$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/7FFF9A1CF0DF11EDB367913BC4F9AE02.roa File: 7FFF9A1CF0DF11EDB367913BC4F9AE02.roa (raw, json) Hash identifier: IbcLM+cWCUXJi2jiSHp4YjRgxDOAzOi+RQEnKKEDF5I= Subject key identifier: 00:6D:9E:AF:12:06:F5:B2:79:95:0B:FC:0A:0A:1B:48:D9:2B:96:2D Certificate issuer: /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72 Certificate serial: 056D Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/7FFF9A1CF0DF11EDB367913BC4F9AE02.roa Signing time: Fri 12 May 2023 16:10:24 +0000 ROA not before: Fri 12 May 2023 16:10:24 +0000 ROA not after: Wed 31 Jan 2024 00:00:00 +0000 asID: 61317 IP address blocks: 103.104.140.0/24 maxlen: 24 103.104.142.0/24 maxlen: 24 103.104.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 Sep 2023 03:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1389 (0x56d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72 Validity Not Before: May 12 16:10:24 2023 GMT Not After : Jan 31 00:00:00 2024 GMT Subject: CN=645e64ef-0473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:2b:11:b5:fc:66:11:b7:a0:9b:a8:3b:b6: 3b:56:5f:f1:3d:99:88:4c:a1:9a:ba:c9:9e:67:64: 48:03:7d:74:12:8f:88:30:80:8f:b0:10:bf:e0:0e: 1d:c7:52:15:61:37:59:26:5f:58:b8:c5:81:1d:51: 61:90:12:6f:b3:f3:bd:40:fd:a0:f1:2e:7a:ab:67: 56:8d:8f:10:fa:1e:b2:e0:9d:3e:45:50:41:82:98: c0:24:f2:52:1a:83:74:e0:3a:2e:19:ec:0a:82:c6: f9:02:87:19:46:f6:00:d8:76:c3:c9:7d:ec:36:9c: 0f:1b:32:f9:87:ef:71:74:b9:e0:60:3b:31:79:61: cb:5b:b9:d0:9e:dc:9a:60:de:6b:cb:d3:2a:64:3b: 2c:64:c2:5e:92:3f:31:3f:7a:83:9e:58:e9:df:7f: 5f:f4:94:92:6b:72:36:eb:ee:29:4e:cc:23:ad:ec: 6c:0e:45:9e:33:d5:44:db:04:31:cb:12:46:30:33: f7:f5:51:2a:25:e4:f4:3c:ce:9e:81:a7:08:f5:40: fd:44:1b:0b:34:fa:1b:b2:7b:32:bf:93:00:f8:b9: fc:23:b2:4c:fb:ab:c9:ee:e6:0c:b0:2e:55:65:27: 92:47:f0:e6:54:7a:f2:6c:d5:3c:6d:d2:39:cf:f5: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6D:9E:AF:12:06:F5:B2:79:95:0B:FC:0A:0A:1B:48:D9:2B:96:2D X509v3 Authority Key Identifier: keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/7FFF9A1CF0DF11EDB367913BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.140.0/24 103.104.142.0/23 Signature Algorithm: sha256WithRSAEncryption 48:90:8e:d2:f6:3d:8e:7e:a6:22:9a:6e:44:f0:2a:7c:e2:3e: 32:0b:2c:c1:8d:25:26:31:be:2f:16:47:04:a4:41:71:2f:07: bb:32:5a:4b:ba:48:e7:c7:21:19:ea:4c:a2:53:ee:e4:00:25: 6d:86:89:7b:7a:bc:21:0d:95:81:a0:0f:b0:49:44:54:82:ad: 34:83:26:ba:44:1a:04:64:fc:ce:4a:06:5b:ad:4b:85:b7:92: 09:55:a2:45:6d:cf:1e:40:37:09:c8:a9:5e:35:03:be:1d:75: 69:fb:7a:da:9d:ee:44:b8:9e:e4:11:65:f9:e4:10:be:df:89: 5d:19:2f:e7:66:50:84:fb:92:55:6d:c6:bd:a0:a7:f0:77:e8: 8d:48:3f:3a:72:5a:ca:98:e4:4b:2b:5e:24:1b:c4:cf:59:36: e8:c9:97:8d:0d:27:d7:2f:e8:b6:0d:34:a1:95:8c:e8:71:f4: 62:50:27:25:28:8f:96:fb:1d:37:b8:37:82:71:ca:29:26:44: 3e:71:55:78:3a:cb:02:bf:51:c3:02:1c:9e:c9:e8:81:17:e2: 5d:f3:7f:19:b3:99:88:52:61:aa:61:aa:ec:e2:47:30:fa:e5: 78:e0:1a:45:0d:23:ab:17:69:55:42:db:18:45:69:a9:e7:04: 48:45:8e:5a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ4MDgxMTAvBgNVBAUTKDA3MjVGMjQ5MTgwMTUwNTE4NUM5MDY5QTQwMTM2MzVD MzhCNTZCNzIwHhcNMjMwNTEyMTYxMDI0WhcNMjQwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDVlNjRlZi0wNDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7crEbX8ZhG3oJuoO7Y7Vl/xPZmITKGausmeZ2RIA310Eo+IMICPsBC/4A4d x1IVYTdZJl9YuMWBHVFhkBJvs/O9QP2g8S56q2dWjY8Q+h6y4J0+RVBBgpjAJPJS GoN04DouGewKgsb5AocZRvYA2HbDyX3sNpwPGzL5h+9xdLngYDsxeWHLW7nQntya YN5ry9MqZDssZMJekj8xP3qDnljp339f9JSSa3I26+4pTswjrexsDkWeM9VE2wQx yxJGMDP39VEqJeT0PM6egacI9UD9RBsLNPobsnsyv5MA+Ln8I7JM+6vJ7uYMsC5V ZSeSR/DmVHrybNU8bdI5z/XOewIDAQABo4ICmzCCApcwHQYDVR0OBBYEFABtnq8S BvWyeZUL/AoKG0jZK5YtMB8GA1UdIwQYMBaAFAcl8kkYAVBRhckGmkATY1w4tWty MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDgwOC9FMjZCNDY0MkY0 QjIxMUU5QkYzQ0U1NjNDNEY5QUUwMi9CeVh5U1JnQlVGR0Z5UWFhUUJOalhEaTFh M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J5WHlTUmdCVUZHRnlRYWFRQk5qWERpMWEzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQ4MDgvRTI2QjQ2NDJGNEIyMTFFOUJGM0NFNTYzQzRGOUFFMDIvN0ZGRjlBMUNG MERGMTFFREIzNjc5MTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnaIwDBAFnaI4wDQYJKoZIhvcNAQELBQADggEBAEiQjtL2 PY5+piKabkTwKnziPjILLMGNJSYxvi8WRwSkQXEvB7syWku6SOfHIRnqTKJT7uQA JW2GiXt6vCENlYGgD7BJRFSCrTSDJrpEGgRk/M5KBlutS4W3kglVokVtzx5ANwnI qV41A74ddWn7etqd7kS4nuQRZfnkEL7fiV0ZL+dmUIT7klVtxr2gp/B36I1IPzpy WsqY5EsrXiQbxM9ZNujJl40NJ9cv6LYNNKGVjOhx9GJQJyUoj5b7HTe4N4Jxyikm RD5xVXg6ywK/UcMCHJ7J6IEX4l3zfxmzmYhSYaphquziRzD65XjgGkUNI6sXaVVC 2xhFaannBEhFjlo= -----END CERTIFICATE-----Generated at Sat Sep 9 07:33:23 2023 by rpki-client on console-ams.rpki-client.org