$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/B61AFCF654A411EB88DE1D23C4F9AE02.roa File: B61AFCF654A411EB88DE1D23C4F9AE02.roa (raw, json) Hash identifier: J3rUZvVMouK6km5uMOBOGRXZYwSoT0RYai5nFCK9cxI= Subject key identifier: 1E:18:E3:C0:73:75:8A:D8:49:AC:39:FD:16:41:C2:16:B4:B9:1A:8F Certificate issuer: /CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Certificate serial: 05D6 Authority key identifier: B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/B61AFCF654A411EB88DE1D23C4F9AE02.roa Signing time: Wed 20 Dec 2023 23:31:37 +0000 ROA not before: Wed 20 Dec 2023 23:31:37 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 136574 IP address blocks: 103.159.80.0/23 maxlen: 23 103.159.80.0/24 maxlen: 24 103.159.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Sep 2024 22:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1494 (0x5d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Validity Not Before: Dec 20 23:31:37 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65837959-d050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:1d:a1:9f:29:26:2a:3c:28:99:ec:28:50: 13:fb:38:83:60:d6:ed:bf:7f:99:bc:c5:3b:70:5f: 60:a4:40:25:5c:fe:59:57:2e:f8:46:66:fd:d5:a4: 56:e9:df:96:62:1a:61:86:04:83:93:4c:2f:17:51: df:94:f5:c0:25:07:d8:5d:f8:8e:de:9c:65:30:b1: 05:4c:29:f8:cb:aa:c1:96:b9:df:91:46:6a:2b:05: 35:e2:95:d0:c2:b5:1e:c6:56:0f:1f:b6:2a:24:8d: 0c:34:21:93:bc:8c:d7:4c:19:fa:bf:5d:62:b0:0b: 0b:7b:1c:fd:29:7d:0e:e5:5c:53:79:44:1a:01:1b: aa:a8:d6:ed:ea:8a:c4:57:ff:19:85:00:72:fe:b0: 8c:7f:07:07:72:ba:47:c4:66:b4:e9:71:73:21:56: c0:ef:55:4c:c1:57:c1:b1:0a:02:30:a6:51:49:65: 19:86:42:65:f5:2e:18:20:40:00:2d:96:59:49:a0: a7:0e:37:46:60:63:b0:18:1b:8f:04:87:ec:95:b5: 58:36:87:f2:04:6b:70:55:e2:25:1e:e1:8b:8b:84: 6b:99:fd:66:d7:ea:fb:1d:60:a8:cc:f6:0b:7e:5f: 14:cf:0d:64:3d:7b:78:36:41:e7:6e:27:ef:fd:86: 2e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:18:E3:C0:73:75:8A:D8:49:AC:39:FD:16:41:C2:16:B4:B9:1A:8F X509v3 Authority Key Identifier: keyid:B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/B61AFCF654A411EB88DE1D23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.80.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:3b:28:22:a2:1e:61:df:b7:a4:29:52:57:32:fd:cb:6d:1a: 65:e4:47:cd:32:bd:1e:10:0c:af:2b:25:7e:cb:6a:0d:85:22: 63:f1:d9:bd:70:92:fd:a2:8e:e6:8c:ec:94:b3:04:76:a6:db: 27:43:52:64:b4:fd:b8:a4:8f:01:e5:a4:ba:c3:74:3f:b1:22: 7b:f2:54:e0:ed:ec:95:42:af:70:bc:55:00:55:51:79:db:60: 26:fb:2f:48:fa:b4:e1:95:82:36:17:31:6f:84:b3:20:f2:a0: 15:1e:2f:8e:21:93:21:9e:15:8e:58:c2:3a:19:ed:36:5a:c4: 2c:27:7a:76:8e:55:69:0c:dc:49:d9:a4:a3:ce:e1:93:ef:16: 4f:f7:aa:d7:9b:a4:22:71:1a:34:bc:6f:b0:4b:67:11:8e:dd: af:89:1d:4d:cd:dd:00:c1:85:54:c2:75:a5:58:7b:79:fd:4d: a0:a7:bb:67:e1:7c:5b:c6:a7:04:66:51:f5:24:e4:5a:9a:10: 02:16:7c:e2:2b:da:5e:d6:df:f8:4e:7e:5f:3e:e9:73:b2:3c: 60:0a:10:e8:b1:94:8b:cd:7f:74:3d:53:89:17:42:68:ae:a9: 57:72:15:1a:d6:e9:f9:13:71:1d:ab:d7:64:1a:c6:fe:f7:01: 2e:79:3d:77 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyNTIxMTAvBgNVBAUTKEI0MTM2NTZDRDdBOThGQkRFMjIzN0ZDNTMxNEM5RkY3 RThGMUEwOUUwHhcNMjMxMjIwMjMzMTM3WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTgzNzk1OS1kMDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7YdoZ8pJio8KJnsKFAT+ziDYNbtv3+ZvMU7cF9gpEAlXP5ZVy74Rmb91aRW 6d+WYhphhgSDk0wvF1HflPXAJQfYXfiO3pxlMLEFTCn4y6rBlrnfkUZqKwU14pXQ wrUexlYPH7YqJI0MNCGTvIzXTBn6v11isAsLexz9KX0O5VxTeUQaARuqqNbt6orE V/8ZhQBy/rCMfwcHcrpHxGa06XFzIVbA71VMwVfBsQoCMKZRSWUZhkJl9S4YIEAA LZZZSaCnDjdGYGOwGBuPBIfslbVYNofyBGtwVeIlHuGLi4Rrmf1m1+r7HWCozPYL fl8Uzw1kPXt4NkHnbifv/YYuhwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB4Y48Bz dYrYSaw5/RZBwha0uRqPMB8GA1UdIwQYMBaAFLQTZWzXqY+94iN/xTFMn/fo8aCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTI1Mi9DRDE2M0JDQTU0 QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3M2lJM19GTVV5Zjktanhv SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCTmxiTmVwajczaUkzX0ZNVXlmOS1qeG9KNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTUyNTIvQ0QxNjNCQ0E1NEEyMTFFQkJGNjIxRTFFQzRGOUFFMDIvQjYxQUZDRjY1 NEE0MTFFQjg4REUxRDIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnn1AwDQYJKoZIhvcNAQELBQADggEBAA07KCKiHmHft6Qp Ulcy/cttGmXkR80yvR4QDK8rJX7Lag2FImPx2b1wkv2ijuaM7JSzBHam2ydDUmS0 /bikjwHlpLrDdD+xInvyVODt7JVCr3C8VQBVUXnbYCb7L0j6tOGVgjYXMW+EsyDy oBUeL44hkyGeFY5YwjoZ7TZaxCwnenaOVWkM3EnZpKPO4ZPvFk/3qtebpCJxGjS8 b7BLZxGO3a+JHU3N3QDBhVTCdaVYe3n9TaCnu2fhfFvGpwRmUfUk5FqaEAIWfOIr 2l7W3/hOfl8+6XOyPGAKEOixlIvNf3Q9U4kXQmiuqVdyFRrW6fkTcR2r12Qaxv73 AS55PXc= -----END CERTIFICATE-----Generated at Sat Sep 21 00:25:42 2024 by rpki-client on console-fra.rpki-client.org