$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/87BB6D70822711ED94C3212CC4F9AE02.roa File: 87BB6D70822711ED94C3212CC4F9AE02.roa (raw, json) Hash identifier: zbSRxwSdD1wB4PeT5tasCFiqgMdpyK/LCt3nabcUcbc= Subject key identifier: 3D:73:A8:39:A3:13:B0:B5:2F:92:79:59:38:3B:EB:DA:65:AA:0E:E4 Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0C0B Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/87BB6D70822711ED94C3212CC4F9AE02.roa Signing time: Fri 02 Jun 2023 19:59:58 +0000 ROA not before: Fri 02 Jun 2023 19:59:58 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 4812 IP address blocks: 103.38.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3083 (0xc0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: Jun 2 19:59:58 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=647a4a3e-2cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:d4:d2:a5:f1:1a:6c:8a:ec:c7:f3:d8:0a: a1:ea:df:e4:72:4d:6e:b8:74:28:e4:fa:19:a1:80: d7:c2:fe:c0:f1:78:ef:c3:c9:f4:ff:34:ea:9b:a5: 60:de:14:f0:d3:a3:c5:b3:86:c8:be:bc:57:98:65: a9:f0:51:3f:5f:1b:8c:9f:b6:a1:df:af:ec:0e:ad: a8:fc:06:3c:69:53:a9:4d:d4:1b:d7:a5:ef:4f:6e: 78:e0:b3:c2:46:79:83:cc:f8:41:f9:03:1b:59:e4: 5b:ea:f4:cf:e1:ea:8f:58:86:f3:4f:80:70:e4:c0: 15:5d:d4:fd:24:0f:d3:0f:3e:24:a7:53:7e:99:78: 88:2b:67:14:d2:35:c3:f6:03:70:fb:1c:e0:5a:6d: 22:b7:24:85:85:b3:84:32:55:7c:31:7e:6d:e3:1a: b5:3c:e2:b1:37:00:5f:1c:79:8b:83:b2:cf:36:a0: 30:d8:54:5a:37:bc:13:71:5b:4b:86:f0:26:9d:92: aa:89:72:5a:4f:47:d8:65:cd:46:f4:11:6c:d1:62: d7:39:0b:37:e9:10:06:e3:cc:ac:7e:be:92:5f:2e: fc:e5:1d:7a:9b:8d:be:d1:9c:14:dc:f2:70:d3:38: 54:c2:bf:41:02:f9:70:0d:a1:2e:39:6b:fe:fe:0d: ea:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:73:A8:39:A3:13:B0:B5:2F:92:79:59:38:3B:EB:DA:65:AA:0E:E4 X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/87BB6D70822711ED94C3212CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.38.252.0/23 Signature Algorithm: sha256WithRSAEncryption 15:3d:0c:df:88:2c:c7:99:bd:3f:ab:14:95:7d:4b:51:19:ac: 8a:80:16:e8:f8:95:f1:c7:a8:3f:27:ee:dd:1c:25:25:e0:d4: 76:ae:e6:64:de:19:d8:ee:a0:2c:7a:dd:19:fc:6b:07:26:c0: 6f:ff:7c:e4:38:0a:d9:33:f2:6d:93:bc:1c:51:f5:78:f0:a3: 18:5a:a7:c9:92:f1:57:29:9a:06:a9:62:af:ac:59:05:4c:ea: 9d:b6:35:18:bd:7e:ec:7a:75:bb:23:f5:1c:ff:d4:68:65:4e: 0e:d6:f6:8c:27:c3:41:0c:83:40:77:6f:de:c1:2e:e6:b8:d1: 51:38:42:2e:22:ed:19:e8:95:04:be:34:b4:f9:a0:88:4a:71: 9c:d1:2c:98:0b:38:94:46:3f:f4:71:24:c1:79:cc:17:2d:f8: ce:9c:82:6b:31:68:ae:e7:92:42:9f:bc:f1:59:88:a1:12:44: 01:06:19:7b:9f:bb:d8:0f:83:9a:65:97:c5:39:68:5e:6f:d0: 22:3f:94:af:74:5a:92:9c:55:99:14:83:e4:9a:d8:a0:e1:9a: 48:5a:32:2a:67:a3:a1:78:41:b6:af:35:8b:bb:98:23:23:cf: 9b:c8:b6:07:59:c4:5d:7f:cd:8b:1f:48:87:72:77:e8:30:9e: b3:21:5f:91 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjMwNjAyMTk1OTU4WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhNGEzZS0yY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVTU0qXxGmyK7Mfz2Aqh6t/kck1uuHQo5PoZoYDXwv7A8Xjvw8n0/zTqm6Vg 3hTw06PFs4bIvrxXmGWp8FE/XxuMn7ah36/sDq2o/AY8aVOpTdQb16XvT2544LPC RnmDzPhB+QMbWeRb6vTP4eqPWIbzT4Bw5MAVXdT9JA/TDz4kp1N+mXiIK2cU0jXD 9gNw+xzgWm0itySFhbOEMlV8MX5t4xq1POKxNwBfHHmLg7LPNqAw2FRaN7wTcVtL hvAmnZKqiXJaT0fYZc1G9BFs0WLXOQs36RAG48ysfr6SXy785R16m42+0ZwU3PJw 0zhUwr9BAvlwDaEuOWv+/g3qFQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD1zqDmj E7C1L5J5WTg769plqg7kMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY4RjYvMzdEMDNERjZDRTI4MTFFOUE2QjZDMTdCQzRGOUFFMDIvODdCQjZENzA4 MjI3MTFFRDk0QzMyMTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnJvwwDQYJKoZIhvcNAQELBQADggEBABU9DN+ILMeZvT+r FJV9S1EZrIqAFuj4lfHHqD8n7t0cJSXg1Hau5mTeGdjuoCx63Rn8awcmwG//fOQ4 Ctkz8m2TvBxR9Xjwoxhap8mS8VcpmgapYq+sWQVM6p22NRi9fux6dbsj9Rz/1Ghl Tg7W9ownw0EMg0B3b97BLua40VE4Qi4i7RnolQS+NLT5oIhKcZzRLJgLOJRGP/Rx JMF5zBct+M6cgmsxaK7nkkKfvPFZiKESRAEGGXufu9gPg5pll8U5aF5v0CI/lK90 WpKcVZkUg+Sa2KDhmkhaMipno6F4QbavNYu7mCMjz5vItgdZxF1/zYsfSIdyd+gw nrMhX5E= -----END CERTIFICATE-----Generated at Fri May 10 20:45:22 2024 by rpki-client on console-ams.rpki-client.org