$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/20BD79FAC17A11ED8F7A315FC4F9AE02.roa File: 20BD79FAC17A11ED8F7A315FC4F9AE02.roa (raw, json) Hash identifier: FtelNB9mh9rm/DPnO36fMVkGjRmD3W2CCA0ojbvk/CE= Subject key identifier: F8:35:AE:8E:5B:57:6C:6A:2A:A7:D3:3C:7A:F1:0E:9D:43:D6:62:8D Certificate issuer: /CN=A9148E9A/serialNumber=E7E904AD261549E31DBD59F46B3074C6BFA6DAB2 Certificate serial: CF Authority key identifier: E7:E9:04:AD:26:15:49:E3:1D:BD:59:F4:6B:30:74:C6:BF:A6:DA:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/20BD79FAC17A11ED8F7A315FC4F9AE02.roa Signing time: Mon 15 Apr 2024 06:08:56 +0000 ROA not before: Mon 15 Apr 2024 06:08:56 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 134703 IP address blocks: 103.107.242.0/24 maxlen: 24 103.107.243.0/24 maxlen: 24 2001:df2:1640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.crl rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E9A/serialNumber=E7E904AD261549E31DBD59F46B3074C6BFA6DAB2 Validity Not Before: Apr 15 06:08:56 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=661cc478-472e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:05:f7:35:f3:c1:f1:26:11:52:f7:00:b5: 58:11:92:bc:e3:2c:49:8e:4f:a4:64:43:8a:86:8c: a9:0a:4c:4b:29:ee:bd:cf:b5:aa:ef:58:64:35:d6: c3:e3:00:77:34:04:74:c8:dc:dc:bc:df:c4:b0:00: b7:74:77:c4:39:b8:c5:e3:c1:19:76:66:f5:ee:0f: af:08:e1:60:0b:d4:73:ea:54:60:52:58:fd:80:4e: 63:e0:8f:31:b1:05:7d:ff:47:27:e7:a4:c3:41:40: df:76:9d:63:53:dd:99:5c:9f:78:3c:21:c9:af:54: 14:5e:ed:4c:47:bb:9d:73:c8:ee:e5:49:e3:a2:c1: ef:e6:d8:49:27:dd:eb:a2:38:7c:bb:d9:76:38:c3: 50:a9:12:7b:b5:02:0c:b5:58:8a:3e:b9:55:72:21: 7a:71:08:ad:c9:fe:44:26:f4:1c:ab:ce:5b:2e:06: ee:ad:8e:7b:6e:48:32:ca:a3:ec:91:b3:66:ee:1c: e2:ae:c5:ec:ba:fb:35:46:cb:73:e6:da:8d:fe:29: 54:40:da:63:5d:2a:bc:1b:ab:b0:5f:ac:6b:b4:b6: 00:77:3b:eb:2b:00:ce:07:8d:0c:11:03:85:54:46: 0d:2e:ef:fd:17:66:3f:23:07:9e:b9:6e:2a:12:d9: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:35:AE:8E:5B:57:6C:6A:2A:A7:D3:3C:7A:F1:0E:9D:43:D6:62:8D X509v3 Authority Key Identifier: keyid:E7:E9:04:AD:26:15:49:E3:1D:BD:59:F4:6B:30:74:C6:BF:A6:DA:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/20BD79FAC17A11ED8F7A315FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.107.242.0/23 IPv6: 2001:df2:1640::/48 Signature Algorithm: sha256WithRSAEncryption 2b:8b:9d:f3:29:19:26:21:94:31:2d:54:e7:a7:60:3c:72:43: 