$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/B2FE8B7A90E911EF93A2CE59C4F9AE02.roa File: B2FE8B7A90E911EF93A2CE59C4F9AE02.roa (raw, json) Hash identifier: WarlwyPZa6+KTn9IviJVET/FHc62uIFcyC2ylkk8TYg= Subject key identifier: 8E:6F:4B:DB:0D:42:A5:60:77:42:E0:A1:9D:0F:CF:13:33:95:99:95 Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Certificate serial: 0240 Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/B2FE8B7A90E911EF93A2CE59C4F9AE02.roa Signing time: Wed 23 Oct 2024 02:51:28 +0000 ROA not before: Wed 23 Oct 2024 02:51:28 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 14618 IP address blocks: 103.67.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Validity Not Before: Oct 23 02:51:28 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=671864af-7892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:92:38:e5:b4:2a:a0:d4:e1:77:c0:a0:d1: f7:7b:d7:d1:8c:bd:f6:84:ef:39:fb:d4:8a:2b:3e: 46:77:d9:51:49:a4:ff:2e:aa:14:16:cd:60:87:c6: 48:fc:58:20:83:da:a1:6a:a2:06:d3:63:45:e8:03: 81:42:fb:6c:1c:67:3e:66:b4:ad:19:e4:50:1c:b9: 09:74:b2:2c:17:15:ff:2c:a4:d2:c2:e1:af:6c:4c: 14:fe:d8:3b:86:17:16:7e:a3:3e:7f:34:50:dd:c6: 8a:91:c6:a4:92:f5:48:17:56:c6:42:5b:d8:b0:7e: 67:c8:74:8b:1e:9c:b3:43:9a:5a:a9:4a:1c:ea:d4: bf:a3:b5:ef:1f:2f:c0:1e:03:a2:15:64:72:c7:3d: a0:fc:ad:55:24:30:90:44:e0:40:94:61:16:c2:97: f1:ef:ac:6d:25:0a:d3:31:b1:fe:5c:c0:4b:ff:97: 5c:ad:82:ac:9b:0f:6f:08:83:ef:c8:ac:73:06:89: 0a:bb:f6:fe:a1:ee:62:e9:fc:29:ba:24:e1:5f:63: f2:b5:68:54:46:87:ef:4c:b5:43:31:30:e9:ba:4d: ff:73:a0:44:bc:41:f1:c9:02:22:e1:96:16:14:30: 52:3b:66:7e:70:06:b5:46:b0:71:98:76:e7:cf:96: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6F:4B:DB:0D:42:A5:60:77:42:E0:A1:9D:0F:CF:13:33:95:99:95 X509v3 Authority Key Identifier: keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/B2FE8B7A90E911EF93A2CE59C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.244.0/24 Signature Algorithm: sha256WithRSAEncryption 65:7d:46:44:7e:52:ee:84:25:23:fd:7a:87:8f:79:bb:5c:d6: 6a:dc:45:e5:b9:e0:18:83:e8:23:ce:ec:1f:5f:a4:d7:3f:30: 90:3d:98:32:a0:a2:7e:08:c4:d9:99:b1:59:6c:dd:dc:72:fa: 34:5d:74:fb:1b:15:80:79:59:91:ed:a1:7b:42:54:b3:4e:eb: 9c:f1:f5:41:f3:47:ed:1f:1e:b3:27:2e:b4:26:7c:00:e9:c8: 46:f5:e1:ab:ad:b5:54:bb:32:eb:ad:3f:46:9d:1e:04:ca:bf: 4d:3d:70:65:f1:75:36:90:1e:09:3d:d3:0d:c5:e3:db:9d:c8: a2:59:30:e7:b9:ea:fd:17:df:1b:8b:3a:57:c9:6b:fb:74:1f: 97:a4:ba:6d:e3:7f:b6:7c:fe:a2:c3:a1:91:f6:0b:4e:04:de: 1a:3c:20:21:af:c5:b6:71:f6:af:45:6f:a2:71:48:6f:0e:ca: c6:5e:90:bc:55:0d:3d:3d:79:bb:d6:c2:f3:7a:95:d4:39:9f: fe:6c:31:78:e2:7b:e9:ff:b9:4a:44:06:59:70:88:e0:00:c0: 97:bb:11:b8:48:0a:d8:ef:f0:34:22:cb:e9:e7:c4:c9:c3:c4: a3:e6:88:19:c5:e7:7e:94:84:bb:2d:98:80:ed:e4:b4:4c:f1: 5d:a9:ed:05 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey RkJGRDI2ODYwHhcNMjQxMDIzMDI1MTI4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE4NjRhZi03ODkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsGSOOW0KqDU4XfAoNH3e9fRjL32hO85+9SKKz5Gd9lRSaT/LqoUFs1gh8ZI /Fggg9qhaqIG02NF6AOBQvtsHGc+ZrStGeRQHLkJdLIsFxX/LKTSwuGvbEwU/tg7 hhcWfqM+fzRQ3caKkcakkvVIF1bGQlvYsH5nyHSLHpyzQ5paqUoc6tS/o7XvHy/A HgOiFWRyxz2g/K1VJDCQROBAlGEWwpfx76xtJQrTMbH+XMBL/5dcrYKsmw9vCIPv yKxzBokKu/b+oe5i6fwpuiThX2PytWhURofvTLVDMTDpuk3/c6BEvEHxyQIi4ZYW FDBSO2Z+cAa1RrBxmHbnz5aqVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI5vS9sN QqVgd0LgoZ0PzxMzlZmVMB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE0N0MvN0UwRjU4NzIwMUU5MTFFREFGOEJERTMwQzRGOUFFMDIvQjJGRThCN0E5 MEU5MTFFRjkzQTJDRTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnQ/QwDQYJKoZIhvcNAQELBQADggEBAGV9RkR+Uu6EJSP9 eoePebtc1mrcReW54BiD6CPO7B9fpNc/MJA9mDKgon4IxNmZsVls3dxy+jRddPsb FYB5WZHtoXtCVLNO65zx9UHzR+0fHrMnLrQmfADpyEb14auttVS7MuutP0adHgTK v009cGXxdTaQHgk90w3F49udyKJZMOe56v0X3xuLOlfJa/t0H5ekum3jf7Z8/qLD oZH2C04E3ho8ICGvxbZx9q9Fb6JxSG8OysZekLxVDT09ebvWwvN6ldQ5n/5sMXji e+n/uUpEBllwiOAAwJe7EbhICtjv8DQiy+nnxMnDxKPmiBnF536UhLstmIDt5LRM 8V2p7QU= -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:08 2024 by rpki-client on console-fra.rpki-client.org