$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/707BA10E9DB211EAB3A85A19C4F9AE02.roa File: 707BA10E9DB211EAB3A85A19C4F9AE02.roa (raw, json) Hash identifier: HKy89nrPLtJKIpdDumSWpwndZ6mESDm6trXXJG7ABz8= Subject key identifier: F8:4C:2F:64:27:F7:02:22:1D:A2:10:79:93:5F:2C:91:5E:67:49:4F Certificate issuer: /CN=A91B5732/serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C Certificate serial: 0A7D Authority key identifier: 0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/707BA10E9DB211EAB3A85A19C4F9AE02.roa Signing time: Tue 30 Jan 2024 20:38:24 +0000 ROA not before: Tue 30 Jan 2024 20:38:24 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 133187 IP address blocks: 103.203.238.0/23 maxlen: 23 103.243.96.0/22 maxlen: 24 2403:d140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2685 (0xa7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5732/serialNumber=0CEAF28FEE812F1CC97F1C96BCA6452EF72E6D4C Validity Not Before: Jan 30 20:38:24 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b95e3f-487b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:85:9a:82:69:94:5f:5f:ef:d8:f3:b1:20:6b: 57:f3:94:b5:0b:fb:2d:a5:cc:e2:16:b0:bd:6c:a7: 9c:58:70:82:73:7f:55:87:6d:cb:01:69:73:51:0e: 3d:c7:c2:f3:53:99:f3:76:e2:d5:cc:fc:7d:4d:14: ca:9a:c8:b4:65:95:9c:e9:58:f7:b9:9f:ef:0a:1a: e4:ef:6a:0d:73:4b:f4:fd:1e:c1:b8:89:c5:8c:b3: 78:61:06:cf:e9:81:21:9b:d8:dc:d4:1b:30:c0:ba: 39:7c:4a:63:ae:97:6a:e5:51:76:ce:41:3f:73:37: a0:32:1c:2f:dc:43:62:e1:f6:af:97:a6:9a:94:ec: c1:50:64:f1:e1:a8:db:0d:52:cb:e1:91:ad:6f:93: 5f:c1:d0:28:2d:68:a0:af:37:8d:b3:7b:55:f3:92: 73:68:c8:00:24:44:ed:76:83:ef:70:b9:fb:b2:4a: 60:83:b3:94:14:f5:e5:a4:35:d0:87:fb:43:c8:36: 39:30:b6:db:c2:1d:10:12:a6:70:79:e8:00:d4:d7: 99:07:58:e4:dd:f3:d3:e1:16:0e:70:60:68:b0:f4: f4:79:80:23:da:cd:47:2e:10:ac:f5:98:3e:c5:6e: 93:a6:40:38:d3:74:6e:96:bc:95:5c:aa:80:37:ad: 53:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4C:2F:64:27:F7:02:22:1D:A2:10:79:93:5F:2C:91:5E:67:49:4F X509v3 Authority Key Identifier: keyid:0C:EA:F2:8F:EE:81:2F:1C:C9:7F:1C:96:BC:A6:45:2E:F7:2E:6D:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/DOryj-6BLxzJfxyWvKZFLvcubUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOryj-6BLxzJfxyWvKZFLvcubUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5732/8A7E9E422F2311EA903C1439C4F9AE02/707BA10E9DB211EAB3A85A19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.203.238.0/23 103.243.96.0/22 IPv6: 2403:d140::/32 Signature Algorithm: