$ rpki-client -vvf rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/D0D7EE48343211EFBF2C280DC4F9AE02.roa File: D0D7EE48343211EFBF2C280DC4F9AE02.roa (raw, json) Hash identifier: 5hdkZ5DddWFl8kbLYaaqhPZLjdFJcDk309blXMyKcbQ= Subject key identifier: 42:E0:73:26:E0:A1:DA:84:D4:33:D9:1C:23:90:E9:80:AF:E2:C4:6F Certificate issuer: /CN=A914F3BA/serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C Certificate serial: 0705 Authority key identifier: E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/D0D7EE48343211EFBF2C280DC4F9AE02.roa Signing time: Wed 10 Jul 2024 22:20:15 +0000 ROA not before: Wed 10 Jul 2024 22:20:15 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 135596 IP address blocks: 103.67.204.0/24 maxlen: 24 103.67.205.0/24 maxlen: 24 103.67.206.0/24 maxlen: 24 103.67.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F3BA/serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C Validity Not Before: Jul 10 22:20:15 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=668f091f-66a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:54:39:cf:da:46:32:57:b6:9f:23:e7:60:8d: 27:af:d5:87:c5:d3:be:ad:2e:56:06:f0:58:ce:52: a7:c6:c2:69:d9:55:96:18:8c:dc:d1:14:c2:46:6e: 30:a5:e9:a0:74:65:01:a7:86:8d:25:68:3a:ec:86: 91:68:a1:52:15:15:f3:2c:13:16:3a:00:91:66:46: 3c:d6:4d:fa:8d:dd:b0:d1:94:c1:0c:50:a6:f3:83: b0:5e:4a:8f:6f:48:c1:80:84:04:a7:c0:74:e8:96: d6:1b:97:93:93:f3:03:9f:d7:7b:78:62:f6:69:48: 0b:10:56:4a:92:1a:d7:ac:ea:83:e9:86:9d:b2:87: 9e:96:af:d8:71:8d:4e:0b:95:d1:a6:d2:3b:e8:24: 38:72:38:58:c5:68:ba:76:23:ee:50:da:c6:68:a4: c0:c2:e7:2a:d1:c5:49:77:2b:96:d5:a6:45:7c:7c: 39:03:10:5d:3a:fb:ed:f8:62:fb:98:30:05:4e:ef: 51:22:8d:b6:4e:74:d7:14:dc:78:3a:ab:7f:9a:01: bd:be:4f:77:a6:b9:30:17:5a:a1:14:79:e0:03:4c: a6:aa:40:44:97:f3:0e:73:5f:5d:d3:77:73:7b:d5: 77:91:87:f4:23:92:59:49:2d:04:a8:91:42:7e:19: fa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E0:73:26:E0:A1:DA:84:D4:33:D9:1C:23:90:E9:80:AF:E2:C4:6F X509v3 Authority Key Identifier: keyid:E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/D0D7EE48343211EFBF2C280DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.204.0/22 Signature Algorithm: sha256WithRSAEncryption 22:8e:65:38:e9:9c:f7:45:9d:f4:a2:1b:91:68:51:3a:a7:70: a7:67:a0:76:63:0a:8a:c3:bd:fb:0e:5d:56:6c:ee:5b:bc:d6: 18:5c:a4:3b:90:a3:0a:8d:a5:b2:6a:06:fb:e0:9f:33:c1:e3: 55:c8:83:c0:c8:ac:a1:fd:97:40:b9:b9:31:95:3d:a9:6d:be: f4:4e:de:cb:42:12:c2:41:17:ac:4b:68:58:4e:0b:ef:65:1e: 18:f1:76:65:d5:ef:a4:c2:b9:4d:cd:51:65:af:d0:aa:c6:eb: d5:b6:be:21:8a:e7:e7:57:25:f7:0c:9d:1a:c9:e7:7d:8b:74: 3e:2e:7f:9b:0a:79:5e:23:f5:36:8a:8f:c9:e7:1d:3c:98:10: 19:27:0f:4c:15:a0:15:91:6e:df:21:82:55:bc:c6:8c:5d:9c: bf:cd:5d:98:dc:54:28:4b:22:5b:e4:a4:54:98:c1:35:a4:fd: 6b:ff:37:63:04:76:69:3f:d1:17:9a:45:31:05:03:76:75:5f: 8a:a7:7a:0e:80:b5:d6:3f:c3:f6:7e:5b:f0:07:bc:c6:27:c1: cf:b1:9e:29:41:aa:d0:2a:c6:bb:b0:97:19:8f:0a:95:6b:80: a0:64:3f:5b:19:9d:f2:44:e4:9d:8e:d5:d0:b4:49:f4:de:71: 37:2d:ac:9c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzQkExMTAvBgNVBAUTKEU0NjIzQ0ZENDQzRTYyMzJGMjZDMjNFODFGREY5NzU4 QjI2RjNCMkMwHhcNMjQwNzEwMjIyMDE1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjhmMDkxZi02NmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFQ5z9pGMle2nyPnYI0nr9WHxdO+rS5WBvBYzlKnxsJp2VWWGIzc0RTCRm4w pemgdGUBp4aNJWg67IaRaKFSFRXzLBMWOgCRZkY81k36jd2w0ZTBDFCm84OwXkqP b0jBgIQEp8B06JbWG5eTk/MDn9d7eGL2aUgLEFZKkhrXrOqD6Yadsoeelq/YcY1O C5XRptI76CQ4cjhYxWi6diPuUNrGaKTAwucq0cVJdyuW1aZFfHw5AxBdOvvt+GL7 mDAFTu9RIo22TnTXFNx4Oqt/mgG9vk93prkwF1qhFHngA0ymqkBEl/MOc19d03dz e9V3kYf0I5JZSS0EqJFCfhn6VwIDAQABo4IClTCCApEwHQYDVR0OBBYEFELgcybg odqE1DPZHCOQ6YCv4sRvMB8GA1UdIwQYMBaAFORiPP1EPmIy8mwj6B/fl1iybzss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjNCQS9GRjIwRUJEQzAx M0QxMUVCQTAwMDEyNkJDNEY5QUUwMi81R0k4X1VRLVlqTHliQ1BvSDktWFdMSnZP eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHSThfVVEtWWpMeWJDUG9IOS1YV0xKdk95dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEYzQkEvRkYyMEVCREMwMTNEMTFFQkEwMDAxMjZCQzRGOUFFMDIvRDBEN0VFNDgz NDMyMTFFRkJGMkMyODBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnQ8wwDQYJKoZIhvcNAQELBQADggEBACKOZTjpnPdFnfSi G5FoUTqncKdnoHZjCorDvfsOXVZs7lu81hhcpDuQowqNpbJqBvvgnzPB41XIg8DI rKH9l0C5uTGVPaltvvRO3stCEsJBF6xLaFhOC+9lHhjxdmXV76TCuU3NUWWv0KrG 69W2viGK5+dXJfcMnRrJ532LdD4uf5sKeV4j9TaKj8nnHTyYEBknD0wVoBWRbt8h glW8xoxdnL/NXZjcVChLIlvkpFSYwTWk/Wv/N2MEdmk/0ReaRTEFA3Z1X4qneg6A tdY/w/Z+W/AHvMYnwc+xnilBqtAqxruwlxmPCpVrgKBkP1sZnfJE5J2O1dC0SfTe cTctrJw= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:26 2024 by rpki-client on console-ams.rpki-client.org