$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa File: 6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa (raw, json) Hash identifier: kFKJqLQA8zC2Qc1Fc/Trg+ITcJC5T2EwVFP8GCs9t+o= Subject key identifier: 4B:B0:4D:27:67:C6:52:23:D1:C1:54:3A:95:3C:BB:9C:72:34:FA:36 Certificate issuer: /CN=A91E3BF2/serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736 Certificate serial: 0153 Authority key identifier: C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa Signing time: Sat 15 Jul 2023 02:42:36 +0000 ROA not before: Sat 15 Jul 2023 02:42:36 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 133368 IP address blocks: 103.189.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3BF2/serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736 Validity Not Before: Jul 15 02:42:36 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64b2079c-c669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:43:d3:63:d9:67:7a:64:21:0f:d7:7b:f8:a5: 80:13:dd:0a:5a:58:5f:0a:63:b9:bf:12:fc:10:4c: 1e:0c:17:8d:3c:3d:a9:11:df:52:bb:c1:60:17:6b: b5:e8:05:f9:33:da:64:e5:7f:72:7b:11:e2:23:69: 6d:66:38:66:3d:49:9c:3e:39:be:3d:2d:74:36:f9: ca:49:18:f0:6e:a4:08:f9:ea:1e:e5:6d:27:60:9a: fc:7e:0b:d7:99:f7:aa:5f:f2:29:bf:a0:c0:ee:e4: 87:92:54:8f:41:0f:8c:77:56:c7:e7:dd:0d:93:82: f5:9e:76:2e:f5:e0:e4:d4:36:7e:a9:63:e5:3a:22: a4:de:8c:17:fc:a4:07:79:cd:ba:04:60:11:68:e2: 32:31:2a:21:15:54:6e:76:ea:e4:68:d8:d3:6a:13: 5e:63:bd:9e:06:50:42:3a:d9:fb:6f:8e:97:9d:af: a6:94:8a:c3:8b:6c:64:ee:c1:ea:78:3a:6e:f5:4a: ea:62:33:0d:d2:6d:f2:07:9c:67:73:aa:cc:0b:21: 95:54:54:65:aa:21:8f:36:33:5d:6f:62:ab:d9:89: 5e:7d:b1:00:b1:87:a7:04:39:13:4e:5c:57:ba:a8: 34:25:32:ac:ad:91:7a:27:9b:ed:12:4e:1f:34:61: fd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B0:4D:27:67:C6:52:23:D1:C1:54:3A:95:3C:BB:9C:72:34:FA:36 X509v3 Authority Key Identifier: keyid:C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.176.0/23 Signature Algorithm: sha256WithRSAEncryption be:d7:25:25:89:da:83:08:d0:3b:a1:86:ed:47:3b:49:f6:c3: e5:bb:83:e8:46:e5:97:f0:37:58:3c:2e:30:c3:cf:b1:1b:b0: 94:b9:b6:cb:c6:0b:f7:23:fc:a2:6d:9f:1c:8e:d1:f0:83:34: dd:8c:de:8b:d4:54:4e:64:79:d3:ef:db:9f:2d:9a:a3:c0:a1: e5:3f:7f:c1:3c:0a:38:0f:38:b8:bb:51:b4:ce:be:b5:6f:a0: 40:5c:e9:67:f3:04:c2:56:eb:9b:d7:0c:57:43:cc:55:b8:90: 8b:0b:80:de:d2:25:22:17:22:59:26:e2:33:a5:2a:88:53:0b: f1:c8:35:a8:1a:ed:59:95:85:da:b6:04:be:d0:6b:96:f3:cb: f6:dc:bb:ea:a0:b6:95:42:56:6a:c8:88:34:74:4f:50:9e:37: a4:df:e4:42:89:a5:f3:a0:e6:99:5d:cb:60:2b:2f:c6:ba:35: 96:88:64:d9:88:72:fc:e6:1d:cc:08:8f:e8:b9:e6:d1:83:28: 24:2c:b1:51:eb:29:1b:73:c1:08:f2:f3:ba:24:98:f6:3a:18: a0:20:38:16:ec:29:80:ee:69:b3:8d:99:d9:4b:16:c4:e0:5a: 9c:ab:34:3e:80:48:ce:c5:2f:fa:90:92:1d:ec:be:69:94:b0: 07:cb:cf:8c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCRjIxMTAvBgNVBAUTKEM0NzFBNTZFRTk0RjA1QjQzN0MwOUVFRTBGNDQyMDNG QTQ1OTI3MzYwHhcNMjMwNzE1MDI0MjM2WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGIyMDc5Yy1jNjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UPTY9lnemQhD9d7+KWAE90KWlhfCmO5vxL8EEweDBeNPD2pEd9Su8FgF2u1 6AX5M9pk5X9yexHiI2ltZjhmPUmcPjm+PS10NvnKSRjwbqQI+eoe5W0nYJr8fgvX mfeqX/Ipv6DA7uSHklSPQQ+Md1bH590Nk4L1nnYu9eDk1DZ+qWPlOiKk3owX/KQH ec26BGARaOIyMSohFVRudurkaNjTahNeY72eBlBCOtn7b46Xna+mlIrDi2xk7sHq eDpu9UrqYjMN0m3yB5xnc6rMCyGVVFRlqiGPNjNdb2Kr2YlefbEAsYenBDkTTlxX uqg0JTKsrZF6J5vtEk4fNGH96wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEuwTSdn xlIj0cFUOpU8u5xyNPo2MB8GA1UdIwQYMBaAFMRxpW7pTwW0N8Ce7g9EID+kWSc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0JGMi81MDkwOTZBOEY2 QzMxMUVDODMzQUVGMzlDNEY5QUUwMi94SEdsYnVsUEJiUTN3Sjd1RDBRZ1A2UlpK elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIR2xidWxQQmJRM3dKN3VEMFFnUDZSWkp6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNCRjIvNTA5MDk2QThGNkMzMTFFQzgzM0FFRjM5QzRGOUFFMDIvNkI3QzMzQzhG NkM4MTFFQ0JERjdERDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvbAwDQYJKoZIhvcNAQELBQADggEBAL7XJSWJ2oMI0Duh hu1HO0n2w+W7g+hG5ZfwN1g8LjDDz7EbsJS5tsvGC/cj/KJtnxyO0fCDNN2M3ovU VE5kedPv258tmqPAoeU/f8E8CjgPOLi7UbTOvrVvoEBc6WfzBMJW65vXDFdDzFW4 kIsLgN7SJSIXIlkm4jOlKohTC/HINaga7VmVhdq2BL7Qa5bzy/bcu+qgtpVCVmrI iDR0T1CeN6Tf5EKJpfOg5pldy2ArL8a6NZaIZNmIcvzmHcwIj+i55tGDKCQssVHr KRtzwQjy87okmPY6GKAgOBbsKYDuabONmdlLFsTgWpyrND6ASM7FL/qQkh3svmmU sAfLz4w= -----END CERTIFICATE-----Generated at Wed May 15 05:22:37 2024 by rpki-client on console-fra.rpki-client.org