$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/4A32E74C26D411EEA00C7C38C4F9AE02.roa File: 4A32E74C26D411EEA00C7C38C4F9AE02.roa (raw, json) Hash identifier: L/i14I24+zJupsItDxx2ARJgZUzW+z1NrOKC2yo5r0I= Subject key identifier: 94:60:44:7C:2B:51:CA:4F:A1:46:6D:F9:1F:B5:51:E1:7C:27:36:3D Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Certificate serial: 05AD Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/4A32E74C26D411EEA00C7C38C4F9AE02.roa Signing time: Wed 04 Oct 2023 23:41:20 +0000 ROA not before: Wed 04 Oct 2023 23:41:20 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 131174 IP address blocks: 110.44.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Validity Not Before: Oct 4 23:41:20 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651df820-a3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:74:4d:34:03:1d:5c:b4:6b:07:98:d3:67:13: 16:0c:04:d8:70:1d:48:c8:d8:19:fe:50:60:ac:a0: 1e:a3:da:cb:bb:2f:e2:fe:3b:3c:17:b8:06:87:a0: bc:2e:cd:19:a1:d4:4e:21:19:7b:16:2f:4e:ef:06: 38:2f:78:d4:93:00:24:8d:93:77:1d:e2:f5:78:4c: 7a:0e:fd:6a:39:7d:d7:1c:4d:d9:5c:39:d3:68:2a: 1a:a2:30:50:95:bf:7f:f9:39:21:f2:4c:cb:c1:b9: 4c:46:ea:3f:d3:ab:d5:7c:7e:96:0d:71:bc:06:09: ed:b0:06:0b:db:1e:7a:ff:e8:85:42:80:23:2d:f9: 97:2e:08:74:ca:04:7f:a8:8c:38:71:1f:21:b1:dc: 63:47:43:13:17:f6:b5:d6:15:0a:05:60:b6:28:47: 9c:d2:6e:10:a7:85:9b:6e:04:53:05:f5:4b:e0:69: d0:f7:33:1f:4d:35:07:95:ef:91:51:4b:5c:5c:c1: d1:68:fe:7f:16:4f:44:d5:0b:3e:83:97:66:0e:3b: 8e:5c:63:ab:e5:4e:60:68:ea:b0:1a:0e:eb:3a:33: ca:34:32:30:73:4b:2b:4a:5b:04:1b:17:6d:96:04: fd:06:25:44:eb:10:23:5a:b9:58:06:6b:64:4a:3f: 85:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:60:44:7C:2B:51:CA:4F:A1:46:6D:F9:1F:B5:51:E1:7C:27:36:3D X509v3 Authority Key Identifier: keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/4A32E74C26D411EEA00C7C38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.44.16.0/24 Signature Algorithm: sha256WithRSAEncryption 02:08:33:98:a8:a8:b8:5e:e7:f5:e6:7c:59:35:ef:70:96:97: 24:65:bb:26:9c:33:a7:95:ed:a8:ae:de:03:ee:a8:5e:d0:8d: 57:82:0b:01:d1:41:66:ad:fc:73:56:e9:d7:8b:d7:9b:8b:5e: 6d:5d:33:47:36:2e:ca:20:d6:7c:30:fb:49:e5:75:f9:d8:e6: 96:68:05:28:b3:e7:96:8e:5c:36:64:b0:f0:ab:8a:67:7e:d4: ce:8b:78:25:17:2e:49:a4:f1:93:fc:59:7b:f6:f7:38:19:59: dd:e6:27:8e:11:82:dc:0e:d4:1f:47:65:f2:ce:22:f6:23:c2: ad:68:95:aa:64:44:03:85:fa:75:34:ac:40:0c:3b:5d:8c:99: 92:07:25:d9:1e:c1:49:3c:3a:8b:2f:b4:3f:94:bb:37:dd:a5: 5e:36:18:0e:17:91:41:d4:63:b9:70:2f:48:72:7e:0c:0f:45: e9:fe:40:62:85:0f:1c:a9:f6:41:84:ed:b2:4c:e7:31:06:20: 3b:90:44:97:7e:f8:7a:33:f5:df:56:6d:b3:03:1a:7e:61:26: 66:1d:29:28:79:08:9f:91:11:8d:ff:f4:f5:8a:57:63:9b:ee: dc:6d:10:f9:bd:c0:c7:7d:5d:21:72:40:1f:bc:99:a5:29:86: 72:e5:1c:2d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC NjBEQjFCMkMwHhcNMjMxMDA0MjM0MTIwWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFkZjgyMC1hM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8HRNNAMdXLRrB5jTZxMWDATYcB1IyNgZ/lBgrKAeo9rLuy/i/js8F7gGh6C8 Ls0ZodROIRl7Fi9O7wY4L3jUkwAkjZN3HeL1eEx6Dv1qOX3XHE3ZXDnTaCoaojBQ lb9/+Tkh8kzLwblMRuo/06vVfH6WDXG8BgntsAYL2x56/+iFQoAjLfmXLgh0ygR/ qIw4cR8hsdxjR0MTF/a11hUKBWC2KEec0m4Qp4WbbgRTBfVL4GnQ9zMfTTUHle+R UUtcXMHRaP5/Fk9E1Qs+g5dmDjuOXGOr5U5gaOqwGg7rOjPKNDIwc0srSlsEGxdt lgT9BiVE6xAjWrlYBmtkSj+FRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJRgRHwr UcpPoUZt+R+1UeF8JzY9MB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvNEEzMkU3NEMy NkQ0MTFFRUEwMEM3QzM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABuLBAwDQYJKoZIhvcNAQELBQADggEBAAIIM5ioqLhe5/Xm fFk173CWlyRluyacM6eV7aiu3gPuqF7QjVeCCwHRQWat/HNW6deL15uLXm1dM0c2 Lsog1nww+0nldfnY5pZoBSiz55aOXDZksPCrimd+1M6LeCUXLkmk8ZP8WXv29zgZ Wd3mJ44RgtwO1B9HZfLOIvYjwq1olapkRAOF+nU0rEAMO12MmZIHJdkewUk8Oosv tD+UuzfdpV42GA4XkUHUY7lwL0hyfgwPRen+QGKFDxyp9kGE7bJM5zEGIDuQRJd+ +Hoz9d9WbbMDGn5hJmYdKSh5CJ+REY3/9PWKV2Ob7txtEPm9wMd9XSFyQB+8maUp hnLlHC0= -----END CERTIFICATE-----Generated at Sat Jun 1 02:55:15 2024 by rpki-client on console-fra.rpki-client.org