$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/A5393FF2E70911E8B4D19B84C4F9AE02.roa File: A5393FF2E70911E8B4D19B84C4F9AE02.roa (raw, json) Hash identifier: 9kzHJ+mrOXjrh7/imCy9YTTgW8CKx7edCdpIZZ1nyQU= Subject key identifier: 49:ED:81:26:99:32:E7:9E:14:3F:5C:7A:83:1C:40:97:98:20:FD:3A Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 123F Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/A5393FF2E70911E8B4D19B84C4F9AE02.roa Signing time: Tue 10 Sep 2024 17:55:23 +0000 ROA not before: Tue 10 Sep 2024 17:55:23 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 55901 IP address blocks: 103.123.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4671 (0x123f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Sep 10 17:55:23 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e0880b-8038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:81:81:cd:0b:a9:28:50:ef:39:8d:19:2a:21: 83:ee:56:3e:20:61:b0:c0:e9:1d:00:bd:67:5d:0a: 1a:a0:84:e6:a6:ef:03:ae:30:8f:75:99:18:4e:77: 59:bb:96:02:ad:c8:4f:17:af:fa:d8:2c:e9:cf:73: 67:e2:a3:b9:4c:74:0f:12:96:9c:71:ec:72:87:a4: 98:99:f3:96:00:7e:36:d3:a9:74:e9:53:7f:c1:81: a2:eb:ef:c8:31:77:76:ab:d4:a3:03:1f:15:98:b2: 25:08:30:55:05:b2:60:fa:60:40:87:b8:19:e6:a4: ed:d7:c3:cf:42:c6:11:d6:62:88:45:10:92:46:b4: a9:75:7a:14:c1:b5:cf:c2:61:c6:68:22:f9:c2:19: ac:c1:53:63:8b:fe:3d:0e:8c:cd:20:2f:21:89:ac: 7d:84:04:2d:9f:c1:59:2d:35:71:bc:b3:18:74:90: af:e9:78:64:8c:e7:22:a1:08:7c:98:8c:49:4d:a1: 87:fc:0b:75:98:11:ce:8a:04:3f:84:07:cb:d6:2f: dc:3f:95:9c:d6:bf:d2:6b:f8:60:86:5f:c2:9e:cc: 48:0a:59:ec:dd:f0:bb:e5:3a:af:c0:44:78:93:0a: 97:f3:14:ec:13:e4:56:a8:0e:de:f4:e9:f2:15:ef: cc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:ED:81:26:99:32:E7:9E:14:3F:5C:7A:83:1C:40:97:98:20:FD:3A X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/A5393FF2E70911E8B4D19B84C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.136.0/22 Signature Algorithm: sha256WithRSAEncryption 77:a5:52:8f:5e:85:62:52:8c:1a:bd:34:9e:f6:b5:1b:58:c1: ef:42:ee:4b:13:14:96:29:ae:d8:39:22:73:6a:9e:bd:11:57: 74:2a:fe:e4:32:56:cb:f4:9d:03:d6:88:e8:25:4e:39:6b:3d: d6:53:a9:bb:20:c1:92:6c:11:25:81:a5:cd:96:b0:11:72:56: ae:93:e4:de:3d:4a:d6:28:96:76:c1:e3:f4:84:94:be:43:08: 01:a3:0e:9b:ba:4f:c5:9e:75:f5:e1:7b:d9:cc:e2:aa:0b:67: 3d:0a:fe:d4:ca:a5:aa:d8:a3:c1:34:b2:47:15:95:ea:d7:12: 17:32:6a:0a:69:9c:40:19:13:cc:08:6f:0f:0a:ba:93:97:96: ce:a4:45:1e:12:39:91:17:21:5b:a7:30:3c:b7:ae:c3:a1:b2: 80:26:db:1f:e8:25:d6:99:62:26:05:3c:1d:cb:64:9b:35:c4: 89:6e:b1:de:ad:e8:9a:e9:7a:7f:ee:52:c9:27:ea:6d:0a:50: 61:f3:e2:26:d4:81:31:80:25:cb:ee:5b:4f:6a:3c:69:eb:58: de:9a:c7:ca:b2:25:e2:3e:e7:cc:6e:ea:e4:36:14:62:17:3b: 34:5a:e0:5c:e5:27:19:72:0c:e6:cf:ff:6d:65:57:1b:2f:ca: e3:b4:a1:77 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjQwOTEwMTc1NTIzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUwODgwYi04MDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IGBzQupKFDvOY0ZKiGD7lY+IGGwwOkdAL1nXQoaoITmpu8DrjCPdZkYTndZ u5YCrchPF6/62Czpz3Nn4qO5THQPEpaccexyh6SYmfOWAH4206l06VN/wYGi6+/I MXd2q9SjAx8VmLIlCDBVBbJg+mBAh7gZ5qTt18PPQsYR1mKIRRCSRrSpdXoUwbXP wmHGaCL5whmswVNji/49DozNIC8hiax9hAQtn8FZLTVxvLMYdJCv6XhkjOcioQh8 mIxJTaGH/At1mBHOigQ/hAfL1i/cP5Wc1r/Sa/hghl/CnsxIClns3fC75TqvwER4 kwqX8xTsE+RWqA7e9OnyFe/MSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEntgSaZ MueeFD9ceoMcQJeYIP06MB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjcyRjkvRDJFRDQ5QzJDMjZEMTFFOEJBQkUxMTY1QzRGOUFFMDIvQTUzOTNGRjJF NzA5MTFFOEI0RDE5Qjg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJne4gwDQYJKoZIhvcNAQELBQADggEBAHelUo9ehWJSjBq9 NJ72tRtYwe9C7ksTFJYprtg5InNqnr0RV3Qq/uQyVsv0nQPWiOglTjlrPdZTqbsg wZJsESWBpc2WsBFyVq6T5N49StYolnbB4/SElL5DCAGjDpu6T8WedfXhe9nM4qoL Zz0K/tTKparYo8E0skcVlerXEhcyagppnEAZE8wIbw8KupOXls6kRR4SOZEXIVun MDy3rsOhsoAm2x/oJdaZYiYFPB3LZJs1xIlusd6t6Jrpen/uUskn6m0KUGHz4ibU gTGAJcvuW09qPGnrWN6ax8qyJeI+58xu6uQ2FGIXOzRa4FzlJxlyDObP/21lVxsv yuO0oXc= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:39 2024 by rpki-client on console-fra.rpki-client.org