$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/7A0FB4068E1F11EEAFE1F960C4F9AE02.roa File: 7A0FB4068E1F11EEAFE1F960C4F9AE02.roa (raw, json) Hash identifier: LbbpzHM1/Nm6j97bKhVCKglDRWh2nK/KQvZ2unNZEi4= Subject key identifier: 43:9B:DB:6C:39:0F:42:AF:41:C8:CE:5E:05:70:28:DE:28:3C:B7:D9 Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Certificate serial: 9B Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/7A0FB4068E1F11EEAFE1F960C4F9AE02.roa Signing time: Thu 30 Nov 2023 12:46:51 +0000 ROA not before: Thu 30 Nov 2023 12:46:51 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 149870 IP address blocks: 103.189.232.0/24 maxlen: 24 103.189.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Validity Not Before: Nov 30 12:46:51 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6568843a-dd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:a2:ba:65:6f:b5:b4:42:05:c2:80:8e:b6: de:57:a5:81:3b:5f:f9:03:8e:26:e4:c3:23:e3:d9: ea:ae:1e:e8:82:0b:08:ad:4a:89:59:59:30:c2:42: c8:cc:24:f2:ff:3a:82:04:bc:a3:02:30:3e:35:55: 1d:37:18:a5:d5:fb:dd:61:34:f2:c3:cc:f3:9e:a9: 71:a7:a1:94:21:8a:7c:32:e0:d6:ba:e0:54:90:7b: 9a:68:f3:78:a0:c2:c5:c4:3f:ac:7b:c3:69:84:5d: 7a:fa:70:3e:a5:81:a7:2b:fb:c5:83:60:0e:ef:d1: 7a:b6:ed:0f:0f:d2:d8:9b:72:b3:f0:7c:0c:67:f2: 53:8d:26:06:53:bb:04:62:47:e2:3d:72:c8:9e:64: e0:ae:2a:4a:f1:07:05:45:a3:b8:b5:cf:17:6b:9c: 7b:b1:ae:69:a6:69:29:82:0e:b7:f5:83:d4:1f:22: 53:51:d1:12:42:4c:cc:86:8b:9c:d9:dc:9b:2f:16: 38:df:8d:19:34:c5:14:9e:ab:9d:67:ba:17:36:53: b8:47:22:9d:ba:92:59:9a:df:cf:5b:39:37:21:33: 02:b0:9d:d2:4d:f5:43:86:90:73:3d:7f:3d:b7:7e: 25:79:e8:fe:ce:d8:83:d0:6f:61:09:bc:a3:67:97: e0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9B:DB:6C:39:0F:42:AF:41:C8:CE:5E:05:70:28:DE:28:3C:B7:D9 X509v3 Authority Key Identifier: keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/7A0FB4068E1F11EEAFE1F960C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.232.0/23 Signature Algorithm: sha256WithRSAEncryption c5:9a:3e:68:cf:8e:85:25:83:8c:7b:8d:59:df:2e:d8:0f:07: 7c:0e:7c:9f:a1:11:f6:38:48:c9:cb:d9:60:39:b9:dd:29:4f: 97:e6:15:49:29:40:27:29:8d:97:46:d9:82:8c:86:df:2e:71: 64:69:f5:22:40:ba:28:13:d9:90:f8:6a:61:ec:9e:4f:fa:27: e4:b8:e7:f8:52:5d:4d:10:c2:be:33:e6:5e:b0:7c:e0:43:65: 43:71:cb:09:f4:ed:55:77:b8:65:56:94:c6:e3:4e:8d:64:34: 31:cd:f2:28:93:8d:27:02:a2:be:11:e2:ab:ba:21:59:e2:b8: 60:fb:25:7b:e8:a5:a4:79:ee:77:56:81:81:b3:da:43:03:63: 65:62:2c:7a:d8:e1:dd:8b:1f:71:dc:e8:ca:b8:48:8c:96:1a: 35:d5:76:de:fb:ee:fd:1d:df:9c:5c:5d:1d:42:a0:dc:ff:41: f9:54:7b:c4:8d:41:4b:e8:67:02:0c:8c:81:a2:23:1d:c1:22: 01:b5:95:1b:0e:5d:3c:83:3c:36:1e:b4:0c:be:37:0a:1b:e4: 8c:36:f2:5c:8a:54:1e:2f:72:6a:c9:02:a5:2e:b6:c2:de:66: e7:7d:d1:83:5f:e1:54:2d:fc:da:3a:e1:84:72:04:58:c1:7d: 10:ce:62:0b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQUExMTAvBgNVBAUTKDMyNjE4NjE4MjQ0QzhENkI0QkE2MEEyRkVEOTcyM0I5 OThEOUExNzAwHhcNMjMxMTMwMTI0NjUxWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY4ODQzYS1kZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumeiumVvtbRCBcKAjrbeV6WBO1/5A44m5MMj49nqrh7oggsIrUqJWVkwwkLI zCTy/zqCBLyjAjA+NVUdNxil1fvdYTTyw8zznqlxp6GUIYp8MuDWuuBUkHuaaPN4 oMLFxD+se8NphF16+nA+pYGnK/vFg2AO79F6tu0PD9LYm3Kz8HwMZ/JTjSYGU7sE YkfiPXLInmTgripK8QcFRaO4tc8Xa5x7sa5ppmkpgg639YPUHyJTUdESQkzMhouc 2dybLxY4340ZNMUUnqudZ7oXNlO4RyKdupJZmt/PWzk3ITMCsJ3STfVDhpBzPX89 t34leej+ztiD0G9hCbyjZ5fg+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFEOb22w5 D0KvQcjOXgVwKN4oPLfZMB8GA1UdIwQYMBaAFDJhhhgkTI1rS6YKL+2XI7mY2aFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJBQS8yQ0ZEMzcxMkND RDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpXdExwZ292N1pjanVaalpv WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tR0dHQ1JNald0THBnb3Y3WmNqdVpqWm9YQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VCQUEvMkNGRDM3MTJDQ0QwMTFFRDk4MjUyRTc1QzRGOUFFMDIvN0EwRkI0MDY4 RTFGMTFFRUFGRTFGOTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvegwDQYJKoZIhvcNAQELBQADggEBAMWaPmjPjoUlg4x7 jVnfLtgPB3wOfJ+hEfY4SMnL2WA5ud0pT5fmFUkpQCcpjZdG2YKMht8ucWRp9SJA uigT2ZD4amHsnk/6J+S45/hSXU0Qwr4z5l6wfOBDZUNxywn07VV3uGVWlMbjTo1k NDHN8iiTjScCor4R4qu6IVniuGD7JXvopaR57ndWgYGz2kMDY2ViLHrY4d2LH3Hc 6Mq4SIyWGjXVdt777v0d35xcXR1CoNz/QflUe8SNQUvoZwIMjIGiIx3BIgG1lRsO XTyDPDYetAy+Nwob5Iw28lyKVB4vcmrJAqUutsLeZud90YNf4VQt/No64YRyBFjB fRDOYgs= -----END CERTIFICATE-----Generated at Mon May 27 06:56:11 2024 by rpki-client on console-fra.rpki-client.org