$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/994AC0903E1E11EFB5BBDD3BC4F9AE02.roa File: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (raw, json) Hash identifier: Bplnwq21HEhQoRoejTwMGadrLiW1CR401dOFT73Km+U= Subject key identifier: DF:7D:79:F0:FF:3D:53:7D:05:16:70:DE:BC:6D:3E:48:C0:00:02:97 Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Certificate serial: 0122 Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/994AC0903E1E11EFB5BBDD3BC4F9AE02.roa Signing time: Tue 09 Jul 2024 18:11:01 +0000 ROA not before: Tue 09 Jul 2024 18:11:01 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 25687 IP address blocks: 103.224.8.0/22 maxlen: 22 103.224.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Validity Not Before: Jul 9 18:11:01 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=668d7d35-fdfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cb:ad:0d:13:a4:6a:98:40:e1:6f:34:36:84: 42:44:33:c7:64:47:56:ac:5a:b6:2d:9f:36:e2:db: e0:21:0b:6c:f7:7d:e3:de:8b:0b:14:c5:bf:57:1c: fe:ba:7b:3c:ea:dd:79:4b:52:14:17:66:81:2a:9d: 44:29:17:66:08:9f:76:34:f9:73:b5:9e:3f:ae:fc: a7:7f:bb:84:fd:7d:c2:d0:79:e4:12:3d:5b:88:83: 3a:40:ee:22:a2:09:0d:95:5c:d2:97:8b:75:c2:00: 96:7d:2f:cc:e6:be:b7:5d:f6:07:5a:81:9b:81:b7: b8:14:1d:e5:3a:e5:c0:18:a8:99:d2:4f:81:07:9b: e5:cb:7c:9d:12:e3:b4:bb:e8:8a:99:50:94:0b:db: 0e:1b:ef:47:48:ef:96:b7:b1:26:04:a4:5f:d5:74: f0:02:ce:7b:00:d0:01:f2:4b:76:5c:f2:f5:0c:d1: 5c:ed:bc:f1:00:ed:7e:b0:31:dd:d4:44:85:a6:75: ed:72:b2:f0:87:b5:66:86:f1:79:23:d0:63:5c:9b: c7:4f:74:0c:40:5b:7b:39:8d:53:50:19:14:38:01: c6:5f:45:94:8c:4a:bf:b3:ac:d9:7c:f8:aa:08:a9: 62:fa:58:dd:30:24:a1:96:5d:b7:1f:ad:94:da:00: c7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7D:79:F0:FF:3D:53:7D:05:16:70:DE:BC:6D:3E:48:C0:00:02:97 X509v3 Authority Key Identifier: keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/994AC0903E1E11EFB5BBDD3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.8.0/22 Signature Algorithm: sha256WithRSAEncryption ab:90:c4:e8:0b:d8:fe:2d:23:b1:90:a7:6f:58:76:e5:50:33: 98:cd:90:b6:6c:ee:c7:60:4a:80:7d:20:44:47:59:54:f1:ce: 13:54:b5:cb:c8:09:9a:98:95:75:cf:55:38:29:c8:4b:dc:b8: 9a:17:59:1c:cb:dc:16:3b:49:4c:55:5d:2a:cb:2f:47:e7:b5: b7:04:a6:27:1f:cd:0c:e0:e2:77:3b:09:8c:47:17:69:cb:9a: 9c:56:ee:35:72:f9:70:52:3b:4e:c5:1d:0d:5a:07:8d:fe:b6: 36:32:c7:d6:b3:ce:3a:0c:ee:84:3e:a4:ea:47:ca:39:88:1d: 7a:6e:3e:80:0b:e3:c3:03:37:8b:2d:7c:bb:6f:50:33:92:cf: b9:12:0e:70:47:a0:25:3a:73:75:c9:f1:13:3f:47:66:49:e5: a4:86:3f:87:b1:b1:7a:d0:e5:02:66:15:9c:dc:f5:c6:16:47: 23:4c:54:5f:7a:c8:52:a3:e1:13:a4:2e:6b:06:ee:b9:f7:b6: 45:03:9c:54:1f:db:7d:f1:24:b7:d7:bb:9f:50:0e:c8:83:ab: 70:56:27:81:a3:66:73:06:66:1a:ea:9b:28:13:ee:e5:24:d6: 0b:da:a3:e0:46:5c:70:4a:1c:af:54:74:23:f4:80:41:2b:b6: f3:cd:8f:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVBQTgxMTAvBgNVBAUTKEQwNENCMUUyNzE1Nzg2OEY3NEYzNkQ3MDc5MTVEOUQ3 RjA5N0M5MDgwHhcNMjQwNzA5MTgxMTAxWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjhkN2QzNS1mZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cutDROkaphA4W80NoRCRDPHZEdWrFq2LZ824tvgIQts933j3osLFMW/Vxz+ uns86t15S1IUF2aBKp1EKRdmCJ92NPlztZ4/rvynf7uE/X3C0HnkEj1biIM6QO4i ogkNlVzSl4t1wgCWfS/M5r63XfYHWoGbgbe4FB3lOuXAGKiZ0k+BB5vly3ydEuO0 u+iKmVCUC9sOG+9HSO+Wt7EmBKRf1XTwAs57ANAB8kt2XPL1DNFc7bzxAO1+sDHd 1ESFpnXtcrLwh7VmhvF5I9BjXJvHT3QMQFt7OY1TUBkUOAHGX0WUjEq/s6zZfPiq CKli+ljdMCShll23H62U2gDHGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN99efD/ PVN9BRZw3rxtPkjAAAKXMB8GA1UdIwQYMBaAFNBMseJxV4aPdPNtcHkV2dfwl8kI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUFBOC8yNzg1OTkxMjkx RUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhvOTA4MjF3ZVJYWjFfQ1h5 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFeXg0bkZYaG85MDgyMXdlUlhaMV9DWHlRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDVBQTgvMjc4NTk5MTI5MUVGMTFFREIwNkJBRDFGQzRGOUFFMDIvOTk0QUMwOTAz RTFFMTFFRkI1QkJERDNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn4AgwDQYJKoZIhvcNAQELBQADggEBAKuQxOgL2P4tI7GQ p29YduVQM5jNkLZs7sdgSoB9IERHWVTxzhNUtcvICZqYlXXPVTgpyEvcuJoXWRzL 3BY7SUxVXSrLL0fntbcEpicfzQzg4nc7CYxHF2nLmpxW7jVy+XBSO07FHQ1aB43+ tjYyx9azzjoM7oQ+pOpHyjmIHXpuPoAL48MDN4stfLtvUDOSz7kSDnBHoCU6c3XJ 8RM/R2ZJ5aSGP4exsXrQ5QJmFZzc9cYWRyNMVF96yFKj4ROkLmsG7rn3tkUDnFQf 233xJLfXu59QDsiDq3BWJ4GjZnMGZhrqmygT7uUk1gvao+BGXHBKHK9UdCP0gEEr tvPNjzc= -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:06 2024 by rpki-client on console-fra.rpki-client.org