$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/BB9C86EA0B0F11E89DF24170C4F9AE02.roa File: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (raw, json) Hash identifier: iYePZzkNGjjPL+JbYS9SYTvdUeMFDphoW+4L0Y9Rl8I= Subject key identifier: 7E:E8:0C:C0:99:EC:49:DE:7C:B3:1D:15:36:8C:96:57:71:14:21:03 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 172F Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/BB9C86EA0B0F11E89DF24170C4F9AE02.roa Signing time: Mon 06 Nov 2023 17:24:33 +0000 ROA not before: Mon 06 Nov 2023 17:24:33 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 38719 IP address blocks: 103.101.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 17:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5935 (0x172f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Nov 6 17:24:33 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65492150-1f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:de:ab:58:ad:12:a9:50:c6:20:1d:8a:1c:6b: c4:ba:31:bc:fa:a6:2e:9e:04:0b:cd:00:5c:3d:b0: 44:f9:52:6e:a7:c9:2f:6c:eb:f1:a3:27:e1:40:40: f8:05:de:95:01:50:e0:a1:32:27:ce:78:df:57:43: e0:3c:c0:fe:45:46:75:40:ff:b3:86:7c:ea:d8:b1: 59:e5:eb:f6:6c:8f:37:0a:90:0e:55:8d:7e:9b:e1: 6a:fe:c8:4d:a5:4d:2f:13:a1:e5:74:a4:0c:11:6a: a1:32:c0:65:0f:d0:dd:1f:14:fb:b9:97:11:dc:be: e2:ca:b8:b6:57:ef:ea:1b:9d:f2:78:bd:05:a6:06: 6b:a8:dd:ae:0a:06:30:93:52:bb:2f:10:96:de:24: 24:6c:f3:37:37:f4:d0:9c:d4:db:97:69:3a:35:c9: a7:19:60:35:ea:f1:d5:36:c0:39:27:b4:0c:58:d4: 1d:c1:4d:c9:18:b5:ca:8c:18:0b:c0:c0:bc:04:78: 8d:dc:c8:25:25:fc:32:00:5f:4c:46:d9:3a:c7:c3: 89:50:5e:e3:2a:5c:9c:20:49:c5:2a:e8:7e:56:1d: e5:c8:08:b4:e0:bb:41:89:0f:98:61:73:d2:5b:a2: 8d:e3:01:95:36:f0:ca:f8:ae:ef:5f:79:69:fe:15: cb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E8:0C:C0:99:EC:49:DE:7C:B3:1D:15:36:8C:96:57:71:14:21:03 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/BB9C86EA0B0F11E89DF24170C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.248.0/24 Signature Algorithm: sha256WithRSAEncryption 20:5c:ef:e7:62:1e:45:68:75:85:18:d4:62:8c:c2:d1:16:1e: 21:03:dc:b3:b3:6e:a0:0b:05:31:d4:01:f4:97:e5:b7:9e:47: 06:e9:15:21:e8:bd:bc:6b:5b:14:09:58:d1:4b:ce:86:92:40: 8d:83:af:d9:d2:79:be:95:dc:c8:4b:4a:03:24:2b:0a:2f:85: da:23:b1:5c:97:7b:37:cd:5f:99:d0:d0:2f:ab:25:50:31:a3: 23:3c:e0:f3:b6:95:b6:c0:e4:9e:ee:1c:f1:9f:51:6a:46:fc: 1b:d6:e4:47:0f:dd:6b:34:52:6a:40:c2:54:da:8f:e0:34:93: ca:98:fb:7d:f3:73:d4:79:d9:4d:4f:9b:cf:4c:f1:09:7f:b4: f4:66:6f:59:52:64:5d:c5:81:6e:a1:bc:ec:0a:1f:8f:29:82: c4:e9:23:13:b7:58:e8:03:45:30:ac:59:4d:4e:8b:91:78:f1: 71:37:26:b7:33:26:12:a8:9b:e3:73:f4:12:a0:86:af:be:a3: 81:17:ee:b3:6f:1f:1b:ec:c6:ca:90:93:6d:94:5e:b5:33:e4: e2:0b:5b:b5:05:61:6f:e7:7a:1b:3d:6c:2f:19:d5:80:4c:8a: 4b:b8:06:90:04:fd:b2:cf:ad:f1:03:f9:30:e3:20:1a:01:e6: cb:31:6d:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjMxMTA2MTcyNDMzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ5MjE1MC0xZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0t6rWK0SqVDGIB2KHGvEujG8+qYungQLzQBcPbBE+VJup8kvbOvxoyfhQED4 Bd6VAVDgoTInznjfV0PgPMD+RUZ1QP+zhnzq2LFZ5ev2bI83CpAOVY1+m+Fq/shN pU0vE6HldKQMEWqhMsBlD9DdHxT7uZcR3L7iyri2V+/qG53yeL0FpgZrqN2uCgYw k1K7LxCW3iQkbPM3N/TQnNTbl2k6NcmnGWA16vHVNsA5J7QMWNQdwU3JGLXKjBgL wMC8BHiN3MglJfwyAF9MRtk6x8OJUF7jKlycIEnFKuh+Vh3lyAi04LtBiQ+YYXPS W6KN4wGVNvDK+K7vX3lp/hXLcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFH7oDMCZ 7EnefLMdFTaMlldxFCEDMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZCQ0YvNEFCNTc2QkVBQTVBMTFFN0FFNDM2RjMyQzRGOUFFMDIvQkI5Qzg2RUEw QjBGMTFFODlERjI0MTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnZfgwDQYJKoZIhvcNAQELBQADggEBACBc7+diHkVodYUY 1GKMwtEWHiED3LOzbqALBTHUAfSX5beeRwbpFSHovbxrWxQJWNFLzoaSQI2Dr9nS eb6V3MhLSgMkKwovhdojsVyXezfNX5nQ0C+rJVAxoyM84PO2lbbA5J7uHPGfUWpG /BvW5EcP3Ws0UmpAwlTaj+A0k8qY+33zc9R52U1Pm89M8Ql/tPRmb1lSZF3FgW6h vOwKH48pgsTpIxO3WOgDRTCsWU1Oi5F48XE3JrczJhKom+Nz9BKghq++o4EX7rNv HxvsxsqQk22UXrUz5OILW7UFYW/nehs9bC8Z1YBMiku4BpAE/bLPrfED+TDjIBoB 5ssxbc8= -----END CERTIFICATE-----Generated at Thu May 16 18:26:03 2024 by rpki-client on console-fra.rpki-client.org