$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/B4D2B6A2C1A811EA80577A47C4F9AE02.roa File: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (raw, json) Hash identifier: 2JmA3PkYqpUMmOVyVV5dhFWFglZf8xMS4jIUqW1KOUQ= Subject key identifier: 82:9B:DC:78:C5:88:16:B2:9C:80:EF:80:27:31:65:3A:F0:61:EF:3D Certificate issuer: /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Certificate serial: 07CC Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/B4D2B6A2C1A811EA80577A47C4F9AE02.roa Signing time: Tue 18 Jun 2024 22:59:18 +0000 ROA not before: Tue 18 Jun 2024 22:59:18 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 140633 IP address blocks: 103.151.150.0/23 maxlen: 23 2001:df3:c680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Validity Not Before: Jun 18 22:59:18 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66721145-1820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:11:0f:36:9f:d7:cb:3f:c0:44:b4:58:37:8b: 5d:a2:45:a5:3c:cc:cc:2c:2d:53:c3:0d:a8:76:2f: 20:9a:8e:2e:c0:fe:e4:5d:e5:95:20:b1:64:4a:fe: b7:7f:3d:da:e4:c2:9f:12:dc:12:3a:46:76:94:8b: ed:8b:9d:7b:cf:c1:db:a8:af:02:3b:20:0d:c8:e8: 8b:f2:71:fc:7f:46:f7:31:3c:66:1d:25:c5:f8:47: 72:1b:c2:c6:f9:d5:f9:52:c8:a9:fe:8f:1a:2d:9f: 1d:2e:c2:90:f2:4b:84:18:07:1c:d2:17:7b:d1:d0: c5:59:b2:e9:c0:dd:b5:eb:15:64:79:ea:d7:3e:77: 00:f1:6e:89:e0:f9:8a:e1:5e:f0:94:c1:1e:b8:b3: 47:5a:13:fa:e8:5b:65:1e:80:13:5f:95:92:74:54: 96:35:36:fe:83:ec:e1:c9:33:be:25:05:33:a2:46: c7:b3:8d:f5:ee:19:b6:4d:e2:96:df:b4:50:36:c0: 37:83:56:5f:35:04:3d:54:8b:14:49:cd:b9:ce:03: 7d:8d:a0:ca:bf:d2:81:b1:85:a3:d4:72:54:30:83: 9b:8d:4e:1a:14:36:98:66:20:98:7d:83:6d:41:5d: ab:68:96:11:91:c4:96:e4:ce:e4:e0:2e:08:7d:b8: 0d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9B:DC:78:C5:88:16:B2:9C:80:EF:80:27:31:65:3A:F0:61:EF:3D X509v3 Authority Key Identifier: keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/B4D2B6A2C1A811EA80577A47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.150.0/23 IPv6: 2001:df3:c680::/48 Signature Algorithm: sha256WithRSAEncryption 09:03:85:92:51:20:ed:97:46:58:68:7b:33:a9:5d:08:57:d3: 6d:b8:78:0c:e5:cf:84:62:43:30:d6:6b:dd:11:c1:e7:27:3a: 43:df:0f:b4:22:1c:ed:7f:b5:96:a2:69:af:68:dd:35:a7:b0: bb:b6:0d:21:9d:dd:4c:3e:74:b1:95:47:32:7d:7a:1f:8e:58: 38:a0:ec:21:38:20:66:81:a3:ae:e0:35:be:ad:70:16:e1:4d: 52:3b:6f:38:d0:cd:25:14:9c:e1:06:b2:bf:30:59:df:90:3d: b2:39:0c:0a:ce:d6:9b:23:cd:ce:93:df:f6:f4:ea:32:2c:2b: 13:ef:45:e5:18:d0:c1:1b:c5:4e:45:d5:99:84:de:13:52:e0: 1f:a3:38:f5:51:99:32:0c:94:c4:fc:75:c2:a8:89:0a:3e:9f: 76:25:ff:47:53:64:1c:db:41:f4:48:aa:1f:2c:e1:61:61:9c: c9:9e:c3:cf:b5:ed:68:54:1e:10:86:17:4a:53:e0:f2:63:1e: e6:2e:8f:c4:3b:10:67:32:eb:77:a3:9e:6f:d9:03:2c:ca:54: f4:40:ba:2a:3a:c6:9b:ef:27:38:a0:0f:65:13:fd:4a:25:ef: c7:80:a4:a8:6e:02:4b:0b:17:5a:16:df:b9:6c:18:42:f6:97: ae:5f:be:ab -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI1NEQxMTAvBgNVBAUTKDhENDEzMzZDQjVEMEFGRkYxMDI4MjE2RDk1MzRCQjdF MDJDM0U3ODUwHhcNMjQwNjE4MjI1OTE4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjcyMTE0NS0xODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/BEPNp/Xyz/ARLRYN4tdokWlPMzMLC1Tww2odi8gmo4uwP7kXeWVILFkSv63 fz3a5MKfEtwSOkZ2lIvti517z8HbqK8COyANyOiL8nH8f0b3MTxmHSXF+EdyG8LG +dX5Usip/o8aLZ8dLsKQ8kuEGAcc0hd70dDFWbLpwN216xVkeerXPncA8W6J4PmK 4V7wlMEeuLNHWhP66FtlHoATX5WSdFSWNTb+g+zhyTO+JQUzokbHs4317hm2TeKW 37RQNsA3g1ZfNQQ9VIsUSc25zgN9jaDKv9KBsYWj1HJUMIObjU4aFDaYZiCYfYNt QV2raJYRkcSW5M7k4C4IfbgNqwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIKb3HjF iBaynIDvgCcxZTrwYe89MB8GA1UdIwQYMBaAFI1BM2y10K//ECghbZU0u34Cw+eF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjU0RC84Q0U2MkRGQUMx QTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJfOFFLQ0Z0bFRTN2ZnTEQ1 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVRXpiTFhRcl84UUtDRnRsVFM3ZmdMRDU0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzI1NEQvOENFNjJERkFDMUE3MTFFQTlENkI4NzQzQzRGOUFFMDIvQjREMkI2QTJD MUE4MTFFQTgwNTc3QTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnl5YwDwQCAAIwCQMHACABDfPGgDANBgkqhkiG9w0BAQsF AAOCAQEACQOFklEg7ZdGWGh7M6ldCFfTbbh4DOXPhGJDMNZr3RHB5yc6Q98PtCIc 7X+1lqJpr2jdNaewu7YNIZ3dTD50sZVHMn16H45YOKDsITggZoGjruA1vq1wFuFN UjtvONDNJRSc4QayvzBZ35A9sjkMCs7WmyPNzpPf9vTqMiwrE+9F5RjQwRvFTkXV mYTeE1LgH6M49VGZMgyUxPx1wqiJCj6fdiX/R1NkHNtB9EiqHyzhYWGcyZ7Dz7Xt aFQeEIYXSlPg8mMe5i6PxDsQZzLrd6Oeb9kDLMpU9EC6KjrGm+8nOKAPZRP9SiXv x4CkqG4CSwsXWhbfuWwYQvaXrl++qw== -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org