$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/21333DA69B2E11E8908CC50FC4F9AE02.roa File: 21333DA69B2E11E8908CC50FC4F9AE02.roa (raw, json) Hash identifier: Y+ST/2SAya5xqWC2Mrhoz3ZNiP+AUEx9jUaeouaZI0s= Subject key identifier: F2:B4:09:61:C9:A4:F4:E2:20:37:76:59:10:3F:06:E2:FB:47:F8:21 Certificate issuer: /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Certificate serial: 1228 Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/21333DA69B2E11E8908CC50FC4F9AE02.roa Signing time: Tue 22 Aug 2023 17:34:36 +0000 ROA not before: Tue 22 Aug 2023 17:34:36 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 7415 IP address blocks: 103.120.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 17:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4648 (0x1228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Validity Not Before: Aug 22 17:34:36 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64e4f1ac-2fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b0:38:d6:12:c9:5e:c1:a0:0b:d3:91:b1:2c: a6:2c:6f:ff:f9:67:1d:6b:e0:e0:f5:5f:d5:67:ec: dc:e3:a4:14:d7:68:de:2e:98:86:6f:72:4f:ab:ed: ca:0c:68:a7:a4:ce:5d:f1:e7:0e:e1:a9:8a:8c:3d: 2d:49:b6:ff:c1:9a:94:12:4f:87:b9:f0:2c:1b:a0: 22:e4:0b:fc:d8:59:27:5a:d6:5a:72:7d:be:f2:f4: cd:a0:a0:e5:61:ad:de:97:74:7d:48:a7:a8:45:de: a7:0d:f4:4e:8c:63:c9:a5:ba:ca:6b:fb:41:d6:24: b2:7a:2e:16:db:3f:1a:e2:36:55:c9:1d:ea:05:0c: f6:80:54:e0:6c:09:78:53:40:3f:9e:7e:aa:6b:84: e7:aa:52:a9:4e:2f:6e:6b:bb:80:3e:aa:21:c9:1e: e5:2a:88:28:42:04:a0:84:9d:c2:6e:e2:46:55:42: 00:51:39:2e:85:2d:e6:bb:8e:b9:bb:c4:5a:56:98: 06:1b:db:5a:cf:16:00:fa:66:b3:30:a5:62:69:bd: cd:5b:45:ee:43:76:f8:84:16:30:21:e2:60:fe:85: 27:df:4d:93:6f:a1:35:85:c3:76:c6:ed:6b:6d:4e: dd:4c:b3:3f:74:b4:03:32:42:3c:8d:17:e3:cf:a8: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B4:09:61:C9:A4:F4:E2:20:37:76:59:10:3F:06:E2:FB:47:F8:21 X509v3 Authority Key Identifier: keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/21333DA69B2E11E8908CC50FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.137.0/24 Signature Algorithm: sha256WithRSAEncryption 54:cc:ee:61:4b:2d:d7:17:94:d3:f9:79:c8:34:43:d1:6a:a1: b9:5b:9d:0a:2d:79:66:88:0f:36:e4:da:26:9d:16:cf:05:f8: c9:6f:1f:0e:c3:c6:29:e4:fe:b7:c9:20:83:a8:c7:36:99:44: 90:77:16:01:88:db:83:1c:b0:d8:3c:41:c6:3c:ea:52:8f:2c: b8:f5:d6:2a:55:09:10:25:81:df:c3:26:c3:54:b6:b4:7b:da: 46:62:ea:84:ff:5f:5f:56:eb:8a:cb:f1:d1:f0:6d:8a:bd:76: 57:7e:ea:e8:ae:89:b5:d4:65:2c:52:60:c5:e1:5c:55:83:2d: df:5e:8a:ca:c5:f8:56:e2:82:ac:01:56:69:f9:e5:cc:17:8b: 60:fa:9a:43:b2:33:a7:05:05:75:58:ec:cf:ce:3e:45:3a:c6: e2:7e:14:cf:a6:d0:90:95:d2:ef:14:95:73:d9:dd:5a:af:06: df:02:16:2f:35:cc:56:40:4f:42:15:3c:20:f2:39:96:aa:c9: d1:de:c1:64:a0:03:5b:b1:d3:60:31:fd:c6:56:2c:00:2a:fa: b5:85:56:e2:b0:23:e8:da:b1:7c:fd:e1:ac:e1:22:6a:f0:44: e6:be:58:e6:d2:56:f4:9a:03:35:0d:fc:14:ca:ca:45:2e:66: e7:16:1b:64 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJCQTUxMTAvBgNVBAUTKDM1OTYwRTFFMTY5RTAzRjQ2RkFGOTFGNEUzRkYxMzUx NDZBNjMxM0EwHhcNMjMwODIyMTczNDM2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGU0ZjFhYy0yZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrA41hLJXsGgC9ORsSymLG//+Wcda+Dg9V/VZ+zc46QU12jeLpiGb3JPq+3K DGinpM5d8ecO4amKjD0tSbb/wZqUEk+HufAsG6Ai5Av82FknWtZacn2+8vTNoKDl Ya3el3R9SKeoRd6nDfROjGPJpbrKa/tB1iSyei4W2z8a4jZVyR3qBQz2gFTgbAl4 U0A/nn6qa4TnqlKpTi9ua7uAPqohyR7lKogoQgSghJ3CbuJGVUIAUTkuhS3mu465 u8RaVpgGG9tazxYA+mazMKViab3NW0XuQ3b4hBYwIeJg/oUn302Tb6E1hcN2xu1r bU7dTLM/dLQDMkI8jRfjz6ibZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPK0CWHJ pPTiIDd2WRA/BuL7R/ghMB8GA1UdIwQYMBaAFDWWDh4WngP0b6+R9OP/E1FGpjE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkJBNS9FNjQ4NEFDRTlC MkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFfUnZyNUgwNF84VFVVYW1N VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05aWU9IaGFlQV9SdnI1SDA0XzhUVVVhbU1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkJCQTUvRTY0ODRBQ0U5QjJEMTFFOEI0NjVEODBGQzRGOUFFMDIvMjEzMzNEQTY5 QjJFMTFFODkwOENDNTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABneIkwDQYJKoZIhvcNAQELBQADggEBAFTM7mFLLdcXlNP5 ecg0Q9FqoblbnQoteWaIDzbk2iadFs8F+MlvHw7Dxink/rfJIIOoxzaZRJB3FgGI 24McsNg8QcY86lKPLLj11ipVCRAlgd/DJsNUtrR72kZi6oT/X19W64rL8dHwbYq9 dld+6uiuibXUZSxSYMXhXFWDLd9eisrF+FbigqwBVmn55cwXi2D6mkOyM6cFBXVY 7M/OPkU6xuJ+FM+m0JCV0u8UlXPZ3VqvBt8CFi81zFZAT0IVPCDyOZaqydHewWSg A1ux02Ax/cZWLAAq+rWFVuKwI+jasXz94azhImrwROa+WObSVvSaAzUN/BTKykUu ZucWG2Q= -----END CERTIFICATE-----Generated at Wed May 22 20:09:05 2024 by rpki-client on console-ams.rpki-client.org