$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/C833DC72966011EEB5335A1FC4F9AE02.roa File: C833DC72966011EEB5335A1FC4F9AE02.roa (raw, json) Hash identifier: kGJ3dFyy3ARAEzH3ycJC5QnmVIogv3ecSLmfWzCpM6g= Subject key identifier: 29:BE:D3:C9:AA:B1:4E:B2:11:1F:A3:96:B0:7D:7E:FB:3B:C5:75:2D Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 01A3 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/C833DC72966011EEB5335A1FC4F9AE02.roa Signing time: Sat 09 Dec 2023 07:02:08 +0000 ROA not before: Sat 09 Dec 2023 07:02:08 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 16509 IP address blocks: 103.26.8.0/24 maxlen: 24 103.26.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Dec 9 07:02:08 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=657410ef-751c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:8c:d3:9b:ab:65:55:86:6f:17:b5:47:59: 41:68:80:42:64:a1:ef:4d:c4:04:ac:4c:00:34:2f: a1:53:1f:ee:0c:d9:8d:d2:a6:17:98:1c:4b:f0:56: 62:d2:88:d8:1e:ba:0d:3f:ba:26:ba:e8:da:3c:47: b6:ac:c4:e2:07:42:1a:f7:52:58:a9:89:ea:10:49: 51:0f:34:27:31:42:92:50:f6:c3:97:17:f6:95:03: a0:aa:b6:b8:68:4e:92:f8:a9:c5:54:95:a9:e4:98: 18:2d:b3:39:f2:bc:34:88:fa:ac:6b:01:bb:32:cd: dc:d8:22:d6:24:27:fd:bc:6c:ba:6c:17:03:02:de: 6f:89:da:c9:40:8c:ed:2f:79:30:4a:86:66:34:2a: 81:92:54:d2:c4:44:9b:67:8a:76:3e:d1:65:b1:88: 76:53:26:c7:e9:fc:8f:ef:17:68:f9:bc:64:3a:20: 30:30:10:e4:4b:40:6e:44:21:0b:0d:2f:67:90:0d: cf:bd:cc:0c:25:49:4d:91:f9:93:62:9d:6e:66:bb: 4f:7a:2d:39:cc:bd:8c:7d:d5:97:75:a4:83:c3:b6: 11:76:e9:2b:4a:1f:5d:5a:6f:f7:dc:84:45:59:d9: 15:47:ac:93:98:74:06:a5:64:04:0f:00:0a:c9:25: b1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BE:D3:C9:AA:B1:4E:B2:11:1F:A3:96:B0:7D:7E:FB:3B:C5:75:2D X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/C833DC72966011EEB5335A1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.26.8.0/24 103.26.11.0/24 Signature Algorithm: sha256WithRSAEncryption 13:ed:01:2e:a2:29:ce:33:b0:4f:23:75:e5:82:5d:52:ae:90: 31:1f:21:15:ef:87:d2:b6:c6:25:07:36:60:d4:4a:16:3c:54: fc:69:65:92:27:a8:22:da:13:d7:75:e5:da:0e:d6:6f:ae:5e: b7:b3:08:0d:e8:a1:36:db:06:4f:ca:34:94:6d:18:c6:82:46: e0:7a:56:0a:ec:e3:07:8b:84:25:7b:3d:66:3e:93:d6:af:d0: 97:5d:67:ab:5b:ec:73:d4:23:f1:47:d4:45:73:3a:9a:95:3f: 3a:1a:4b:60:48:8d:7b:01:5b:dc:e6:d1:63:08:c7:ff:31:35: 01:4b:21:e9:07:7d:ff:b0:96:6d:6f:52:dd:44:39:79:f9:c3: b4:cb:6b:40:3c:05:e3:3b:6d:e8:45:fb:f3:56:3d:88:3b:53: 0c:ff:9f:c7:5d:99:58:96:1f:06:2c:77:36:0d:d2:2c:95:b8: 6e:66:21:90:6f:93:60:9d:7a:d8:72:02:b0:62:ca:a9:55:1d: 73:c5:7a:5b:7b:3d:24:97:36:f8:e6:f8:95:e1:8e:98:ea:31: 78:b7:b7:d2:a2:56:78:d2:5f:16:57:80:2d:3b:8d:fb:b5:49: f6:92:4d:7d:f8:78:14:b2:f4:75:fb:34:49:cf:70:96:1b:e2: 7c:3a:19:39 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjMxMjA5MDcwMjA4WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTc0MTBlZi03NTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAWM05urZVWGbxe1R1lBaIBCZKHvTcQErEwANC+hUx/uDNmN0qYXmBxL8FZi 0ojYHroNP7omuujaPEe2rMTiB0Ia91JYqYnqEElRDzQnMUKSUPbDlxf2lQOgqra4 aE6S+KnFVJWp5JgYLbM58rw0iPqsawG7Ms3c2CLWJCf9vGy6bBcDAt5vidrJQIzt L3kwSoZmNCqBklTSxESbZ4p2PtFlsYh2UybH6fyP7xdo+bxkOiAwMBDkS0BuRCEL DS9nkA3PvcwMJUlNkfmTYp1uZrtPei05zL2MfdWXdaSDw7YRdukrSh9dWm/33IRF WdkVR6yTmHQGpWQEDwAKySWxSwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCm+08mq sU6yER+jlrB9fvs7xXUtMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRFMzIvNzIwOTU5RkMwMUMwMTFFREJEN0M2RjU4QzRGOUFFMDIvQzgzM0RDNzI5 NjYwMTFFRUI1MzM1QTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnGggDBABnGgswDQYJKoZIhvcNAQELBQADggEBABPtAS6i Kc4zsE8jdeWCXVKukDEfIRXvh9K2xiUHNmDUShY8VPxpZZInqCLaE9d15doO1m+u XrezCA3ooTbbBk/KNJRtGMaCRuB6Vgrs4weLhCV7PWY+k9av0JddZ6tb7HPUI/FH 1EVzOpqVPzoaS2BIjXsBW9zm0WMIx/8xNQFLIekHff+wlm1vUt1EOXn5w7TLa0A8 BeM7behF+/NWPYg7Uwz/n8ddmViWHwYsdzYN0iyVuG5mIZBvk2CdethyArBiyqlV HXPFelt7PSSXNvjm+JXhjpjqMXi3t9KiVnjSXxZXgC07jfu1SfaSTX34eBSy9HX7 NEnPcJYb4nw6GTk= -----END CERTIFICATE-----Generated at Wed May 1 05:59:13 2024 by rpki-client on console-fra.rpki-client.org