$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/D9E8CA9EB14711EDA5FF9C18C4F9AE02.roa File: D9E8CA9EB14711EDA5FF9C18C4F9AE02.roa (raw, json) Hash identifier: absC+mdF2fjhVbmM8K4PV/l6PndTGDZNLXnyQdhxxX0= Subject key identifier: 8E:4A:81:6B:F8:AD:47:AD:DF:91:B3:B8:E0:4B:03:75:F1:2E:DB:F2 Certificate issuer: /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Certificate serial: 41 Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/D9E8CA9EB14711EDA5FF9C18C4F9AE02.roa Signing time: Wed 21 Jun 2023 05:45:39 +0000 ROA not before: Wed 21 Jun 2023 05:45:39 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 209242 IP address blocks: 103.235.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Validity Not Before: Jun 21 05:45:39 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64928e83-ff86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:1b:08:64:18:97:1e:d0:65:3b:aa:d0:dc: fe:01:e4:8e:18:4f:ee:0d:ba:14:d7:73:8b:d7:46: 18:09:51:97:98:63:34:1a:c8:16:e1:33:de:12:0e: 15:79:99:24:d7:79:7c:e5:20:87:64:6c:9b:cc:e6: 97:14:1a:65:dd:f2:35:4a:75:9e:31:98:3b:81:47: 4a:4c:8b:96:a9:41:f9:a0:31:1e:cf:23:c6:91:5a: 73:e7:a8:17:a4:8f:4b:10:da:29:a6:a0:2b:66:12: ee:18:7b:ab:94:7e:fa:c5:eb:9d:e7:75:ec:0a:b5: 57:3c:d9:b0:46:82:7e:04:c6:1d:c0:8a:8b:14:09: c9:14:93:75:71:61:2f:e0:21:da:c5:d3:26:d6:60: 09:b7:b0:c3:62:a4:a0:1e:16:03:aa:ad:76:52:f2: 63:c5:2f:eb:2d:42:b6:a1:81:0b:36:b2:f4:97:9e: 28:e5:60:d5:c9:c1:34:14:1b:d1:ff:06:fd:5b:05: d6:e2:56:53:df:ae:b1:4e:8b:af:2d:f8:b0:20:bc: 7a:e6:4b:ba:78:84:81:67:91:11:f2:88:5b:ff:21: 01:72:73:81:d3:0c:f6:75:8b:56:45:dc:7b:fe:bb: 47:c4:37:a3:a5:1a:d2:d4:e7:e7:0d:16:a6:ed:90: 21:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4A:81:6B:F8:AD:47:AD:DF:91:B3:B8:E0:4B:03:75:F1:2E:DB:F2 X509v3 Authority Key Identifier: keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/D9E8CA9EB14711EDA5FF9C18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.235.4.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:c3:b5:6d:a0:6f:ff:46:9e:56:0f:0a:be:e6:87:e9:f7:b5: c4:3b:5d:ba:b2:ec:cb:6e:f2:c9:d0:dd:49:3d:0d:d5:a4:d9: 84:9c:d3:1e:d3:34:80:71:8d:4a:65:36:58:72:c5:ba:9c:1a: 00:76:9a:32:50:3d:10:46:a2:ad:5d:d2:4e:b7:65:ca:ce:3b: a7:cc:ef:65:63:d4:80:a7:35:b9:d6:df:8d:b2:d9:71:15:05: 3e:4b:e5:d9:0a:0d:a0:f6:cd:04:d8:3e:c4:e3:d1:14:13:63: 25:d2:ee:84:17:c4:57:cd:47:d3:35:b3:99:3d:84:5f:b3:d3: 06:6f:66:c3:84:0d:f1:3c:41:a9:b6:b8:d0:b3:d1:6f:00:52: 85:fc:47:79:21:ac:4a:eb:9a:36:97:25:22:e9:79:c0:6a:db: c9:1d:e8:d9:4c:fb:cc:a3:ef:7c:fb:a7:73:9c:86:69:3d:e7: 94:6b:85:49:5e:71:75:49:db:58:fe:7b:88:20:71:5d:00:9c: 83:99:68:2a:00:ec:50:dd:dc:a1:31:e4:be:53:82:05:37:7f: 55:9c:24:de:9d:6c:cb:d0:db:bc:2c:6b:24:ca:8d:d1:e6:c7: c2:d6:28:66:8d:27:81:65:dc:3f:ea:50:b0:50:60:ec:e2:74: 5c:d9:ee:bf -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjVBOTExMC8GA1UEBRMoRUJDM0Q3RkNGQjEzNEY1MzhGQzE5Rjk4QUQ4OThDMEYz RjA3NEYyMDAeFw0yMzA2MjEwNTQ1MzlaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY0OTI4ZTgzLWZmODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnZRsIZBiXHtBlO6rQ3P4B5I4YT+4NuhTXc4vXRhgJUZeYYzQayBbhM94SDhV5 mSTXeXzlIIdkbJvM5pcUGmXd8jVKdZ4xmDuBR0pMi5apQfmgMR7PI8aRWnPnqBek j0sQ2immoCtmEu4Ye6uUfvrF653ndewKtVc82bBGgn4Exh3AiosUCckUk3VxYS/g IdrF0ybWYAm3sMNipKAeFgOqrXZS8mPFL+stQrahgQs2svSXnijlYNXJwTQUG9H/ Bv1bBdbiVlPfrrFOi68t+LAgvHrmS7p4hIFnkRHyiFv/IQFyc4HTDPZ1i1ZF3Hv+ u0fEN6OlGtLU5+cNFqbtkCHFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUjkqBa/it R63fkbO44EsDdfEu2/IwHwYDVR0jBBgwFoAU68PX/PsTT1OPwZ+YrYmMDz8HTyAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyNUE5LzI2MTg4NDBFQjE0 MzExRUQ4N0QwNzY3OEM0RjlBRTAyLzY4UFhfUHNUVDFPUHdaLVlyWW1NRHo4SFR5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjhQWF9Qc1RUMU9Qd1otWXJZbU1EejhIVHlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBOS8yNjE4ODQwRUIxNDMxMUVEODdEMDc2NzhDNEY5QUUwMi9EOUU4Q0E5RUIx NDcxMUVEQTVGRjlDMThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfrBDANBgkqhkiG9w0BAQsFAAOCAQEAbcO1baBv/0aeVg8K vuaH6fe1xDtdurLsy27yydDdST0N1aTZhJzTHtM0gHGNSmU2WHLFupwaAHaaMlA9 EEairV3STrdlys47p8zvZWPUgKc1udbfjbLZcRUFPkvl2QoNoPbNBNg+xOPRFBNj JdLuhBfEV81H0zWzmT2EX7PTBm9mw4QN8TxBqba40LPRbwBShfxHeSGsSuuaNpcl Iul5wGrbyR3o2Uz7zKPvfPunc5yGaT3nlGuFSV5xdUnbWP57iCBxXQCcg5loKgDs UN3coTHkvlOCBTd/VZwk3p1sy9DbvCxrJMqN0ebHwtYoZo0ngWXcP+pQsFBg7OJ0 XNnuvw== -----END CERTIFICATE-----Generated at Tue May 7 06:20:17 2024 by rpki-client on console-fra.rpki-client.org