$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/F1C77A3C73E711ECA415F87FC4F9AE02.roa File: F1C77A3C73E711ECA415F87FC4F9AE02.roa (raw, json) Hash identifier: 2CyIyNp44NxNr2SQi/2YfeBSUBR+fj5EogTGvnYWavo= Subject key identifier: 3D:08:A9:2A:28:CB:2E:8D:74:7D:23:23:D4:35:71:6C:6B:D9:B1:60 Certificate issuer: /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D Certificate serial: 0481 Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/F1C77A3C73E711ECA415F87FC4F9AE02.roa Signing time: Wed 17 Jul 2024 01:02:37 +0000 ROA not before: Wed 17 Jul 2024 01:02:37 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 63473 IP address blocks: 103.167.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D Validity Not Before: Jul 17 01:02:37 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6697182d-e756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d2:24:ca:43:ba:02:0b:22:d5:7f:4d:10:af: eb:14:f5:5c:d4:9e:66:51:20:1b:e8:53:ce:98:39: 09:cb:6a:eb:20:1b:0a:2b:d3:0c:6a:aa:0b:9c:2b: 14:30:28:94:bc:20:eb:72:5f:ac:da:31:2a:0b:b0: ec:1c:ca:a7:f6:d9:0a:c6:33:94:8e:ca:c5:ad:b8: 2e:6e:b7:eb:c8:dd:e0:c4:50:f0:43:3f:3c:f3:e0: 10:48:38:23:f7:4b:ac:3c:a1:c1:9e:8e:79:97:88: 50:e9:8f:4e:ea:51:1d:2a:32:23:7d:0c:4c:89:b9: de:49:dd:2c:ab:9e:d4:ab:e0:31:d0:fc:10:c3:5d: df:46:55:50:3b:02:ab:b2:b9:55:c1:d4:ca:49:e6: 73:73:3d:31:27:7c:23:ed:de:90:6b:4b:a0:48:11: cb:e9:09:d5:74:0f:53:a2:d2:c8:7c:3a:e3:47:43: 17:71:16:31:ce:b5:8d:e4:6b:d5:11:fd:ff:bf:62: d3:33:a2:44:89:58:32:3f:94:66:2c:2f:fe:2a:95: 4d:69:03:51:10:ba:60:bd:e1:7f:d0:4d:f8:d0:36: a4:aa:28:05:49:f5:e8:d8:36:e5:05:d7:6b:cc:71: bb:57:a3:c7:0b:9a:37:c2:82:d9:f9:e9:44:3b:36: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:08:A9:2A:28:CB:2E:8D:74:7D:23:23:D4:35:71:6C:6B:D9:B1:60 X509v3 Authority Key Identifier: keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/F1C77A3C73E711ECA415F87FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.150.0/23 Signature Algorithm: sha256WithRSAEncryption 71:ec:79:93:b3:ee:b2:b1:23:ae:d3:d4:ac:57:85:9a:5e:44: dc:e6:39:2e:d9:bf:60:65:7d:13:b3:ba:e5:08:07:03:d7:40: 67:98:5c:11:6e:0e:84:9a:84:7d:d1:be:fc:4a:8e:a2:b7:5c: 93:1b:35:08:0b:aa:e9:d7:d7:6b:ef:14:9d:c9:2a:9a:da:52: 46:a1:26:d3:58:71:a3:21:c4:49:11:a6:ca:0d:9f:e1:e8:d6: 4e:d3:d9:fc:48:94:d9:1b:f0:17:d2:16:3c:fe:4f:47:d7:80: 18:4e:9a:be:ea:48:5e:65:db:b8:18:00:9f:de:a9:c0:41:27: c4:31:ad:0b:97:e6:58:c7:77:fe:33:bb:2f:8b:40:17:20:fd: d5:8e:6b:7b:30:21:a5:44:66:55:2f:8c:dd:30:2b:9c:90:f2: b1:fd:e5:bc:78:ed:23:fa:76:12:e0:6e:83:b0:74:2e:c7:82: 28:33:9b:91:23:a7:a0:df:44:9b:08:d7:d7:07:d1:75:bf:3a: 13:75:21:f5:d8:24:70:81:39:23:95:ed:53:70:c4:ca:36:d3: c8:1b:94:58:91:36:82:49:ca:75:65:1d:4d:b4:41:13:2d:76: 63:00:5b:4d:22:0f:d0:74:e5:71:e1:a5:a8:ee:d5:69:e7:3d: 7b:9b:30:2d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUzNTIxMTAvBgNVBAUTKENBQTZFQjk5QjNGRTBFRkI2NUQzOEYxNUIyQUFFNERD MzlEQUIzMUQwHhcNMjQwNzE3MDEwMjM3WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk3MTgyZC1lNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tIkykO6Agsi1X9NEK/rFPVc1J5mUSAb6FPOmDkJy2rrIBsKK9MMaqoLnCsU MCiUvCDrcl+s2jEqC7DsHMqn9tkKxjOUjsrFrbgubrfryN3gxFDwQz888+AQSDgj 90usPKHBno55l4hQ6Y9O6lEdKjIjfQxMibneSd0sq57Uq+Ax0PwQw13fRlVQOwKr srlVwdTKSeZzcz0xJ3wj7d6Qa0ugSBHL6QnVdA9TotLIfDrjR0MXcRYxzrWN5GvV Ef3/v2LTM6JEiVgyP5RmLC/+KpVNaQNRELpgveF/0E340DakqigFSfXo2DblBddr zHG7V6PHC5o3woLZ+elEOzaRDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD0IqSoo yy6NdH0jI9Q1cWxr2bFgMB8GA1UdIwQYMBaAFMqm65mz/g77ZdOPFbKq5Nw52rMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTM1Mi9DOEUyMkU4QTAx MTYxMUVDOUNDREU3MjJDNEY5QUUwMi95cWJybWJQLUR2dGwwNDhWc3FyazNEbmFz eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxYnJtYlAtRHZ0bDA0OFZzcXJrM0RuYXN4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REUzNTIvQzhFMjJFOEEwMTE2MTFFQzlDQ0RFNzIyQzRGOUFFMDIvRjFDNzdBM0M3 M0U3MTFFQ0E0MTVGODdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnp5YwDQYJKoZIhvcNAQELBQADggEBAHHseZOz7rKxI67T 1KxXhZpeRNzmOS7Zv2BlfROzuuUIBwPXQGeYXBFuDoSahH3RvvxKjqK3XJMbNQgL qunX12vvFJ3JKpraUkahJtNYcaMhxEkRpsoNn+Ho1k7T2fxIlNkb8BfSFjz+T0fX gBhOmr7qSF5l27gYAJ/eqcBBJ8QxrQuX5ljHd/4zuy+LQBcg/dWOa3swIaVEZlUv jN0wK5yQ8rH95bx47SP6dhLgboOwdC7Hgigzm5Ejp6DfRJsI19cH0XW/OhN1IfXY JHCBOSOV7VNwxMo208gblFiRNoJJynVlHU20QRMtdmMAW00iD9B05XHhpaju1Wnn PXubMC0= -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:24 2024 by rpki-client on console-fra.rpki-client.org