$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/804FEC802F6711EEB6EECA5BC4F9AE02.roa File: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (raw, json) Hash identifier: 22W6wYWFhynBM/nAbr2xrekg030q/Kkq4G9PIdMbTOs= Subject key identifier: F5:FE:BD:18:05:CD:E2:5F:B3:E0:D7:E0:54:82:F0:24:26:F4:38:DD Certificate issuer: /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Certificate serial: 02 Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/804FEC802F6711EEB6EECA5BC4F9AE02.roa Signing time: Mon 31 Jul 2023 06:00:08 +0000 ROA not before: Mon 31 Jul 2023 06:00:08 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 55933 IP address blocks: 103.245.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Jun 2024 07:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Validity Not Before: Jul 31 06:00:08 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64c74de7-cd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ff:32:e8:f1:7d:f3:38:46:9f:db:e2:da:17: ea:86:71:9e:36:58:45:c8:86:83:0f:5e:69:9d:8e: 01:8a:ba:20:e7:1b:11:96:17:de:ad:5a:9a:ed:9e: a3:d7:6d:12:54:1a:65:25:1e:06:df:28:f9:a0:f8: 63:47:49:6b:56:6c:f3:95:89:9f:f5:59:50:cf:9c: 44:26:20:0a:8d:7c:2f:fe:f8:21:10:4a:6c:3f:ed: 76:b4:a6:ca:ed:a0:8a:7b:0a:ea:bd:50:4a:e4:03: d7:e3:bb:de:e4:a4:b2:0f:ec:26:0d:19:d4:ee:a1: 98:a9:cd:e5:03:53:b4:e0:c1:42:ef:fc:b1:0f:51: ab:a0:d9:68:52:27:98:81:3f:2a:22:9b:06:33:3f: fd:2b:d8:20:4a:90:75:11:0f:de:f6:91:8d:8b:31: ae:b6:32:d6:d2:ab:ea:f9:0e:9c:f9:d8:7a:5b:50: c1:bf:c6:81:64:b9:76:bf:aa:c6:3f:d6:b1:71:f0: 69:5a:69:db:99:54:f1:fd:2f:95:26:d7:68:9e:e7: d1:42:76:7b:13:6c:cc:32:fa:6d:a6:4a:d5:cd:b4: 7c:8f:4d:cb:9d:d1:26:98:ac:d6:d2:6b:19:2b:43: a2:61:f8:53:d8:01:1a:08:67:97:17:2f:f4:cb:22: 1d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FE:BD:18:05:CD:E2:5F:B3:E0:D7:E0:54:82:F0:24:26:F4:38:DD X509v3 Authority Key Identifier: keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/804FEC802F6711EEB6EECA5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.245.24.0/23 Signature Algorithm: sha256WithRSAEncryption 30:02:5f:13:85:dd:e9:25:a9:9b:b6:d0:1b:04:8a:bc:4a:14: 19:ae:87:33:f2:19:b2:ef:b7:9b:b4:26:8b:a0:60:e1:e2:5e: 65:ef:79:2a:87:05:b3:71:ff:4a:82:55:42:68:d9:13:1a:04: e3:2b:e9:e1:e7:96:c5:19:f2:62:f6:71:16:a1:95:c4:d0:c6: 2f:91:c8:88:43:f1:c9:f3:5a:51:e4:fa:7b:65:5b:dc:a0:e1: aa:64:eb:78:b4:45:0a:35:dd:4f:09:57:7f:db:93:27:96:cf: 49:9f:9e:71:09:5b:2e:dd:f1:a4:ac:23:f8:c0:c1:f1:7d:fd: cc:e9:e1:59:a2:1d:78:3b:f8:52:04:ff:7b:c1:23:ce:ad:01: 10:9e:d9:07:98:88:32:07:34:61:2b:01:73:57:f6:69:59:3a: 37:47:ce:50:27:b2:da:2f:aa:ae:22:86:ff:86:7c:ab:07:59: 87:31:2b:73:5f:45:53:a8:61:22:b1:91:fc:5c:c4:e8:1d:9e: ef:a5:5a:74:0f:1d:aa:96:31:06:4a:a3:52:98:b8:d2:de:05: 8f:45:57:fc:14:cc:e9:a5:96:f5:ea:f9:3a:0e:ae:e7:64:4e: 33:fc:11:b2:ac:91:1f:c1:0f:fe:4b:10:4d:38:93:27:fd:f6: 95:e3:5b:1c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTA5OTExMC8GA1UEBRMoRjlBQTYzNkI1QzNFMzBDN0EwQkE5NzQzMDE1QjVCMTIx MDRDQjdBODAeFw0yMzA3MzEwNjAwMDhaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0Yzc0ZGU3LWNkMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDz/zLo8X3zOEaf2+LaF+qGcZ42WEXIhoMPXmmdjgGKuiDnGxGWF96tWprtnqPX bRJUGmUlHgbfKPmg+GNHSWtWbPOViZ/1WVDPnEQmIAqNfC/++CEQSmw/7Xa0psrt oIp7Cuq9UErkA9fju97kpLIP7CYNGdTuoZipzeUDU7TgwULv/LEPUaug2WhSJ5iB PyoimwYzP/0r2CBKkHURD972kY2LMa62MtbSq+r5Dpz52HpbUMG/xoFkuXa/qsY/ 1rFx8GlaaduZVPH9L5Um12ie59FCdnsTbMwy+m2mStXNtHyPTcud0SaYrNbSaxkr Q6Jh+FPYARoIZ5cXL/TLIh2dAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9f69GAXN 4l+z4NfgVILwJCb0ON0wHwYDVR0jBBgwFoAU+apja1w+MMegupdDAVtbEhBMt6gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFMDk5LzAyMjFEN0NFMkY2 NzExRUU4MjRBREM1OUM0RjlBRTAyLy1hcGphMXctTU1lZ3VwZERBVnRiRWhCTXQ2 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWFwamExdy1NTWVndXBkREFWdGJFaEJNdDZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5OS8wMjIxRDdDRTJGNjcxMUVFODI0QURDNTlDNEY5QUUwMi84MDRGRUM4MDJG NjcxMUVFQjZFRUNBNUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWf1GDANBgkqhkiG9w0BAQsFAAOCAQEAMAJfE4Xd6SWpm7bQ GwSKvEoUGa6HM/IZsu+3m7Qmi6Bg4eJeZe95KocFs3H/SoJVQmjZExoE4yvp4eeW xRnyYvZxFqGVxNDGL5HIiEPxyfNaUeT6e2Vb3KDhqmTreLRFCjXdTwlXf9uTJ5bP SZ+ecQlbLt3xpKwj+MDB8X39zOnhWaIdeDv4UgT/e8Ejzq0BEJ7ZB5iIMgc0YSsB c1f2aVk6N0fOUCey2i+qriKG/4Z8qwdZhzErc19FU6hhIrGR/FzE6B2e76VadA8d qpYxBkqjUpi40t4Fj0VX/BTM6aWW9er5Og6u52ROM/wRsqyRH8EP/ksQTTiTJ/32 leNbHA== -----END CERTIFICATE-----Generated at Tue Jun 11 10:37:20 2024 by rpki-client on console-ams.rpki-client.org