$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/ED31BA0AFBAE11ED977DEA10C4F9AE02.roa File: ED31BA0AFBAE11ED977DEA10C4F9AE02.roa (raw, json) Hash identifier: MmAJ1FnnzV505irABfXFeEbkcxCw7cMdd9oFg0Je3TU= Subject key identifier: F6:3A:A0:A8:74:51:EA:90:57:92:59:0B:0E:CA:08:AA:B0:C2:EA:8B Certificate issuer: /CN=A91B1F27/serialNumber=9C2DD1827062DB892E38465A10AFE4916835C027 Certificate serial: 09 Authority key identifier: 9C:2D:D1:82:70:62:DB:89:2E:38:46:5A:10:AF:E4:91:68:35:C0:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/ED31BA0AFBAE11ED977DEA10C4F9AE02.roa Signing time: Mon 05 Jun 2023 04:47:49 +0000 ROA not before: Mon 05 Jun 2023 04:47:49 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 151356 IP address blocks: 103.209.173.0/24 maxlen: 24 2001:df2:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.crl rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F27/serialNumber=9C2DD1827062DB892E38465A10AFE4916835C027 Validity Not Before: Jun 5 04:47:49 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=647d68f5-c677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5d:71:aa:8b:42:2b:62:e6:6d:b6:c2:9a:2e: 90:a7:b3:6b:6a:52:66:a7:e0:69:93:09:e3:c7:6e: 93:e2:10:2c:e4:45:8f:5c:a6:86:b0:f9:27:c5:c8: 30:bb:16:2c:8a:79:d1:b9:39:95:48:92:8f:b7:15: e8:4e:b1:6e:a1:03:4e:e9:7c:1c:84:09:c2:01:ef: dd:16:6b:94:31:9f:67:f8:78:53:23:50:84:0c:dc: fc:35:5b:00:3a:5c:7d:ea:ea:3e:cd:20:23:4d:95: 62:5d:36:a0:d1:3f:3e:c7:61:a5:bb:ff:5a:b1:e7: 12:9b:06:61:cf:76:dc:c7:7a:eb:4a:0a:1c:23:88: b2:8f:0b:5d:c2:f3:78:23:ad:da:7a:c4:41:0e:6b: f9:a1:5b:22:d8:d2:16:9d:c9:e4:a4:8c:29:3c:03: e9:1a:ef:98:e0:56:b6:cd:47:ac:d6:52:af:f8:eb: 64:e5:8c:3b:8c:13:fe:78:ed:b0:0e:ce:55:f3:f1: 07:40:80:06:0a:22:e5:8e:9c:d1:6e:04:92:1c:63: fe:00:f6:a5:83:4e:20:3d:13:9d:3b:3a:57:96:12: 32:a4:5f:62:47:56:e3:f5:73:68:91:16:f3:08:0d: b1:19:75:ea:7c:c4:f6:74:13:5a:97:6c:1b:b2:2c: 0c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3A:A0:A8:74:51:EA:90:57:92:59:0B:0E:CA:08:AA:B0:C2:EA:8B X509v3 Authority Key Identifier: keyid:9C:2D:D1:82:70:62:DB:89:2E:38:46:5A:10:AF:E4:91:68:35:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/ED31BA0AFBAE11ED977DEA10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.173.0/24 IPv6: 2001:df2:8040::/48 Signature Algorithm: sha256WithRSAEncryption de:ce:fc:bd:c9:ad:f2:6f:45:1d:65:01:38:93:d6:2e:00:19: 