$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa File: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (raw, json) Hash identifier: qZ/6NzbqJ1abxA/j9iS2yiuC6w9jWxl5UQ+sdk+4DcY= Subject key identifier: 55:5E:91:91:24:29:94:30:E9:A6:CF:96:AB:C9:27:83:99:A7:2F:1D Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Certificate serial: 17D7 Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa Signing time: Tue 02 Jan 2024 18:52:20 +0000 ROA not before: Tue 02 Jan 2024 18:52:20 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 136956 IP address blocks: 103.210.132.0/22 maxlen: 24 2401:b840::/32 maxlen: 32 2404:6e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6103 (0x17d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Validity Not Before: Jan 2 18:52:20 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65945b64-8af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ec:a3:c7:99:17:fd:fd:19:75:b8:31:8a:a0: f2:09:9f:56:e3:04:ed:ed:41:48:ab:ee:b1:e6:5f: d9:38:96:e7:c6:6e:4e:3f:62:cb:2a:92:f5:ed:6d: 1d:b1:12:82:80:41:5d:33:da:58:57:8e:98:c1:8b: 6e:63:98:6f:1d:43:d2:6d:a1:c5:f4:f4:25:d6:9a: f7:67:6b:57:2a:6d:fa:95:e2:04:2e:ca:9f:5a:61: da:21:0b:68:a6:e8:5c:10:95:9a:df:9d:4d:e2:4f: 8c:1d:ff:75:5b:3f:3b:4d:8c:bf:6c:1e:4c:f3:b7: e5:f0:9a:99:fb:08:c8:34:f7:9a:0f:75:30:a8:d3: 1f:6a:01:35:f8:c6:b9:42:b3:3e:8d:11:12:62:c2: 9f:f3:e8:b4:ae:61:62:16:42:cc:4c:39:ab:53:72: 99:e9:a5:dc:2f:cc:82:81:63:94:7f:84:d4:57:f3: e3:2e:41:8a:7b:4e:d1:bf:da:80:16:cf:34:f4:5d: 4d:e4:97:ab:98:c5:d3:e6:78:a5:e4:9a:b0:9e:4c: 0a:12:5d:70:a4:eb:11:9a:b5:3b:fd:29:4a:9e:5e: c2:6b:b0:c2:9f:dc:0b:b2:d8:46:f7:c0:e1:97:f3: 23:6e:98:bd:f9:ee:f5:bc:6c:76:d0:94:11:dc:41: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5E:91:91:24:29:94:30:E9:A6:CF:96:AB:C9:27:83:99:A7:2F:1D X509v3 Authority Key Identifier: keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.210.132.0/22 IPv6: 2401:b840::/32 2404:6e80::/32 Signature Algorithm: sha256WithRSAEncryption 04:02:8c:38:b2:58:2e:f5:5b:0a:b3:69:83:70:94:51:d0:60: cb:d0:a6:4e:06:24:23:c4:4f:fb:4d:d8:28:06:8d:84:89:0a: b0:5f:e5:08:bf:a8:8e:e3:74:f9:80:25:91:46:fc:86:c5:bb: 60:ab:f1:41:4f:8f:e9:63:27:6d:49:e7:31:eb:a2:9c:ea:21: fb:ab:0e:41:d2:d1:5a:da:ee:21:33:8b:f4:57:51:fd:4f:ca: 3a:d6:44:47:3b:04:01:03:7b:dc:dd:d2:90:c8:95:a3:28:a2: e9:5d:37:1f:71:e0:55:3c:ba:9c:22:ea:b2:22:77:ca:b7:41: 67:d3:28:50:85:67:bc:c8:ba:c0:da:81:c5:ca:24:54:c4:3b: 9f:89:35:f8:13:f9:65:f1:b2:cb:7a:b8:ba:79:14:6a:4c:54: be:db:05:a9:d0:b8:ff:81:13:b4:a2:a1:6d:4b:fe:84:86:fa: aa:ab:d5:d3:05:34:3b:14:d5:c7:6b:c4:60:74:e5:f2:a4:03: d1:cd:51:e8:53:d2:b4:44:0c:95:d9:a2:40:8a:cb:30:65:60: fb:9c:1e:36:0e:28:ef:43:06:b2:ff:67:16:fb:9a:40:8d:2e: 3c:e5:9b:2f:7e:37:4c:2a:ed:1f:a3:af:ba:54:19:b6:fc:39: 69:1c:f8:de -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICF9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2 NDA5MjI4MUUwHhcNMjQwMTAyMTg1MjIwWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk0NWI2NC04YWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eyjx5kX/f0ZdbgxiqDyCZ9W4wTt7UFIq+6x5l/ZOJbnxm5OP2LLKpL17W0d sRKCgEFdM9pYV46YwYtuY5hvHUPSbaHF9PQl1pr3Z2tXKm36leIELsqfWmHaIQto puhcEJWa351N4k+MHf91Wz87TYy/bB5M87fl8JqZ+wjINPeaD3UwqNMfagE1+Ma5 QrM+jRESYsKf8+i0rmFiFkLMTDmrU3KZ6aXcL8yCgWOUf4TUV/PjLkGKe07Rv9qA Fs809F1N5JermMXT5nil5JqwnkwKEl1wpOsRmrU7/SlKnl7Ca7DCn9wLsthG98Dh l/Mjbpi9+e71vGx20JQR3EFJjwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFFVekZEk KZQw6abPlqvJJ4OZpy8dMB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTk0NjcvOTE1QzA3RTY5MUVBMTFFNzlEMEQwQTJCQzRGOUFFMDIvMEVEQTEwQTRB OUEwMTFFRTk2RENCQjRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMAwEAgABMAYDBAJn0oQwFAQCAAIwDgMFACQBuEADBQAkBG6AMA0GCSqGSIb3 DQEBCwUAA4IBAQAEAow4slgu9VsKs2mDcJRR0GDL0KZOBiQjxE/7TdgoBo2EiQqw X+UIv6iO43T5gCWRRvyGxbtgq/FBT4/pYydtSecx66Kc6iH7qw5B0tFa2u4hM4v0 V1H9T8o61kRHOwQBA3vc3dKQyJWjKKLpXTcfceBVPLqcIuqyInfKt0Fn0yhQhWe8 yLrA2oHFyiRUxDufiTX4E/ll8bLLeri6eRRqTFS+2wWp0Lj/gRO0oqFtS/6Ehvqq q9XTBTQ7FNXHa8RgdOXypAPRzVHoU9K0RAyV2aJAisswZWD7nB42DijvQway/2cW +5pAjS485ZsvfjdMKu0fo6+6VBm2/DlpHPje -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org