$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8320FBE8232B11EBB2348B23C4F9AE02.roa File: 8320FBE8232B11EBB2348B23C4F9AE02.roa (raw, json) Hash identifier: UcnwxScsysCMY48lVfpQF1IzUJ5+Szuvgh1AHnaByPI= Subject key identifier: 11:D6:0A:19:C5:CD:42:4B:09:74:46:8D:8A:F6:52:E4:D9:8B:40:F6 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 06E5 Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8320FBE8232B11EBB2348B23C4F9AE02.roa Signing time: Fri 30 Aug 2024 23:31:38 +0000 ROA not before: Fri 30 Aug 2024 23:31:37 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 138538 IP address blocks: 103.153.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Aug 30 23:31:37 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d25659-a426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7a:8b:6b:3d:fe:d1:19:0e:57:b4:09:a3:00: 49:24:14:92:85:cc:ad:97:f7:62:f5:ef:91:20:02: d2:a2:5d:f2:17:ac:f8:c8:1b:ed:48:92:81:48:af: 07:1f:f0:82:3d:c4:74:2c:84:bd:31:18:b8:d2:d3: 6a:1c:d8:7c:52:39:44:f6:72:6a:2d:93:b6:f9:2f: 36:25:1e:0f:d2:0e:db:9a:be:b7:1e:a3:e0:4a:d7: 4d:56:60:7c:50:10:fc:3a:f1:5f:fd:67:6e:71:1f: f9:8d:1a:9d:67:d6:ec:7b:98:3c:36:a8:42:06:fc: 5d:81:ba:a6:50:e3:75:2e:95:34:7b:bc:70:12:97: 0f:31:06:0b:6f:00:ed:19:ae:33:ea:e9:7c:85:8a: c3:0a:3b:88:90:c9:01:01:a3:ad:c7:a3:8e:c2:14: aa:e6:e8:51:c0:85:25:c1:0a:d5:5d:34:ef:80:c1: a7:cd:da:1c:1b:b3:06:c9:d4:47:f6:ff:32:f3:5b: 79:c7:74:e9:b0:5d:d9:13:30:89:39:fb:57:13:e3: 2e:40:a6:b2:08:76:8d:ef:8a:4a:b8:26:76:a8:1c: be:fc:69:97:09:8a:1d:3b:fa:16:d0:a3:1a:da:d6: 77:70:40:a9:35:79:3d:cd:e2:16:f7:da:6f:8b:99: ca:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D6:0A:19:C5:CD:42:4B:09:74:46:8D:8A:F6:52:E4:D9:8B:40:F6 X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8320FBE8232B11EBB2348B23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.100.0/23 Signature Algorithm: sha256WithRSAEncryption 00:c9:07:ea:22:f0:14:d0:c7:65:06:97:dd:4c:49:41:61:d1: f1:42:15:6a:0b:33:0c:c2:bc:32:a2:2a:19:3f:2d:4a:31:86: 2e:87:65:2b:8d:08:35:b5:8f:9e:a0:dd:c3:ac:c3:d4:8f:6f: de:0d:9d:8d:38:eb:9f:73:62:89:62:3b:31:44:0f:b7:67:d9: 5f:dc:c1:0c:ff:d1:f9:6a:50:c0:81:15:b1:01:d1:a5:1b:a6: 4e:70:2d:f9:6d:3a:03:fc:15:29:1d:9a:b4:ae:ba:f7:4c:ae: 27:c9:92:2d:7b:08:1e:f6:45:d4:fd:2a:5c:74:7e:4d:c0:b9: 2b:42:04:7a:33:76:53:81:34:33:ab:13:32:af:83:82:f0:43: 88:2e:ea:19:6c:f3:dc:bb:53:2d:f5:6c:b4:c1:22:4a:61:b0: 42:16:c1:9b:c7:1a:78:ea:7d:92:74:fd:62:03:f3:b3:20:71: d5:2b:aa:b7:c0:61:95:63:50:81:3e:ea:35:a3:c7:37:f7:42: 92:80:15:ce:6d:9c:87:f9:c7:c1:c6:6c:20:cd:2f:af:be:78: 33:98:8e:47:3b:4d:c8:0e:f5:c3:6f:b0:8c:59:06:26:ff:ec: b5:ce:2a:99:ad:ad:3f:67:25:74:55:00:f6:bd:f8:94:ce:65: ff:e6:b5:e1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjQwODMwMjMzMTM3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQyNTY1OS1hNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XqLaz3+0RkOV7QJowBJJBSShcytl/di9e+RIALSol3yF6z4yBvtSJKBSK8H H/CCPcR0LIS9MRi40tNqHNh8UjlE9nJqLZO2+S82JR4P0g7bmr63HqPgStdNVmB8 UBD8OvFf/WducR/5jRqdZ9bse5g8NqhCBvxdgbqmUON1LpU0e7xwEpcPMQYLbwDt Ga4z6ul8hYrDCjuIkMkBAaOtx6OOwhSq5uhRwIUlwQrVXTTvgMGnzdocG7MGydRH 9v8y81t5x3TpsF3ZEzCJOftXE+MuQKayCHaN74pKuCZ2qBy+/GmXCYodO/oW0KMa 2tZ3cECpNXk9zeIW99pvi5nKlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBHWChnF zUJLCXRGjYr2UuTZi0D2MB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI5NEQvMkM3MTYyQ0MyMzI4MTFFQjlGRjZFOTFBQzRGOUFFMDIvODMyMEZCRTgy MzJCMTFFQkIyMzQ4QjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmWQwDQYJKoZIhvcNAQELBQADggEBAADJB+oi8BTQx2UG l91MSUFh0fFCFWoLMwzCvDKiKhk/LUoxhi6HZSuNCDW1j56g3cOsw9SPb94NnY04 659zYoliOzFED7dn2V/cwQz/0flqUMCBFbEB0aUbpk5wLfltOgP8FSkdmrSuuvdM rifJki17CB72RdT9Klx0fk3AuStCBHozdlOBNDOrEzKvg4LwQ4gu6hls89y7Uy31 bLTBIkphsEIWwZvHGnjqfZJ0/WID87MgcdUrqrfAYZVjUIE+6jWjxzf3QpKAFc5t nIf5x8HGbCDNL6++eDOYjkc7TcgO9cNvsIxZBib/7LXOKpmtrT9nJXRVAPa9+JTO Zf/mteE= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:49 2024 by rpki-client on console-ams.rpki-client.org