$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/63FE6F90232411EB87A6CB0DC4F9AE02.roa File: 63FE6F90232411EB87A6CB0DC4F9AE02.roa (raw, json) Hash identifier: H1cBS4aH5PgEy9PRy+UvX+kYdf8K796GHa2xj2vCKcY= Subject key identifier: B6:EC:CB:FB:6C:C1:14:D2:FA:93:F9:66:EB:F7:A0:19:39:D2:DF:2B Certificate issuer: /CN=A91C66B7/serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72 Certificate serial: 0842 Authority key identifier: C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/63FE6F90232411EB87A6CB0DC4F9AE02.roa Signing time: Wed 02 Aug 2023 20:58:22 +0000 ROA not before: Wed 02 Aug 2023 20:58:22 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 140732 IP address blocks: 103.150.208.0/23 maxlen: 23 103.150.208.0/24 maxlen: 24 103.150.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.crl rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2114 (0x842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66B7/serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72 Validity Not Before: Aug 2 20:58:22 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64cac36e-13c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:05:7b:f9:10:ba:16:64:51:f8:7b:38:48:5a: 9c:8c:05:6e:df:06:f0:d1:fc:95:e5:d9:d2:31:92: f4:65:6d:5e:b3:2f:8d:c5:43:8e:c2:3e:2f:51:16: 97:43:92:94:8a:54:b5:ae:19:65:e6:61:34:c5:07: c7:11:2a:0d:50:fa:a6:a6:a8:62:6f:3a:48:99:52: 46:9e:6f:97:19:c9:f9:28:32:c0:20:5a:59:dd:42: 14:a5:b3:5e:bb:66:c1:cc:50:b0:9f:35:a4:e5:4c: 00:b4:dc:e0:d6:a5:b5:39:e8:2d:a2:98:64:a2:39: 77:a7:67:f3:f9:d7:70:0f:5d:ca:f6:e0:34:a1:d5: 4f:72:25:ef:6f:f9:bf:f6:33:39:c4:a8:6d:18:5f: a1:49:cd:63:e5:b1:28:89:09:4d:9c:e4:64:e6:59: e9:3b:34:f2:6a:7b:8d:f0:dd:22:72:6e:73:5f:97: 5a:a3:3c:b1:78:5d:e0:98:f6:08:56:2c:a8:34:3d: b3:f3:14:98:61:ab:9d:b9:75:6a:27:15:dd:43:e1: aa:9c:23:0b:79:9a:b1:2a:d5:f7:3d:b3:b6:8f:52: 26:70:1f:10:a5:cd:64:35:5e:90:23:2d:23:30:8e: a7:41:9b:36:ed:29:86:3f:fa:2f:1e:31:fa:4c:78: b7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EC:CB:FB:6C:C1:14:D2:FA:93:F9:66:EB:F7:A0:19:39:D2:DF:2B X509v3 Authority Key Identifier: keyid:C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/63FE6F90232411EB87A6CB0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.208.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:2c:8d:08:b6:39:67:d5:2f:57:7c:75:ae:33:5e:ef:0b:70: 72:0c:2c:0e:a7:87:f7:7c:25:f2:1a:8e:44:01:94:0a:04:b6: 88:5a:d2:f6:82:48:be:8d:88:56:d1:dc:eb:f5:18:80:f9:e3: 02:7a:17:bf:59:6e:9d:71:95:cf:18:fa:5b:66:eb:3d:23:6b: bf:6f:77:57:23:be:9c:2f:ae:ce:af:3a:38:4c:7e:83:6c:e2: b0:1b:59:be:07:95:9c:5c:ca:7a:33:c6:77:bc:18:11:15:14: 61:ba:4c:a7:cf:f6:03:de:3e:bb:02:26:71:81:c5:f8:dd:b1: ec:2b:02:3c:a7:ad:11:a7:5d:99:34:c0:e1:4f:26:e9:8c:fe: 75:bc:e5:e7:50:94:c3:b4:da:78:e0:e9:02:28:52:4b:45:14: 0c:62:77:88:6c:ba:e1:77:e9:16:ff:07:99:35:2d:4e:51:bd: 76:5f:af:55:6b:c3:69:c5:34:f3:92:cf:93:bb:dc:ac:36:ab: 3f:1b:7b:61:66:15:fc:82:33:4a:bb:0f:92:de:3a:e5:26:d5: b4:e1:9c:f3:2e:3e:71:15:11:ab:da:84:9d:bb:85:95:f9:2f: 37:3e:c2:99:c3:1a:52:3d:2f:22:9b:e0:eb:8f:0c:38:52:60: 09:2b:4a:bd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2QjcxMTAvBgNVBAUTKEMzNDNCM0JCODNBN0UyM0ZBRDk1QUY4RDIzMkI1MjA1 MkEwRkRFNzIwHhcNMjMwODAyMjA1ODIyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNhYzM2ZS0xM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gV7+RC6FmRR+Hs4SFqcjAVu3wbw0fyV5dnSMZL0ZW1esy+NxUOOwj4vURaX Q5KUilS1rhll5mE0xQfHESoNUPqmpqhibzpImVJGnm+XGcn5KDLAIFpZ3UIUpbNe u2bBzFCwnzWk5UwAtNzg1qW1Oegtophkojl3p2fz+ddwD13K9uA0odVPciXvb/m/ 9jM5xKhtGF+hSc1j5bEoiQlNnORk5lnpOzTyanuN8N0icm5zX5daozyxeF3gmPYI ViyoND2z8xSYYauduXVqJxXdQ+GqnCMLeZqxKtX3PbO2j1ImcB8Qpc1kNV6QIy0j MI6nQZs27SmGP/ovHjH6THi3jwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLbsy/ts wRTS+pP5Zuv3oBk50t8rMB8GA1UdIwQYMBaAFMNDs7uDp+I/rZWvjSMrUgUqD95y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZCNy82NkNEQTRFODkx MTYxMUVBOTFDNDY1MENDNEY5QUUwMi93ME96dTRPbjRqLXRsYS1OSXl0U0JTb1Az bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3cwT3p1NE9uNGotdGxhLU5JeXRTQlNvUDNuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzY2QjcvNjZDREE0RTg5MTE2MTFFQTkxQzQ2NTBDQzRGOUFFMDIvNjNGRTZGOTAy MzI0MTFFQjg3QTZDQjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnltAwDQYJKoZIhvcNAQELBQADggEBAAssjQi2OWfVL1d8 da4zXu8LcHIMLA6nh/d8JfIajkQBlAoEtoha0vaCSL6NiFbR3Ov1GID54wJ6F79Z bp1xlc8Y+ltm6z0ja79vd1cjvpwvrs6vOjhMfoNs4rAbWb4HlZxcynozxne8GBEV FGG6TKfP9gPePrsCJnGBxfjdsewrAjynrRGnXZk0wOFPJumM/nW85edQlMO02njg 6QIoUktFFAxid4hsuuF36Rb/B5k1LU5RvXZfr1Vrw2nFNPOSz5O73Kw2qz8be2Fm FfyCM0q7D5LeOuUm1bThnPMuPnEVEavahJ27hZX5Lzc+wpnDGlI9LyKb4OuPDDhS YAkrSr0= -----END CERTIFICATE-----Generated at Mon May 6 22:41:03 2024 by rpki-client on console-ams.rpki-client.org