$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/152A08D898BF11EAA3B42868C4F9AE02.roa File: 152A08D898BF11EAA3B42868C4F9AE02.roa (raw, json) Hash identifier: LDkq+Cv6m3DvNwFYBMrL6vavbpcI2lTrWSBKHFPKPEs= Subject key identifier: 8C:25:7B:FE:EE:69:62:FF:BB:E9:23:1D:99:E5:1F:8A:34:7E:AF:1B Certificate issuer: /CN=A91F31FA/serialNumber=67A3A35E89764FFE97868F55CC60ED9D95A65BFC Certificate serial: 19F1 Authority key identifier: 67:A3:A3:5E:89:76:4F:FE:97:86:8F:55:CC:60:ED:9D:95:A6:5B:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z6OjXol2T_6Xho9VzGDtnZWmW_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/152A08D898BF11EAA3B42868C4F9AE02.roa Signing time: Thu 04 May 2023 17:13:56 +0000 ROA not before: Thu 04 May 2023 17:13:56 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136440 IP address blocks: 103.88.28.0/22 maxlen: 22 103.88.28.0/22 maxlen: 24 103.88.28.0/23 maxlen: 23 103.88.28.0/24 maxlen: 24 103.88.29.0/24 maxlen: 24 103.88.30.0/23 maxlen: 23 103.88.30.0/24 maxlen: 24 103.88.31.0/24 maxlen: 24 2400:dc40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.crl rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z6OjXol2T_6Xho9VzGDtnZWmW_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6641 (0x19f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31FA/serialNumber=67A3A35E89764FFE97868F55CC60ED9D95A65BFC Validity Not Before: May 4 17:13:56 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6453e7d4-6506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2e:28:e1:41:25:e6:2f:0c:6e:88:0d:ec:f8: 1b:61:b5:a2:68:05:9d:86:ec:f8:8d:f8:61:2e:8a: dd:60:f5:ef:3b:52:71:34:df:ba:7d:1b:d6:0a:c3: ec:30:0d:cd:50:88:8e:02:89:a3:90:39:47:b1:ca: 3d:55:6f:3f:f5:82:5f:4b:be:84:a1:e4:28:05:c5: 1f:cb:08:4c:8c:07:cb:34:01:41:e8:96:b1:47:00: a2:56:fd:6c:08:b2:0d:5c:83:aa:15:79:58:d8:99: ad:2b:46:9c:7f:a1:1e:12:6f:b0:9b:9d:bc:e6:a9: 0c:5b:c6:da:2b:62:3e:31:a2:f3:9a:73:17:91:02: 7c:38:cd:cb:39:ec:84:d3:f1:48:65:92:c4:c3:0b: 1d:95:e6:92:d8:f0:67:81:08:7a:19:f5:1c:b7:d3: d3:26:b3:99:c5:b8:e5:3f:f9:ab:28:cf:6e:d0:03: d4:b7:45:de:50:0a:50:3f:b4:0a:3c:34:d7:e7:eb: a7:0f:9a:d9:dd:38:52:7f:bb:91:08:5d:e0:b9:34: 39:82:f2:14:28:21:3f:20:f1:1b:2e:0e:b2:a9:30: 83:a3:91:59:43:5d:bc:d9:ad:ad:8d:b7:bd:6f:81: 3e:c4:07:62:cc:bf:24:97:da:a3:34:92:9f:5e:07: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:25:7B:FE:EE:69:62:FF:BB:E9:23:1D:99:E5:1F:8A:34:7E:AF:1B X509v3 Authority Key Identifier: keyid:67:A3:A3:5E:89:76:4F:FE:97:86:8F:55:CC:60:ED:9D:95:A6:5B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z6OjXol2T_6Xho9VzGDtnZWmW_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/152A08D898BF11EAA3B42868C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.88.28.0/22 