$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/4A7E3036340811ED9D3D7620C4F9AE02.roa File: 4A7E3036340811ED9D3D7620C4F9AE02.roa (raw, json) Hash identifier: J26oaUECMrOHy9te/dpZIhczIK9h2Snl6dXCLbFdb/o= Subject key identifier: 87:E0:5E:75:10:07:87:A0:D2:3C:AF:FC:41:88:D2:56:63:FA:2D:8E Certificate issuer: /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C Certificate serial: 138D Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/4A7E3036340811ED9D3D7620C4F9AE02.roa Signing time: Wed 10 May 2023 17:56:53 +0000 ROA not before: Wed 10 May 2023 17:56:53 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 396982 IP address blocks: 103.114.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 17:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5005 (0x138d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C Validity Not Before: May 10 17:56:53 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=645bdae4-ef52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:c5:6a:82:f5:60:3f:e6:19:63:2a:0a:dc: 3f:21:14:15:e9:38:f7:c6:62:02:37:b0:6c:09:5b: 17:bd:90:9e:30:b7:4b:fc:cc:21:77:33:f4:64:85: 17:a0:e4:6e:99:a3:83:58:a4:ab:a9:9d:80:fc:40: 12:9e:58:06:31:9f:51:d5:3f:4a:01:a5:bd:f4:57: 6c:19:15:6d:fa:a8:b7:4a:4d:e8:5b:ed:66:8d:81: 92:c0:84:f4:46:50:dd:1c:84:86:ec:a7:20:60:8b: 30:74:6b:3d:8f:9a:99:fb:14:b1:56:47:ef:a3:b1: 5d:2c:0a:98:e5:01:9e:3d:86:c8:24:90:dd:3f:dd: 8d:2d:f5:ef:1f:8f:fd:5c:03:aa:73:a1:2c:08:02: 9e:fd:6b:c5:7b:e3:1e:b9:92:dc:ea:8e:ae:6e:eb: e3:75:35:6f:bb:c5:75:2e:cf:60:8f:3e:e5:84:58: 90:d3:43:50:d7:bd:75:5c:98:96:09:df:b2:98:55: a7:73:0e:6a:99:56:bd:c9:65:fa:e5:98:94:71:80: 75:56:ae:8d:ad:37:60:55:6b:9d:c0:86:4a:1c:10: f8:87:38:04:a4:ba:72:b0:ad:3d:2f:f9:df:88:17: 60:8b:9e:be:bd:fa:4c:48:a7:15:dd:0d:5b:b3:b3: 0f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E0:5E:75:10:07:87:A0:D2:3C:AF:FC:41:88:D2:56:63:FA:2D:8E X509v3 Authority Key Identifier: keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/4A7E3036340811ED9D3D7620C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.176.0/22 Signature Algorithm: sha256WithRSAEncryption c8:ab:82:9a:c1:df:1d:d6:9e:41:6d:4e:bb:3a:2f:40:ac:62: 3c:4f:cd:2a:b5:fe:56:7c:89:22:a5:ae:28:58:8a:38:5c:85: 0c:ed:16:ff:14:02:b7:7a:a1:ba:26:20:27:c8:99:0a:fc:14: e2:2b:ab:27:c6:be:67:5d:fc:8c:50:e9:ca:0b:d3:49:03:13: 15:d4:98:fd:66:f9:da:44:b9:73:b7:24:54:95:79:db:d4:91: f8:4d:39:05:83:63:54:3b:51:30:02:a8:e8:d2:4e:87:d1:17: 1f:64:3f:46:53:11:cc:58:90:98:b9:9a:2f:b2:0c:33:ab:d4: 22:51:95:35:4f:67:6c:61:87:91:c7:e1:d8:94:69:65:03:a4: 29:b7:c5:50:4a:06:87:5d:20:bf:ac:6e:4b:f0:56:96:e0:59: 0b:94:29:03:bc:25:16:e9:8b:d4:f7:ed:4a:a6:49:07:dc:15: 2f:56:94:ff:71:18:5e:60:38:cb:6d:b2:9c:a1:8c:6d:e8:ee: 19:e5:be:c3:b1:74:9b:7f:5d:0e:50:13:16:d4:62:73:1f:f8: 4f:90:97:23:34:6d:b8:f8:14:a0:d4:b0:3b:52:aa:5a:93:8f: 33:12:db:7f:84:e5:59:72:46:4f:dd:73:cd:5d:da:4d:b2:d3: 82:58:7c:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICE40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1RTQxMTAvBgNVBAUTKDg3Q0EzOTQ4Q0UxQ0NCRTFBMjA0QzVGODBEQjQzMDQx MDlBODMxN0MwHhcNMjMwNTEwMTc1NjUzWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViZGFlNC1lZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArw7FaoL1YD/mGWMqCtw/IRQV6Tj3xmICN7BsCVsXvZCeMLdL/MwhdzP0ZIUX oORumaODWKSrqZ2A/EASnlgGMZ9R1T9KAaW99FdsGRVt+qi3Sk3oW+1mjYGSwIT0 RlDdHISG7KcgYIswdGs9j5qZ+xSxVkfvo7FdLAqY5QGePYbIJJDdP92NLfXvH4/9 XAOqc6EsCAKe/WvFe+MeuZLc6o6ubuvjdTVvu8V1Ls9gjz7lhFiQ00NQ1711XJiW Cd+ymFWncw5qmVa9yWX65ZiUcYB1Vq6NrTdgVWudwIZKHBD4hzgEpLpysK09L/nf iBdgi56+vfpMSKcV3Q1bs7MPdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIfgXnUQ B4eg0jyv/EGI0lZj+i2OMB8GA1UdIwQYMBaAFIfKOUjOHMvhogTF+A20MEEJqDF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVFNC83OTM5NzMyMDRE MDAxMUU4QTAyNkUxNEFDNEY5QUUwMi9oOG81U000Y3ktR2lCTVg0RGJRd1FRbW9N WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4bzVTTTRjeS1HaUJNWDREYlF3UVFtb01Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjY1RTQvNzkzOTczMjA0RDAwMTFFOEEwMjZFMTRBQzRGOUFFMDIvNEE3RTMwMzYz NDA4MTFFRDlEM0Q3NjIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJncrAwDQYJKoZIhvcNAQELBQADggEBAMirgprB3x3WnkFt Trs6L0CsYjxPzSq1/lZ8iSKlrihYijhchQztFv8UArd6obomICfImQr8FOIrqyfG vmdd/IxQ6coL00kDExXUmP1m+dpEuXO3JFSVedvUkfhNOQWDY1Q7UTACqOjSTofR Fx9kP0ZTEcxYkJi5mi+yDDOr1CJRlTVPZ2xhh5HH4diUaWUDpCm3xVBKBoddIL+s bkvwVpbgWQuUKQO8JRbpi9T37UqmSQfcFS9WlP9xGF5gOMttspyhjG3o7hnlvsOx dJt/XQ5QExbUYnMf+E+QlyM0bbj4FKDUsDtSqlqTjzMS23+E5VlyRk/dc81d2k2y 04JYfF0= -----END CERTIFICATE-----Generated at Tue Apr 23 18:45:09 2024 by rpki-client on console-ams.rpki-client.org