$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/5A44099895C111EE951C9E4CC4F9AE02.roa File: 5A44099895C111EE951C9E4CC4F9AE02.roa (raw, json) Hash identifier: rzE4M9XN0AVJtbARjlMubeH/EQs2pw4OBcnjimOncVE= Subject key identifier: 93:60:76:DA:E6:62:56:D8:D0:7D:AD:0F:88:D2:ED:AA:6F:A8:73:5D Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Certificate serial: 16 Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/5A44099895C111EE951C9E4CC4F9AE02.roa Signing time: Fri 08 Dec 2023 12:02:22 +0000 ROA not before: Fri 08 Dec 2023 12:02:22 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 141026 IP address blocks: 180.94.28.0/23 maxlen: 23 180.94.28.0/24 maxlen: 24 180.94.29.0/24 maxlen: 24 2001:df3:2ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Validity Not Before: Dec 8 12:02:22 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=657305cd-11d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e8:2a:fa:58:8f:84:3e:c5:2d:7b:72:66:05: 99:b5:aa:7a:37:d1:9e:d8:60:07:85:18:c6:b7:bf: 0a:9d:02:38:02:bc:3f:8a:03:0a:33:6d:67:0c:0c: 86:15:40:a3:42:ce:38:b1:75:2a:5b:f0:e0:2a:52: a1:17:e8:4b:3b:66:10:09:d2:26:08:cf:ca:75:9a: 0c:50:9b:43:2c:bf:8c:0e:29:a0:af:7f:33:9c:b4: 42:37:45:ab:13:eb:d6:68:39:14:48:9b:d1:b9:8b: 45:84:8a:f1:b9:2b:8b:67:d4:e7:34:d9:4d:40:ed: 76:0d:79:4c:6a:44:47:14:80:e3:30:24:73:f0:94: 28:0a:b6:a7:47:10:fd:72:b2:12:9a:c9:03:85:f1: 13:94:32:45:41:ce:60:2a:ff:f5:49:53:2b:e2:e1: d0:fc:42:a1:94:a6:39:6b:d6:92:86:a1:e0:dd:39: 8c:48:74:82:52:1c:10:0f:57:21:1a:0b:91:84:ce: bb:13:fa:41:3e:92:90:89:20:49:7d:48:e3:94:c7: 26:99:2b:43:e1:d3:10:04:b7:93:77:55:94:30:77: af:f9:5a:7f:43:19:37:96:50:9e:2b:75:0e:e1:04: b5:74:55:b7:d9:41:00:50:c3:be:07:9f:5f:bd:70: c1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:60:76:DA:E6:62:56:D8:D0:7D:AD:0F:88:D2:ED:AA:6F:A8:73:5D X509v3 Authority Key Identifier: keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/5A44099895C111EE951C9E4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.94.28.0/23 IPv6: 2001:df3:2ec0::/48 Signature Algorithm: sha256WithRSAEncryption 5c:4d:2f:61:04:8e:4b:49:90:20:d6:ec:20:a3:34:83:8c:05: e8:3e:ec:65:77:01:16:be:46:a7:3f:f2:7b:10:8a:bd:c4:fe: d8:bd:c5:d2:27:5a:95:56:a0:aa:6e:2e:b1:d0:c3:aa:ca:38: 9d:ea:f2:76:32:f2:9c:27:39:9b:00:5f:0b:b6:90:74:4c:82: 70:17:67:c9:f9:03:b2:88:00:2d:34:23:ac:65:bb:02:3f:3a: cf:fa:25:67:b2:a8:b5:16:9e:9f:2c:bf:36:57:84:02:21:ae: 19:7a:29:46:d2:2a:a5:00:92:98:30:3d:af:55:bb:dd:12:b5: b8:a8:5f:09:68:8f:a1:1d:34:c8:13:ea:7d:e0:fd:45:d6:98: 83:4e:00:6c:cd:b2:1d:fe:fd:3d:0b:19:cd:24:41:61:99:8f: 42:3a:6a:7c:08:bd:e7:6f:ab:fb:26:44:82:74:51:08:29:b0: 6d:41:c1:2c:3a:a7:40:e4:78:2a:04:14:4c:1f:e9:f6:cd:27: bf:10:08:bb:c1:3a:ad:b3:0b:8e:5b:26:9a:25:80:dc:7a:31: a8:8c:2f:93:5a:aa:7f:4d:30:8a:eb:6b:f4:18:ba:0a:21:2c: 3a:61:23:2d:39:6b:bc:a4:08:e8:d4:32:67:ab:15:2b:69:26: 2b:11:70:47 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTM5RjExMC8GA1UEBRMoMDcxRTI1ODU1RTZBMzVCM0Q4MDhGRjdBNjBBMDhCODc4 MTM1NjM2MjAeFw0yMzEyMDgxMjAyMjJaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NzMwNWNkLTExZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC6Cr6WI+EPsUte3JmBZm1qno30Z7YYAeFGMa3vwqdAjgCvD+KAwozbWcMDIYV QKNCzjixdSpb8OAqUqEX6Es7ZhAJ0iYIz8p1mgxQm0Msv4wOKaCvfzOctEI3RasT 69ZoORRIm9G5i0WEivG5K4tn1Oc02U1A7XYNeUxqREcUgOMwJHPwlCgKtqdHEP1y shKayQOF8ROUMkVBzmAq//VJUyvi4dD8QqGUpjlr1pKGoeDdOYxIdIJSHBAPVyEa C5GEzrsT+kE+kpCJIEl9SOOUxyaZK0Ph0xAEt5N3VZQwd6/5Wn9DGTeWUJ4rdQ7h BLV0VbfZQQBQw74Hn1+9cMExAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUk2B22uZi VtjQfa0PiNLtqm+oc10wHwYDVR0jBBgwFoAUBx4lhV5qNbPYCP96YKCLh4E1Y2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5MzlGLzIyRTVGNjU2OEFD MTExRUU4NTEzQkIxREM0RjlBRTAyL0J4NGxoVjVxTmJQWUNQOTZZS0NMaDRFMVky SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQng0bGhWNXFOYlBZQ1A5NllLQ0xoNEUxWTJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTM5Ri8yMkU1RjY1NjhBQzExMUVFODUxM0JCMURDNEY5QUUwMi81QTQ0MDk5ODk1 QzExMUVFOTUxQzlFNENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAbReHDAPBAIAAjAJAwcAIAEN8y7AMA0GCSqGSIb3DQEBCwUA A4IBAQBcTS9hBI5LSZAg1uwgozSDjAXoPuxldwEWvkanP/J7EIq9xP7YvcXSJ1qV VqCqbi6x0MOqyjid6vJ2MvKcJzmbAF8LtpB0TIJwF2fJ+QOyiAAtNCOsZbsCPzrP +iVnsqi1Fp6fLL82V4QCIa4ZeilG0iqlAJKYMD2vVbvdErW4qF8JaI+hHTTIE+p9 4P1F1piDTgBszbId/v09CxnNJEFhmY9COmp8CL3nb6v7JkSCdFEIKbBtQcEsOqdA 5HgqBBRMH+n2zSe/EAi7wTqtswuOWyaaJYDcejGojC+TWqp/TTCK62v0GLoKISw6 YSMtOWu8pAjo1DJnqxUraSYrEXBH -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:27 2024 by rpki-client on console-fra.rpki-client.org