57:ab:b8:a8:ac:83:46:06:46:ec:b3:30:fe:8f:3f:96:50:b1: db:8d:cd:be:40:4a:48:ea:ff:ad:4e:3c:e4:c8:86:40:bf:d3: 3c:3b:88:07:ba:a9:d9:67:6f:15:d5:60:15:36:95:fe:69:18: 2b:79:9e:13:3c:6b:a0:84:58:5f:73:74:86:34:3f:81:e0:f8: 26:52:a7:17:c3:52:2e:ca:c3:06:47:c4:bd:df:21:09:35:bf: d7:11:02:d7:6b:8e:b9:5e:b3:b9:1d:61:de:b7:11:c1:f2:00: 58:ba:56:8a:48:5f:f0:15:08:5b:73:36:fd:ed:e8:e7:b7:f3: 38:ae:74:41:cb:d5:59:0b:77:28:04:b2:3d:87:6a:73:b3:be: b2:b5:9f:d9:3b:14:2e:5e:ee:a6:2e:cc:eb:9f:86:6f:58:9d: e1:fa:89:c4:09:68:00:b7:d8:64:65:3e:d4:0c:e9:e3:93:04: b1:72:93:bf:65:d7:fe:1b:20:69:eb:dd:7a:53:82:72:79:82: 58:16:1a:70:a5:b4:38:c7:0c:26:7b:8b:84:e0:37:8a:30:c3: e0:7f:e6:71:96:8e:ab:9b:0c:29:57:bf:bb:17:73:4d:8a:c9: ff:4f:94:7d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFOUExMTAvBgNVBAUTKEU3RTkwNEFEMjYxNTQ5RTMxREJENTlGNDZCMzA3NEM2 QkZBNkRBQjIwHhcNMjQwNDE1MDYwODU2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjFjYzQ3OC00NzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEMF9zXzwfEmEVL3ALVYEZK84yxJjk+kZEOKhoypCkxLKe69z7Wq71hkNdbD 4wB3NAR0yNzcvN/EsAC3dHfEObjF48EZdmb17g+vCOFgC9Rz6lRgUlj9gE5j4I8x sQV9/0cn56TDQUDfdp1jU92ZXJ94PCHJr1QUXu1MR7udc8ju5UnjosHv5thJJ93r ojh8u9l2OMNQqRJ7tQIMtViKPrlVciF6cQityf5EJvQcq85bLgburY57bkgyyqPs kbNm7hzirsXsuvs1Rstz5tqN/ilUQNpjXSq8G6uwX6xrtLYAdzvrKwDOB40MEQOF VEYNLu/9F2Y/IweeuW4qEtlHGQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPg1ro5b V2xqKqfTPHrxDp1D1mKNMB8GA1UdIwQYMBaAFOfpBK0mFUnjHb1Z9GswdMa/ptqy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU5QS8wM0Y0N0Q4QUMx NzcxMUVEQTAzOUYyMkZDNEY5QUUwMi81LWtFclNZVlNlTWR2Vm4wYXpCMHhyLW0y ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUta0VyU1lWU2VNZHZWbjBhekIweHItbTJySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhFOUEvMDNGNDdEOEFDMTc3MTFFREEwMzlGMjJGQzRGOUFFMDIvMjBCRDc5RkFD MTdBMTFFRDhGN0EzMTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFna/IwDwQCAAIwCQMHACABDfIWQDANBgkqhkiG9w0BAQsF AAOCAQEAK4ud8ykZJiGUMS1U56dgPHJDV6u4qKyDRgZG7LMw/o8/llCx243NvkBK SOr/rU485MiGQL/TPDuIB7qp2WdvFdVgFTaV/mkYK3meEzxroIRYX3N0hjQ/geD4 JlKnF8NSLsrDBkfEvd8hCTW/1xEC12uOuV6zuR1h3rcRwfIAWLpWikhf8BUIW3M2 /e3o57fzOK50QcvVWQt3KASyPYdqc7O+srWf2TsULl7upi7M65+Gb1id4fqJxAlo ALfYZGU+1Azp45MEsXKTv2XX/hsgaevdelOCcnmCWBYacKW0OMcMJnuLhOA3ijDD 4H/mcZaOq5sMKVe/uxdzTYrJ/0+UfQ== -----END CERTIFICATE-----Generated at Tue May 7 06:29:47 2024 by rpki-client on console-ams.rpki-client.org