$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/C2EFC706CAAE11EBA95C5E64C4F9AE02.roa File: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (raw, json) Hash identifier: q6sLAuUSwf58Tj2wEMhaQb8JCtyb7MpxdvJTeHgvbIw= Subject key identifier: 67:88:B6:2F:D4:A5:2F:8F:C3:C6:D0:46:17:FD:0D:CD:38:80:55:83 Certificate issuer: /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Certificate serial: 0455 Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/C2EFC706CAAE11EBA95C5E64C4F9AE02.roa Signing time: Thu 03 Aug 2023 00:41:24 +0000 ROA not before: Thu 03 Aug 2023 00:41:24 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 138246 IP address blocks: 103.168.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Validity Not Before: Aug 3 00:41:24 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64caf7b4-ccb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:c8:78:b8:8e:d5:87:96:b9:89:6c:bb:22: 79:63:cb:29:23:70:eb:51:42:88:d5:da:a2:db:71: 43:97:aa:e4:11:47:2a:49:1b:64:3c:d3:ec:3a:ef: 93:56:33:d6:9d:37:61:9c:5c:8e:77:cb:f2:a9:c8: b5:30:f5:4a:85:f3:b0:b1:90:53:ec:c2:43:9c:84: 81:21:81:33:98:ec:da:1e:4c:d3:07:be:45:66:9d: 7a:0b:18:95:f2:c4:9f:29:3c:00:7e:71:5d:e2:40: 35:9c:2e:36:a0:0e:45:20:d0:6d:72:8f:3a:b8:0d: 2d:2e:a7:69:31:59:e2:90:c2:ce:e6:21:8d:71:51: f8:bd:23:92:87:b2:5c:6b:24:04:44:e6:55:6d:de: 67:4b:a7:53:3e:50:bb:44:fd:cf:72:3d:9b:d6:24: 8b:d4:bf:8b:7b:48:06:ab:be:ce:21:b1:ca:71:b5: 62:ec:11:e8:e8:5d:f2:d5:18:a9:b4:13:7e:34:1f: 9b:a3:4b:04:31:24:60:8d:39:b3:4a:2b:87:61:59: 7f:94:82:21:80:0d:ec:79:31:eb:d8:ad:12:a1:e0: fa:a8:11:82:21:c5:b3:67:0e:61:80:79:e2:0a:eb: 0e:7a:11:c4:c4:1f:2c:53:e8:41:0f:d6:da:16:c4: d6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:88:B6:2F:D4:A5:2F:8F:C3:C6:D0:46:17:FD:0D:CD:38:80:55:83 X509v3 Authority Key Identifier: keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/C2EFC706CAAE11EBA95C5E64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.18.0/23 Signature Algorithm: sha256WithRSAEncryption cb:e7:0c:50:3f:73:06:b6:05:c4:21:cf:1a:d7:63:11:c9:32: 66:01:bc:66:81:67:7f:7a:6e:03:a0:70:98:e2:7d:57:c6:48: 6e:c9:a3:36:ae:01:58:f2:f7:91:53:aa:e8:b3:ae:a5:17:9a: 66:79:2f:f0:0f:5b:72:e8:e3:3f:c3:e5:78:eb:1f:33:c8:04: b5:cf:ce:53:3b:cf:a9:c9:f1:70:cd:dc:01:98:ae:98:2f:6e: b4:64:9d:a5:09:57:da:02:d7:83:69:3c:a6:75:30:f0:f5:7b: a7:94:41:49:75:1f:60:d2:19:3a:b0:05:21:01:aa:05:98:5c: c0:32:3c:0a:a8:6b:d5:22:98:61:98:69:29:83:ae:51:af:53: b7:aa:d6:a9:df:35:40:40:02:75:d1:77:31:77:5d:e4:93:e4: 7c:b2:23:30:bd:40:31:25:af:9f:11:c9:64:e1:2a:4b:f4:c5: 43:ea:d4:51:8e:10:14:5b:12:0e:5c:03:da:f4:1a:3b:f5:98: 8d:29:97:3b:df:80:39:a5:62:e2:37:0c:3b:75:c2:7a:8b:e8: 0f:cb:30:44:e0:a4:55:f8:c8:91:b7:5b:89:43:68:40:7d:bc: 94:98:49:42:71:a6:85:22:68:7f:43:59:cd:e5:a5:02:3e:ec: c4:4c:c1:64 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCNjExMTAvBgNVBAUTKDcxODQwRDdEOThDNUNGOUJENkJFQjQ0ODZBRDQ2NzQw NjVGMTQ3NDEwHhcNMjMwODAzMDA0MTI0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNhZjdiNC1jY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB/IeLiO1YeWuYlsuyJ5Y8spI3DrUUKI1dqi23FDl6rkEUcqSRtkPNPsOu+T VjPWnTdhnFyOd8vyqci1MPVKhfOwsZBT7MJDnISBIYEzmOzaHkzTB75FZp16CxiV 8sSfKTwAfnFd4kA1nC42oA5FINBtco86uA0tLqdpMVnikMLO5iGNcVH4vSOSh7Jc ayQEROZVbd5nS6dTPlC7RP3Pcj2b1iSL1L+Le0gGq77OIbHKcbVi7BHo6F3y1Rip tBN+NB+bo0sEMSRgjTmzSiuHYVl/lIIhgA3seTHr2K0SoeD6qBGCIcWzZw5hgHni CusOehHExB8sU+hBD9baFsTWEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGeIti/U pS+Pw8bQRhf9Dc04gFWDMB8GA1UdIwQYMBaAFHGEDX2Yxc+b1r60SGrUZ0Bl8UdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0I2MS9CRTY4RDMwMkNB QUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1dld2clJJYXRSblFHWHhS MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZUU5mWmpGejV2V3ZyUklhdFJuUUdYeFIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdCNjEvQkU2OEQzMDJDQUFBMTFFQkI4QzAyQjVDQzRGOUFFMDIvQzJFRkM3MDZD QUFFMTFFQkE5NUM1RTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnqBIwDQYJKoZIhvcNAQELBQADggEBAMvnDFA/cwa2BcQh zxrXYxHJMmYBvGaBZ396bgOgcJjifVfGSG7JozauAVjy95FTquizrqUXmmZ5L/AP W3Lo4z/D5XjrHzPIBLXPzlM7z6nJ8XDN3AGYrpgvbrRknaUJV9oC14NpPKZ1MPD1 e6eUQUl1H2DSGTqwBSEBqgWYXMAyPAqoa9UimGGYaSmDrlGvU7eq1qnfNUBAAnXR dzF3XeST5HyyIzC9QDElr58RyWThKkv0xUPq1FGOEBRbEg5cA9r0Gjv1mI0plzvf gDmlYuI3DDt1wnqL6A/LMETgpFX4yJG3W4lDaEB9vJSYSUJxpoUiaH9DWc3lpQI+ 7MRMwWQ= -----END CERTIFICATE-----Generated at Tue May 7 02:01:04 2024 by rpki-client on console-ams.rpki-client.org