$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/8817DA1297FA11EE93A3D274C4F9AE02.roa File: 8817DA1297FA11EE93A3D274C4F9AE02.roa (raw, json) Hash identifier: tpIDMLelRuTD36oY30L8MqD3EpZNrJiPDJXacit4UgI= Subject key identifier: E9:D0:B4:53:59:2D:43:BB:5A:1E:2A:D2:E5:05:84:62:41:58:6B:30 Certificate issuer: /CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Certificate serial: 2D Authority key identifier: 66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/8817DA1297FA11EE93A3D274C4F9AE02.roa Signing time: Sun 24 Dec 2023 09:15:55 +0000 ROA not before: Sun 24 Dec 2023 09:15:55 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 151200 IP address blocks: 103.139.178.0/24 maxlen: 24 103.139.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Feb 2024 05:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Validity Not Before: Dec 24 09:15:55 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6587f6cb-78ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6c:19:95:56:51:03:c3:d4:4e:ea:16:61:44: 83:db:17:35:a5:af:b4:4a:f7:32:55:f5:3b:5a:f2: bf:b5:87:c3:f8:36:2f:ff:69:0e:5a:de:33:5b:ee: 6a:d6:7d:81:94:d1:af:97:e4:dc:e3:9d:24:35:d0: f3:02:9d:46:5b:e5:18:14:8d:74:39:14:c7:f0:73: f6:0e:11:17:d8:3f:ed:c2:df:65:81:64:3a:bb:34: d5:e6:e7:39:2d:1a:ba:91:f8:ef:6b:37:a1:9e:fa: 9d:7a:6d:03:29:5f:f2:38:d1:67:c5:d1:f3:d3:98: f7:4c:38:bc:e9:92:e2:06:46:0c:9d:da:44:74:3d: 13:78:8a:6c:a4:a1:25:14:8e:5e:97:23:49:da:6e: dc:02:99:7f:8c:15:ad:e4:56:f6:81:f7:0d:02:a9: cb:6d:22:3e:5c:35:98:c0:5f:34:29:52:82:43:ec: d9:de:a5:1b:e8:ad:7f:a1:fe:72:5d:97:3a:76:bb: 51:17:bb:aa:77:ba:dc:17:56:27:d3:74:ab:6a:03: f9:00:f8:43:5c:b7:fb:b8:60:ed:08:39:1f:11:42: 47:0a:1c:a5:00:b5:46:74:71:b9:7c:63:f0:ab:e5: c4:90:37:29:a5:b1:ef:2d:53:d2:46:9d:d8:1b:36: e8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D0:B4:53:59:2D:43:BB:5A:1E:2A:D2:E5:05:84:62:41:58:6B:30 X509v3 Authority Key Identifier: keyid:66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/8817DA1297FA11EE93A3D274C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.178.0/23 Signature Algorithm: sha256WithRSAEncryption 63:15:0d:59:3a:67:00:c8:3c:ad:1b:7b:f4:39:db:72:0e:9d: 98:b0:c0:af:16:05:d2:40:1d:9b:5a:d5:fc:6d:0e:a8:c5:1e: d6:d9:38:58:b7:9d:04:b7:47:73:ac:51:40:f0:d7:14:ff:0e: 23:df:6f:5e:e5:b6:83:fe:f1:fb:f9:ca:06:09:3a:b7:3a:1c: f7:ae:55:89:92:66:98:47:d3:b7:d8:a9:1d:e9:ab:05:fe:3e: 9e:ed:71:fa:e1:1d:24:d7:6e:ff:a3:15:c2:18:b8:91:00:aa: 76:30:0e:42:27:da:d7:f0:9d:f2:60:0a:b6:3e:65:d4:f8:03: b6:df:18:4c:e8:54:40:57:1d:06:ca:ad:ba:91:70:98:c9:b9: 13:c2:e4:50:f0:9f:44:11:62:88:a6:e1:49:de:54:e9:60:11: 7e:61:b6:d7:f9:ec:d4:19:cd:f1:c8:11:96:7d:ae:92:d3:1b: 71:f7:10:a9:9b:3d:76:0f:86:e9:67:6d:ea:4c:a5:59:17:59: f9:e5:92:dd:71:9f:39:ec:d9:b5:0c:07:8b:ee:4d:fa:7d:f2: 75:a7:ce:0f:c4:b1:51:d0:6f:87:c1:e2:86:21:84:f1:08:f8: b4:f9:6a:27:9e:68:82:8b:f7:e6:22:f7:95:45:2f:64:3c:ce: 17:e7:c1:02 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OTIzQTExMC8GA1UEBRMoNjYzOEE2MDQyNjBGQ0NGMkU5RDhCMjBDMTc5MkVDQTE1 REM3NkQ1QzAeFw0yMzEyMjQwOTE1NTVaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ODdmNmNiLTc4ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMbBmVVlEDw9RO6hZhRIPbFzWlr7RK9zJV9Tta8r+1h8P4Ni//aQ5a3jNb7mrW fYGU0a+X5NzjnSQ10PMCnUZb5RgUjXQ5FMfwc/YOERfYP+3C32WBZDq7NNXm5zkt GrqR+O9rN6Ge+p16bQMpX/I40WfF0fPTmPdMOLzpkuIGRgyd2kR0PRN4imykoSUU jl6XI0nabtwCmX+MFa3kVvaB9w0CqcttIj5cNZjAXzQpUoJD7NnepRvorX+h/nJd lzp2u1EXu6p3utwXVifTdKtqA/kA+ENct/u4YO0IOR8RQkcKHKUAtUZ0cbl8Y/Cr 5cSQNymlse8tU9JGndgbNuiLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU6dC0U1kt Q7taHirS5QWEYkFYazAwHwYDVR0jBBgwFoAUZjimBCYPzPLp2LIMF5LsoV3HbVww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5MjNBL0M5QjNDQzU0RUMx MTExRTk4RTBGODY0N0M0RjlBRTAyL1pqaW1CQ1lQelBMcDJMSU1GNUxzb1YzSGJW dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmppbUJDWVB6UExwMkxJTUY1THNvVjNIYlZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi84ODE3REExMjk3 RkExMUVFOTNBM0QyNzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeLsjANBgkqhkiG9w0BAQsFAAOCAQEAYxUNWTpnAMg8rRt7 9Dnbcg6dmLDArxYF0kAdm1rV/G0OqMUe1tk4WLedBLdHc6xRQPDXFP8OI99vXuW2 g/7x+/nKBgk6tzoc965ViZJmmEfTt9ipHemrBf4+nu1x+uEdJNdu/6MVwhi4kQCq djAOQifa1/Cd8mAKtj5l1PgDtt8YTOhUQFcdBsqtupFwmMm5E8LkUPCfRBFiiKbh Sd5U6WARfmG21/ns1BnN8cgRln2uktMbcfcQqZs9dg+G6Wdt6kylWRdZ+eWS3XGf OezZtQwHi+5N+n3ydafOD8SxUdBvh8HihiGE8Qj4tPlqJ55ogov35iL3lUUvZDzO F+fBAg== -----END CERTIFICATE-----Generated at Wed Feb 21 08:05:52 2024 by rpki-client on console-fra.rpki-client.org