23:40:3e:2a:c5:9c:c7:90:07:9f:92:a3:92:62:d8:bb:e0:57: b8:0f:ce:5b:53:2c:d6:96:41:4f:81:42:cf:96:28:91:3f:ce: 5f:ab:fa:8d:18:96:60:97:09:10:77:3e:97:da:5b:b1:e0:25: 2f:96:20:20:02:e6:28:be:ff:81:d5:9c:d2:56:f0:c2:38:e3: 8d:ad:7b:a5:39:ca:4a:8b:f6:87:5e:44:c8:78:5a:05:f6:bd: 2d:b7:1b:d5:c1:3d:d2:5c:04:a4:79:11:e8:f0:6d:94:23:cc: 42:d0:39:86:ee:b1:47:df:c4:f9:c8:fd:5a:83:c5:7b:a4:0f: de:00:d0:72:49:d6:5e:25:de:4d:c5:b8:c8:1d:71:67:d1:47: 05:63:a2:ce:92:3b:97:a7:a0:0c:8b:ef:fc:a6:1f:e4:7b:3e: 9c:79:16:d7:5a:fe:cd:b6:b5:80:ce:d6:24:f7:e3:07:04:f6: 28:01:4f:c1:4f:a8:4c:5a:e9:3b:6d:ff:ec:71:3d:ad:51:11: a3:83:c7:dd:56:53:62:16:21:b2:7b:67:8c:89:db:db:5f:21: 46:bf:e2:92:cc:19:d2:44:38:84:1c:a8:da:43:49:37:e0:5b: 63:72:2c:6e -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUYyNzExMC8GA1UEBRMoOUMyREQxODI3MDYyREI4OTJFMzg0NjVBMTBBRkU0OTE2 ODM1QzAyNzAeFw0yMzA2MDUwNDQ3NDlaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0N2Q2OGY1LWM2NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRXXGqi0IrYuZttsKaLpCns2tqUman4GmTCePHbpPiECzkRY9cpoaw+SfFyDC7 FiyKedG5OZVIko+3FehOsW6hA07pfByECcIB790Wa5Qxn2f4eFMjUIQM3Pw1WwA6 XH3q6j7NICNNlWJdNqDRPz7HYaW7/1qx5xKbBmHPdtzHeutKChwjiLKPC13C83gj rdp6xEEOa/mhWyLY0hadyeSkjCk8A+ka75jgVrbNR6zWUq/462TljDuME/547bAO zlXz8QdAgAYKIuWOnNFuBJIcY/4A9qWDTiA9E507OleWEjKkX2JHVuP1c2iRFvMI DbEZdep8xPZ0E1qXbBuyLAz9AgMBAAGjggKmMIICojAdBgNVHQ4EFgQU9jqgqHRR 6pBXklkLDsoIqrDC6oswHwYDVR0jBBgwFoAUnC3RgnBi24kuOEZaEK/kkWg1wCcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxRjI3L0Y3N0MxMDlBRkJB NTExRUQ4OEQwQzk2REM0RjlBRTAyL25DM1JnbkJpMjRrdU9FWmFFS19ra1dnMXdD Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbkMzUmduQmkyNGt1T0VaYUVLX2trV2cxd0NjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUYyNy9GNzdDMTA5QUZCQTUxMUVEODhEMEM5NkRDNEY5QUUwMi9FRDMxQkEwQUZC QUUxMUVEOTc3REVBMTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAGfRrTAPBAIAAjAJAwcAIAEN8oBAMA0GCSqGSIb3DQEBCwUA A4IBAQDezvy9ya3yb0UdZQE4k9YuABkjQD4qxZzHkAefkqOSYti74Fe4D85bUyzW lkFPgULPliiRP85fq/qNGJZglwkQdz6X2lux4CUvliAgAuYovv+B1ZzSVvDCOOON rXulOcpKi/aHXkTIeFoF9r0ttxvVwT3SXASkeRHo8G2UI8xC0DmG7rFH38T5yP1a g8V7pA/eANBySdZeJd5NxbjIHXFn0UcFY6LOkjuXp6AMi+/8ph/kez6ceRbXWv7N trWAztYk9+MHBPYoAU/BT6hMWuk7bf/scT2tURGjg8fdVlNiFiGye2eMidvbXyFG v+KSzBnSRDiEHKjaQ0k34Ftjcixu -----END CERTIFICATE-----Generated at Fri May 17 08:52:52 2024 by rpki-client on console-ams.rpki-client.org