$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/8B802D485F2211EC88AA0F84C4F9AE02.roa File: 8B802D485F2211EC88AA0F84C4F9AE02.roa (raw, json) Hash identifier: aOFO6GftXaMnWGoPfaj8leZpOMZB4KxEvjyCRhGy9Sw= Subject key identifier: B0:DD:EA:12:7C:B4:2A:0C:A8:6E:C9:65:B4:D4:FC:AD:5C:8F:4F:5D Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Certificate serial: 0872 Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/8B802D485F2211EC88AA0F84C4F9AE02.roa Signing time: Fri 02 Jun 2023 22:33:55 +0000 ROA not before: Fri 02 Jun 2023 22:33:55 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 41477 IP address blocks: 103.219.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2162 (0x872) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Validity Not Before: Jun 2 22:33:55 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=647a6e53-d43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:8b:bc:7f:bc:37:5b:fb:dd:0a:18:56:2f: ea:a8:3a:d4:0e:bb:1b:2c:40:65:2d:40:fd:0a:a6: 41:70:20:49:33:38:e5:ec:8d:2a:11:d6:62:46:ee: e4:0a:d2:97:3b:0e:30:8d:8a:cd:68:a0:c0:05:6e: 6a:4d:24:de:87:c5:4e:16:15:44:16:3f:b5:f8:0c: 2d:d4:71:d6:3d:9e:cf:b5:8b:73:75:b1:1d:ec:4e: bf:12:a9:b1:45:72:98:36:34:19:c4:e3:77:f2:4e: a3:50:67:ce:48:70:ae:59:41:51:80:26:db:92:e9: 09:56:f0:df:6c:c2:00:a0:84:fd:c2:a9:4e:08:b1: 86:af:75:e5:44:4e:34:4f:0b:b1:12:86:81:c0:80: 39:e6:c1:b5:b5:83:c5:bc:f2:d7:59:da:cc:dc:95: 39:be:8d:ea:df:cf:70:c0:b2:fa:f1:5e:f8:1e:34: 26:a7:e9:71:73:bd:bc:5f:3f:23:ce:3a:57:fc:be: 88:b2:ca:48:d2:40:d0:95:ab:f0:50:5d:a9:07:fd: 10:f0:6b:01:75:50:cd:90:92:37:e6:5b:51:29:5c: fd:77:ed:c7:f4:3f:11:87:b3:69:59:00:9c:a5:96: be:12:99:27:94:59:b3:9c:9d:f3:1c:99:05:32:55: ca:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DD:EA:12:7C:B4:2A:0C:A8:6E:C9:65:B4:D4:FC:AD:5C:8F:4F:5D X509v3 Authority Key Identifier: keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/8B802D485F2211EC88AA0F84C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.219.172.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:39:0f:7f:d6:48:f5:d0:54:12:83:e2:ea:58:16:20:76:25: fc:91:83:8e:5c:2c:e5:60:7b:5e:72:63:95:da:7f:de:c9:2c: 80:d3:08:4a:de:4b:e4:33:01:64:fd:52:29:61:47:a6:84:38: 54:28:5e:27:05:c9:0e:a6:33:7f:9b:ef:cf:5b:26:bb:4d:7b: 6d:6e:dc:8e:de:46:24:0a:9b:33:55:03:95:6d:07:c3:38:73: 8a:ea:bb:75:80:90:b1:ee:76:f6:2b:4b:d5:59:9f:f0:e2:f7: ac:e3:e1:8f:7f:d7:d2:0d:a4:89:c0:bd:cd:5b:a2:4a:14:76: c4:95:ef:47:5a:96:07:f5:ac:87:cb:b0:ee:30:4d:45:95:33: d4:62:08:7f:46:05:f3:cf:b8:f8:d5:a2:25:4c:0c:45:ed:4e: e9:c0:bf:de:90:55:b0:5c:b9:ef:55:38:9e:06:21:3a:36:77: 7c:3a:d2:d6:1e:c0:7c:a4:92:7d:aa:98:51:b9:35:49:18:3f: df:c3:db:e4:c9:2b:d5:64:cc:f0:39:1c:f3:b1:fa:0e:23:6f: 2e:06:29:cc:8a:a2:20:b6:bd:35:60:f6:44:99:07:50:39:5c: 7c:a8:c1:48:c0:ae:bd:58:e8:3f:a6:4c:91:20:10:5a:3e:5e: 7c:f1:da:a7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI2N0MxMTAvBgNVBAUTKDhBMjY1NkRCQkQ5MDAzMzY4NDFGRjUwMzUzNkZGOTkx OEZFQjI1QzYwHhcNMjMwNjAyMjIzMzU1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhNmU1My1kNDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0WLvH+8N1v73QoYVi/qqDrUDrsbLEBlLUD9CqZBcCBJMzjl7I0qEdZiRu7k CtKXOw4wjYrNaKDABW5qTSTeh8VOFhVEFj+1+Awt1HHWPZ7PtYtzdbEd7E6/Eqmx RXKYNjQZxON38k6jUGfOSHCuWUFRgCbbkukJVvDfbMIAoIT9wqlOCLGGr3XlRE40 TwuxEoaBwIA55sG1tYPFvPLXWdrM3JU5vo3q389wwLL68V74HjQmp+lxc728Xz8j zjpX/L6IsspI0kDQlavwUF2pB/0Q8GsBdVDNkJI35ltRKVz9d+3H9D8Rh7NpWQCc pZa+EpknlFmznJ3zHJkFMlXKSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLDd6hJ8 tCoMqG7JZbTU/K1cj09dMB8GA1UdIwQYMBaAFIomVtu9kAM2hB/1A1Nv+ZGP6yXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjY3Qy81QjUzODk2NjdC RDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6YUVIX1VEVTJfNWtZX3JK Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpWlcyNzJRQXphRUhfVURVMl81a1lfckpjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTI2N0MvNUI1Mzg5NjY3QkQ2MTFFQTgwM0Y5QjVDQzRGOUFFMDIvOEI4MDJENDg1 RjIyMTFFQzg4QUEwRjg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn26wwDQYJKoZIhvcNAQELBQADggEBAJs5D3/WSPXQVBKD 4upYFiB2JfyRg45cLOVge15yY5Xaf97JLIDTCEreS+QzAWT9UilhR6aEOFQoXicF yQ6mM3+b789bJrtNe21u3I7eRiQKmzNVA5VtB8M4c4rqu3WAkLHudvYrS9VZn/Di 96zj4Y9/19INpInAvc1bokoUdsSV70dalgf1rIfLsO4wTUWVM9RiCH9GBfPPuPjV oiVMDEXtTunAv96QVbBcue9VOJ4GITo2d3w60tYewHykkn2qmFG5NUkYP9/D2+TJ K9VkzPA5HPOx+g4jby4GKcyKoiC2vTVg9kSZB1A5XHyowUjArr1Y6D+mTJEgEFo+ Xnzx2qc= -----END CERTIFICATE-----Generated at Sat May 18 22:27:56 2024 by rpki-client on console-ams.rpki-client.org