$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/D1DEC18AB5B711EEB1FB8657C4F9AE02.roa File: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (raw, json) Hash identifier: oOShpLLwZ53WfwV7OnNp44ZUZdSDR6asOa981HQ2+Vc= Subject key identifier: 39:11:D0:02:17:3B:5C:A0:ED:62:A7:88:F8:05:C7:A0:5E:6E:43:07 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 6F Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/D1DEC18AB5B711EEB1FB8657C4F9AE02.roa Signing time: Wed 19 Jun 2024 08:21:10 +0000 ROA not before: Wed 19 Jun 2024 08:21:10 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 134378 IP address blocks: 103.63.92.0/22 maxlen: 22 103.63.92.0/23 maxlen: 23 103.63.92.0/24 maxlen: 24 103.63.93.0/24 maxlen: 24 103.63.94.0/23 maxlen: 23 103.63.94.0/24 maxlen: 24 103.63.95.0/24 maxlen: 24 103.153.120.0/23 maxlen: 23 103.153.120.0/24 maxlen: 24 103.153.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: Jun 19 08:21:10 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667294f6-bf72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:23:10:c2:09:48:62:d8:08:e8:58:7c:62:14: e7:2b:30:9f:85:20:16:d6:69:70:81:13:79:d8:a7: b4:27:6d:2c:cf:32:14:fb:bd:3d:bb:f7:e4:d9:be: 4e:36:10:e0:92:18:4a:d5:a5:98:5b:de:d6:27:c7: ec:a9:7d:02:39:a2:1b:a3:d9:1c:20:85:26:58:08: 82:7f:00:c1:0b:8e:c6:a9:3a:30:70:92:5d:1d:bd: fb:e4:12:b8:0a:37:e8:36:56:fb:4d:19:c2:81:26: f2:a9:29:f1:45:a7:74:32:29:c0:7b:db:b9:36:47: dd:4c:33:ce:7a:f3:62:6a:09:e4:04:0a:30:d8:65: 9e:36:08:9f:79:c5:18:c5:e4:fa:bc:84:14:82:78: 05:0b:e3:cd:22:d0:cb:dc:d2:42:18:a3:6a:ba:6d: 0a:79:be:e6:a8:33:96:ec:9d:d6:82:e6:dc:40:7b: b7:4c:51:ac:86:4e:1f:e7:56:a4:8b:77:7e:35:5a: 32:03:cc:d0:b8:72:d2:6c:1c:2a:57:24:dd:6c:0d: 28:60:65:e1:0c:a3:21:47:f6:15:84:06:cb:ea:77: bf:a5:90:8d:6a:c4:2e:06:da:24:bc:c6:da:f3:c9: f9:94:f4:75:b9:3c:c2:d7:d6:8f:6c:a2:f7:9e:85: ee:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:11:D0:02:17:3B:5C:A0:ED:62:A7:88:F8:05:C7:A0:5E:6E:43:07 X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/D1DEC18AB5B711EEB1FB8657C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.63.92.0/22 103.153.120.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:6c:df:50:66:87:a0:45:7b:f8:90:24:53:d3:79:ae:e2:d1: 8b:e1:41:23:5a:11:7e:da:bb:06:7b:fa:44:5f:d2:63:01:b6: aa:5f:20:7f:c6:50:51:87:5a:80:7f:4d:0b:86:02:cd:81:af: 58:1d:9d:42:00:18:14:52:94:67:b6:04:3d:b7:f5:1f:c6:d1: 23:38:a2:5f:70:64:e5:9b:dd:4d:cc:fb:71:09:a9:af:bd:c6: 8c:d3:48:58:d0:0c:01:46:ad:47:f5:eb:b6:11:7c:d3:5a:10: 62:18:39:f4:d2:42:6c:81:0a:4b:79:8c:0a:75:d5:5a:59:e9: 9d:eb:a1:b2:4e:87:6a:7f:f0:29:73:8d:79:d5:45:6e:66:a7: e1:c5:2b:a5:2f:52:ec:bb:c4:16:ac:62:b9:be:0f:b3:32:6d: e7:20:c3:2c:e6:28:cd:0d:2e:5d:42:40:6e:f9:89:05:12:9c: 07:bd:66:a1:6e:24:aa:fb:64:4a:40:08:7d:21:9b:05:42:b8: 05:05:f7:43:57:ab:fa:7d:d8:c5:c5:fd:0a:11:46:55:5f:14: 97:09:69:35:ec:dc:ad:db:01:84:28:85:db:fc:50:67:f7:f4: 08:2a:f7:60:1f:f9:a6:bf:7c:f7:cd:91:25:02:ad:6a:1b:b2: a4:8a:5c:34 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEYzNDExMC8GA1UEBRMoNjQ5NDNCMUQyQkUyRjkzREQ2NDBFMDI0RUI5NEQ4RDM4 RENFNkE4MzAeFw0yNDA2MTkwODIxMTBaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NzI5NGY2LWJmNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkIxDCCUhi2AjoWHxiFOcrMJ+FIBbWaXCBE3nYp7QnbSzPMhT7vT279+TZvk42 EOCSGErVpZhb3tYnx+ypfQI5ohuj2RwghSZYCIJ/AMELjsapOjBwkl0dvfvkErgK N+g2VvtNGcKBJvKpKfFFp3QyKcB727k2R91MM85682JqCeQECjDYZZ42CJ95xRjF 5Pq8hBSCeAUL480i0Mvc0kIYo2q6bQp5vuaoM5bsndaC5txAe7dMUayGTh/nVqSL d341WjIDzNC4ctJsHCpXJN1sDShgZeEMoyFH9hWEBsvqd7+lkI1qxC4G2iS8xtrz yfmU9HW5PMLX1o9soveehe4tAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUORHQAhc7 XKDtYqeI+AXHoF5uQwcwHwYDVR0jBBgwFoAUZJQ7HSvi+T3WQOAk65TY043OaoMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4RjM0LzgxREFFQzVBQjU5 ODExRUU5QTE4Rjk1RkM0RjlBRTAyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2Fv TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkpRN0hTdmktVDNXUU9BazY1VFkwNDNPYW9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9EMURFQzE4QUI1 QjcxMUVFQjFGQjg2NTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmc/XAMEAWeZeDANBgkqhkiG9w0BAQsFAAOCAQEAP2zfUGaH oEV7+JAkU9N5ruLRi+FBI1oRftq7Bnv6RF/SYwG2ql8gf8ZQUYdagH9NC4YCzYGv WB2dQgAYFFKUZ7YEPbf1H8bRIziiX3Bk5ZvdTcz7cQmpr73GjNNIWNAMAUatR/Xr thF801oQYhg59NJCbIEKS3mMCnXVWlnpneuhsk6Han/wKXONedVFbman4cUrpS9S 7LvEFqxiub4PszJt5yDDLOYozQ0uXUJAbvmJBRKcB71moW4kqvtkSkAIfSGbBUK4 BQX3Q1er+n3YxcX9ChFGVV8UlwlpNezcrdsBhCiF2/xQZ/f0CCr3YB/5pr98982R JQKtahuypIpcNA== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:21 2024 by rpki-client on console-ams.rpki-client.org