$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/E23B9C48F97D11EDB12DE418C4F9AE02.roa File: E23B9C48F97D11EDB12DE418C4F9AE02.roa (raw, json) Hash identifier: sriNW2tVnJV2jSVMbNiK9zJcT3+r67WYgA7Qo3J6GfY= Subject key identifier: 3C:D9:26:0F:68:14:2B:66:6B:9D:D2:4B:4B:BE:2B:1A:DC:DB:BA:25 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0DA8 Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/E23B9C48F97D11EDB12DE418C4F9AE02.roa Signing time: Fri 02 Jun 2023 19:29:40 +0000 ROA not before: Fri 02 Jun 2023 19:29:40 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 61112 IP address blocks: 103.232.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3496 (0xda8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Jun 2 19:29:40 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=647a4324-d498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:fb:0e:ab:30:4a:ef:b7:53:45:cc:6e:e6: 92:09:3a:56:11:c6:98:92:5a:7b:76:69:b6:ef:f9: ae:12:5c:88:1a:60:c7:d2:d3:0e:9e:6d:f7:cf:a3: 87:03:72:1e:8f:fa:89:db:cd:6b:53:66:4b:40:10: a3:19:6d:56:f6:bd:af:34:31:be:6f:25:f9:4f:28: 40:1b:11:10:99:ff:9e:a4:e8:37:25:d5:d5:0b:17: e8:8c:0a:99:49:70:07:26:c1:b2:61:22:3a:b1:a0: 2a:5d:a8:08:26:e3:73:aa:da:37:38:a3:c7:3f:6b: 8e:31:5d:c2:71:e6:ae:0f:b4:28:a4:cc:00:b0:04: 99:f4:95:79:6d:d4:64:6d:80:78:6a:ff:f9:f8:68: f2:ef:21:dd:36:9f:46:18:83:47:12:c0:bd:55:c5: 0a:7a:f7:25:cd:c9:a9:84:bb:f7:d1:46:57:cb:4b: db:25:70:73:f6:dd:3d:3c:56:8d:1d:80:05:95:dc: 6d:53:0a:52:02:1a:1a:88:3a:00:6d:6d:5b:e3:44: 38:00:3f:c4:78:6e:f5:59:ea:5f:55:19:c0:ab:56: 7f:9f:a1:57:f2:c7:15:c1:df:44:3f:d0:31:41:9c: 67:39:87:92:09:11:e1:86:3e:2b:8c:f5:bf:93:1d: 9d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D9:26:0F:68:14:2B:66:6B:9D:D2:4B:4B:BE:2B:1A:DC:DB:BA:25 X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/E23B9C48F97D11EDB12DE418C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.232.213.0/24 Signature Algorithm: sha256WithRSAEncryption 62:0b:b1:d8:76:aa:8a:4a:69:cd:be:c6:df:5a:32:15:6a:3e: 83:15:83:2c:5e:dd:33:fe:bd:af:07:f6:2a:f0:bf:30:34:2a: 30:2d:69:d4:f9:40:80:78:9f:9f:cc:91:d1:51:e4:7e:16:e7: 4a:31:1e:dd:7a:e3:e5:1c:13:15:e7:32:29:12:a1:38:e3:a6: 4b:5a:fa:17:6e:91:1c:18:fb:91:bf:fa:40:87:08:45:42:e0: 54:f9:73:5c:7e:c6:69:d3:89:67:30:3d:00:d4:6d:07:7e:b9: 29:c0:93:25:66:e6:92:35:ef:a0:73:60:d6:33:3e:41:25:2a: 8e:00:75:8d:5f:8a:ca:6d:e4:ce:fd:76:e5:c4:0a:37:e4:0a: 79:bb:e9:25:75:9c:2f:19:34:44:02:8e:32:04:a6:a3:3e:2a: fa:92:be:89:5f:4b:07:21:0e:ea:12:27:d8:8d:44:59:d4:10: 16:c2:c6:9c:fe:68:97:19:0e:12:43:df:89:96:88:e0:86:15: 96:f5:ac:20:e9:37:ac:a8:6c:56:d3:0c:d3:e0:15:ff:c6:11: 44:03:d6:fd:1c:c6:d2:69:09:51:00:b1:ac:f1:a2:2e:2f:f1: 62:01:5c:14:49:6a:25:b7:11:50:92:91:74:10:91:3f:e7:4a: 8a:9e:a3:62 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjMwNjAyMTkyOTQwWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhNDMyNC1kNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPz7DqswSu+3U0XMbuaSCTpWEcaYklp7dmm27/muElyIGmDH0tMOnm33z6OH A3Iej/qJ281rU2ZLQBCjGW1W9r2vNDG+byX5TyhAGxEQmf+epOg3JdXVCxfojAqZ SXAHJsGyYSI6saAqXagIJuNzqto3OKPHP2uOMV3CceauD7QopMwAsASZ9JV5bdRk bYB4av/5+Gjy7yHdNp9GGINHEsC9VcUKevclzcmphLv30UZXy0vbJXBz9t09PFaN HYAFldxtUwpSAhoaiDoAbW1b40Q4AD/EeG71WepfVRnAq1Z/n6FX8scVwd9EP9Ax QZxnOYeSCRHhhj4rjPW/kx2dnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDzZJg9o FCtma53SS0u+Kxrc27olMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZCRkYvRTQyQkVBQzI5M0YwMTFFOUJDMENGRjcxQzRGOUFFMDIvRTIzQjlDNDhG OTdEMTFFREIxMkRFNDE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn6NUwDQYJKoZIhvcNAQELBQADggEBAGILsdh2qopKac2+ xt9aMhVqPoMVgyxe3TP+va8H9irwvzA0KjAtadT5QIB4n5/MkdFR5H4W50oxHt16 4+UcExXnMikSoTjjpkta+hdukRwY+5G/+kCHCEVC4FT5c1x+xmnTiWcwPQDUbQd+ uSnAkyVm5pI176BzYNYzPkElKo4AdY1fispt5M79duXECjfkCnm76SV1nC8ZNEQC jjIEpqM+KvqSvolfSwchDuoSJ9iNRFnUEBbCxpz+aJcZDhJD34mWiOCGFZb1rCDp N6yobFbTDNPgFf/GEUQD1v0cxtJpCVEAsazxoi4v8WIBXBRJaiW3EVCSkXQQkT/n Soqeo2I= -----END CERTIFICATE-----Generated at Fri May 10 19:18:31 2024 by rpki-client on console-ams.rpki-client.org