$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/5334D20CDA5E11EBA323F462C4F9AE02.roa File: 5334D20CDA5E11EBA323F462C4F9AE02.roa (raw, json) Hash identifier: 6cOT7/wWwvYA8TTg5/JpIjAU9s6XkTFMiZJRiZFubcU= Subject key identifier: 0E:87:80:4A:9D:7D:D3:62:D8:F3:15:02:4F:C1:52:36:51:05:E6:06 Certificate issuer: /CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05 Certificate serial: 041D Authority key identifier: B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/5334D20CDA5E11EBA323F462C4F9AE02.roa Signing time: Sat 01 Jul 2023 00:50:34 +0000 ROA not before: Sat 01 Jul 2023 00:50:34 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 14618 IP address blocks: 103.168.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 01:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1053 (0x41d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05 Validity Not Before: Jul 1 00:50:34 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=649f785a-4dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b6:fc:0e:bf:eb:bb:dc:4c:ed:48:b1:ad:eb: 6c:b8:67:dc:d3:8a:56:f4:e8:8c:64:90:94:5f:a7: 78:8e:46:97:15:73:22:7f:5d:d7:4b:ae:8e:39:f9: e0:2f:71:dc:ed:56:5f:4e:9e:38:da:57:e3:50:81: b2:62:41:ff:e5:d2:04:0a:37:32:4a:29:91:6c:3c: 23:ae:ab:d5:9b:0a:44:f3:20:bd:70:3c:5d:88:5f: a0:90:cf:04:79:71:f1:cb:79:55:ee:27:7d:cc:19: 97:ef:8e:2a:e2:55:af:b1:b9:f4:de:00:34:1e:d0: 87:a0:34:51:0f:83:d4:2b:a8:e8:d7:c3:70:aa:a6: 94:12:9e:b8:c4:3e:2f:2e:1d:25:01:5a:8f:43:74: e9:f8:fe:f0:27:75:33:02:ea:a8:95:c8:1a:aa:8e: 8d:42:e1:02:18:93:4b:a8:b1:93:8a:74:2a:28:72: 22:5e:e1:f5:80:ca:4a:3e:9d:1b:a3:d3:2b:d3:0b: b1:a4:a7:83:9b:86:06:6d:6b:7f:f1:a8:94:fc:92: f7:66:2c:4e:2e:47:55:35:9f:9c:ff:bf:61:7c:09: 88:3c:c7:37:2d:c1:0d:90:27:a9:d6:9d:45:f0:dd: 34:21:ef:d8:d4:77:9d:00:6d:54:79:53:56:45:bd: 13:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:87:80:4A:9D:7D:D3:62:D8:F3:15:02:4F:C1:52:36:51:05:E6:06 X509v3 Authority Key Identifier: keyid:B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/5334D20CDA5E11EBA323F462C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.209.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:f6:10:f5:c2:b9:e1:8a:0c:09:82:36:98:69:42:3b:1d:b5: 32:da:84:fd:02:3d:9d:6a:60:e1:ba:21:63:7f:bf:bb:b3:88: ab:db:f4:ff:7c:86:9e:78:fe:a8:b2:77:00:68:39:f7:d6:42: 34:b4:46:41:70:d7:e8:1e:a6:e8:4c:36:39:0f:19:81:f0:1a: 64:87:cf:22:32:29:50:ac:2f:17:5f:c3:ba:2e:02:dd:29:69: 3c:14:a0:76:39:ca:57:1f:7e:20:a3:bf:b3:2f:3b:7b:ba:df: 46:a7:d4:0b:98:1b:a5:af:31:a4:10:62:bd:1b:98:09:bc:f5: 7f:e7:be:38:25:ff:92:89:94:f2:bb:0a:e0:9d:a9:fc:bc:43: bb:90:44:7e:07:67:7a:7b:d0:a7:bb:57:40:c0:14:7f:88:41: 99:51:9d:df:b5:eb:6b:0d:96:a0:02:b5:b4:b4:d7:9f:22:53: 4f:c1:12:f5:db:eb:13:49:97:9b:86:43:23:80:a8:b5:f9:1c: a8:e0:f1:45:91:f8:6a:23:c4:7c:5b:8d:d3:e3:0b:ed:97:0c: 15:15:22:9a:60:2e:6f:ad:dc:a5:01:08:56:54:63:ea:cf:2b: c9:8a:45:91:12:25:be:da:b8:73:e3:d8:70:6c:92:24:04:27: 5c:08:a6:e2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJCNjYxMTAvBgNVBAUTKEIwMTNCOTcyQjQyQ0E1QUQ5RjZBMTYyQkYzQjVDNzRG OTMzQzFFMDUwHhcNMjMwNzAxMDA1MDM0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDlmNzg1YS00ZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Lb8Dr/ru9xM7UixretsuGfc04pW9OiMZJCUX6d4jkaXFXMif13XS66OOfng L3Hc7VZfTp442lfjUIGyYkH/5dIECjcySimRbDwjrqvVmwpE8yC9cDxdiF+gkM8E eXHxy3lV7id9zBmX744q4lWvsbn03gA0HtCHoDRRD4PUK6jo18NwqqaUEp64xD4v Lh0lAVqPQ3Tp+P7wJ3UzAuqolcgaqo6NQuECGJNLqLGTinQqKHIiXuH1gMpKPp0b o9Mr0wuxpKeDm4YGbWt/8aiU/JL3ZixOLkdVNZ+c/79hfAmIPMc3LcENkCep1p1F 8N00Ie/Y1HedAG1UeVNWRb0TewIDAQABo4IClTCCApEwHQYDVR0OBBYEFA6HgEqd fdNi2PMVAk/BUjZRBeYGMB8GA1UdIwQYMBaAFLATuXK0LKWtn2oWK/O1x0+TPB4F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkI2Ni81M0U4RkJFQURB NUIxMUVCODNCRTM3MUFDNEY5QUUwMi9zQk81Y3JRc3BhMmZhaFlyODdYSFQ1TThI Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCTzVjclFzcGEyZmFoWXI4N1hIVDVNOEhnVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTJCNjYvNTNFOEZCRUFEQTVCMTFFQjgzQkUzNzFBQzRGOUFFMDIvNTMzNEQyMENE QTVFMTFFQkEzMjNGNDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnqNEwDQYJKoZIhvcNAQELBQADggEBAG32EPXCueGKDAmC NphpQjsdtTLahP0CPZ1qYOG6IWN/v7uziKvb9P98hp54/qiydwBoOffWQjS0RkFw 1+gepuhMNjkPGYHwGmSHzyIyKVCsLxdfw7ouAt0paTwUoHY5ylcffiCjv7MvO3u6 30an1AuYG6WvMaQQYr0bmAm89X/nvjgl/5KJlPK7CuCdqfy8Q7uQRH4HZ3p70Ke7 V0DAFH+IQZlRnd+162sNlqACtbS0158iU0/BEvXb6xNJl5uGQyOAqLX5HKjg8UWR +GojxHxbjdPjC+2XDBUVIppgLm+t3KUBCFZUY+rPK8mKRZESJb7auHPj2HBskiQE J1wIpuI= -----END CERTIFICATE-----Generated at Fri Apr 19 02:47:22 2024 by rpki-client on console-ams.rpki-client.org