$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/0C0402DEE5CD11EBADAD0E66C4F9AE02.roa File: 0C0402DEE5CD11EBADAD0E66C4F9AE02.roa (raw, json) Hash identifier: XEuedEjpaUrW6KORzdPscjx/hcfdAZFcXvkRztRme24= Subject key identifier: 9A:34:AE:4D:23:54:61:A7:95:63:41:C6:84:AD:E3:03:49:1F:86:D6 Certificate issuer: /CN=A91F6E63/serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0 Certificate serial: 03E7 Authority key identifier: AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/0C0402DEE5CD11EBADAD0E66C4F9AE02.roa Signing time: Fri 05 May 2023 03:03:46 +0000 ROA not before: Fri 05 May 2023 03:03:46 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 9341 IP address blocks: 103.110.88.0/24 maxlen: 24 103.110.89.0/24 maxlen: 24 103.110.90.0/24 maxlen: 24 103.110.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.crl rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 01:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 999 (0x3e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E63/serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0 Validity Not Before: May 5 03:03:46 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64547211-6977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d1:ab:68:88:8b:3a:f6:d9:5d:2f:cd:15:7d: 0d:18:1c:75:9a:38:d6:65:50:79:b2:f3:f4:c6:1f: 00:45:28:50:30:04:24:f9:43:82:de:60:22:f8:bf: a7:4a:5a:df:94:12:ed:04:c4:c2:52:a6:45:22:68: 20:a3:b5:dd:04:53:49:9f:0f:26:b5:1d:e4:d8:75: b3:5b:90:5f:61:29:58:8f:e2:73:7c:52:28:99:eb: a9:c0:6b:da:7f:40:d4:19:78:0b:71:05:21:32:ce: 8e:b6:4f:55:0c:96:37:84:92:db:04:95:8a:69:1f: 30:b3:18:da:4d:1c:0f:3b:2a:c9:6e:00:dd:bc:9e: d4:27:fb:e1:6d:fa:6e:e7:8f:04:75:e7:92:69:4a: 84:c0:c8:f2:35:13:c5:31:f9:2b:b5:e9:29:9a:05: 00:91:89:6e:a3:02:a2:49:b4:1a:c7:24:20:cf:24: 9f:34:7a:e9:bf:26:2b:a1:e0:bb:63:2c:fb:ea:cc: 93:b0:70:2c:ea:c0:ba:93:96:1e:14:92:81:86:d7: f6:cd:df:3c:07:6f:ed:14:78:04:89:a6:c5:b4:3a: ce:93:76:5a:3e:18:20:43:ac:b7:ef:a5:a2:5f:d6: 85:43:f4:18:67:0e:5f:82:e1:89:a6:9a:62:6d:cd: 09:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:34:AE:4D:23:54:61:A7:95:63:41:C6:84:AD:E3:03:49:1F:86:D6 X509v3 Authority Key Identifier: keyid:AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/0C0402DEE5CD11EBADAD0E66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.88.0/22 Signature Algorithm: sha256WithRSAEncryption 04:fa:b8:ca:c1:d1:5c:84:f6:ba:ba:b3:99:5b:52:24:68:88: 54:c1:e1:e6:32:9b:38:c6:b0:cb:f4:51:70:7f:a5:9b:4f:51: b9:08:c2:3f:3f:06:d4:d3:07:3a:9f:71:ad:76:80:a1:47:8c: 80:b5:f4:c6:28:17:ec:3d:9c:02:25:a3:d7:05:0d:49:05:74: f4:6d:52:07:5c:1b:12:56:d4:22:d8:54:a7:bf:55:4e:95:2b: ec:ee:98:ff:30:cb:f1:58:3f:e9:f2:da:3b:2f:4f:8b:5f:22: 3f:59:db:56:a4:89:2d:c0:b3:1c:5c:ee:e4:ec:ab:7a:0c:9f: 42:b4:86:3a:26:fa:b2:7c:d2:d2:7b:fb:9d:51:c7:4c:fb:8f: 95:c8:57:77:44:50:9f:5f:9f:c3:84:32:38:dd:a5:f5:08:26: 00:bc:52:00:f2:dd:60:e6:3a:4b:70:d2:fc:f1:1f:eb:51:89: 07:8f:44:39:dd:9a:88:1b:87:50:c5:52:33:7d:ea:b2:aa:92: 94:6f:d1:50:3b:ed:8d:e9:b4:eb:70:40:71:35:05:a8:91:69: be:f4:d5:e7:59:04:28:f8:ee:b9:08:2a:dd:e0:92:23:08:04: d5:32:fa:a4:f2:af:7b:5f:ea:16:83:f9:99:6c:38:b5:78:71: a4:74:07:ca -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjMxMTAvBgNVBAUTKEFEQjkyMTc4MjFGRkJFRTA5NkUxQ0VDNDcwOThBMzE0 NUEyNDZFQTAwHhcNMjMwNTA1MDMwMzQ2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDU0NzIxMS02OTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NGraIiLOvbZXS/NFX0NGBx1mjjWZVB5svP0xh8ARShQMAQk+UOC3mAi+L+n SlrflBLtBMTCUqZFImggo7XdBFNJnw8mtR3k2HWzW5BfYSlYj+JzfFIomeupwGva f0DUGXgLcQUhMs6Otk9VDJY3hJLbBJWKaR8wsxjaTRwPOyrJbgDdvJ7UJ/vhbfpu 548EdeeSaUqEwMjyNRPFMfkrtekpmgUAkYluowKiSbQaxyQgzySfNHrpvyYroeC7 Yyz76syTsHAs6sC6k5YeFJKBhtf2zd88B2/tFHgEiabFtDrOk3ZaPhggQ6y376Wi X9aFQ/QYZw5fguGJpppibc0JCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJo0rk0j VGGnlWNBxoSt4wNJH4bWMB8GA1UdIwQYMBaAFK25IXgh/77gluHOxHCYoxRaJG6g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2My9ENjlDRDkyOEU0 QTQxMUVCOEJDNUM1NDZDNEY5QUUwMi9yYmtoZUNIX3Z1Q1c0YzdFY0ppakZGb2ti cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jia2hlQ0hfdnVDVzRjN0VjSmlqRkZva2JxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjZFNjMvRDY5Q0Q5MjhFNEE0MTFFQjhCQzVDNTQ2QzRGOUFFMDIvMEMwNDAyREVF NUNEMTFFQkFEQUQwRTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnblgwDQYJKoZIhvcNAQELBQADggEBAAT6uMrB0VyE9rq6 s5lbUiRoiFTB4eYymzjGsMv0UXB/pZtPUbkIwj8/BtTTBzqfca12gKFHjIC19MYo F+w9nAIlo9cFDUkFdPRtUgdcGxJW1CLYVKe/VU6VK+zumP8wy/FYP+ny2jsvT4tf Ij9Z21akiS3Asxxc7uTsq3oMn0K0hjom+rJ80tJ7+51Rx0z7j5XIV3dEUJ9fn8OE MjjdpfUIJgC8UgDy3WDmOktw0vzxH+tRiQePRDndmogbh1DFUjN96rKqkpRv0VA7 7Y3ptOtwQHE1BaiRab701edZBCj47rkIKt3gkiMIBNUy+qTyr3tf6haD+ZlsOLV4 caR0B8o= -----END CERTIFICATE-----Generated at Fri May 17 03:06:34 2024 by rpki-client on console-ams.rpki-client.org