5: 16:28:80:6c:1e:22:72:80:83:69:56:ab:93:34:bb:6b:5e:cd: cb:bf:a2:96:7b:25:4c:30:04:70:a5:97:d6:86:bd:d0:7d:c7: 1c:72:aa:2b:92:5e:d4:b4:06:a1:b0:6e:4c:07:11:4a:0a:fc: 93:79:e6:1d:4e:b1:3d:a2:c3:8d:15:8b:17:a1:6d:be:aa:f8: 71:e3:f0:a6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwNUQxMTAvBgNVBAUTKDIwNDFBNTQ4MjE2RkYwMTQ4OTRCNzlDQzlGRDc3MzEx QkM3Q0EzMTcwHhcNMjQwMzA5MDUxNzQxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWViZjBmNC00NWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpMku6PkGCQNDPHRsOePi3Y7OfBqlSmJoornz1wjmKzW+ZhpC64sMpGTu+TV 3f9BE8nkRPGeeQWjnEkMoNwMRyrAwKSDhGpuUT0GBpqa+cChOgOnmF1fLtW567DZ DyCmsFPLcTtB9f5GPFF1NmR1hrgNd3UEQERKpOn4eFzILd2sT0kDa0OsWaRX2ATT uzx9xCN9kwU1F49uhBibAkvvLNl+I1pR1j/Fa6LBkXbtpKkeLpHyC1HgThwfH6cA Ohv+jAuYGowdbviO6Q2pF2GwVRUfE3PKD0f8rYDldBkjUiUMLzv3EHo1MQ23pxJ4 5IB85Cw0JVqBsPXv6ilz6ahNqQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBZFzzS2 614WrsCAv5bzgdsluRpSMB8GA1UdIwQYMBaAFCBBpUghb/AUiUt5zJ/XcxG8fKMX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTA1RC8zNEJGOTkwOEFD M0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhCU0pTM25NbjlkekVieDhv eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lFR2xTQ0Z2OEJTSlMzbk1uOWR6RWJ4OG94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjkwNUQvMzRCRjk5MDhBQzNEMTFFREJENEQxMzVFQzRGOUFFMDIvQ0U5QTRENzBE NkVBMTFFRDhGMEMzMjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnVDgwDwQCAAIwCQMHACQA3OAAADANBgkqhkiG9w0BAQsF AAOCAQEAnqoeEWBe/Qm8RJKCXlkKFmYr2ywyUESVKyJ7bT9XGtW3vBUan/oa+jU9 t8SWsPYv+a6Qng2kadmYsNoj1gBfvpxAfWpqUG+lzg16x0fwZTet8cAN+6MRPIpB /CmOGuexDjZE7siNhD3Ky5tcpN13hFWrUA86rjSynU4uifD5hsFrM/sGv8MAwDdO oihRB2CJMZ8PIHzhd0aAyziuDZu8oIOL8pfkAzApLwhgev+eX9lAxBj1FiiAbB4i coCDaVarkzS7a17Ny7+ilnslTDAEcKWX1oa90H3HHHKqK5Je1LQGobBuTAcRSgr8 k3nmHU6xPaLDjRWLF6Ftvqr4cePwpg== -----END CERTIFICATE-----Generated at Tue May 21 06:39:20 2024 by rpki-client on console-fra.rpki-client.org