$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/C2EFC706CAAE11EBA95C5E64C4F9AE02.roa File: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (raw, json) Hash identifier: CjCSmslBUSukL+VQeriKJzpmD5FpwHuT7xL5fJExCAg= Subject key identifier: D8:41:17:73:8F:D3:26:47:4E:BC:7D:A1:4D:36:59:C7:32:EF:33:22 Certificate issuer: /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Certificate serial: 050F Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/C2EFC706CAAE11EBA95C5E64C4F9AE02.roa Signing time: Sat 27 Jul 2024 00:42:14 +0000 ROA not before: Sat 27 Jul 2024 00:42:14 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 138246 IP address blocks: 103.168.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Validity Not Before: Jul 27 00:42:14 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a44266-e819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:7f:21:64:27:eb:c2:81:c5:65:d7:a2:74: b4:4a:15:2b:4d:ec:f0:e7:07:dc:31:bf:16:68:51: dc:70:75:09:43:3d:c5:cf:6c:a0:d9:1a:41:ac:73: 7f:f2:c7:23:24:33:ae:1d:16:19:57:3e:51:dc:f3: 32:27:3c:c4:df:d8:48:09:47:6a:6c:92:9a:57:5a: c6:42:c1:80:28:70:11:d1:64:42:63:8c:c4:9a:a1: a4:f4:f3:31:2f:ee:5a:7d:5b:4d:b7:7e:41:81:bf: 5e:bc:1c:83:df:1f:0a:33:6b:d7:79:4a:10:d6:d1: 1e:25:fb:b5:b5:6e:f5:83:04:c5:6d:dd:ca:8b:e2: d0:17:2c:69:c3:8d:fe:17:b6:7a:95:1e:bb:95:cc: ea:4b:58:9d:2c:96:54:d9:f1:e0:77:72:28:cc:59: 15:56:ab:f2:f6:30:e6:13:a2:72:2d:35:de:bb:4b: f2:e4:b2:e2:e9:06:5e:ae:2d:ec:20:38:5e:1d:58: 8a:ea:8f:57:ab:55:a1:7f:82:7f:73:bc:71:02:b8: 79:fe:6f:48:7d:f5:dc:2a:51:58:2f:db:0d:65:21: d0:f7:cb:53:63:4e:7c:31:f4:bb:b9:fa:f2:5a:e8: 90:d6:7b:e2:86:92:41:9e:69:2f:8a:d5:67:a6:7f: 2e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:41:17:73:8F:D3:26:47:4E:BC:7D:A1:4D:36:59:C7:32:EF:33:22 X509v3 Authority Key Identifier: keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/C2EFC706CAAE11EBA95C5E64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.18.0/23 Signature Algorithm: sha256WithRSAEncryption c1:b8:92:71:c3:87:b3:d5:88:00:62:65:1f:21:ea:87:cf:64: 7d:e6:4f:9e:60:7f:30:d0:c7:fb:bb:c4:07:84:e9:ce:a4:62: 1e:7e:24:bc:2e:8c:bb:55:90:c3:a9:07:21:6d:19:57:f3:86: be:8f:a1:4e:2a:75:95:24:9a:60:0c:52:7d:70:b9:f3:15:d4: 5d:e7:2a:38:95:15:c6:09:c0:65:15:c8:01:19:29:38:50:19: c4:78:9d:16:71:50:50:d9:d3:a0:61:d5:0b:cb:57:4d:9c:3a: eb:0e:ec:b3:45:e2:69:74:e0:0e:4b:af:0d:ad:8c:6c:ad:97: 93:99:07:5e:dd:31:6d:17:1b:5f:22:4c:23:f5:7e:35:a3:43: 8f:71:ca:d9:fd:88:5b:e4:71:84:8e:6a:a5:4f:ce:8c:8c:dc: 0a:3e:4c:61:6b:e2:cb:ee:91:d3:d7:20:41:9d:c4:67:8c:4d: 5e:16:b2:6d:7f:2e:9a:36:3d:35:66:b0:58:ab:21:9a:c2:8c: 63:4c:5f:88:37:89:cf:43:6c:c2:db:3d:a2:70:e5:77:12:76: 11:70:7c:b9:d8:53:28:27:fa:f8:11:73:3b:a0:3b:06:9b:53: c8:ec:83:60:a0:67:64:d1:94:24:27:54:5e:8d:e4:62:9c:1b: 74:fc:dc:fc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCNjExMTAvBgNVBAUTKDcxODQwRDdEOThDNUNGOUJENkJFQjQ0ODZBRDQ2NzQw NjVGMTQ3NDEwHhcNMjQwNzI3MDA0MjE0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE0NDI2Ni1lODE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJV/IWQn68KBxWXXonS0ShUrTezw5wfcMb8WaFHccHUJQz3Fz2yg2RpBrHN/ 8scjJDOuHRYZVz5R3PMyJzzE39hICUdqbJKaV1rGQsGAKHAR0WRCY4zEmqGk9PMx L+5afVtNt35Bgb9evByD3x8KM2vXeUoQ1tEeJfu1tW71gwTFbd3Ki+LQFyxpw43+ F7Z6lR67lczqS1idLJZU2fHgd3IozFkVVqvy9jDmE6JyLTXeu0vy5LLi6QZeri3s IDheHViK6o9Xq1Whf4J/c7xxArh5/m9IffXcKlFYL9sNZSHQ98tTY058MfS7ufry WuiQ1nvihpJBnmkvitVnpn8uQwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNhBF3OP 0yZHTrx9oU02Wccy7zMiMB8GA1UdIwQYMBaAFHGEDX2Yxc+b1r60SGrUZ0Bl8UdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0I2MS9CRTY4RDMwMkNB QUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1dld2clJJYXRSblFHWHhS MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZUU5mWmpGejV2V3ZyUklhdFJuUUdYeFIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdCNjEvQkU2OEQzMDJDQUFBMTFFQkI4QzAyQjVDQzRGOUFFMDIvQzJFRkM3MDZD QUFFMTFFQkE5NUM1RTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnqBIwDQYJKoZIhvcNAQELBQADggEBAMG4knHDh7PViABi ZR8h6ofPZH3mT55gfzDQx/u7xAeE6c6kYh5+JLwujLtVkMOpByFtGVfzhr6PoU4q dZUkmmAMUn1wufMV1F3nKjiVFcYJwGUVyAEZKThQGcR4nRZxUFDZ06Bh1QvLV02c OusO7LNF4ml04A5Lrw2tjGytl5OZB17dMW0XG18iTCP1fjWjQ49xytn9iFvkcYSO aqVPzoyM3Ao+TGFr4svukdPXIEGdxGeMTV4Wsm1/Lpo2PTVmsFirIZrCjGNMX4g3 ic9DbMLbPaJw5XcSdhFwfLnYUygn+vgRczugOwabU8jsg2CgZ2TRlCQnVF6N5GKc G3T83Pw= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:49 2024 by rpki-client on console-ams.rpki-client.org