IPv6: 2400:dc40::/32 Signature Algorithm: sha256WithRSAEncryption 94:3f:23:a4:9e:b1:e6:47:d6:9b:65:0a:cd:27:0a:af:de:8e: 66:cf:b0:3d:c5:9e:d1:5d:ae:85:b9:86:9e:88:ce:7c:54:c3: 5b:c4:c1:3a:a8:17:1b:60:65:36:ce:fe:2b:61:3f:93:91:79: 95:02:24:1d:e5:11:d0:05:4b:cc:ac:38:17:dc:ee:5a:7a:ef: f0:6a:a2:bb:67:d8:71:0b:3a:40:70:43:ae:d9:ea:f8:d7:a9: ba:34:fa:2f:09:8b:51:d4:d8:9a:b7:28:42:d7:76:0f:39:b1: 8d:be:79:b2:7a:e6:ca:ae:c6:5d:10:c8:9f:05:6d:bc:35:e0: 91:5c:c5:c2:28:58:e0:33:c6:9c:8a:22:b3:2e:1c:82:ca:11: 7e:b2:1b:c0:2c:32:66:da:fa:e2:cb:5d:df:3d:d5:4f:c1:73: c3:6f:68:ac:98:af:81:fd:bc:f2:3b:9d:52:c9:29:36:ac:92: 07:0e:e4:6f:3d:d9:f0:5a:1b:38:9b:0f:18:d8:42:50:6c:3c: 78:9b:4b:97:9a:e8:6e:0e:82:39:f3:84:27:17:2d:0c:ba:46: 9e:39:15:4e:9e:2c:e9:d8:59:db:07:00:88:d4:a1:82:76:f8: c4:fe:61:23:af:43:93:b5:0c:c5:4c:e1:72:49:c3:57:47:e7: 16:67:d6:08 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICGfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMxRkExMTAvBgNVBAUTKDY3QTNBMzVFODk3NjRGRkU5Nzg2OEY1NUNDNjBFRDlE OTVBNjVCRkMwHhcNMjMwNTA0MTcxMzU2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDUzZTdkNC02NTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzS4o4UEl5i8MbogN7PgbYbWiaAWdhuz4jfhhLordYPXvO1JxNN+6fRvWCsPs MA3NUIiOAomjkDlHsco9VW8/9YJfS76EoeQoBcUfywhMjAfLNAFB6JaxRwCiVv1s CLINXIOqFXlY2JmtK0acf6EeEm+wm5285qkMW8baK2I+MaLzmnMXkQJ8OM3LOeyE 0/FIZZLEwwsdleaS2PBngQh6GfUct9PTJrOZxbjlP/mrKM9u0APUt0XeUApQP7QK PDTX5+unD5rZ3ThSf7uRCF3guTQ5gvIUKCE/IPEbLg6yqTCDo5FZQ1282a2tjbe9 b4E+xAdizL8kl9qjNJKfXgeS7wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIwle/7u aWL/u+kjHZnlH4o0fq8bMB8GA1UdIwQYMBaAFGejo16Jdk/+l4aPVcxg7Z2Vplv8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzFGQS8wRDIxMEIxQzBB M0YxMUU3QTVBNDYyMUFDNEY5QUUwMi9aNk9qWG9sMlRfNlhobzlWekdEdG5aV21X X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o2T2pYb2wyVF82WGhvOVZ6R0R0blpXbVdfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjMxRkEvMEQyMTBCMUMwQTNGMTFFN0E1QTQ2MjFBQzRGOUFFMDIvMTUyQTA4RDg5 OEJGMTFFQUEzQjQyODY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnWBwwDQQCAAIwBwMFACQA3EAwDQYJKoZIhvcNAQELBQAD ggEBAJQ/I6SeseZH1ptlCs0nCq/ejmbPsD3FntFdroW5hp6IznxUw1vEwTqoFxtg ZTbO/ithP5OReZUCJB3lEdAFS8ysOBfc7lp67/Bqortn2HELOkBwQ67Z6vjXqbo0 +i8Ji1HU2Jq3KELXdg85sY2+ebJ65squxl0QyJ8Fbbw14JFcxcIoWOAzxpyKIrMu HILKEX6yG8AsMmba+uLLXd891U/Bc8NvaKyYr4H9vPI7nVLJKTaskgcO5G892fBa GzibDxjYQlBsPHibS5ea6G4OgjnzhCcXLQy6Rp45FU6eLOnYWdsHAIjUoYJ2+MT+ YSOvQ5O1DMVM4XJJw1dH5xZn1gg= -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org