$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/CD22C9C8DC0D11ECA064B94CC4F9AE02.roa File: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (raw, json) Hash identifier: 58tRp84nV6cuDwMQCtuvrDR1Q9sd2XcxoEZ9gu16O5I= Subject key identifier: 00:99:BF:C9:BA:6E:31:C9:69:38:71:F9:23:AC:74:77:4A:6C:A9:F1 Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Certificate serial: 02AB Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/CD22C9C8DC0D11ECA064B94CC4F9AE02.roa Signing time: Wed 21 Feb 2024 03:15:44 +0000 ROA not before: Wed 21 Feb 2024 03:15:44 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 133201 IP address blocks: 103.233.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 03:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Validity Not Before: Feb 21 03:15:44 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d56ae0-d212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:50:57:b6:db:7b:d4:e8:ec:84:32:d1:8d:de: c2:c9:0a:1f:01:b1:f2:cd:7d:82:f9:b7:d5:e1:30: 11:8e:13:20:c4:d6:a4:ce:5e:42:3d:6e:a6:93:c7: 9b:0a:8c:dd:d7:1b:7e:08:b4:bb:53:5d:c9:74:89: 72:75:63:1f:07:71:10:85:4e:db:4b:5c:79:ea:f9: f4:80:c7:68:7a:3d:02:94:e0:1b:c4:fe:7f:24:1d: 63:35:e6:f9:73:14:cd:e8:bb:67:2b:f3:fa:ad:63: 87:62:2e:fb:09:24:f8:19:14:ff:27:27:e9:72:88: c4:b5:2b:c7:71:f8:5a:ab:01:2e:a0:ac:15:3f:4f: 02:fb:5b:a6:0e:52:87:2d:2a:0c:58:5f:6a:00:81: 0f:2b:a0:16:12:d0:c0:4b:23:88:c0:e5:8e:e4:81: f0:e8:8a:b5:ed:19:dd:dd:49:00:38:16:5e:42:ae: 84:87:17:4d:14:99:7a:7d:e7:02:f4:f0:5b:79:4e: 8d:41:6e:c6:d0:19:fc:ac:9b:0b:57:e4:72:a2:24: 37:a1:ff:e3:0c:9d:58:c6:96:43:06:51:25:9a:01: ba:de:6c:c5:5a:4c:3d:3c:fd:4a:4f:cc:5f:ad:d1: b1:fc:ee:a6:20:3c:12:83:a1:6b:bc:1c:00:ec:6b: 99:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:99:BF:C9:BA:6E:31:C9:69:38:71:F9:23:AC:74:77:4A:6C:A9:F1 X509v3 Authority Key Identifier: keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/CD22C9C8DC0D11ECA064B94CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.233.8.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:42:3d:33:19:b9:ce:f1:12:30:a3:56:5b:ba:a9:46:d8:e9: 43:90:d3:a3:94:b7:79:1a:c1:5d:57:ed:64:c6:9d:66:81:03: 7c:80:df:76:c1:11:07:12:54:56:65:9a:cf:25:33:25:46:e4: 6d:2f:2c:33:f0:d8:d6:24:21:28:88:55:fd:5e:0c:e3:7f:ba: 31:65:5b:78:78:fe:d6:7c:2c:70:dc:c3:7f:13:26:84:ac:6b: 55:5f:1e:8a:1c:ea:22:76:cc:e5:24:02:04:3f:af:d1:e0:20: 7b:6f:28:70:e2:66:ee:9c:b6:a7:d0:41:d1:73:5e:86:aa:1b: 66:a2:04:99:13:0e:70:55:63:e1:14:ef:d1:2d:55:0f:e1:ad: 95:d7:08:af:1a:4d:67:cc:5e:93:b6:48:1e:65:95:51:68:b8: c4:2a:39:d8:87:f5:e4:81:f2:fb:88:46:20:ec:98:84:4c:1a: 8d:69:71:6d:51:c2:ce:fa:98:54:fd:0e:6f:15:7e:92:77:ce: f6:07:a0:d6:89:60:78:3b:db:45:ee:35:63:99:2f:6d:de:9a: 58:81:42:be:97:16:d8:6d:d2:a3:45:d6:7f:74:f9:51:5d:10: aa:a9:2a:7e:cd:8e:34:5a:9a:40:d4:59:fc:be:d9:bb:99:63: ae:af:73:a5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4 RjIxQkI1OTMwHhcNMjQwMjIxMDMxNTQ0WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ1NmFlMC1kMjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lBXttt71OjshDLRjd7CyQofAbHyzX2C+bfV4TARjhMgxNakzl5CPW6mk8eb Cozd1xt+CLS7U13JdIlydWMfB3EQhU7bS1x56vn0gMdoej0ClOAbxP5/JB1jNeb5 cxTN6LtnK/P6rWOHYi77CST4GRT/JyfpcojEtSvHcfhaqwEuoKwVP08C+1umDlKH LSoMWF9qAIEPK6AWEtDASyOIwOWO5IHw6Iq17Rnd3UkAOBZeQq6EhxdNFJl6fecC 9PBbeU6NQW7G0Bn8rJsLV+RyoiQ3of/jDJ1YxpZDBlElmgG63mzFWkw9PP1KT8xf rdGx/O6mIDwSg6FrvBwA7GuZ0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFACZv8m6 bjHJaThx+SOsdHdKbKnxMB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU3RDkvMDcxN0U5RUU5RjVEMTFFQ0JCQ0E5NjE4QzRGOUFFMDIvQ0QyMkM5QzhE QzBEMTFFQ0EwNjRCOTRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn6QgwDQYJKoZIhvcNAQELBQADggEBAFxCPTMZuc7xEjCj Vlu6qUbY6UOQ06OUt3kawV1X7WTGnWaBA3yA33bBEQcSVFZlms8lMyVG5G0vLDPw 2NYkISiIVf1eDON/ujFlW3h4/tZ8LHDcw38TJoSsa1VfHooc6iJ2zOUkAgQ/r9Hg IHtvKHDiZu6ctqfQQdFzXoaqG2aiBJkTDnBVY+EU79EtVQ/hrZXXCK8aTWfMXpO2 SB5llVFouMQqOdiH9eSB8vuIRiDsmIRMGo1pcW1Rws76mFT9Dm8VfpJ3zvYHoNaJ YHg720XuNWOZL23emliBQr6XFtht0qNF1n90+VFdEKqpKn7NjjRamkDUWfy+2buZ Y66vc6U= -----END CERTIFICATE-----Generated at Fri Apr 19 03:48:05 2024 by rpki-client on console-fra.rpki-client.org