$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/E7DFF7B8CA1D11EE8037E217C4F9AE02.roa File: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (raw, json) Hash identifier: tRUYfW/mxJFIRHVM9QsIKc4UoKBg/TdEbDm54bKQfQg= Subject key identifier: 82:8A:53:1E:3E:62:CB:0A:91:EA:0B:0C:65:54:3B:87:31:AE:13:C5 Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Certificate serial: 0D67 Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/E7DFF7B8CA1D11EE8037E217C4F9AE02.roa Signing time: Fri 12 Jul 2024 18:56:27 +0000 ROA not before: Fri 12 Jul 2024 18:56:27 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 140629 IP address blocks: 103.117.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3431 (0xd67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Validity Not Before: Jul 12 18:56:27 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66917c5b-a9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8c:c0:4b:d9:d8:2b:f3:07:44:78:07:45:c3: ee:6f:eb:8a:ff:86:6b:12:8f:77:ed:5f:97:bf:2a: 68:ba:1f:2e:0c:10:29:19:9f:ec:11:06:f0:fd:ac: b7:85:c3:7f:96:25:ba:67:bd:02:90:8b:fa:ef:ea: 83:87:b0:4b:7c:a8:72:c6:f7:9d:9b:d9:cb:54:83: 0c:86:d3:86:9e:e6:0d:05:f9:7b:f8:d5:f5:93:8d: 6c:14:33:0e:df:ff:1f:8e:c9:d1:d2:e9:dd:60:b7: 81:79:70:db:26:ad:ba:54:41:eb:8c:22:dd:a8:9e: 52:38:fd:50:a5:f7:21:ad:4c:d7:32:52:61:74:ce: 19:2f:cc:c1:2a:85:92:20:18:b6:9a:91:1b:b9:e8: 3b:34:d6:38:4f:02:50:db:e5:85:2b:3f:f5:17:cf: 37:5e:a5:b6:43:6b:2e:20:c6:0c:b4:98:0f:96:60: ab:8d:25:78:03:3c:64:d6:71:38:97:53:55:20:65: 71:31:b5:e5:e7:8d:e2:09:45:13:76:ee:13:c8:14: c0:4d:67:90:67:1b:b2:84:00:7e:e4:6b:22:51:16: f4:e2:ff:9a:1e:ef:b3:91:59:2e:37:51:a6:d4:d1: e3:2a:3b:a3:ca:09:66:6e:d1:06:94:e7:65:bf:c8: 46:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8A:53:1E:3E:62:CB:0A:91:EA:0B:0C:65:54:3B:87:31:AE:13:C5 X509v3 Authority Key Identifier: keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/E7DFF7B8CA1D11EE8037E217C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.117.130.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:a3:83:da:84:ea:3b:ad:56:ec:69:cb:42:3f:3e:74:fb:99: cb:46:84:52:31:25:5b:37:ef:69:e8:be:55:fe:70:cd:9f:68: 99:04:fc:11:3a:52:06:6d:a9:6e:7c:5c:fa:f7:de:46:da:26: cc:c1:60:b0:38:99:ba:3f:6f:a2:2f:92:12:de:52:f3:ba:0c: 2d:e0:18:e6:3b:b0:7a:63:41:94:de:79:fb:20:03:6b:91:a7: 38:c6:24:d7:76:dc:3f:84:8e:c0:5f:d8:2c:b3:ac:cc:bf:df: 93:03:89:7f:2c:3a:47:22:f5:42:3b:2a:22:8b:40:cb:38:31: b4:a7:d0:75:6b:38:4e:87:83:d8:f2:f6:57:b1:ac:69:43:d0: f1:c4:ce:ff:49:cc:aa:24:63:58:7e:36:77:31:8a:ce:5e:c2: f5:99:aa:d0:bc:bb:c0:09:8b:80:26:d7:17:cc:f1:ef:63:62: 59:d7:2f:4d:6a:98:9f:43:d0:53:d2:14:d7:1c:d3:24:64:24: 50:f2:84:d3:4d:f2:79:db:30:b5:88:83:cb:d1:50:96:01:7f: 89:3f:34:26:ac:97:f5:1b:a1:43:b0:89:c1:5e:40:cf:03:cb: ff:60:77:38:6f:ec:c4:28:7f:5b:58:93:4e:a1:94:15:d2:bc: ad:74:f2:b7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3QjIxMTAvBgNVBAUTKDExNTYyMDVFQzczODBBMDBGMTBGMzQxMDExNEQwNDAz NTdGMDBGRjEwHhcNMjQwNzEyMTg1NjI3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjkxN2M1Yi1hOWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4zAS9nYK/MHRHgHRcPub+uK/4ZrEo937V+Xvypouh8uDBApGZ/sEQbw/ay3 hcN/liW6Z70CkIv67+qDh7BLfKhyxvedm9nLVIMMhtOGnuYNBfl7+NX1k41sFDMO 3/8fjsnR0undYLeBeXDbJq26VEHrjCLdqJ5SOP1QpfchrUzXMlJhdM4ZL8zBKoWS IBi2mpEbueg7NNY4TwJQ2+WFKz/1F883XqW2Q2suIMYMtJgPlmCrjSV4Azxk1nE4 l1NVIGVxMbXl543iCUUTdu4TyBTATWeQZxuyhAB+5GsiURb04v+aHu+zkVkuN1Gm 1NHjKjujyglmbtEGlOdlv8hGvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIKKUx4+ YssKkeoLDGVUO4cxrhPFMB8GA1UdIwQYMBaAFBFWIF7HOAoA8Q80EBFNBANX8A/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTdCMi8zRUUzMjM1QUFF OTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENnRHhEelFRRVUwRUExZndE X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VWWWdYc2M0Q2dEeER6UVFFVTBFQTFmd0RfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE3QjIvM0VFMzIzNUFBRTk5MTFFOUFDNTBFMTdCQzRGOUFFMDIvRTdERkY3QjhD QTFEMTFFRTgwMzdFMjE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABndYIwDQYJKoZIhvcNAQELBQADggEBAJqjg9qE6jutVuxp y0I/PnT7mctGhFIxJVs372novlX+cM2faJkE/BE6UgZtqW58XPr33kbaJszBYLA4 mbo/b6IvkhLeUvO6DC3gGOY7sHpjQZTeefsgA2uRpzjGJNd23D+EjsBf2CyzrMy/ 35MDiX8sOkci9UI7KiKLQMs4MbSn0HVrOE6Hg9jy9lexrGlD0PHEzv9JzKokY1h+ Nncxis5ewvWZqtC8u8AJi4Am1xfM8e9jYlnXL01qmJ9D0FPSFNcc0yRkJFDyhNNN 8nnbMLWIg8vRUJYBf4k/NCasl/UboUOwicFeQM8Dy/9gdzhv7MQof1tYk06hlBXS vK108rc= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org