$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/879EEF1ECD6911ED8A27BE3FC4F9AE02.roa File: 879EEF1ECD6911ED8A27BE3FC4F9AE02.roa (raw, json) Hash identifier: aFb0l7F5aFsZwX+oIAHrLZHOGNUOnqgt563envOm4+Y= Subject key identifier: 90:C4:8E:8D:98:C6:D4:CE:01:FE:9B:95:D9:AA:FB:0A:4C:2B:1C:4A Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Certificate serial: 0A0F Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/879EEF1ECD6911ED8A27BE3FC4F9AE02.roa Signing time: Wed 28 Jun 2023 19:39:38 +0000 ROA not before: Wed 28 Jun 2023 19:39:38 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 138346 IP address blocks: 103.112.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2575 (0xa0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Validity Not Before: Jun 28 19:39:38 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=649c8c7a-968e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:e5:33:0e:24:4c:47:cb:3e:a5:43:55:fe: d2:cb:ba:cd:d7:4d:8d:31:70:76:c7:ba:a9:fc:28: 84:8c:33:c1:64:ed:78:ab:b3:9c:c3:94:06:eb:4a: 6d:d0:17:f2:f8:4d:0f:84:26:d3:50:ea:a1:00:05: 45:0d:1e:21:d2:b0:08:8b:a7:fd:d9:2a:0a:09:20: 88:12:43:67:cc:20:35:05:19:2f:30:1e:1c:84:dc: f4:b4:d4:61:36:12:4a:d6:06:70:81:7f:8b:e8:8e: 50:f2:06:93:25:49:11:0a:b3:89:65:5d:f3:7e:d3: 55:11:98:a2:05:2c:24:47:50:40:75:d3:78:a3:8f: 2f:b5:5e:04:12:67:3f:70:94:65:15:24:21:b3:2b: bb:b6:f4:e7:5c:3f:62:03:09:0d:dc:fc:3f:7b:7d: 1b:5a:00:e1:30:c9:e4:96:70:94:75:38:cd:3a:39: b2:db:ba:97:d6:9a:6f:33:e7:22:e1:12:ae:26:94: 90:ad:18:ba:44:0f:22:41:ca:25:12:8a:ed:b8:88: df:53:cb:ec:87:31:79:17:37:ce:8a:d6:55:15:90: 50:7f:2c:d5:98:3b:37:ad:79:4a:62:34:e7:f9:50: ba:94:58:28:2c:c3:38:54:65:e2:7a:f4:37:1e:c6: a3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C4:8E:8D:98:C6:D4:CE:01:FE:9B:95:D9:AA:FB:0A:4C:2B:1C:4A X509v3 Authority Key Identifier: keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/879EEF1ECD6911ED8A27BE3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.206.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:32:5e:40:e5:86:b0:53:a0:e3:9d:99:8f:68:8b:60:72:38: cf:f6:11:2f:b4:a7:67:3f:48:68:ea:64:7e:eb:a7:60:89:4b: cc:4e:64:ba:9b:d7:2d:ba:60:d3:34:e5:5f:11:ab:ad:10:42: 8b:73:aa:01:8e:64:17:34:4a:0d:e7:30:fe:a7:10:7e:92:1f: 38:7f:6d:8f:c3:b6:39:d2:af:2b:15:f1:e2:9e:cb:bb:88:74: 52:95:4a:21:24:b0:59:10:29:2d:31:aa:b4:d3:23:90:90:3b: 83:89:f5:73:37:ae:4b:77:b5:ea:95:9e:23:c4:f7:6c:15:4b: 55:1b:0c:1a:49:94:a4:3c:96:50:64:e8:67:3c:89:a7:6f:71: c4:36:02:0d:9e:71:4c:39:79:fc:b6:c4:4e:c1:07:6f:c1:86: f6:51:73:d2:84:89:83:e4:23:5a:ce:18:4f:ab:66:bb:4e:bc: a8:be:ad:69:72:ac:76:6f:66:24:6f:8e:d6:68:ea:cc:fd:c5: 58:7d:c0:4e:f3:34:6c:b8:ab:7a:e7:89:37:8e:74:aa:72:02: 40:a4:71:54:5b:06:44:fc:ae:73:16:b1:ab:cd:74:c8:99:4a: 0f:d7:a6:df:e9:c6:e0:a7:3b:2c:80:e1:49:eb:87:f0:45:17: 6c:66:ce:c0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC N0E0MjE4OEYwHhcNMjMwNjI4MTkzOTM4WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDljOGM3YS05NjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBDlMw4kTEfLPqVDVf7Sy7rN102NMXB2x7qp/CiEjDPBZO14q7Ocw5QG60pt 0Bfy+E0PhCbTUOqhAAVFDR4h0rAIi6f92SoKCSCIEkNnzCA1BRkvMB4chNz0tNRh NhJK1gZwgX+L6I5Q8gaTJUkRCrOJZV3zftNVEZiiBSwkR1BAddN4o48vtV4EEmc/ cJRlFSQhsyu7tvTnXD9iAwkN3Pw/e30bWgDhMMnklnCUdTjNOjmy27qX1ppvM+ci 4RKuJpSQrRi6RA8iQcolEortuIjfU8vshzF5FzfOitZVFZBQfyzVmDs3rXlKYjTn +VC6lFgoLMM4VGXievQ3HsajXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJDEjo2Y xtTOAf6bldmq+wpMKxxKMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTg0MDUvRjlDMTk2OTYzMjEyMTFFQTkzNjMzQTU5QzRGOUFFMDIvODc5RUVGMUVD RDY5MTFFRDhBMjdCRTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABncM4wDQYJKoZIhvcNAQELBQADggEBAFwyXkDlhrBToOOd mY9oi2ByOM/2ES+0p2c/SGjqZH7rp2CJS8xOZLqb1y26YNM05V8Rq60QQotzqgGO ZBc0Sg3nMP6nEH6SHzh/bY/DtjnSrysV8eKey7uIdFKVSiEksFkQKS0xqrTTI5CQ O4OJ9XM3rkt3teqVniPE92wVS1UbDBpJlKQ8llBk6Gc8iadvccQ2Ag2ecUw5efy2 xE7BB2/BhvZRc9KEiYPkI1rOGE+rZrtOvKi+rWlyrHZvZiRvjtZo6sz9xVh9wE7z NGy4q3rniTeOdKpyAkCkcVRbBkT8rnMWsavNdMiZSg/Xpt/pxuCnOyyA4Unrh/BF F2xmzsA= -----END CERTIFICATE-----Generated at Fri May 31 22:13:09 2024 by rpki-client on console-fra.rpki-client.org