$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/7AFCACAEADB311E8AF75E557C4F9AE02.roa File: 7AFCACAEADB311E8AF75E557C4F9AE02.roa (raw, json) Hash identifier: mM8Bmhl9DbAqaugXBOcgBTc1BLMKnAsF1zyijPb4bXA= Subject key identifier: 98:BE:03:4C:A6:3F:29:AF:E3:E7:37:4F:98:F2:86:FE:91:0A:9F:2E Certificate issuer: /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Certificate serial: 125D Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/7AFCACAEADB311E8AF75E557C4F9AE02.roa Signing time: Wed 08 May 2024 18:06:15 +0000 ROA not before: Wed 08 May 2024 18:06:15 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 137827 IP address blocks: 103.115.33.0/24 maxlen: 24 103.139.80.0/24 maxlen: 24 2001:df7:1300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4701 (0x125d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Validity Not Before: May 8 18:06:15 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=663bbf17-a08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ac:3f:73:66:06:5e:11:bf:a4:d1:73:dc:d8: e6:b3:0e:81:b9:ab:74:c8:e7:6d:54:7b:83:c6:0b: d0:93:65:74:52:fe:78:d1:d5:04:7a:73:65:1f:6c: 6d:54:49:5c:59:23:92:19:49:f7:0c:c1:cb:e4:57: ba:b3:13:5e:4b:c3:36:26:0b:91:de:1d:78:65:cf: c4:e4:34:d3:5c:19:f2:64:e5:5a:f6:27:d6:7a:31: b7:84:5e:73:65:9c:ed:e2:9b:99:f9:ba:d5:de:d5: b3:10:96:ae:f9:aa:60:94:9e:b5:d7:37:b7:2d:87: 2d:61:db:c1:e6:c2:52:fc:e8:cf:48:d6:13:63:22: 72:62:bd:5c:98:b7:21:8d:6b:a5:43:3e:31:81:02: 76:82:99:d3:c5:5e:c8:87:fb:76:71:84:1c:f7:be: d6:83:39:18:d9:32:40:99:08:34:13:67:08:38:7d: 42:a5:a2:19:36:e7:a2:f8:5c:d2:fb:0e:e5:d4:82: 65:2f:bb:63:4d:c7:c4:bd:40:53:fb:75:39:32:19: 1e:a0:89:12:83:f9:a6:bb:87:1c:71:f4:2f:eb:45: e6:61:2f:ae:69:b7:dd:25:42:60:59:b8:ff:6f:c6: 0c:da:0f:16:23:95:db:02:a6:83:27:a6:fb:b9:b7: 96:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BE:03:4C:A6:3F:29:AF:E3:E7:37:4F:98:F2:86:FE:91:0A:9F:2E X509v3 Authority Key Identifier: keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/7AFCACAEADB311E8AF75E557C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.33.0/24 103.139.80.0/24 IPv6: 2001:df7:1300::/48 Signature Algorithm: sha256WithRSAEncryption 11:54:43:26:0d:c2:aa:7f:8c:c5:a7:4b:1f:40:fd:c9:73:23: 09:6c:07:bd:be:96:5b:50:88:ff:9a:22:4d:5a:d6:70:11:6c: 0a:b8:7e:61:a4:19:61:fa:9c:18:8e:71:47:c2:2b:c8:41:f8: a2:0f:0e:64:45:44:01:7e:51:f5:3b:89:d6:b0:81:9f:78:37: 74:ea:09:77:cb:76:9e:f0:64:6f:a6:46:ea:d1:bf:21:a7:9f: 5b:ba:41:85:9b:b3:c1:72:fc:59:9d:43:09:be:13:5b:1c:3d: 2b:9c:6f:5f:b5:a7:7c:1d:86:6d:a9:f6:e4:b7:8b:e4:9e:05: 51:59:40:52:22:a7:08:03:e7:9b:ca:2c:75:47:d5:c3:89:b6: 21:b5:bc:37:a4:d1:25:a5:6b:5d:5b:c5:3a:8a:0a:bc:e1:8d: b4:f7:38:79:5b:4d:a9:22:dc:5b:97:f8:9b:f9:da:1c:22:e0: f3:c8:d5:ca:35:d3:36:1a:5a:db:3c:5b:d7:be:b6:49:5f:d6: 16:b7:b0:6b:cc:67:20:42:89:b6:02:2b:87:df:0d:7c:82:bc: b9:b6:f2:bd:55:19:ee:de:d8:d9:19:e6:a2:f0:d2:a3:0a:2f: 11:a6:3e:47:f7:1e:18:ce:7e:79:4f:d9:2b:0b:1e:7d:14:56: cd:bd:85:c7 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICEl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4 ODRBRTY5QTIwHhcNMjQwNTA4MTgwNjE1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjNiYmYxNy1hMDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA76w/c2YGXhG/pNFz3Njmsw6Buat0yOdtVHuDxgvQk2V0Uv540dUEenNlH2xt VElcWSOSGUn3DMHL5Fe6sxNeS8M2JguR3h14Zc/E5DTTXBnyZOVa9ifWejG3hF5z ZZzt4puZ+brV3tWzEJau+apglJ611ze3LYctYdvB5sJS/OjPSNYTYyJyYr1cmLch jWulQz4xgQJ2gpnTxV7Ih/t2cYQc977WgzkY2TJAmQg0E2cIOH1CpaIZNuei+FzS +w7l1IJlL7tjTcfEvUBT+3U5MhkeoIkSg/mmu4cccfQv60XmYS+uabfdJUJgWbj/ b8YM2g8WI5XbAqaDJ6b7ubeWNQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJi+A0ym Pymv4+c3T5jyhv6RCp8uMB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUZGRjAvNDRGRUJDOTJBREIyMTFFODlDOUI0NTUzQzRGOUFFMDIvN0FGQ0FDQUVB REIzMTFFOEFGNzVFNTU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABncyEDBABni1AwDwQCAAIwCQMHACABDfcTADANBgkqhkiG 9w0BAQsFAAOCAQEAEVRDJg3Cqn+MxadLH0D9yXMjCWwHvb6WW1CI/5oiTVrWcBFs Crh+YaQZYfqcGI5xR8IryEH4og8OZEVEAX5R9TuJ1rCBn3g3dOoJd8t2nvBkb6ZG 6tG/IaefW7pBhZuzwXL8WZ1DCb4TWxw9K5xvX7WnfB2Gban25LeL5J4FUVlAUiKn CAPnm8osdUfVw4m2IbW8N6TRJaVrXVvFOooKvOGNtPc4eVtNqSLcW5f4m/naHCLg 88jVyjXTNhpa2zxb1762SV/WFrewa8xnIEKJtgIrh98NfIK8ubbyvVUZ7t7Y2Rnm ovDSowovEaY+R/ceGM5+eU/ZKwsefRRWzb2Fxw== -----END CERTIFICATE-----Generated at Fri May 24 21:43:35 2024 by rpki-client on console-ams.rpki-client.org