$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa File: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (raw, json) Hash identifier: fsgwXlrQI8Xf5Rjyp/4eVuAgbFz37cGdGAMKHjxGUCY= Subject key identifier: 36:3C:E7:35:36:29:B1:EC:B7:8E:FD:31:1F:81:88:62:2E:83:94:81 Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Certificate serial: 97 Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa Signing time: Wed 31 Jul 2024 06:37:19 +0000 ROA not before: Wed 31 Jul 2024 06:37:19 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 151355 IP address blocks: 103.209.212.0/24 maxlen: 24 103.209.213.0/24 maxlen: 24 2001:df2:7f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Validity Not Before: Jul 31 06:37:19 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66a9db9f-a6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:79:bf:4d:f2:60:d3:ca:42:15:77:a6:3f: ee:7f:3b:f0:80:a1:8f:7e:1c:a6:33:f6:47:21:dd: fa:ba:58:09:90:85:65:de:40:77:e9:81:de:4a:ea: ce:48:a0:17:c7:b8:52:ca:63:15:99:d9:e2:15:ae: ac:49:1f:da:d3:58:83:53:77:f3:63:ee:bd:a8:99: 2f:08:da:e9:8f:7a:b1:35:9e:0b:7b:dc:28:1b:8b: be:99:3b:83:59:16:d6:b4:d0:de:15:8a:15:44:77: 2a:48:01:d2:7d:1c:1f:25:40:e3:e7:7e:52:df:aa: 7d:7d:40:a3:bd:d9:b0:33:25:df:64:fa:dc:3a:4c: 7c:b5:15:9e:6e:2f:b9:68:1d:39:e4:1a:d1:87:c1: 42:2b:02:16:98:ae:d8:64:19:5f:a4:f2:8e:d9:f0: c7:74:24:c1:9d:54:af:74:ed:c4:7b:b5:f1:b3:0a: d9:e9:90:9d:8b:0b:3c:a8:b2:a8:81:92:b7:6c:e4: ba:4c:4a:cc:f3:b1:ca:53:72:b8:e6:3c:f2:f6:4b: 70:db:1f:61:6d:2b:1f:11:16:3b:ce:a7:b1:9a:35: 8a:86:80:7d:51:ca:0d:18:76:9a:0f:18:b1:0a:7c: 09:34:70:eb:8e:7c:b2:f1:f8:3a:59:25:da:7b:c4: dd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3C:E7:35:36:29:B1:EC:B7:8E:FD:31:1F:81:88:62:2E:83:94:81 X509v3 Authority Key Identifier: keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.212.0/23 IPv6: 2001:df2:7f40::/48 Signature Algorithm: sha256WithRSAEncryption 9e:84:d9:55:23:bc:fd:10:db:45:bd:b1:5a:fd:2c:61:ea:56: dc:11:58:79:6d:7e:63:3b:35:ea:f7:3b:67:f3:bf:e5:59:53: 04:7f:24:0a:45:04:3b:60:b9:bc:5b:37:0e:dc:ee:a5:5a:22: d0:6a:4c:a9:cc:55:3f:9a:ff:6c:5d:da:77:0e:11:0e:dc:4d: b7:20:de:0c:c0:aa:7c:9d:02:83:51:f1:66:ca:2f:2c:2e:96: 36:d4:0a:9f:35:fc:b6:72:79:c2:3e:96:76:b6:8f:9e:48:35: 4c:ea:4f:18:52:44:ff:cd:d3:66:a3:ac:48:b5:b9:4d:21:eb: 0e:b9:31:39:97:7e:95:df:2e:c1:ff:61:f1:48:d6:8e:fb:88: 71:43:b3:bf:0b:20:ce:54:b5:4f:7a:b9:ba:3d:13:05:82:e2: 40:d8:b0:00:ca:28:a9:e4:48:34:ac:50:41:6e:45:a9:ae:a2: ce:d4:a0:a4:f0:0c:85:38:39:72:c4:76:be:f1:8e:89:25:a1: 79:48:39:74:30:cf:d1:c2:7c:07:32:19:64:cf:8f:ca:20:04: d3:6a:30:ce:23:41:81:d0:55:36:b2:ce:23:c5:0c:bc:04:ae: e4:07:be:d6:0b:72:9c:55:3b:51:8b:73:f3:b0:c8:f8:54:75: 39:5b:de:cd -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGNzkxMTAvBgNVBAUTKDI1RjlEQjYwMDdBREY2RjU3RUM0RUZGN0E2MkJGNEQ0 MkRBNzVFQzUwHhcNMjQwNzMxMDYzNzE5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5ZGI5Zi1hNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDh5v03yYNPKQhV3pj/ufzvwgKGPfhymM/ZHId36ulgJkIVl3kB36YHeSurO SKAXx7hSymMVmdniFa6sSR/a01iDU3fzY+69qJkvCNrpj3qxNZ4Le9woG4u+mTuD WRbWtNDeFYoVRHcqSAHSfRwfJUDj535S36p9fUCjvdmwMyXfZPrcOkx8tRWebi+5 aB055BrRh8FCKwIWmK7YZBlfpPKO2fDHdCTBnVSvdO3Ee7XxswrZ6ZCdiws8qLKo gZK3bOS6TErM87HKU3K45jzy9ktw2x9hbSsfERY7zqexmjWKhoB9UcoNGHaaDxix CnwJNHDrjnyy8fg6WSXae8Td2QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDY85zU2 KbHst479MR+BiGIug5SBMB8GA1UdIwQYMBaAFCX522AHrfb1fsTv96Yr9NQtp17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y3OS9GQTMxQTJCMjZG MUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2Vi14T18zcGl2MDFDMm5Y c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDNGNzkvRkEzMUEyQjI2RjFBMTFFRThEMzJFMDY0QzRGOUFFMDIvRjRDRENFNjY2 RjFDMTFFRThDQTNGMjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn0dQwDwQCAAIwCQMHACABDfJ/QDANBgkqhkiG9w0BAQsF AAOCAQEAnoTZVSO8/RDbRb2xWv0sYepW3BFYeW1+Yzs16vc7Z/O/5VlTBH8kCkUE O2C5vFs3DtzupVoi0GpMqcxVP5r/bF3adw4RDtxNtyDeDMCqfJ0Cg1HxZsovLC6W NtQKnzX8tnJ5wj6WdraPnkg1TOpPGFJE/83TZqOsSLW5TSHrDrkxOZd+ld8uwf9h 8UjWjvuIcUOzvwsgzlS1T3q5uj0TBYLiQNiwAMooqeRINKxQQW5Fqa6iztSgpPAM hTg5csR2vvGOiSWheUg5dDDP0cJ8BzIZZM+PyiAE02owziNBgdBVNrLOI8UMvASu 5Ae+1gtynFU7UYtz87DI+FR1OVvezQ== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:58 2024 by rpki-client on console-fra.rpki-client.org