$ rpki-client -vvf rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa File: 869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa (raw, json) Hash identifier: 8e98CKDKPlUYkaS3gFpmFg+52wx/pHC0SDMOErN/wvQ= Subject key identifier: 1E:A9:A4:90:C7:37:80:11:8A:43:26:41:8D:38:79:2C:7E:01:78:97 Certificate issuer: /CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Certificate serial: 088F Authority key identifier: FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa Signing time: Tue 12 Mar 2024 21:29:36 +0000 ROA not before: Tue 12 Mar 2024 21:29:36 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 140215 IP address blocks: 103.148.176.0/23 maxlen: 24 2001:df2:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Validity Not Before: Mar 12 21:29:36 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f0c940-3d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:ee:4c:4e:03:ec:83:b1:5f:46:ff:ca:30: 36:ca:2e:0d:8e:ed:13:b3:b7:30:b1:bb:0e:25:88: cc:76:0c:be:8e:1c:20:a2:34:30:da:4d:ae:50:45: c3:2d:58:c1:33:b4:4e:72:1a:3c:7c:99:f3:59:ff: 60:5f:00:85:ea:57:86:d1:58:45:12:df:cb:4b:82: 79:b8:fd:7e:64:38:f7:63:e5:20:a4:01:d0:74:d0: 84:8d:87:f4:75:b6:b1:1d:4e:a2:8f:9b:b7:a4:77: 6e:d1:c9:1e:db:74:c0:a8:2c:9e:bf:94:7a:d9:0e: fc:ee:4d:94:ef:52:98:c0:6c:f5:d8:8a:08:10:5f: 59:3b:2b:61:c1:c0:e2:ee:8d:67:d2:31:7b:e0:13: d8:9c:eb:18:08:4a:09:86:94:bc:69:be:12:5e:79: a4:d6:35:c8:e4:dc:de:3e:bf:3d:2b:08:d6:23:fd: 32:d6:87:b4:58:c7:d3:99:03:36:cf:ea:0d:06:ca: 20:70:29:bb:7e:16:4a:e2:c4:7d:cd:81:d7:2e:80: 30:7c:ff:b4:bf:9b:0a:24:41:9d:98:7f:35:93:c7: 84:d7:f8:2a:6b:6e:2c:96:0f:e3:c5:dc:d3:f8:44: e7:3d:b2:7d:ca:16:d1:c8:c2:c8:7d:c0:f5:2b:fe: 5d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A9:A4:90:C7:37:80:11:8A:43:26:41:8D:38:79:2C:7E:01:78:97 X509v3 Authority Key Identifier: keyid:FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.176.0/23 IPv6: 2001:df2:e080::/48 Signature Algorithm: sha256WithRSAEncryption 33:05:93:56:4c:38:59:e4:be:b6:68:b3:23:ed:a9:f6:54:fc: 8a:7f:4c:e4:8c:6a:f6:f4:a6:b2:94:70:18:3c:c1:7d:5a:2e: e3:cb:b0:bc:6a:8f:e9:17:ae:97:c1:08:35:40:f8:db:82:b0: e2:d3:e8:3a:0e:bc:cf:5e:0d:25:75:5f:44:1a:5c:db:7e:1c: b8:38:8a:b4:0c:f5:77:33:42:0e:43:15:1b:4f:fc:2f:be:a4: db:89:df:83:94:fc:89:9b:ea:76:b4:fb:8b:8d:72:b0:3a:5c: bb:ed:d4:8c:1f:e9:ff:1e:b2:f4:04:b3:35:8b:bf:8e:14:35: a7:44:0c:51:ed:87:4f:58:a4:81:3f:13:e7:e6:fe:7e:f1:c8: 79:8c:db:c5:80:0a:fa:55:62:28:aa:fd:ba:9b:62:c3:42:63: c8:fd:07:4b:5b:9d:de:ba:39:91:03:0a:cd:e0:f8:0e:27:24: a8:ab:c1:94:e8:13:c3:03:c4:d0:66:4b:52:1c:72:bb:c6:e1: 7b:0a:57:18:6a:cf:b2:a5:7a:75:34:4a:ab:d8:cd:e5:34:37: 72:b5:35:d4:85:a6:78:62:c3:fc:53:f3:f8:48:b7:23:74:bc: ee:42:18:61:fa:56:b3:34:d6:3d:97:ec:fe:d7:07:f2:3d:7b: f5:ad:99:78 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxRUYxMTAvBgNVBAUTKEZDQzUwNERBNEIzOThDNjZEREJGMkMzOTJCNzUxOUND OTBDMUExMDkwHhcNMjQwMzEyMjEyOTM2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWYwYzk0MC0zZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpvuTE4D7IOxX0b/yjA2yi4Nju0Ts7cwsbsOJYjMdgy+jhwgojQw2k2uUEXD LVjBM7ROcho8fJnzWf9gXwCF6leG0VhFEt/LS4J5uP1+ZDj3Y+UgpAHQdNCEjYf0 dbaxHU6ij5u3pHdu0cke23TAqCyev5R62Q787k2U71KYwGz12IoIEF9ZOythwcDi 7o1n0jF74BPYnOsYCEoJhpS8ab4SXnmk1jXI5NzePr89KwjWI/0y1oe0WMfTmQM2 z+oNBsogcCm7fhZK4sR9zYHXLoAwfP+0v5sKJEGdmH81k8eE1/gqa24slg/jxdzT +ETnPbJ9yhbRyMLIfcD1K/5d+wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFB6ppJDH N4ARikMmQY04eSx+AXiXMB8GA1UdIwQYMBaAFPzFBNpLOYxm3b8sOSt1GcyQwaEJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFFRi8yRTk0ODc0RTkx REExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpHYmR2eXc1SzNVWnpKREJv UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NVUUya3M1akdiZHZ5dzVLM1VaekpEQm9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUxRUYvMkU5NDg3NEU5MURBMTFFQTg0Q0MwNTE1QzRGOUFFMDIvODY5Q0JGNUU5 MURDMTFFQUE1RkQ0QTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlLAwDwQCAAIwCQMHACABDfLggDANBgkqhkiG9w0BAQsF AAOCAQEAMwWTVkw4WeS+tmizI+2p9lT8in9M5Ixq9vSmspRwGDzBfVou48uwvGqP 6Reul8EINUD424Kw4tPoOg68z14NJXVfRBpc234cuDiKtAz1dzNCDkMVG0/8L76k 24nfg5T8iZvqdrT7i41ysDpcu+3UjB/p/x6y9ASzNYu/jhQ1p0QMUe2HT1ikgT8T 5+b+fvHIeYzbxYAK+lViKKr9uptiw0JjyP0HS1ud3ro5kQMKzeD4DickqKvBlOgT wwPE0GZLUhxyu8bhewpXGGrPsqV6dTRKq9jN5TQ3crU11IWmeGLD/FPz+Ei3I3S8 7kIYYfpWszTWPZfs/tcH8j179a2ZeA== -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:10 2024 by rpki-client on console-ams.rpki-client.org