$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/B7E86E0C6D8711EEB912BD62C4F9AE02.roa File: B7E86E0C6D8711EEB912BD62C4F9AE02.roa (raw, json) Hash identifier: 1i4x5btwBoyVs/bOkBs3utfiU+YxigrlqpfcPAr0jaw= Subject key identifier: 92:B4:B1:06:0C:B9:EF:C6:C8:A7:7F:3A:BA:5D:76:53:8F:41:73:CF Certificate issuer: /CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0 Certificate serial: C0 Authority key identifier: 5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/B7E86E0C6D8711EEB912BD62C4F9AE02.roa Signing time: Thu 17 Oct 2024 04:38:39 +0000 ROA not before: Thu 17 Oct 2024 04:38:39 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 45905 IP address blocks: 103.65.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0 Validity Not Before: Oct 17 04:38:39 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=671094ce-f872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:03:8f:34:a1:02:6f:51:85:d1:9c:63:f4:93: ca:47:9a:c3:ac:34:2c:25:ba:7c:f0:ac:85:28:d0: bb:85:fa:41:3d:da:ed:c7:b5:96:33:1f:8b:f6:98: df:92:8d:da:f8:61:a3:03:a2:3c:eb:d0:b9:d8:d3: c6:24:46:20:da:3f:07:35:c8:17:cb:75:d6:7e:1b: 8f:26:3e:0d:59:1c:ad:9a:9a:07:10:52:25:16:61: 2f:4f:e4:68:4c:51:eb:ca:16:be:fa:b2:b8:61:c5: b4:d5:d0:41:59:43:44:0c:ed:6a:e6:1d:5e:94:22: 8b:80:37:7f:c0:09:1d:23:7e:2b:fa:c0:71:13:fb: 99:94:d9:49:d0:4d:de:cc:65:23:7f:dc:b3:70:30: 19:63:d4:98:51:4e:60:be:6a:3e:46:fc:3f:c7:10: 8c:8d:b4:05:32:bc:bc:cb:f3:14:03:d3:ff:90:5a: 16:56:c4:79:62:ef:46:00:7f:18:02:bd:67:b8:c8: a4:56:d0:d0:e6:aa:57:53:6d:c6:84:fd:d6:d3:14: 00:51:f7:3a:be:64:6c:e7:0d:55:06:2f:a9:b0:c4: 76:5f:bc:b7:13:70:a8:58:52:f7:37:45:e7:48:29: 53:d6:1b:3f:3c:3a:fc:0d:1a:7d:cb:10:01:ef:3e: 0e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B4:B1:06:0C:B9:EF:C6:C8:A7:7F:3A:BA:5D:76:53:8F:41:73:CF X509v3 Authority Key Identifier: keyid:5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/B7E86E0C6D8711EEB912BD62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.65.134.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:9a:e1:25:a1:51:58:dc:13:0b:20:0b:d4:98:17:bc:4d:67: b8:86:17:bd:5f:a5:f8:31:19:ce:fc:b4:99:3d:c7:55:cb:10: 68:1d:5a:ac:64:2e:ad:40:37:c9:70:63:5c:d7:87:b1:da:ba: c6:b8:dd:83:9a:23:a8:d3:16:d9:2e:12:3e:31:98:60:5a:d4: e5:81:3f:48:97:f2:c6:e7:b7:54:f1:6a:88:a8:53:20:02:03: 95:98:86:0e:5a:83:34:73:a3:12:3f:e5:b0:d7:d1:d4:a5:cd: 69:b9:88:8c:cf:8a:f2:ba:67:90:cf:f6:ae:c4:48:e5:d9:4d: 7f:c2:91:ed:71:c5:68:23:11:92:c3:0e:6e:c1:57:11:c5:6c: 75:77:f5:2d:17:e3:85:2f:58:b4:1f:d0:08:5a:dd:e3:31:a0: 61:42:f2:52:c2:a1:1a:0c:bd:44:46:82:3a:eb:29:12:33:d3: 5a:58:c1:34:fc:f4:60:0c:ba:4a:46:c3:b3:7b:b2:19:38:28: d8:82:9c:04:9b:29:27:4e:6e:25:5d:8d:76:8d:4d:a1:d3:a6: 5f:50:d6:99:4c:99:7a:a6:ab:be:cd:2b:b9:9b:d1:f2:60:50: 4f:91:0d:7c:07:7c:9b:22:a4:c9:c2:fc:d9:bc:7c:f6:bc:cd: e1:60:d9:ed -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBEODYxMTAvBgNVBAUTKDVGNUNFMjhDMDREMTZFOTUwRTBFQkNENTk1NTU0MjQ4 M0QzOTU2RDAwHhcNMjQxMDE3MDQzODM5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEwOTRjZS1mODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gOPNKECb1GF0Zxj9JPKR5rDrDQsJbp88KyFKNC7hfpBPdrtx7WWMx+L9pjf ko3a+GGjA6I869C52NPGJEYg2j8HNcgXy3XWfhuPJj4NWRytmpoHEFIlFmEvT+Ro TFHryha++rK4YcW01dBBWUNEDO1q5h1elCKLgDd/wAkdI34r+sBxE/uZlNlJ0E3e zGUjf9yzcDAZY9SYUU5gvmo+Rvw/xxCMjbQFMry8y/MUA9P/kFoWVsR5Yu9GAH8Y Ar1nuMikVtDQ5qpXU23GhP3W0xQAUfc6vmRs5w1VBi+psMR2X7y3E3CoWFL3N0Xn SClT1hs/PDr8DRp9yxAB7z4OXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJK0sQYM ue/GyKd/OrpddlOPQXPPMB8GA1UdIwQYMBaAFF9c4owE0W6VDg681ZVVQkg9OVbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEQ4Ni82OEU3OTc4QTZD QkQxMUVFQjg0NkYzNzlDNEY5QUUwMi9YMXppakFUUmJwVU9EcnpWbFZWQ1NEMDVW dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gxemlqQVRSYnBVT0RyelZsVlZDU0QwNVZ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBEODYvNjhFNzk3OEE2Q0JEMTFFRUI4NDZGMzc5QzRGOUFFMDIvQjdFODZFMEM2 RDg3MTFFRUI5MTJCRDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnQYYwDQYJKoZIhvcNAQELBQADggEBACqa4SWhUVjcEwsg C9SYF7xNZ7iGF71fpfgxGc78tJk9x1XLEGgdWqxkLq1AN8lwY1zXh7Hausa43YOa I6jTFtkuEj4xmGBa1OWBP0iX8sbnt1TxaoioUyACA5WYhg5agzRzoxI/5bDX0dSl zWm5iIzPivK6Z5DP9q7ESOXZTX/Cke1xxWgjEZLDDm7BVxHFbHV39S0X44UvWLQf 0Aha3eMxoGFC8lLCoRoMvURGgjrrKRIz01pYwTT89GAMukpGw7N7shk4KNiCnASb KSdObiVdjXaNTaHTpl9Q1plMmXqmq77NK7mb0fJgUE+RDXwHfJsipMnC/Nm8fPa8 zeFg2e0= -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org