$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/2E9F8D4A08F911ED8F90BA78C4F9AE02.roa File: 2E9F8D4A08F911ED8F90BA78C4F9AE02.roa (raw, json) Hash identifier: /OljMqzaIdjyEY5EHfGGDYXJwfVnBvHEoJ3jmTQEntk= Subject key identifier: 07:29:3C:65:91:DE:13:C9:EC:5D:35:0A:04:40:30:35:EF:97:FF:77 Certificate issuer: /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3 Certificate serial: 045F Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/2E9F8D4A08F911ED8F90BA78C4F9AE02.roa Signing time: Fri 09 Sep 2022 16:21:05 +0000 ROA not before: Fri 09 Sep 2022 16:21:05 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 141004 IP address blocks: 103.120.176.0/24 maxlen: 24 103.120.177.0/24 maxlen: 24 103.120.178.0/24 maxlen: 24 103.120.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 00:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3 Validity Not Before: Sep 9 16:21:05 2022 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=631b67f1-0d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:43:8f:16:42:e1:21:54:26:1f:60:ab:d4:91: 16:6b:26:da:12:73:4a:8e:c2:d4:d8:19:25:18:a8: 96:1d:ac:c9:7f:fc:5f:04:56:cb:cf:45:f2:26:11: 49:05:ee:2b:47:af:33:9d:01:52:cb:09:f3:c5:1e: 71:b9:19:22:57:b8:3e:8b:5d:cc:7e:25:43:db:8d: 85:c7:6b:de:68:f0:8e:f2:3f:7d:ff:7f:ac:fa:2c: f3:dc:42:ba:71:63:ee:30:db:6d:30:1b:e0:ee:d0: ca:c5:9c:65:18:a0:05:dc:43:7b:03:f8:de:5b:e4: 5d:dd:a7:bb:49:0f:d7:40:ad:94:c3:70:63:4b:4e: 6f:56:12:f9:49:2a:f1:60:ef:24:a3:7a:8f:84:ee: 6a:1b:19:a1:50:cb:6d:f7:bd:d8:09:d1:a7:95:4f: 4a:0f:00:cf:86:cc:5f:cd:72:50:00:97:37:1e:08: 03:39:47:fb:d7:90:a9:5e:a9:8f:10:9f:bf:cb:9e: a9:27:38:29:22:0a:80:0b:db:e7:5a:17:a5:5a:7d: 5a:5c:29:c8:c9:16:45:e5:3b:b6:3f:2d:bd:a5:65: 88:2b:41:8d:7f:be:93:56:03:d3:b2:52:1b:f7:b4: 4c:70:ae:b4:39:f8:7f:56:c9:69:60:98:e4:92:80: 4a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:29:3C:65:91:DE:13:C9:EC:5D:35:0A:04:40:30:35:EF:97:FF:77 X509v3 Authority Key Identifier: keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/2E9F8D4A08F911ED8F90BA78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.176.0/22 Signature Algorithm: sha256WithRSAEncryption ac:1f:b3:ce:a0:4d:ce:76:99:cf:80:c5:9f:1f:18:a7:df:5b: b9:96:24:88:f8:2a:82:bb:0e:04:80:fe:91:a0:89:a4:3f:06: f2:fc:68:69:be:ab:be:0e:85:b7:e7:c4:ad:8c:73:84:2f:8e: 0e:4f:ce:3d:f0:4c:fe:0f:cd:5e:d5:89:2a:ee:2e:7a:6e:60: 49:08:80:bb:ce:4d:fb:dd:2b:20:b8:87:7c:fa:c3:0f:55:98: 8c:6a:41:90:4c:dc:16:b0:a3:57:71:42:e3:d4:64:f6:86:ff: 78:f9:ae:10:8e:27:14:25:fb:94:98:c7:25:08:fb:3a:4e:07: 6e:dc:97:90:18:ad:be:b9:02:c3:92:a4:f3:5e:43:4f:cf:7c: e8:85:19:69:0f:6f:e1:56:1e:e3:38:50:0a:22:7a:c4:21:e2: 05:6d:4d:2c:a1:7e:4f:35:7f:ae:06:21:a5:7a:4a:90:1b:04: 4b:2a:08:45:a1:87:a3:ec:66:57:70:41:79:f8:78:0d:39:96: d4:ed:70:da:a1:d8:00:2d:3e:ea:9f:00:b0:e9:20:a3:aa:fe: 5a:0d:11:ab:eb:61:55:dd:7c:90:c4:67:a9:b8:79:7a:55:69: c8:af:2c:04:d5:f3:69:26:dd:1f:c0:70:7a:49:a2:ad:64:9c: 28:78:84:93 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczRkQxMTAvBgNVBAUTKEIwNEJCQTFGMThDMEU3MDgzMUYzNTRGNzQ1NUVFMTVE MzIyOTQxQjMwHhcNMjIwOTA5MTYyMTA1WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02MzFiNjdmMS0wZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkOPFkLhIVQmH2Cr1JEWaybaEnNKjsLU2BklGKiWHazJf/xfBFbLz0XyJhFJ Be4rR68znQFSywnzxR5xuRkiV7g+i13MfiVD242Fx2veaPCO8j99/3+s+izz3EK6 cWPuMNttMBvg7tDKxZxlGKAF3EN7A/jeW+Rd3ae7SQ/XQK2Uw3BjS05vVhL5SSrx YO8ko3qPhO5qGxmhUMtt973YCdGnlU9KDwDPhsxfzXJQAJc3HggDOUf715CpXqmP EJ+/y56pJzgpIgqAC9vnWhelWn1aXCnIyRZF5Tu2Py29pWWIK0GNf76TVgPTslIb 97RMcK60Ofh/VslpYJjkkoBKZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAcpPGWR 3hPJ7F01CgRAMDXvl/93MB8GA1UdIwQYMBaAFLBLuh8YwOcIMfNU90Ve4V0yKUGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNGRC9EQ0IyNUI5NjdC NDMxMUVCODM1MzM2NjZDNEY5QUUwMi9zRXU2SHhqQTV3Z3g4MVQzUlY3aFhUSXBR Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NFdTZIeGpBNXdneDgxVDNSVjdoWFRJcFFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDczRkQvRENCMjVCOTY3QjQzMTFFQjgzNTMzNjY2QzRGOUFFMDIvMkU5RjhENEEw OEY5MTFFRDhGOTBCQTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJneLAwDQYJKoZIhvcNAQELBQADggEBAKwfs86gTc52mc+A xZ8fGKffW7mWJIj4KoK7DgSA/pGgiaQ/BvL8aGm+q74OhbfnxK2Mc4Qvjg5Pzj3w TP4PzV7ViSruLnpuYEkIgLvOTfvdKyC4h3z6ww9VmIxqQZBM3Bawo1dxQuPUZPaG /3j5rhCOJxQl+5SYxyUI+zpOB27cl5AYrb65AsOSpPNeQ0/PfOiFGWkPb+FWHuM4 UAoiesQh4gVtTSyhfk81f64GIaV6SpAbBEsqCEWhh6PsZldwQXn4eA05ltTtcNqh 2AAtPuqfALDpIKOq/loNEavrYVXdfJDEZ6m4eXpVacivLATV82km3R/AcHpJoq1k nCh4hJM= -----END CERTIFICATE-----Generated at Wed May 15 02:27:02 2024 by rpki-client on console-fra.rpki-client.org