$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/2815D106041A11EEA67A6B4DC4F9AE02.roa File: 2815D106041A11EEA67A6B4DC4F9AE02.roa (raw, json) Hash identifier: BGY/uPAB8s6bOk+iTJOiyTH1PPXIxJM6rQPQkuaz0DI= Subject key identifier: EB:ED:D6:E3:3F:DB:48:D7:AD:1A:12:5C:60:70:C8:A8:01:0F:6D:77 Certificate issuer: /CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Certificate serial: 8D Authority key identifier: 09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/2815D106041A11EEA67A6B4DC4F9AE02.roa Signing time: Thu 29 Feb 2024 06:20:30 +0000 ROA not before: Thu 29 Feb 2024 06:20:30 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141730 IP address blocks: 103.148.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Validity Not Before: Feb 29 06:20:30 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=65e0222e-0e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:02:e9:5b:d1:be:6e:60:a6:1b:4f:fc:2f:74: 9b:ec:97:e6:81:d9:67:6c:56:6c:a4:a5:6b:82:bb: 48:92:80:fa:5b:65:7d:d5:6d:4d:17:cf:32:d0:73: 7e:bd:1e:52:03:96:89:8a:21:ad:79:68:c7:c8:2f: 5b:1c:57:22:d6:5a:fc:68:ef:8c:cb:4f:fb:cb:bb: fd:41:3b:c0:a1:d6:79:29:f2:0f:f1:19:c5:c4:e8: 7e:8d:99:e2:d5:4b:02:f8:33:e4:2a:c6:96:e6:cf: c8:a8:55:54:d4:c2:21:7d:72:18:6b:46:bc:4e:dd: 02:81:13:4f:07:71:14:ce:7a:c2:8d:77:7f:f7:79: c0:03:29:1f:64:0f:5c:4a:c3:71:9f:f1:72:90:9d: 58:1f:33:b9:54:ac:98:09:57:5d:f5:8d:d5:bf:47: 45:ab:f1:14:4f:e5:33:93:b4:df:d0:18:63:f8:c5: 45:45:45:18:8e:ee:19:57:8f:77:02:7b:62:cd:79: e5:c5:18:24:87:a1:da:16:16:a2:4e:f5:e8:11:83: 62:7d:89:ce:b9:a4:35:b5:e8:b5:41:4f:66:a1:7d: e3:1f:cc:8d:68:39:7d:b2:97:b9:fe:01:af:c6:64: 22:08:2f:ef:a5:31:53:eb:bd:1f:08:a8:54:ab:f4: 63:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:ED:D6:E3:3F:DB:48:D7:AD:1A:12:5C:60:70:C8:A8:01:0F:6D:77 X509v3 Authority Key Identifier: keyid:09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/2815D106041A11EEA67A6B4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.106.0/23 Signature Algorithm: sha256WithRSAEncryption 04:56:b8:f1:92:d6:26:73:f7:7c:8f:62:25:b0:8c:0b:7f:54: d2:35:b2:9b:2b:1e:f8:7e:b2:30:fc:d0:bb:dd:d8:1a:ee:b4: 54:ed:bf:c0:64:98:64:6d:4f:98:c5:b0:5b:64:d4:b7:ce:e4: 34:ae:c7:bb:a8:49:83:36:a6:83:93:f3:57:0b:7a:9d:54:07: 33:57:26:51:a2:1e:79:6e:c0:eb:35:74:79:33:4d:e2:c6:0b: aa:82:8e:84:99:11:12:83:33:1e:d9:39:9a:ae:9e:0f:74:9c: 74:3d:7d:a5:5f:0e:fd:73:1b:44:2e:ab:2f:c4:22:30:87:c6: 21:50:04:18:dc:9c:2b:ec:9b:46:cb:eb:e4:1c:97:ff:27:70: 77:57:07:6b:7e:1f:d2:46:4b:5f:01:0b:38:69:3b:03:d6:31: 73:af:59:b9:6a:0b:84:b6:fc:53:2c:d2:44:c3:66:37:54:7c: 1f:f3:b5:08:2b:e8:c3:9f:0e:74:0b:1f:72:4a:3c:93:9d:b7: 94:bf:5d:6e:a8:86:e8:6c:83:b6:4a:d8:35:f5:36:32:49:d0: 0d:5e:be:a6:f5:8c:f2:58:1b:52:6e:86:9b:d0:2a:29:1a:40: ac:95:e7:5d:82:ee:f9:36:7d:85:c0:3e:1e:96:92:04:f0:9c: c4:f1:e9:f4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RBRkIxMTAvBgNVBAUTKDA5RTkwNTc3NDdGNjNCQTBBMjgxQUU3ODAxMzY2OENF REVBNDBBQjQwHhcNMjQwMjI5MDYyMDMwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUwMjIyZS0wZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwALpW9G+bmCmG0/8L3Sb7JfmgdlnbFZspKVrgrtIkoD6W2V91W1NF88y0HN+ vR5SA5aJiiGteWjHyC9bHFci1lr8aO+My0/7y7v9QTvAodZ5KfIP8RnFxOh+jZni 1UsC+DPkKsaW5s/IqFVU1MIhfXIYa0a8Tt0CgRNPB3EUznrCjXd/93nAAykfZA9c SsNxn/FykJ1YHzO5VKyYCVdd9Y3Vv0dFq/EUT+Uzk7Tf0Bhj+MVFRUUYju4ZV493 AntizXnlxRgkh6HaFhaiTvXoEYNifYnOuaQ1tei1QU9moX3jH8yNaDl9spe5/gGv xmQiCC/vpTFT670fCKhUq/Rj1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFOvt1uM/ 20jXrRoSXGBwyKgBD213MB8GA1UdIwQYMBaAFAnpBXdH9jugooGueAE2aM7epAq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREFGQi9FQzBGNkEzODAz NDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82Q2lnYTU0QVRab3p0NmtD clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nla0ZkMGYyTzZDaWdhNTRBVFpvenQ2a0NyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0RBRkIvRUMwRjZBMzgwMzQxMTFFRUE1MjE1MjQ3QzRGOUFFMDIvMjgxNUQxMDYw NDFBMTFFRUE2N0E2QjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlGowDQYJKoZIhvcNAQELBQADggEBAARWuPGS1iZz93yP YiWwjAt/VNI1spsrHvh+sjD80Lvd2BrutFTtv8BkmGRtT5jFsFtk1LfO5DSux7uo SYM2poOT81cLep1UBzNXJlGiHnluwOs1dHkzTeLGC6qCjoSZERKDMx7ZOZqung90 nHQ9faVfDv1zG0Quqy/EIjCHxiFQBBjcnCvsm0bL6+Qcl/8ncHdXB2t+H9JGS18B CzhpOwPWMXOvWblqC4S2/FMs0kTDZjdUfB/ztQgr6MOfDnQLH3JKPJOdt5S/XW6o huhsg7ZK2DX1NjJJ0A1evqb1jPJYG1JuhpvQKikaQKyV512C7vk2fYXAPh6WkgTw nMTx6fQ= -----END CERTIFICATE-----Generated at Fri May 17 08:13:54 2024 by rpki-client on console-fra.rpki-client.org