sha256WithRSAEncryption c3:70:96:03:0c:82:c7:d1:fd:2e:ef:39:f2:83:38:90:a2:94: f1:6f:fb:39:de:f2:46:6a:55:64:8b:8e:fd:07:b8:12:eb:f1: 90:93:16:c8:4a:1e:ae:45:e0:07:ac:0c:82:30:c5:18:a5:6b: d3:63:b3:1b:1f:d5:6a:f9:f8:cc:3d:32:be:67:bc:bf:44:26: 8f:62:61:ae:02:db:49:62:8b:60:51:7d:2b:5f:40:24:71:f7: 05:99:41:d2:3c:dc:97:f8:54:ed:f1:07:31:3b:58:76:bc:0f: 36:90:db:62:df:14:b1:61:0c:62:a5:28:8d:3f:c5:46:1e:fb: 51:8a:a3:7d:28:1b:57:9a:22:fe:17:6a:d0:20:fd:c0:2d:bc: 7c:e1:e1:df:64:5e:72:31:c9:75:b8:85:df:4d:f0:2c:a3:07: 85:27:14:37:b5:36:1f:23:95:c8:2e:70:3b:22:5a:e7:24:40: c7:91:37:60:cf:ec:f6:92:a6:9b:d8:a5:a9:75:c1:91:66:24: 80:54:ab:8f:e2:fc:d6:f0:24:10:b8:3c:6a:a7:c6:68:17:e1: a8:61:f2:1b:d5:f1:32:36:b8:21:3a:45:68:13:40:70:7c:89: 88:32:45:df:ea:b2:f7:30:b4:0b:5d:65:79:ca:30:3b:3d:b8: 7b:d0:ce:9e -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU3MzIxMTAvBgNVBAUTKDBDRUFGMjhGRUU4MTJGMUNDOTdGMUM5NkJDQTY0NTJF RjcyRTZENEMwHhcNMjQwMTMwMjAzODI0WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5NWUzZi00ODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oWagmmUX1/v2POxIGtX85S1C/stpcziFrC9bKecWHCCc39Vh23LAWlzUQ49 x8LzU5nzduLVzPx9TRTKmsi0ZZWc6Vj3uZ/vChrk72oNc0v0/R7BuInFjLN4YQbP 6YEhm9jc1BswwLo5fEpjrpdq5VF2zkE/czegMhwv3ENi4favl6aalOzBUGTx4ajb DVLL4ZGtb5NfwdAoLWigrzeNs3tV85JzaMgAJETtdoPvcLn7skpgg7OUFPXlpDXQ h/tDyDY5MLbbwh0QEqZweegA1NeZB1jk3fPT4RYOcGBosPT0eYAj2s1HLhCs9Zg+ xW6TpkA403RulryVXKqAN61T6wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPhML2Qn 9wIiHaIQeZNfLJFeZ0lPMB8GA1UdIwQYMBaAFAzq8o/ugS8cyX8clrymRS73Lm1M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTczMi84QTdFOUU0MjJG MjMxMUVBOTAzQzE0MzlDNEY5QUUwMi9ET3J5ai02Qkx4ekpmeHlXdktaRkx2Y3Vi VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPcnlqLTZCTHh6SmZ4eVd2S1pGTHZjdWJVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU3MzIvOEE3RTlFNDIyRjIzMTFFQTkwM0MxNDM5QzRGOUFFMDIvNzA3QkExMEU5 REIyMTFFQUIzQTg1QTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFny+4DBAJn82AwDQQCAAIwBwMFACQD0UAwDQYJKoZIhvcN AQELBQADggEBAMNwlgMMgsfR/S7vOfKDOJCilPFv+zne8kZqVWSLjv0HuBLr8ZCT FshKHq5F4AesDIIwxRila9Njsxsf1Wr5+Mw9Mr5nvL9EJo9iYa4C20lii2BRfStf QCRx9wWZQdI83Jf4VO3xBzE7WHa8DzaQ22LfFLFhDGKlKI0/xUYe+1GKo30oG1ea Iv4XatAg/cAtvHzh4d9kXnIxyXW4hd9N8CyjB4UnFDe1Nh8jlcgucDsiWuckQMeR N2DP7PaSppvYpal1wZFmJIBUq4/i/NbwJBC4PGqnxmgX4ahh8hvV8TI2uCE6RWgT QHB8iYgyRd/qsvcwtAtdZXnKMDs9uHvQzp4= -----END CERTIFICATE-----Generated at Wed May 22 20:42:50 2024 by rpki-client on console-fra.rpki-client.org