$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/12F0D72E7BC111EA8503D815C4F9AE02.roa File: 12F0D72E7BC111EA8503D815C4F9AE02.roa (raw, json) Hash identifier: 1aGT6MYy4z/yd8/t6FxJ4C4fWz1OJswr4L6eYk5Sd0A= Subject key identifier: 93:54:36:5F:26:3D:A8:92:84:85:87:41:41:5B:BA:2B:F7:D2:CE:21 Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0BD1 Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/12F0D72E7BC111EA8503D815C4F9AE02.roa Signing time: Wed 07 Sep 2022 07:36:39 +0000 ROA not before: Wed 07 Sep 2022 07:36:38 +0000 ROA not after: Fri 01 Dec 2023 00:00:00 +0000 asID: 2914 IP address blocks: 103.142.140.0/23 maxlen: 23 103.142.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Mar 2023 19:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3025 (0xbd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Sep 7 07:36:38 2022 GMT Not After : Dec 1 00:00:00 2023 GMT Subject: CN=63184a06-35af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ba:50:25:a9:8c:75:50:6f:fc:8e:34:d6:71: 30:6c:6d:0a:65:bb:51:a5:09:f8:cc:c8:2f:3c:c6: 45:eb:5f:58:0d:63:9f:04:8f:e3:0f:e1:83:7e:e7: c1:ef:00:96:2d:18:59:69:c5:7a:78:9c:a6:99:fb: 57:2b:f0:45:6d:ba:f1:14:e5:78:6e:1f:1a:79:27: 30:0e:af:12:7c:78:35:d7:0c:04:a6:34:ff:0b:01: ed:ad:2d:36:f2:cf:d8:a3:6c:b2:18:58:98:eb:b1: 2c:6b:9b:5c:5b:91:40:ab:42:fd:dd:6c:9c:47:16: 43:24:4b:3a:b2:30:5d:e8:59:fc:45:82:d1:1d:44: c9:47:c0:86:77:b5:da:43:8c:9a:5e:34:26:30:49: bc:05:53:3e:95:a6:5f:72:59:14:bb:1e:25:af:bd: a4:50:34:41:cd:c5:d8:52:4d:51:d8:8d:38:a6:a7: e3:4a:23:d3:e6:d6:f7:f3:ef:37:01:32:27:41:44: 3f:bf:10:3a:11:a6:6d:3d:8d:ac:72:1f:11:ec:26: 8d:35:14:61:75:8c:00:f5:0d:f4:5a:a9:30:bd:f4: e9:99:35:8c:14:87:16:63:f5:8f:07:af:b4:32:60: a8:ee:67:da:ab:29:a5:bf:6b:ec:c6:e9:3d:d2:b5: 1d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:54:36:5F:26:3D:A8:92:84:85:87:41:41:5B:BA:2B:F7:D2:CE:21 X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/12F0D72E7BC111EA8503D815C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.140.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:c4:bd:c6:8f:a9:57:14:62:fd:45:e5:8e:41:e5:55:78:ca: 99:1c:fe:5d:61:0d:2a:ed:6e:4d:8e:54:3a:73:ad:0f:dd:0f: 3c:a9:92:e2:32:fb:c9:d0:61:f2:c7:4c:7c:bb:19:55:4e:ff: 5c:c0:19:aa:20:7a:04:ff:eb:7d:cb:e4:ed:8c:37:17:ae:38: 18:4c:d4:84:18:68:93:4f:56:52:4d:6d:61:e2:86:10:09:db: 56:84:c3:8a:20:9e:30:17:fe:d8:b0:fd:d1:65:a6:24:b4:de: 45:65:df:c4:eb:91:d9:aa:c1:08:90:84:c3:cb:6d:da:e4:4d: 4f:ed:6b:20:6a:db:92:61:6b:96:51:45:84:de:0b:04:f6:90: c2:bb:ea:be:70:16:6e:84:59:68:3d:ca:b0:e4:f8:70:f8:18: ca:83:7f:cd:f6:0f:c9:9a:76:ec:df:f3:fd:de:a5:6e:b1:f4: 78:70:45:8a:37:66:a9:1b:22:37:4c:b7:20:f5:b4:a2:20:34: 26:96:cf:e8:09:cc:49:03:f8:4b:05:9c:33:a3:a3:53:ba:7b: 44:02:5f:91:64:1a:71:cc:57:b3:b2:cd:b0:6b:b4:90:df:4d: a2:b0:7d:a3:ea:0e:c6:31:fe:cb:1e:59:50:79:2a:c7:8c:9f: bb:71:91:a2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjIwOTA3MDczNjM4WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02MzE4NGEwNi0zNWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rpQJamMdVBv/I401nEwbG0KZbtRpQn4zMgvPMZF619YDWOfBI/jD+GDfufB 7wCWLRhZacV6eJymmftXK/BFbbrxFOV4bh8aeScwDq8SfHg11wwEpjT/CwHtrS02 8s/Yo2yyGFiY67Esa5tcW5FAq0L93WycRxZDJEs6sjBd6Fn8RYLRHUTJR8CGd7Xa Q4yaXjQmMEm8BVM+laZfclkUux4lr72kUDRBzcXYUk1R2I04pqfjSiPT5tb38+83 ATInQUQ/vxA6EaZtPY2sch8R7CaNNRRhdYwA9Q30WqkwvfTpmTWMFIcWY/WPB6+0 MmCo7mfaqymlv2vsxuk90rUdbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJNUNl8m PaiShIWHQUFbuiv30s4hMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvMTJGMEQ3MkU3 QkMxMTFFQTg1MDNEODE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjowwDQYJKoZIhvcNAQELBQADggEBAG/EvcaPqVcUYv1F 5Y5B5VV4ypkc/l1hDSrtbk2OVDpzrQ/dDzypkuIy+8nQYfLHTHy7GVVO/1zAGaog egT/633L5O2MNxeuOBhM1IQYaJNPVlJNbWHihhAJ21aEw4ognjAX/tiw/dFlpiS0 3kVl38TrkdmqwQiQhMPLbdrkTU/tayBq25Jha5ZRRYTeCwT2kMK76r5wFm6EWWg9 yrDk+HD4GMqDf832D8maduzf8/3epW6x9HhwRYo3ZqkbIjdMtyD1tKIgNCaWz+gJ zEkD+EsFnDOjo1O6e0QCX5FkGnHMV7OyzbBrtJDfTaKwfaPqDsYx/sseWVB5KseM n7txkaI= -----END CERTIFICATE-----Generated at Wed Mar 15 11:54:08 2023 by rpki-client on console-fra.rpki-client.org