$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/C7A9FD140A1811EABA1D8360C4F9AE02.roa File: C7A9FD140A1811EABA1D8360C4F9AE02.roa (raw, json) Hash identifier: sksRMVI3q7oJNtyDgmTVFUq7ceYvdVbVuSS4jEJcQsk= Subject key identifier: 80:5C:54:2B:40:4B:6A:A3:B8:A3:E5:7F:BB:11:F5:DD:6B:C9:E7:36 Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Certificate serial: 0B75 Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/C7A9FD140A1811EABA1D8360C4F9AE02.roa Signing time: Fri 08 Mar 2024 19:27:23 +0000 ROA not before: Fri 08 Mar 2024 19:27:23 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 137440 IP address blocks: 103.108.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2933 (0xb75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Validity Not Before: Mar 8 19:27:23 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65eb669b-1ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ce:fe:a1:e1:62:d8:21:1a:94:d1:ef:e3:65: 2d:9a:f0:0e:1a:39:1c:79:2e:bb:0b:33:06:03:56: a2:c8:27:82:38:3b:29:6d:86:03:62:15:bc:17:86: 89:bb:e4:57:b5:bf:22:56:2a:66:48:68:ad:84:4e: 84:a4:46:92:62:44:56:13:e9:fe:62:0b:b0:c4:94: b0:5f:bc:72:fa:a8:48:8b:2a:38:39:0a:f2:b0:5f: 08:0d:50:1a:4e:d9:70:49:e3:ae:ac:dd:84:88:77: ae:2f:e2:06:6d:3f:96:bf:c8:c4:d6:ff:fd:56:87: bf:a1:61:e6:c2:db:e9:57:43:c1:32:cd:17:ba:f5: e1:54:1e:17:5e:be:6c:b6:f9:78:11:cc:9a:1e:6e: 66:2f:5d:10:e9:9d:9c:c7:41:95:a9:a6:49:82:5d: d8:40:6b:f8:1f:5b:17:34:6a:44:4f:cf:7a:dc:97: 58:eb:b3:b6:31:16:b5:8c:33:67:e3:d1:de:d5:16: ee:ed:4c:c9:b5:9f:35:88:39:3b:59:db:14:ba:e6: 49:3e:32:7c:99:ce:8f:5a:7e:42:d7:99:2a:c9:00: 67:5c:46:17:c5:0c:29:af:f2:0a:38:c7:30:15:d7: b0:26:6c:dd:82:95:c7:de:82:80:f4:a1:67:81:b0: c0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5C:54:2B:40:4B:6A:A3:B8:A3:E5:7F:BB:11:F5:DD:6B:C9:E7:36 X509v3 Authority Key Identifier: keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/C7A9FD140A1811EABA1D8360C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.218.0/23 Signature Algorithm: sha256WithRSAEncryption 96:67:73:24:d8:c8:a1:09:6d:2a:65:dd:90:86:fa:ac:e6:d6: 2f:44:fc:a4:0f:ef:c3:e8:52:3e:da:e6:a8:4f:4c:d3:98:65: 3e:be:f8:71:fe:34:1f:45:b5:24:82:fe:25:07:02:5a:47:af: f2:1e:81:f5:6c:0a:a1:b7:ae:76:f2:b2:61:2c:81:f2:64:6f: f1:23:0b:ae:cc:49:07:cf:eb:b7:90:62:25:6b:e7:81:19:62: cb:62:f8:9e:e9:4c:45:ea:0a:83:a0:99:99:15:90:68:aa:4e: 3f:97:23:d5:f8:2f:8c:5c:42:6d:78:01:b7:40:6a:a8:ec:9b: dc:b1:05:13:84:ad:55:a3:b1:46:96:f3:97:d5:c5:de:f8:c0: f3:87:52:0a:d6:71:27:93:e3:d8:9d:4c:57:87:66:d1:6e:ec: b2:09:4d:3b:b7:db:fa:dc:8f:b6:b3:e8:f4:1d:2e:df:a6:80: 84:20:29:b7:08:37:24:d9:d3:d0:08:20:42:8a:57:f1:d6:55: ea:be:9c:cd:92:98:7c:4b:d2:29:0d:39:b0:81:e3:c7:bf:f4: d3:3c:19:0d:0c:ba:33:44:4b:c9:1b:cd:6d:13:3a:0c:08:26: d5:25:29:ea:38:23:f6:5b:37:40:95:64:d4:83:b0:f9:3d:d8: 97:e9:1e:05 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw NzkxOTRGNEYwHhcNMjQwMzA4MTkyNzIzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWViNjY5Yi0xYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArs7+oeFi2CEalNHv42UtmvAOGjkceS67CzMGA1aiyCeCODspbYYDYhW8F4aJ u+RXtb8iVipmSGithE6EpEaSYkRWE+n+YguwxJSwX7xy+qhIiyo4OQrysF8IDVAa TtlwSeOurN2EiHeuL+IGbT+Wv8jE1v/9Voe/oWHmwtvpV0PBMs0XuvXhVB4XXr5s tvl4EcyaHm5mL10Q6Z2cx0GVqaZJgl3YQGv4H1sXNGpET8963JdY67O2MRa1jDNn 49He1Rbu7UzJtZ81iDk7WdsUuuZJPjJ8mc6PWn5C15kqyQBnXEYXxQwpr/IKOMcw FdewJmzdgpXH3oKA9KFngbDAEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIBcVCtA S2qjuKPlf7sR9d1ryec2MB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUZCRUEvN0M5QzU5MTgwMUQ4MTFFQUI3RDdCNDQ0QzRGOUFFMDIvQzdBOUZEMTQw QTE4MTFFQUJBMUQ4MzYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnbNowDQYJKoZIhvcNAQELBQADggEBAJZncyTYyKEJbSpl 3ZCG+qzm1i9E/KQP78PoUj7a5qhPTNOYZT6++HH+NB9FtSSC/iUHAlpHr/IegfVs CqG3rnbysmEsgfJkb/EjC67MSQfP67eQYiVr54EZYsti+J7pTEXqCoOgmZkVkGiq Tj+XI9X4L4xcQm14AbdAaqjsm9yxBROErVWjsUaW85fVxd74wPOHUgrWcSeT49id TFeHZtFu7LIJTTu32/rcj7az6PQdLt+mgIQgKbcINyTZ09AIIEKKV/HWVeq+nM2S mHxL0ikNObCB48e/9NM8GQ0MujNES8kbzW0TOgwIJtUlKeo4I/ZbN0CVZNSDsPk9 2JfpHgU= -----END CERTIFICATE-----Generated at Thu May 16 19:50:01 2024 by rpki-client on console-fra.rpki-client.org