$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/CDB8866E0BCF11EE8FB8EE16C4F9AE02.roa File: CDB8866E0BCF11EE8FB8EE16C4F9AE02.roa (raw, json) Hash identifier: 2bPtjzTQacB3nxuls9EwwbG+O2MsmPX0JJOR646mhfM= Subject key identifier: 11:6D:87:59:81:AD:AD:74:4D:A6:83:CB:EB:8D:BC:70:D7:C2:7A:47 Certificate issuer: /CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327 Certificate serial: B9 Authority key identifier: 34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/CDB8866E0BCF11EE8FB8EE16C4F9AE02.roa Signing time: Fri 31 May 2024 07:42:12 +0000 ROA not before: Fri 31 May 2024 07:42:12 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 58914 IP address blocks: 103.24.64.0/22 maxlen: 22 2406:b300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 06:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327 Validity Not Before: May 31 07:42:12 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66597f54-f6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e7:7f:6c:56:5c:6f:6a:28:7d:ca:c0:32:68: 6c:a9:6d:83:a8:1c:0c:0b:22:87:22:2c:fa:58:38: 91:67:d9:1d:74:75:08:d1:1d:c3:32:57:4f:e4:a1: 79:2f:36:d9:c0:85:cf:9f:3c:23:dc:a1:45:2f:fa: 42:92:53:a2:ca:64:15:a0:2e:d0:9a:e1:e7:bf:5c: 99:dc:8c:04:04:dc:00:26:f1:08:8f:5f:a3:83:17: 1f:e7:04:fe:8e:f7:38:bf:97:2d:a4:3d:4e:64:6c: 3e:fd:77:19:67:dc:03:cf:ac:57:46:84:13:eb:fe: e1:58:1b:fe:16:4f:93:25:c7:b0:21:0a:77:4a:dc: 34:2a:44:d4:37:17:ba:7f:a0:1c:a3:92:40:54:4e: af:6b:f0:42:06:a4:f9:a5:90:36:40:79:2c:7f:c4: df:86:f4:37:54:e4:f0:2c:cc:49:ef:d6:51:f1:4d: e4:1b:fd:59:90:ce:b5:37:23:c8:6a:b6:07:dc:81: 1d:50:c0:e4:19:54:84:9e:90:79:a9:65:08:1d:d8: 59:2e:0c:43:32:30:60:99:a0:a3:dc:f3:b3:59:44: 27:49:10:ce:56:28:14:f5:57:bd:9a:5f:d2:2a:aa: 23:ad:35:0b:91:30:ee:99:6b:73:7c:ed:cb:8f:29: 47:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6D:87:59:81:AD:AD:74:4D:A6:83:CB:EB:8D:BC:70:D7:C2:7A:47 X509v3 Authority Key Identifier: keyid:34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/CDB8866E0BCF11EE8FB8EE16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.64.0/22 IPv6: 2406:b300::/32 Signature Algorithm: sha256WithRSAEncryption a4:14:8e:f5:1e:fe:40:e6:94:2b:0e:c1:12:12:78:d6:1a:f1: a6:97:bd:65:ed:20:66:9c:b5:a7:41:70:75:26:e5:0b:28:57: aa:5f:67:54:bd:af:33:40:f6:a0:fe:63:fc:93:e5:30:65:bd: 2c:19:af:26:cc:2c:89:ff:05:ea:ed:24:1f:1e:47:20:9f:75: ed:41:5e:6b:dd:a2:e1:70:9b:1a:a0:f1:c9:c3:00:f4:d9:ec: 21:61:19:c3:9b:62:93:77:79:dc:41:0e:f5:12:0a:97:33:cc: 73:b7:19:51:d7:79:a8:a7:0d:04:2e:60:db:27:b2:d7:c8:30: b0:a6:e8:66:b1:68:12:ce:c2:40:33:2c:2e:fe:83:31:a6:83: f2:10:d3:2f:8d:53:4b:5f:11:ff:ed:8e:77:2e:f0:73:a2:8b: 08:02:7f:76:f7:62:d3:79:b6:40:3d:9b:de:2a:0f:00:82:a2: 58:85:ce:1d:79:5e:e3:c9:63:30:2b:ff:4f:26:25:f9:7a:34: 8e:52:cd:9e:3a:aa:1f:31:32:20:79:ec:a7:81:1c:7d:53:c1: ea:7e:24:af:fe:3e:a3:47:6a:f6:90:42:af:73:e7:d0:e7:5c: c6:14:c0:ac:31:59:b3:bb:17:e8:55:8a:c3:de:c8:c6:48:4b: 6c:53:3e:a1 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1NjIxMTAvBgNVBAUTKDM0MEY4MTM0MzM3MTlBNzYwRTNCRkUyMTkzMzY4NzI2 MTE3OUMzMjcwHhcNMjQwNTMxMDc0MjEyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU5N2Y1NC1mNmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ud/bFZcb2oofcrAMmhsqW2DqBwMCyKHIiz6WDiRZ9kddHUI0R3DMldP5KF5 LzbZwIXPnzwj3KFFL/pCklOiymQVoC7QmuHnv1yZ3IwEBNwAJvEIj1+jgxcf5wT+ jvc4v5ctpD1OZGw+/XcZZ9wDz6xXRoQT6/7hWBv+Fk+TJcewIQp3Stw0KkTUNxe6 f6Aco5JAVE6va/BCBqT5pZA2QHksf8TfhvQ3VOTwLMxJ79ZR8U3kG/1ZkM61NyPI arYH3IEdUMDkGVSEnpB5qWUIHdhZLgxDMjBgmaCj3POzWUQnSRDOVigU9Ve9ml/S KqojrTULkTDumWtzfO3LjylHrwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBFth1mB ra10TaaDy+uNvHDXwnpHMB8GA1UdIwQYMBaAFDQPgTQzcZp2Djv+IZM2hyYRecMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Mi8yNjU3RjczRTBC QzkxMUVFOEY3OUJCNURDNEY5QUUwMi9OQS1CTkROeG1uWU9PXzRoa3phSEpoRjV3 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BLUJORE54bW5ZT09fNGhremFISmhGNXd5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE1NjIvMjY1N0Y3M0UwQkM5MTFFRThGNzlCQjVEQzRGOUFFMDIvQ0RCODg2NkUw QkNGMTFFRThGQjhFRTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnGEAwDQQCAAIwBwMFACQGswAwDQYJKoZIhvcNAQELBQAD ggEBAKQUjvUe/kDmlCsOwRISeNYa8aaXvWXtIGactadBcHUm5QsoV6pfZ1S9rzNA 9qD+Y/yT5TBlvSwZrybMLIn/BertJB8eRyCfde1BXmvdouFwmxqg8cnDAPTZ7CFh GcObYpN3edxBDvUSCpczzHO3GVHXeainDQQuYNsnstfIMLCm6GaxaBLOwkAzLC7+ gzGmg/IQ0y+NU0tfEf/tjncu8HOiiwgCf3b3YtN5tkA9m94qDwCColiFzh15XuPJ YzAr/08mJfl6NI5SzZ46qh8xMiB57KeBHH1Twep+JK/+PqNHavaQQq9z59DnXMYU wKwxWbO7F+hVisPeyMZIS2xTPqE= -----END CERTIFICATE-----Generated at Thu Jun 13 08:02:36 2024 by rpki-client on console-ams.rpki-client.org