$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/128FC51CBE5811EBAADC5261C4F9AE02.roa File: 128FC51CBE5811EBAADC5261C4F9AE02.roa (raw, json) Hash identifier: AeCcm8Kmozid/fnOTumy1VwEaBA2Fwa86QxODVpnMG8= Subject key identifier: 66:72:D1:CC:3A:02:CF:C3:97:62:EA:3C:A5:BF:26:D0:AE:53:7B:C9 Certificate issuer: /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E Certificate serial: 137A Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/128FC51CBE5811EBAADC5261C4F9AE02.roa Signing time: Fri 30 Jun 2023 17:35:47 +0000 ROA not before: Fri 30 Jun 2023 17:35:47 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 137868 IP address blocks: 103.115.252.0/24 maxlen: 24 103.115.253.0/24 maxlen: 24 103.115.254.0/24 maxlen: 24 103.115.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 17:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4986 (0x137a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E Validity Not Before: Jun 30 17:35:47 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=649f1273-6290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:f4:8d:14:73:03:34:ba:1b:77:1f:e1:0d: 58:ca:17:e7:be:e5:4e:e0:b1:78:10:f5:c9:0b:59: a6:3a:ee:0f:3e:15:bd:33:82:c6:bf:05:89:d6:90: e5:28:2e:06:b0:df:d0:a9:ee:ab:6c:da:b9:62:79: cf:88:24:c1:6e:13:b0:e6:8d:03:3a:84:0d:a8:58: b1:28:36:2a:28:0e:65:c5:f4:3b:b9:69:a4:b6:e2: d8:a1:83:93:e1:2a:3e:a3:f7:75:e3:c4:f6:f0:5d: 52:01:b7:82:62:d6:76:15:b5:46:a1:f3:ae:87:23: 02:fe:ba:78:2f:ae:e6:52:cd:c5:1c:4b:2d:bd:fe: 10:f4:5a:52:6d:2f:92:db:4d:cb:de:92:43:2e:2d: 8e:97:33:44:5b:67:ed:59:ce:9e:92:7e:eb:f7:af: 9f:22:25:4c:18:77:15:7d:7a:bd:12:ba:f3:3d:57: c7:84:eb:fe:53:ad:92:10:eb:98:c5:b4:47:34:53: 1a:5e:f5:69:d0:f1:95:52:db:8d:93:ef:f6:22:26: b8:18:d4:11:e7:7e:6b:42:89:8b:b6:42:c6:be:3a: 5c:b1:ff:3f:72:35:ca:39:b1:36:ca:24:af:3d:f2: 99:36:5b:56:ef:70:a8:c5:6a:30:e7:36:da:fb:cd: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:72:D1:CC:3A:02:CF:C3:97:62:EA:3C:A5:BF:26:D0:AE:53:7B:C9 X509v3 Authority Key Identifier: keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/128FC51CBE5811EBAADC5261C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.252.0/22 Signature Algorithm: sha256WithRSAEncryption 72:fd:e7:88:e1:d2:0f:4a:42:4b:ae:77:4f:9b:53:05:f5:3f: 89:6d:03:7e:60:61:53:f2:f6:f3:40:59:8b:92:2c:49:88:10: c7:2c:d8:67:71:bc:34:53:77:3a:69:b6:d9:4d:32:b7:52:30: eb:bf:22:9e:eb:9a:32:bd:8e:cd:a8:2e:c9:18:73:56:26:e2: a1:ec:1a:cb:5c:06:17:1f:1c:64:f0:97:e7:6b:54:7c:4c:ce: c3:ae:af:33:c1:da:5e:f9:e6:c5:9d:23:3b:01:4b:b4:09:79: 66:ed:7a:90:e2:dc:24:62:96:de:64:bd:91:f4:e7:7e:c2:0f: 76:32:e3:fc:96:ed:0a:53:d7:2f:cf:f1:bd:c1:44:20:4e:f3: 9d:82:ab:91:ad:64:24:23:e0:ae:2e:44:2f:04:97:fc:03:80: 75:10:0d:e6:42:ec:9b:bf:21:32:af:ef:72:95:0a:2d:2a:68: 59:48:1b:cb:67:bd:bb:6f:9f:71:7d:1b:35:ef:bf:89:a9:70: ae:42:58:a1:04:41:d6:fa:fd:26:92:88:26:1e:e4:e1:7a:44: 07:9b:fb:9d:5d:fd:2c:1b:7d:ff:96:8d:c2:29:c4:84:47:e2: 90:67:96:89:0c:3f:6d:78:35:a9:5d:70:ad:49:5e:bc:37:2a: f7:c5:b1:00 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICE3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5RTAxMTAvBgNVBAUTKEI2QzI0M0M2MzlCMzExRTk4NzhFQzA2QkYyNDdGN0FE RTU0QjA5M0UwHhcNMjMwNjMwMTczNTQ3WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDlmMTI3My02MjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCv0jRRzAzS6G3cf4Q1YyhfnvuVO4LF4EPXJC1mmOu4PPhW9M4LGvwWJ1pDl KC4GsN/Qqe6rbNq5YnnPiCTBbhOw5o0DOoQNqFixKDYqKA5lxfQ7uWmktuLYoYOT 4So+o/d148T28F1SAbeCYtZ2FbVGofOuhyMC/rp4L67mUs3FHEstvf4Q9FpSbS+S 203L3pJDLi2OlzNEW2ftWc6ekn7r96+fIiVMGHcVfXq9ErrzPVfHhOv+U62SEOuY xbRHNFMaXvVp0PGVUtuNk+/2Iia4GNQR535rQomLtkLGvjpcsf8/cjXKObE2yiSv PfKZNltW73CoxWow5zba+82MIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGZy0cw6 As/Dl2LqPKW/JtCuU3vJMB8GA1UdIwQYMBaAFLbCQ8Y5sxHph47Aa/JH963lSwk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFMC81MTU0QTExMDVG RkExMUU4ODdCNTY5NDJDNEY5QUUwMi90c0pEeGptekVlbUhqc0JyOGtmM3JlVkxD VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzSkR4am16RWVtSGpzQnI4a2YzcmVWTENUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ5RTAvNTE1NEExMTA1RkZBMTFFODg3QjU2OTQyQzRGOUFFMDIvMTI4RkM1MUNC RTU4MTFFQkFBREM1MjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnc/wwDQYJKoZIhvcNAQELBQADggEBAHL954jh0g9KQkuu d0+bUwX1P4ltA35gYVPy9vNAWYuSLEmIEMcs2GdxvDRTdzppttlNMrdSMOu/Ip7r mjK9js2oLskYc1Ym4qHsGstcBhcfHGTwl+drVHxMzsOurzPB2l755sWdIzsBS7QJ eWbtepDi3CRilt5kvZH0537CD3Yy4/yW7QpT1y/P8b3BRCBO852Cq5GtZCQj4K4u RC8El/wDgHUQDeZC7Ju/ITKv73KVCi0qaFlIG8tnvbtvn3F9GzXvv4mpcK5CWKEE Qdb6/SaSiCYe5OF6RAeb+51d/Swbff+WjcIpxIRH4pBnlokMP214NaldcK1JXrw3 KvfFsQA= -----END CERTIFICATE-----Generated at Sun Jun 2 18:40:06 2024 by rpki-client on console-fra.rpki-client.org