$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/0716B2646C7111EC8C5E6967C4F9AE02.roa File: 0716B2646C7111EC8C5E6967C4F9AE02.roa (raw, json) Hash identifier: KmVrkzGGgoECvjd3YrTWzHyML72Oq980lXI0J//0brU= Subject key identifier: C9:DA:50:39:4F:B7:32:62:60:87:D9:69:2C:B6:6E:60:90:EB:E8:7E Certificate issuer: /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Certificate serial: 02A9 Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/0716B2646C7111EC8C5E6967C4F9AE02.roa Signing time: Mon 19 Jun 2023 03:30:56 +0000 ROA not before: Mon 19 Jun 2023 03:30:56 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 58617 IP address blocks: 103.9.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Validity Not Before: Jun 19 03:30:56 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=648fcbef-84f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:c9:be:49:5d:f7:c8:10:da:b9:a8:80:92: 7b:30:ae:87:72:c7:4c:ad:74:b5:b2:2a:b8:05:2e: 8a:af:f2:f3:e4:07:80:bd:3a:21:95:44:53:bb:2f: 7e:72:87:67:ea:1b:d4:eb:f9:b7:36:2b:9d:3f:fb: 2e:62:8d:8f:d5:ac:f2:78:9a:78:24:49:0c:72:35: 03:ef:bf:99:9d:c2:04:26:7b:82:c3:0a:82:a6:b0: 02:2c:2a:05:14:b3:2f:ff:03:e1:64:4e:a5:b5:35: 33:ca:d5:61:82:94:99:40:ae:76:7c:88:02:33:76: 31:4d:bd:04:b2:29:3f:2b:27:e3:62:c1:49:c6:98: 00:28:d5:23:b0:a1:7e:46:b9:17:ac:78:fd:4d:c6: ee:56:a9:c7:79:ca:5f:ea:9f:e8:c6:b0:9e:77:85: 50:52:9c:86:33:31:4b:04:9b:8b:7f:0d:be:25:14: 71:c1:f5:2d:84:cf:da:03:a3:26:68:c9:c2:98:5a: 04:a7:27:64:bf:3f:07:9d:ba:4a:62:65:87:a4:a2: f6:52:6b:4a:c3:eb:d4:75:77:2c:86:3a:6f:a3:4c: 68:4f:e4:e2:c3:b5:6b:87:23:97:b9:42:57:b3:bf: 8b:42:79:3d:fe:b0:99:ab:b9:3b:3a:a3:f3:fb:94: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DA:50:39:4F:B7:32:62:60:87:D9:69:2C:B6:6E:60:90:EB:E8:7E X509v3 Authority Key Identifier: keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/0716B2646C7111EC8C5E6967C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.9.23.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:50:ad:05:62:1f:7b:75:db:ed:20:9f:2c:88:a8:f4:ef:c9: e8:e8:e6:c2:33:26:2f:2c:92:bd:8c:a8:1b:d9:31:ce:9a:bd: d9:2b:fb:a3:9c:ca:0a:15:ca:97:47:c8:ed:04:b7:dc:8d:d7: 44:00:42:c1:0f:d7:ed:7d:1d:60:ec:81:20:7f:5a:d2:bf:d0: 41:60:66:6e:26:11:cc:48:2b:e9:50:c2:a2:bd:84:b1:ad:f0: 1a:1b:fb:1a:02:09:40:f6:73:fe:1b:20:8b:9d:15:17:44:46: f1:24:d6:e3:11:a3:10:f2:c3:0b:f3:e9:15:ef:40:15:e8:f6: 71:b8:e2:12:f9:d7:80:4b:db:84:40:a2:e9:99:af:b0:83:59: 77:7d:5d:4a:94:a9:e6:98:d4:27:0a:08:41:b3:35:80:12:e8: b6:06:9f:5f:b6:c6:b2:e1:b1:ab:ee:a6:f9:76:97:48:28:72: 87:5d:46:66:bd:38:83:ea:67:2d:42:ee:0c:11:32:7a:04:20: 8d:b0:be:81:b3:af:38:37:0f:71:ee:45:f2:4c:8b:cf:c0:12: 6b:ee:29:fc:30:25:0f:b5:d5:ab:77:75:35:2b:97:a3:f9:c6: dc:c8:4b:e4:4b:56:39:dc:64:3a:ab:e2:40:b9:e4:df:2c:b7: 27:6e:9b:4e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU0QUMxMTAvBgNVBAUTKDNFRUIxOTY4OEQzM0Q2MjE5OTRFNUIzRDlFNDZFQ0FB QTUwOUY0MjMwHhcNMjMwNjE5MDMzMDU2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDhmY2JlZi04NGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtfJvkld98gQ2rmogJJ7MK6HcsdMrXS1siq4BS6Kr/Lz5AeAvTohlURTuy9+ codn6hvU6/m3NiudP/suYo2P1azyeJp4JEkMcjUD77+ZncIEJnuCwwqCprACLCoF FLMv/wPhZE6ltTUzytVhgpSZQK52fIgCM3YxTb0Esik/KyfjYsFJxpgAKNUjsKF+ RrkXrHj9TcbuVqnHecpf6p/oxrCed4VQUpyGMzFLBJuLfw2+JRRxwfUthM/aA6Mm aMnCmFoEpydkvz8HnbpKYmWHpKL2UmtKw+vUdXcshjpvo0xoT+Tiw7VrhyOXuUJX s7+LQnk9/rCZq7k7OqPz+5TBUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMnaUDlP tzJiYIfZaSy2bmCQ6+h+MB8GA1UdIwQYMBaAFD7rGWiNM9YhmU5bPZ5G7KqlCfQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTRBQy8zNDQxRDJEMDZD NkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFpR1pUbHM5bmtic3FxVUo5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1c1phSTB6MWlHWlRsczlua2JzcXFVSjlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REU0QUMvMzQ0MUQyRDA2QzZFMTFFQ0IyMzNGQjYxQzRGOUFFMDIvMDcxNkIyNjQ2 QzcxMTFFQzhDNUU2OTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnCRcwDQYJKoZIhvcNAQELBQADggEBAI9QrQViH3t12+0g nyyIqPTvyejo5sIzJi8skr2MqBvZMc6avdkr+6OcygoVypdHyO0Et9yN10QAQsEP 1+19HWDsgSB/WtK/0EFgZm4mEcxIK+lQwqK9hLGt8Bob+xoCCUD2c/4bIIudFRdE RvEk1uMRoxDywwvz6RXvQBXo9nG44hL514BL24RAoumZr7CDWXd9XUqUqeaY1CcK CEGzNYAS6LYGn1+2xrLhsavupvl2l0gocoddRma9OIPqZy1C7gwRMnoEII2wvoGz rzg3D3HuRfJMi8/AEmvuKfwwJQ+11at3dTUrl6P5xtzIS+RLVjncZDqr4kC55N8s tydum04= -----END CERTIFICATE-----Generated at Fri May 17 03:52:23 2024 by rpki-client on console-ams.rpki-client.org