$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/87B023F2FF9E11E998D7BF77C4F9AE02.roa File: 87B023F2FF9E11E998D7BF77C4F9AE02.roa (raw, json) Hash identifier: KBPr0IvTbp4qH1T5XkMfOBWY0xCJEQF1q6Fm1wPX+hw= Subject key identifier: 5C:2E:19:C9:1A:41:A7:65:23:59:8C:1F:9F:D4:89:0F:23:08:34:D7 Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Certificate serial: 0B4B Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/87B023F2FF9E11E998D7BF77C4F9AE02.roa Signing time: Thu 30 Nov 2023 19:46:53 +0000 ROA not before: Thu 30 Nov 2023 19:46:53 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 135654 IP address blocks: 103.78.52.0/22 maxlen: 24 175.41.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Jun 2024 18:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Validity Not Before: Nov 30 19:46:53 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6568e6ad-062a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1a:6c:8a:4c:97:06:6c:0f:d1:14:38:7f:9d: 09:9b:c0:e4:32:fb:bf:8c:55:62:24:66:94:bd:af: b5:42:ca:4a:46:48:81:77:86:d1:2b:e1:8d:bb:46: 9d:42:68:a1:7f:2d:eb:05:ce:b7:01:35:ae:13:e4: 47:77:b2:f9:19:41:93:32:a1:75:c4:b0:10:2b:cd: 4a:61:fb:95:d1:13:43:f8:04:91:fb:d9:58:46:04: 25:cf:a7:03:49:e7:84:7e:68:78:a9:1a:e8:fb:11: 8b:45:4e:d6:3e:a6:dd:b3:d0:a9:0a:64:b9:3e:09: 40:78:2f:83:1a:75:44:91:03:73:bf:40:3f:eb:c9: e9:e6:ae:cd:a9:2a:62:8e:ad:6d:4b:20:4b:fa:9e: 63:49:2b:23:f6:f8:7e:aa:64:b7:bf:3a:ae:ea:dc: 0d:eb:eb:1c:db:eb:57:eb:1c:59:47:de:0a:d3:8f: 9f:14:76:3a:ff:14:b2:fe:87:3e:bd:36:21:9e:b1: 26:26:0a:ba:92:79:82:21:aa:cf:88:95:4e:8a:38: 7e:63:21:5f:15:43:fc:88:ce:ba:7a:8e:92:00:76: 92:0b:48:99:ee:28:1d:6c:e2:2a:5b:5c:f6:9d:05: f7:75:61:66:73:e7:bf:df:72:4a:10:9e:41:bd:ee: d4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2E:19:C9:1A:41:A7:65:23:59:8C:1F:9F:D4:89:0F:23:08:34:D7 X509v3 Authority Key Identifier: keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/87B023F2FF9E11E998D7BF77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.78.52.0/22 175.41.44.0/22 Signature Algorithm: sha256WithRSAEncryption 23:d7:a6:ff:3c:9d:f3:67:e5:98:ad:0d:c5:f8:94:8e:68:a0: c1:da:d4:2f:53:86:fa:91:f1:82:4d:96:8e:f4:e6:da:e0:74: 57:b9:87:26:39:4d:e4:d7:76:73:70:91:aa:3d:e5:6f:f7:01: 41:00:09:d3:34:4d:b6:57:76:5a:dd:18:3d:7e:92:47:5a:77: 3c:03:a9:ec:06:be:d4:e2:35:bf:e8:64:b5:e7:47:dd:1f:ca: 92:7e:dc:c4:d8:09:a9:a0:5d:4a:be:39:d4:9c:b9:f1:e6:8f: ea:f1:54:06:39:e5:2a:97:37:67:7a:68:48:0b:54:d7:e4:06: e4:85:11:fd:95:6b:98:b7:10:de:2a:58:71:46:fe:45:9e:d3: f4:86:d2:80:15:88:eb:39:b1:97:b0:cc:c8:46:8b:1f:da:65: 21:b6:49:e1:aa:42:08:35:7a:03:33:fd:22:cd:e8:0e:62:fc: 1e:16:7f:e4:a9:3a:e2:00:fe:56:2b:20:53:7a:7a:d7:d0:21: b5:7b:03:d9:63:84:a7:c0:43:9c:7a:61:bd:d8:24:ec:23:22: ae:2f:52:1d:83:77:ae:80:55:a4:6d:86:f1:38:5e:ed:63:a9: ee:b7:ec:b1:fc:45:40:8b:57:b4:2a:28:3c:52:a8:2a:5e:f1: 33:10:32:f8 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC ODFFNkFEMUQwHhcNMjMxMTMwMTk0NjUzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY4ZTZhZC0wNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8xpsikyXBmwP0RQ4f50Jm8DkMvu/jFViJGaUva+1QspKRkiBd4bRK+GNu0ad Qmihfy3rBc63ATWuE+RHd7L5GUGTMqF1xLAQK81KYfuV0RND+ASR+9lYRgQlz6cD SeeEfmh4qRro+xGLRU7WPqbds9CpCmS5PglAeC+DGnVEkQNzv0A/68np5q7NqSpi jq1tSyBL+p5jSSsj9vh+qmS3vzqu6twN6+sc2+tX6xxZR94K04+fFHY6/xSy/oc+ vTYhnrEmJgq6knmCIarPiJVOijh+YyFfFUP8iM66eo6SAHaSC0iZ7igdbOIqW1z2 nQX3dWFmc+e/33JKEJ5Bve7UtQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFwuGcka QadlI1mMH5/UiQ8jCDTXMB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0I0ODkvMEIzODc5Q0FGRjlDMTFFOUIwMzVBNjczQzRGOUFFMDIvODdCMDIzRjJG RjlFMTFFOTk4RDdCRjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnTjQDBAKvKSwwDQYJKoZIhvcNAQELBQADggEBACPXpv88 nfNn5ZitDcX4lI5ooMHa1C9ThvqR8YJNlo705trgdFe5hyY5TeTXdnNwkao95W/3 AUEACdM0TbZXdlrdGD1+kkdadzwDqewGvtTiNb/oZLXnR90fypJ+3MTYCamgXUq+ OdScufHmj+rxVAY55SqXN2d6aEgLVNfkBuSFEf2Va5i3EN4qWHFG/kWe0/SG0oAV iOs5sZewzMhGix/aZSG2SeGqQgg1egMz/SLN6A5i/B4Wf+SpOuIA/lYrIFN6etfQ IbV7A9ljhKfAQ5x6Yb3YJOwjIq4vUh2Dd66AVaRthvE4Xu1jqe637LH8RUCLV7Qq KDxSqCpe8TMQMvg= -----END CERTIFICATE-----Generated at Sat Jun 22 19:34:52 2024 by rpki-client on console-fra.rpki-client.org