$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa File: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (raw, json) Hash identifier: 4wWkALarNhzIV0d1ZybqQK8tC375NaVcRuBFdReJXsc= Subject key identifier: 3C:28:F2:3D:36:DC:EF:0F:F7:26:43:7D:45:25:21:3C:2A:B3:11:9F Certificate issuer: /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Certificate serial: 05BC Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa Signing time: Thu 23 May 2024 00:34:00 +0000 ROA not before: Thu 23 May 2024 00:34:00 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 56186 IP address blocks: 43.245.240.0/22 maxlen: 23 103.13.8.0/22 maxlen: 22 202.3.80.0/21 maxlen: 21 202.92.216.0/21 maxlen: 21 202.92.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1468 (0x5bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Validity Not Before: May 23 00:34:00 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=664e8ef7-fe49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:bb:85:86:54:b8:3e:77:15:1e:33:e1:34: ec:7a:00:f6:2e:26:18:c4:99:db:b1:72:2e:e8:c1: 3d:12:da:5d:00:2e:2c:19:5c:f2:f2:81:e7:00:75: 8e:c8:46:8b:81:db:82:aa:5e:82:58:c1:a6:cc:cb: 84:21:94:91:84:7f:d9:e5:98:d2:92:a8:fe:17:11: cc:97:67:e9:67:a1:ba:42:af:7a:90:a4:56:a0:8b: 4d:24:05:47:98:4b:7a:96:f9:1a:21:e1:77:4b:ca: 41:29:4e:d8:53:4c:50:9a:7d:90:4f:ae:c4:70:cd: d4:6f:93:63:48:89:9f:78:c6:b9:60:b4:01:79:47: 92:8a:1b:77:b1:ea:f0:8a:38:ee:f9:79:b0:2b:b0: e7:aa:3d:1b:64:3e:40:bc:64:55:c2:d7:a4:66:22: 16:ec:d8:25:1a:a7:b6:48:dc:d0:00:bc:95:40:b2: f8:95:f6:51:8b:d6:f4:df:d9:fe:e3:cc:20:dd:6d: a8:64:03:93:e4:a7:85:39:61:43:bd:92:60:33:de: c1:9d:96:af:2e:e4:26:06:6b:f5:2f:5d:9b:85:74: 72:20:bb:da:c0:20:5f:c0:77:06:9a:37:0d:4e:b9: c0:42:1f:8f:20:83:2b:c7:af:bd:9e:34:29:17:49: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:28:F2:3D:36:DC:EF:0F:F7:26:43:7D:45:25:21:3C:2A:B3:11:9F X509v3 Authority Key Identifier: keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.240.0/22 103.13.8.0/22 202.3.80.0/21 202.92.216.0/21 Signature Algorithm: sha256WithRSAEncryption 57:bd:e4:79:fd:b5:0c:06:ac:34:6f:db:59:f1:2c:f8:e1:41: 9c:9f:03:5d:7e:2a:aa:89:6f:5f:d6:7b:1a:aa:3b:c6:57:e5: 47:68:1f:14:1e:ec:de:b4:b9:f0:06:00:f9:1b:8c:0d:7b:86: 9b:d6:62:54:64:2a:19:b3:fc:50:86:12:b7:ee:08:97:58:30: 4a:78:30:fd:25:a2:5e:26:4a:1b:b7:8c:af:4e:be:53:c3:9d: 8a:ab:a6:bc:58:39:ac:0f:a2:cf:6c:fe:66:fa:e3:1f:5a:11: 3e:f2:cd:13:f9:77:80:29:5e:39:24:75:45:f3:b1:e0:66:af: d2:bc:ae:3b:a0:02:8e:9e:e9:72:00:e2:4f:15:6d:82:65:89: d6:cd:a7:12:83:b5:70:8d:97:2d:d1:3b:70:41:67:99:d9:68: fd:b1:4a:38:14:e0:c0:62:23:1e:2d:52:e9:67:56:bb:d7:27: e5:1c:e6:63:7a:2d:82:e1:41:bb:40:be:be:8d:ea:97:29:16: f7:7a:7a:7e:2b:19:e6:dc:54:47:d4:d5:87:bd:3f:8c:65:1c: 31:c4:1d:de:15:e1:25:c1:90:24:1b:61:28:f3:18:f2:05:cd: b6:83:f7:1c:49:d5:6e:13:de:8d:9e:86:ac:dc:30:2c:b2:c3: 46:fb:91:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczRUQxMTAvBgNVBAUTKDM5MzU2NkY0NDE3ODZEOTU4RDhBNzkxMThFOEVGNTZG Qzg3MkU1QzUwHhcNMjQwNTIzMDAzNDAwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRlOGVmNy1mZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIm7hYZUuD53FR4z4TTsegD2LiYYxJnbsXIu6ME9EtpdAC4sGVzy8oHnAHWO yEaLgduCql6CWMGmzMuEIZSRhH/Z5ZjSkqj+FxHMl2fpZ6G6Qq96kKRWoItNJAVH mEt6lvkaIeF3S8pBKU7YU0xQmn2QT67EcM3Ub5NjSImfeMa5YLQBeUeSiht3serw ijju+XmwK7Dnqj0bZD5AvGRVwtekZiIW7NglGqe2SNzQALyVQLL4lfZRi9b039n+ 48wg3W2oZAOT5KeFOWFDvZJgM97BnZavLuQmBmv1L12bhXRyILvawCBfwHcGmjcN TrnAQh+PIIMrx6+9njQpF0kx3QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFDwo8j02 3O8P9yZDfUUlITwqsxGfMB8GA1UdIwQYMBaAFDk1ZvRBeG2VjYp5EY6O9W/IcuXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzNFRC80RDhGQTIwRTdE NDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJaV05pbmtSam83MWI4aHk1 Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09UVm05RUY0YlpXTmlua1JqbzcxYjhoeTVjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjczRUQvNEQ4RkEyMEU3RDQ5MTFFQkExNjU3MzdCQzRGOUFFMDIvQ0QxRjBFQzA3 RDREMTFFQkFFODFBRjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIr9fADBAJnDQgDBAPKA1ADBAPKXNgwDQYJKoZIhvcNAQEL BQADggEBAFe95Hn9tQwGrDRv21nxLPjhQZyfA11+KqqJb1/WexqqO8ZX5UdoHxQe 7N60ufAGAPkbjA17hpvWYlRkKhmz/FCGErfuCJdYMEp4MP0lol4mShu3jK9OvlPD nYqrprxYOawPos9s/mb64x9aET7yzRP5d4ApXjkkdUXzseBmr9K8rjugAo6e6XIA 4k8VbYJlidbNpxKDtXCNly3RO3BBZ5nZaP2xSjgU4MBiIx4tUulnVrvXJ+Uc5mN6 LYLhQbtAvr6N6pcpFvd6en4rGebcVEfU1Ye9P4xlHDHEHd4V4SXBkCQbYSjzGPIF zbaD9xxJ1W4T3o2ehqzcMCyyw0b7ka8= -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:44 2024 by rpki-client on console-fra.rpki-client.org