$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/CAE1D9E2404611EB913D5C10C4F9AE02.roa File: CAE1D9E2404611EB913D5C10C4F9AE02.roa (raw, json) Hash identifier: dFozmLHR8wslPBLZJ8/dR41gh8/PVzupvGSJ2JW8U/8= Subject key identifier: B3:46:4C:F2:85:13:6F:E1:12:37:D6:B8:60:2B:E6:AA:63:C9:21:95 Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Certificate serial: 0C0A Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/CAE1D9E2404611EB913D5C10C4F9AE02.roa Signing time: Tue 18 Jul 2023 18:35:59 +0000 ROA not before: Tue 18 Jul 2023 18:35:59 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 139302 IP address blocks: 103.141.4.0/24 maxlen: 24 103.141.5.0/24 maxlen: 24 2001:df1:39c0::/48 maxlen: 48 2001:df1:39c0::/50 maxlen: 50 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3082 (0xc0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Validity Not Before: Jul 18 18:35:59 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64b6db8e-d69d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:38:e0:d0:24:73:03:04:1c:f4:9f:7a:cb: 77:00:a1:47:4d:c3:36:05:8e:27:db:c9:3c:22:28: ad:37:98:79:bf:a6:bf:d9:22:cf:23:f5:e2:c6:64: 61:b9:95:89:2c:0c:2b:d7:dc:20:40:ed:ba:35:04: 70:3d:0c:57:f6:37:43:bc:67:a8:20:be:6f:7a:ef: 24:19:f5:0c:2c:fa:47:6c:c5:c8:3b:12:e2:3c:55: 20:ef:35:89:2c:42:75:bf:17:2c:ee:90:aa:34:a1: 4c:76:5d:7c:a6:36:4e:b5:0d:06:14:14:0f:fa:37: 3a:39:7b:d3:f1:f9:1c:f9:6b:fd:47:cd:41:93:57: 9e:30:d9:d4:a1:aa:2c:74:68:8c:68:fe:06:47:ec: f8:f8:de:ee:1b:f1:c0:a0:c6:5f:5f:ac:b6:29:22: 6d:58:83:06:c0:43:6e:06:95:57:67:ce:73:c3:98: b9:76:6e:26:37:a7:71:ae:d4:af:a5:d9:9e:e0:3d: 5c:fd:27:27:5d:8a:6c:be:ac:e3:95:be:40:e8:3e: c4:64:0e:7a:85:82:a9:bc:de:ee:c5:9f:21:42:6e: 8d:52:c5:bf:18:ba:07:37:45:55:4d:f0:45:4d:57: 74:ac:38:c7:99:69:f9:ce:cc:b8:5f:1f:7a:72:08: 9a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:46:4C:F2:85:13:6F:E1:12:37:D6:B8:60:2B:E6:AA:63:C9:21:95 X509v3 Authority Key Identifier: keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/CAE1D9E2404611EB913D5C10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.4.0/23 IPv6: 2001:df1:39c0::/48 Signature Algorithm: sha256WithRSAEncryption 91:dc:c5:3b:79:4e:88:06:13:f5:61:7f:02:54:8a:11:2a:87: 79:cd:67:0c:f0:b0:9e:fb:05:1e:36:f7:04:ee:d7:bc:ef:96: 7f:17:42:f2:9a:be:48:77:fc:8c:f5:3d:ea:93:ec:dc:12:0a: b3:2b:40:48:d1:d6:11:44:c6:c7:c2:47:f1:88:06:57:4a:ef: f8:e6:fc:8a:1a:a6:0a:03:54:63:79:02:8e:5d:24:02:ca:51: b6:d3:bb:ca:c7:3d:00:b0:1f:46:3c:59:9b:0c:c2:2b:4f:26: e4:19:28:40:85:d9:ba:69:bd:f6:60:a3:03:a4:d3:b2:6b:0b: a7:43:2f:06:e2:20:8a:fa:d8:6e:81:bd:0b:71:b0:5a:b1:79: 9a:f2:c1:29:e8:d6:fd:ba:f1:3b:0e:5b:ee:bd:35:0a:d4:3d: 0d:f5:98:0f:34:4a:0a:b9:15:c9:dd:3b:b6:aa:3c:a4:d7:14: 4e:5a:f3:85:40:68:0b:c2:b2:39:66:11:af:ac:83:d1:c4:48: 01:00:69:26:cd:aa:c4:21:d3:0a:07:d0:8e:26:af:aa:81:af: b7:58:3c:7e:29:e7:f3:b1:f7:f5:00:aa:89:2b:8a:72:00:e7: 39:ea:e9:a7:a2:5a:7b:dd:69:04:ec:2b:b4:c7:3e:70:86:52: 29:f2:ac:48 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGRjAxMTAvBgNVBAUTKEU3REUzMUZBREVEMzc5NDE0RDY3RkJCQ0Y1MUQ5NzY1 MTRFMzQyMjUwHhcNMjMwNzE4MTgzNTU5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGI2ZGI4ZS1kNjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2g44NAkcwMEHPSfest3AKFHTcM2BY4n28k8IiitN5h5v6a/2SLPI/XixmRh uZWJLAwr19wgQO26NQRwPQxX9jdDvGeoIL5veu8kGfUMLPpHbMXIOxLiPFUg7zWJ LEJ1vxcs7pCqNKFMdl18pjZOtQ0GFBQP+jc6OXvT8fkc+Wv9R81Bk1eeMNnUoaos dGiMaP4GR+z4+N7uG/HAoMZfX6y2KSJtWIMGwENuBpVXZ85zw5i5dm4mN6dxrtSv pdme4D1c/ScnXYpsvqzjlb5A6D7EZA56hYKpvN7uxZ8hQm6NUsW/GLoHN0VVTfBF TVd0rDjHmWn5zsy4Xx96cgia8QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLNGTPKF E2/hEjfWuGAr5qpjySGVMB8GA1UdIwQYMBaAFOfeMfre03lBTWf7vPUdl2UU40Il MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUZGMC85NDMzMEZFNkQ0 NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVVRk5aX3U4OVIyWFpSVGpR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU5NHgtdDdUZVVGTlpfdTg5UjJYWlJUalFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlGRjAvOTQzMzBGRTZENDY5MTFFOThGMDE5ODJDQzRGOUFFMDIvQ0FFMUQ5RTI0 MDQ2MTFFQjkxM0Q1QzEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjQQwDwQCAAIwCQMHACABDfE5wDANBgkqhkiG9w0BAQsF AAOCAQEAkdzFO3lOiAYT9WF/AlSKESqHec1nDPCwnvsFHjb3BO7XvO+WfxdC8pq+ SHf8jPU96pPs3BIKsytASNHWEUTGx8JH8YgGV0rv+Ob8ihqmCgNUY3kCjl0kAspR ttO7ysc9ALAfRjxZmwzCK08m5BkoQIXZumm99mCjA6TTsmsLp0MvBuIgivrYboG9 C3GwWrF5mvLBKejW/brxOw5b7r01CtQ9DfWYDzRKCrkVyd07tqo8pNcUTlrzhUBo C8KyOWYRr6yD0cRIAQBpJs2qxCHTCgfQjiavqoGvt1g8finn87H39QCqiSuKcgDn Oerpp6Jae91pBOwrtMc+cIZSKfKsSA== -----END CERTIFICATE-----Generated at Wed May 8 21:04:04 2024 by rpki-client on console-fra.rpki-client.org