$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/CD2CF86C759E11EFB8230E38C4F9AE02.roa File: CD2CF86C759E11EFB8230E38C4F9AE02.roa (raw, json) Hash identifier: YBmeTVaSZHxdyluaKY2LXGaV+psmMf8UYwHUVBju0ME= Subject key identifier: 99:E2:BC:F1:7F:65:9B:C1:1B:25:11:5C:F8:09:5B:57:85:C8:ED:3F Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 0263 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/CD2CF86C759E11EFB8230E38C4F9AE02.roa Signing time: Wed 18 Sep 2024 09:17:18 +0000 ROA not before: Wed 18 Sep 2024 09:17:18 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 150716 IP address blocks: 103.243.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Sep 18 09:17:18 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66ea9a9e-0385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dc:aa:45:d8:c9:29:3d:75:d7:55:15:62:4d: 40:cc:a0:b9:ae:37:4b:75:58:8d:27:f5:2f:cc:ad: 5c:c9:0a:aa:c0:7d:5f:f3:23:51:9e:3d:38:39:7e: d7:80:96:7e:ce:dc:43:90:33:85:8a:7c:49:77:3d: bc:6a:c7:3c:ab:fa:74:3e:4b:c7:ec:78:c2:b5:8d: d8:a4:c4:48:f9:d9:fd:27:64:1b:90:c1:c3:72:be: 7e:07:01:66:8f:e3:cb:a6:c1:c2:9e:a7:8c:03:1a: 0f:8f:72:09:24:04:f6:09:92:b0:a5:6b:1d:94:91: 5c:db:8e:2f:9c:2a:98:80:f5:82:97:db:14:df:d1: 32:f6:31:14:51:71:51:e6:95:20:49:63:66:00:4e: c8:de:0d:21:bf:20:4b:8d:23:af:84:fd:4e:0f:23: 73:5b:d1:56:7a:35:37:26:8e:16:63:cd:8a:3e:d4: 19:67:91:da:dd:13:b4:ec:bc:fe:4b:ae:08:c4:a6: d2:92:c2:bc:e2:28:47:83:ea:24:a6:fa:71:78:d3: 2f:9b:1f:e1:87:93:59:b9:bf:07:f3:cc:6e:51:e0: e5:63:bb:a2:dc:25:9a:76:1b:7e:3c:68:36:72:b4: 2a:15:8b:ec:96:b4:df:31:3b:93:d9:8f:bc:37:b4: df:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E2:BC:F1:7F:65:9B:C1:1B:25:11:5C:F8:09:5B:57:85:C8:ED:3F X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/CD2CF86C759E11EFB8230E38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.116.0/24 Signature Algorithm: sha256WithRSAEncryption 19:27:87:bb:ee:5a:45:b1:3a:f7:54:e6:06:5d:a6:2d:6e:d5: a1:54:60:2d:4f:37:2d:db:5b:9e:77:3c:55:b5:47:9e:c2:58: de:91:97:68:2b:54:9e:e7:c2:59:65:85:8c:1c:be:b3:bd:f0: 97:17:fb:07:ad:bf:78:92:86:04:76:4c:ad:45:e0:41:14:6c: b9:30:5b:f4:c0:a8:c5:1f:ea:4f:98:73:c4:d6:cc:e0:28:0c: 44:03:11:eb:eb:72:6d:c2:b3:9d:ef:86:30:5d:b0:6f:19:84: bb:c2:55:8d:c1:80:d8:b1:51:e2:99:3f:07:0b:45:7f:2d:75: c6:f0:8c:17:fc:72:9b:55:78:5c:c3:32:95:41:b3:02:d2:92: d4:60:c1:1e:80:a5:15:04:35:f7:0f:fd:74:bf:3e:93:b9:91: 08:1d:6f:41:ce:b0:54:d6:5f:2a:91:04:7f:83:49:06:76:03: 68:c9:ed:26:d1:e4:e9:bb:3b:63:17:b0:7c:a7:0a:18:7a:7c: c4:60:8c:3f:bc:9c:3b:92:3d:f5:86:24:ad:4e:42:39:4c:fa: 6d:2a:cf:1f:d4:9f:90:f5:fb:89:28:2b:f0:52:68:d0:2a:76: 3e:40:68:4b:cb:e9:8c:d4:cf:86:42:44:37:09:3f:43:73:ad: 97:b1:43:ae -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjQwOTE4MDkxNzE4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVhOWE5ZS0wMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59yqRdjJKT1111UVYk1AzKC5rjdLdViNJ/UvzK1cyQqqwH1f8yNRnj04OX7X gJZ+ztxDkDOFinxJdz28asc8q/p0PkvH7HjCtY3YpMRI+dn9J2QbkMHDcr5+BwFm j+PLpsHCnqeMAxoPj3IJJAT2CZKwpWsdlJFc244vnCqYgPWCl9sU39Ey9jEUUXFR 5pUgSWNmAE7I3g0hvyBLjSOvhP1ODyNzW9FWejU3Jo4WY82KPtQZZ5Ha3RO07Lz+ S64IxKbSksK84ihHg+okpvpxeNMvmx/hh5NZub8H88xuUeDlY7ui3CWadht+PGg2 crQqFYvslrTfMTuT2Y+8N7TfNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJnivPF/ ZZvBGyURXPgJW1eFyO0/MB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRFMzIvNzIwOTU5RkMwMUMwMTFFREJEN0M2RjU4QzRGOUFFMDIvQ0QyQ0Y4NkM3 NTlFMTFFRkI4MjMwRTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn83QwDQYJKoZIhvcNAQELBQADggEBABknh7vuWkWxOvdU 5gZdpi1u1aFUYC1PNy3bW553PFW1R57CWN6Rl2grVJ7nwlllhYwcvrO98JcX+wet v3iShgR2TK1F4EEUbLkwW/TAqMUf6k+Yc8TWzOAoDEQDEevrcm3Cs53vhjBdsG8Z hLvCVY3BgNixUeKZPwcLRX8tdcbwjBf8cptVeFzDMpVBswLSktRgwR6ApRUENfcP /XS/PpO5kQgdb0HOsFTWXyqRBH+DSQZ2A2jJ7SbR5Om7O2MXsHynChh6fMRgjD+8 nDuSPfWGJK1OQjlM+m0qzx/Un5D1+4koK/BSaNAqdj5AaEvL6YzUz4ZCRDcJP0Nz rZexQ64= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:52 2024 by rpki-client on console-fra.rpki-client.org