$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/2A8DE0F42FA611EB980DEF79C4F9AE02.roa File: 2A8DE0F42FA611EB980DEF79C4F9AE02.roa (raw, json) Hash identifier: 9X8HVdQbjH5FCiUOxFMSvqPTyEAee1nq+1D9zrFDwvw= Subject key identifier: A1:89:A8:6E:BD:EA:C8:E2:35:5E:2B:57:A8:07:A4:B1:14:54:DE:76 Certificate issuer: /CN=A91F3BDE/serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Certificate serial: 0B2E Authority key identifier: 0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/2A8DE0F42FA611EB980DEF79C4F9AE02.roa Signing time: Thu 30 Nov 2023 19:47:23 +0000 ROA not before: Thu 30 Nov 2023 19:47:23 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 139756 IP address blocks: 103.144.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 19:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2862 (0xb2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE/serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Validity Not Before: Nov 30 19:47:23 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6568e6cb-dcf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:d8:ad:5d:aa:20:a9:4e:70:ec:27:d0:4d: 48:98:06:95:b5:4b:43:e8:3a:3e:20:ab:dd:4e:2f: be:01:5a:4f:38:66:7c:39:d6:6c:fc:1c:01:b6:b4: 6e:79:be:38:54:06:80:79:34:db:b9:23:08:fa:21: 52:2a:97:0f:ac:87:bc:71:12:ee:aa:46:00:35:2a: 1b:e3:cd:e3:d9:2a:09:5a:e8:3d:d2:68:36:8c:5c: 07:81:d9:d8:0b:6b:1a:f5:41:2c:60:72:6f:a3:d6: 99:56:97:d7:a6:da:3b:71:eb:97:9a:e0:06:ec:b4: 20:f2:05:2e:d0:79:f5:f2:49:12:c6:ce:79:f6:33: 35:f2:17:e4:31:dc:02:42:cf:8c:80:ed:65:59:0e: 62:18:a4:8c:3e:76:d3:2f:ec:aa:32:8d:81:e5:a8: ec:67:1a:9f:f4:04:77:87:03:ce:8f:40:26:d2:93: 50:55:f0:a4:70:b6:06:86:c8:5e:2d:99:8f:6f:92: 32:6c:44:00:37:12:c1:8a:68:5b:b7:c0:e1:1e:4b: 11:8a:7e:41:27:0f:9c:21:8c:42:32:12:3a:82:60: 1b:96:27:db:7b:f0:72:2a:86:06:d3:89:04:81:d6: 41:64:82:83:4c:0d:08:87:7b:25:58:6a:32:d6:15: a6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:89:A8:6E:BD:EA:C8:E2:35:5E:2B:57:A8:07:A4:B1:14:54:DE:76 X509v3 Authority Key Identifier: keyid:0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/2A8DE0F42FA611EB980DEF79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.151.0/24 Signature Algorithm: sha256WithRSAEncryption 93:23:ad:f3:5d:ec:86:a3:7e:09:03:44:16:9f:c5:3a:d9:43: e2:5a:ed:97:ef:59:45:e0:b4:62:56:27:f9:68:a5:e7:e9:20: 59:ba:b3:ab:24:db:d7:6e:d1:e7:54:48:34:8a:82:bf:fa:f4: fb:ea:80:65:c0:57:a1:c5:a9:48:c1:3d:a5:5a:f9:a9:c1:16: 0f:72:0f:cc:fa:92:e8:df:49:a4:c2:8d:a3:c3:c8:67:18:d8: 88:5f:1c:bf:7d:f8:35:ad:59:79:da:b1:7c:5b:57:49:34:14: 12:d3:4b:94:22:d6:44:d9:05:be:fd:fd:b7:8c:5d:fc:d4:48: f7:97:cc:04:a9:fc:68:01:93:56:52:f9:5b:0f:a1:07:f5:42: f8:90:fb:b8:cb:5a:0d:0a:ee:17:27:ad:5b:f6:6c:5f:e8:f8: 14:12:50:86:1d:a0:38:4e:af:ea:ed:2d:5d:57:00:2a:ec:8d: f3:fa:22:51:5d:f5:03:fa:78:92:a7:eb:01:55:d1:1d:55:61: 86:89:cf:8d:f5:57:89:dd:8a:33:13:c6:e1:0b:0e:e3:fc:77: 93:2a:e7:2d:f1:4f:b6:20:36:fb:38:51:79:3e:6b:39:cf:25: 67:33:2e:1c:c3:27:07:f8:90:72:17:90:3b:66:2c:49:70:a8: ce:3b:ef:8e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCREUxMTAvBgNVBAUTKDBDQTQwN0YwREQ1MzA3MkZBOEEwNjA4MTY5MTkyOTZF NjU3N0Q2ODIwHhcNMjMxMTMwMTk0NzIzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY4ZTZjYi1kY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrvYrV2qIKlOcOwn0E1ImAaVtUtD6Do+IKvdTi++AVpPOGZ8OdZs/BwBtrRu eb44VAaAeTTbuSMI+iFSKpcPrIe8cRLuqkYANSob483j2SoJWug90mg2jFwHgdnY C2sa9UEsYHJvo9aZVpfXpto7ceuXmuAG7LQg8gUu0Hn18kkSxs559jM18hfkMdwC Qs+MgO1lWQ5iGKSMPnbTL+yqMo2B5ajsZxqf9AR3hwPOj0Am0pNQVfCkcLYGhshe LZmPb5IybEQANxLBimhbt8DhHksRin5BJw+cIYxCMhI6gmAblifbe/ByKoYG04kE gdZBZIKDTA0Ih3slWGoy1hWmHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKGJqG69 6sjiNV4rV6gHpLEUVN52MB8GA1UdIwQYMBaAFAykB/DdUwcvqKBggWkZKW5ld9aC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0JERS81MEE5MEUzNjA4 MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5LW9vR0NCYVJrcGJtVjMx b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RLUUg4TjFUQnktb29HQ0JhUmtwYm1WMzFvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNCREUvNTBBOTBFMzYwODE0MTFFQThFQjVGODEwQzRGOUFFMDIvMkE4REUwRjQy RkE2MTFFQjk4MERFRjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkJcwDQYJKoZIhvcNAQELBQADggEBAJMjrfNd7IajfgkD RBafxTrZQ+Ja7ZfvWUXgtGJWJ/lopefpIFm6s6sk29du0edUSDSKgr/69PvqgGXA V6HFqUjBPaVa+anBFg9yD8z6kujfSaTCjaPDyGcY2IhfHL99+DWtWXnasXxbV0k0 FBLTS5Qi1kTZBb79/beMXfzUSPeXzASp/GgBk1ZS+VsPoQf1QviQ+7jLWg0K7hcn rVv2bF/o+BQSUIYdoDhOr+rtLV1XACrsjfP6IlFd9QP6eJKn6wFV0R1VYYaJz431 V4ndijMTxuELDuP8d5Mq5y3xT7YgNvs4UXk+aznPJWczLhzDJwf4kHIXkDtmLElw qM47744= -----END CERTIFICATE-----Generated at Mon May 20 21:17:42 2024 by rpki-client on console-ams.rpki-client.org