$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/7166B29E9AD811EE999AC186C4F9AE02.roa File: 7166B29E9AD811EE999AC186C4F9AE02.roa (raw, json) Hash identifier: 9L0FYBm6vBSRwVAFtNppTiFQXy8CRKKZY6ZKorYpHxA= Subject key identifier: 15:64:11:65:8F:FA:1B:B4:37:DD:83:CC:9E:08:02:50:28:B1:FE:7E Certificate issuer: /CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Certificate serial: 16C9 Authority key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/7166B29E9AD811EE999AC186C4F9AE02.roa Signing time: Wed 24 Jan 2024 17:34:44 +0000 ROA not before: Wed 24 Jan 2024 17:34:44 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 62240 IP address blocks: 103.105.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5833 (0x16c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Validity Not Before: Jan 24 17:34:44 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b14a34-3445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:70:5e:bb:d8:35:91:d6:86:93:f0:20:59:5b: 2c:ec:c6:10:bd:d3:a5:88:fa:e0:05:74:18:17:d9: cc:81:ad:b6:e8:47:dd:62:95:f7:fe:54:e4:f8:24: e0:06:4f:d3:40:00:13:e5:be:af:23:fb:3c:24:98: 29:40:01:c7:26:a7:06:2e:5e:51:62:99:45:09:32: 03:33:ab:a8:d3:8f:08:c4:83:f2:af:2b:14:2c:0b: 72:dc:04:fa:d7:1e:85:13:56:14:78:7c:c5:8c:2d: 1a:3a:1e:f2:1a:3f:4c:6a:91:6f:2e:fc:9b:5a:64: 1a:0f:95:61:c1:63:4c:f2:f0:e7:91:13:02:67:64: f3:6b:61:f3:4a:dd:f5:82:c2:b1:67:03:65:0e:84: b6:c0:e6:5f:39:bd:51:6b:d8:ae:2e:ce:59:61:b3: 13:e6:d9:ab:81:9b:26:1d:a4:ac:ed:26:de:40:c4: 65:80:ce:08:2d:5c:d6:0a:3e:ac:f4:46:44:28:bb: 68:9d:0d:d1:7b:6e:37:27:cb:68:ff:28:47:69:ce: 8a:27:99:2e:4a:d7:2d:fa:5c:e3:38:d2:1b:50:04: cf:a8:11:ee:84:55:c0:60:e9:97:3f:8b:2c:45:f6: 9a:d1:c1:58:60:ae:e3:e1:e5:a0:e7:93:07:f9:7f: 32:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:64:11:65:8F:FA:1B:B4:37:DD:83:CC:9E:08:02:50:28:B1:FE:7E X509v3 Authority Key Identifier: keyid:CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/7166B29E9AD811EE999AC186C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.105.48.0/24 Signature Algorithm: sha256WithRSAEncryption 99:bf:af:56:76:37:2f:51:c5:f9:05:cd:1e:5f:e1:0e:0d:e9: cd:08:a1:fb:80:18:98:16:8c:e4:8d:b6:19:f6:63:91:84:97: 2f:99:e4:a9:a5:87:39:95:dd:fe:8e:94:1b:b6:90:e4:8b:75: d1:29:bf:04:eb:25:15:aa:3b:e6:9a:ae:1f:da:d1:d8:6f:f7: ae:22:46:d9:76:e3:ea:c4:0b:e2:43:eb:3b:97:44:3b:92:69: 2c:79:9f:72:0c:29:3c:0d:4f:c0:e7:ef:4c:fe:33:0b:2b:49: c2:a5:c7:64:3d:8f:43:bc:e6:6b:a0:7c:5e:20:82:bf:ef:c5: 42:4f:79:fa:c4:cb:9e:da:8f:4b:1c:49:f2:32:7b:42:27:d7: 61:3c:cd:03:73:4c:57:8f:ac:f9:86:c6:10:ab:5e:2a:2f:5e: 75:7f:13:34:31:15:13:e0:89:6a:58:6d:f3:71:9a:92:38:3c: 17:60:10:3b:32:9a:c7:a9:53:cc:be:09:06:82:7d:c5:01:d5: b8:31:20:9a:4d:c1:68:b9:0d:5c:f5:70:b7:a8:00:56:f7:37: e1:fe:1d:dc:9d:84:86:d1:31:83:cf:e3:71:7d:41:42:b2:47: d5:4e:5a:0a:25:6e:a6:01:b8:f2:b8:8f:81:ae:84:d8:21:ad: 04:0a:65:57 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMjUxMTAvBgNVBAUTKENFOTA1NkI0QzY1REUzODU3RDREMEUxREIwMDIzRDYw QjZGN0QzMEMwHhcNMjQwMTI0MTczNDQ0WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWIxNGEzNC0zNDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XBeu9g1kdaGk/AgWVss7MYQvdOliPrgBXQYF9nMga226EfdYpX3/lTk+CTg Bk/TQAAT5b6vI/s8JJgpQAHHJqcGLl5RYplFCTIDM6uo048IxIPyrysULAty3AT6 1x6FE1YUeHzFjC0aOh7yGj9MapFvLvybWmQaD5VhwWNM8vDnkRMCZ2Tza2HzSt31 gsKxZwNlDoS2wOZfOb1Ra9iuLs5ZYbMT5tmrgZsmHaSs7SbeQMRlgM4ILVzWCj6s 9EZEKLtonQ3Re243J8to/yhHac6KJ5kuStct+lzjONIbUATPqBHuhFXAYOmXP4ss Rfaa0cFYYK7j4eWg55MH+X8yoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBVkEWWP +hu0N92DzJ4IAlAosf5+MB8GA1UdIwQYMBaAFM6QVrTGXeOFfU0OHbACPWC299MM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDEyNS83QTE0MkQwMEQ5 NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0VjlUUTRkc0FJOVlMYjMw d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pwQld0TVpkNDRWOVRRNGRzQUk5WUxiMzB3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REQxMjUvN0ExNDJEMDBEOTVFMTFFNzg3QTFBNzY2QzRGOUFFMDIvNzE2NkIyOUU5 QUQ4MTFFRTk5OUFDMTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnaTAwDQYJKoZIhvcNAQELBQADggEBAJm/r1Z2Ny9RxfkF zR5f4Q4N6c0IofuAGJgWjOSNthn2Y5GEly+Z5KmlhzmV3f6OlBu2kOSLddEpvwTr JRWqO+aarh/a0dhv964iRtl24+rEC+JD6zuXRDuSaSx5n3IMKTwNT8Dn70z+Mwsr ScKlx2Q9j0O85mugfF4ggr/vxUJPefrEy57aj0scSfIye0In12E8zQNzTFePrPmG xhCrXiovXnV/EzQxFRPgiWpYbfNxmpI4PBdgEDsymsepU8y+CQaCfcUB1bgxIJpN wWi5DVz1cLeoAFb3N+H+HdydhIbRMYPP43F9QUKyR9VOWgolbqYBuPK4j4GuhNgh rQQKZVc= -----END CERTIFICATE-----Generated at Sat May 4 18:00:13 2024 by rpki-client on console-fra.rpki-client.org