$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/7D9F83FE10FA11EFADBBC431C4F9AE02.roa File: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (raw, json) Hash identifier: oCCDEtGddaMKQfOelMIcnjIu17ZvyL6EU64SchGV+9M= Subject key identifier: AE:DE:14:46:7C:B7:2C:B7:14:13:58:21:C4:84:55:F2:C6:AE:A9:0A Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Certificate serial: 02 Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/7D9F83FE10FA11EFADBBC431C4F9AE02.roa Signing time: Mon 13 May 2024 07:29:11 +0000 ROA not before: Mon 13 May 2024 07:29:11 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137453 IP address blocks: 103.155.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Validity Not Before: May 13 07:29:11 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6641c146-2ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:dd:e5:27:47:cc:77:33:93:51:88:9a:86: da:26:bd:56:d6:7f:eb:85:da:e1:45:9f:a9:d1:d6: 45:8c:a7:6f:8a:34:98:f7:60:50:b5:46:c2:89:f4: 0f:2d:96:bd:20:d9:a7:f5:34:1e:56:05:7f:8b:a6: 0e:54:23:da:7c:c2:45:b6:b2:bd:52:2c:34:cd:80: 42:cc:65:03:06:9f:bc:ed:03:ff:ff:14:38:c4:c7: 02:17:1d:b1:9b:14:60:64:20:6e:cd:77:ea:6c:9b: 11:5a:1e:d1:06:6a:93:97:a9:e4:4e:63:28:ce:27: ab:f8:b8:1a:b7:16:2c:26:6d:40:ef:ac:7d:07:60: 78:05:eb:1f:cd:5e:0a:ca:8d:1c:91:09:93:33:66: 47:f8:66:a8:24:87:3f:98:12:f3:72:14:62:e7:02: 48:cf:f7:67:85:fa:9d:8f:63:aa:e9:2f:79:19:21: c6:de:fa:04:09:12:00:7f:46:07:db:bf:3b:be:12: b0:da:09:03:17:45:ae:80:84:6f:96:d8:6e:1d:c0: 00:60:5b:0a:ad:9f:3d:af:53:c8:5c:a2:f7:13:13: 07:2c:68:0d:ec:9f:c1:76:90:a6:31:23:33:65:7b: d6:8d:4f:be:01:c1:02:71:d2:9b:ef:7e:cc:31:ce: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DE:14:46:7C:B7:2C:B7:14:13:58:21:C4:84:55:F2:C6:AE:A9:0A X509v3 Authority Key Identifier: keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/7D9F83FE10FA11EFADBBC431C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.58.0/24 Signature Algorithm: sha256WithRSAEncryption 72:2f:ab:21:e1:4d:36:33:9e:65:cc:61:3c:04:c0:20:d9:7f: 0f:0a:cb:59:00:93:25:cc:94:07:e5:26:ee:18:56:2b:5d:15: dc:33:19:bd:75:60:24:0e:50:a2:d8:b4:a3:b3:7a:26:52:ed: fc:70:5c:48:c8:dc:c9:4d:05:b0:55:ed:25:2f:36:da:bd:80: d9:fb:28:bc:4d:52:bf:63:73:9c:09:25:49:38:3c:58:3c:2e: 8b:2f:78:00:54:17:4a:ae:e7:4d:84:1f:62:15:f9:f0:83:85: 4c:08:a5:63:e8:1c:a1:49:2e:80:1a:f6:79:88:c4:c3:b1:35: 58:50:1d:64:d1:a9:e5:f2:2d:4f:9c:ba:6d:61:5d:70:c6:98: b2:2b:24:b2:a6:91:86:1a:9e:b0:ac:b8:0e:4a:dd:23:7d:f4: 9a:da:c2:6a:61:8e:78:84:20:c3:be:e8:69:ff:92:b7:c4:72: 1d:ba:ce:7b:7b:b4:b2:0f:5f:50:d0:c6:ad:fa:05:21:ba:97: 51:08:3b:ae:2e:2a:94:f4:86:5d:da:10:77:07:bf:f8:ba:ac: f1:32:9d:aa:53:ab:59:c7:77:2e:61:de:82:af:3d:8d:03:86: 71:1d:d6:dd:eb:52:0a:12:cc:83:55:7f:4e:c2:81:68:11:d8: 7f:a8:c5:70 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzNGMTExMC8GA1UEBRMoODA3QzA0MEZBOTAxRTVEODY5NUE2NTM0REU2NkMzRDZB MEJGQkNDNTAeFw0yNDA1MTMwNzI5MTFaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NDFjMTQ2LTJiYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzmt3lJ0fMdzOTUYiahtomvVbWf+uF2uFFn6nR1kWMp2+KNJj3YFC1RsKJ9A8t lr0g2af1NB5WBX+Lpg5UI9p8wkW2sr1SLDTNgELMZQMGn7ztA///FDjExwIXHbGb FGBkIG7Nd+psmxFaHtEGapOXqeROYyjOJ6v4uBq3FiwmbUDvrH0HYHgF6x/NXgrK jRyRCZMzZkf4Zqgkhz+YEvNyFGLnAkjP92eF+p2PY6rpL3kZIcbe+gQJEgB/Rgfb vzu+ErDaCQMXRa6AhG+W2G4dwABgWwqtnz2vU8hcovcTEwcsaA3sn8F2kKYxIzNl e9aNT74BwQJx0pvvfswxzlxLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUrt4URny3 LLcUE1ghxIRV8sauqQowHwYDVR0jBBgwFoAUgHwED6kB5dhpWmU03mbD1qC/vMUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDM0YxLzk1QjcxMUM0MTBG OTExRUY4ODhDNTIyRkM0RjlBRTAyL2dId0VENmtCNWRocFdtVTAzbWJEMXFDX3ZN VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0h3RUQ2a0I1ZGhwV21VMDNtYkQxcUNfdk1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzNGMS85NUI3MTFDNDEwRjkxMUVGODg4QzUyMkZDNEY5QUUwMi83RDlGODNGRTEw RkExMUVGQURCQkM0MzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGebOjANBgkqhkiG9w0BAQsFAAOCAQEAci+rIeFNNjOeZcxh PATAINl/DwrLWQCTJcyUB+Um7hhWK10V3DMZvXVgJA5Qoti0o7N6JlLt/HBcSMjc yU0FsFXtJS822r2A2fsovE1Sv2NznAklSTg8WDwuiy94AFQXSq7nTYQfYhX58IOF TAilY+gcoUkugBr2eYjEw7E1WFAdZNGp5fItT5y6bWFdcMaYsisksqaRhhqesKy4 DkrdI330mtrCamGOeIQgw77oaf+St8RyHbrOe3u0sg9fUNDGrfoFIbqXUQg7ri4q lPSGXdoQdwe/+Lqs8TKdqlOrWcd3LmHegq89jQOGcR3W3etSChLMg1V/TsKBaBHY f6jFcA== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:31 2024 by rpki-client on console-ams.rpki-client.org