$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/84FDF6D0AABA11EABB84756CC4F9AE02.roa File: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (raw, json) Hash identifier: fpS/IAyugQMqJIWGwmXI8wOUbVOYobs6hKofuFnkQek= Subject key identifier: 9B:06:5D:18:16:1A:0C:86:A6:DE:32:7F:54:D6:AB:7D:24:E8:3D:AA Certificate issuer: /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Certificate serial: 080F Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/84FDF6D0AABA11EABB84756CC4F9AE02.roa Signing time: Wed 21 Feb 2024 04:47:31 +0000 ROA not before: Wed 21 Feb 2024 04:47:31 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 4858 IP address blocks: 203.90.24.0/22 maxlen: 22 203.90.29.0/24 maxlen: 24 2406:ca00:1::/48 maxlen: 48 2406:ca00:2::/48 maxlen: 48 2406:ca00:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2063 (0x80f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Validity Not Before: Feb 21 04:47:31 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65d58063-fbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:48:f1:91:d4:17:3e:f5:0d:66:17:f8:41:d8: 61:9a:d2:36:cb:25:34:de:f2:fd:4d:4b:8c:67:07: 04:d2:c8:c0:1d:ae:c6:26:9a:d8:bf:86:ab:31:ae: ca:25:34:8e:6e:62:44:12:ad:7e:e7:f4:94:6f:f2: 80:b0:89:21:c7:b3:be:b0:74:fe:42:cd:ff:30:64: 7b:26:32:3e:e7:47:dd:e2:b1:cb:a8:46:34:1b:27: 77:60:11:d1:c0:23:fd:db:b2:b7:c0:5c:ee:92:f3: 6e:50:c7:74:7a:f2:5e:2f:19:c6:68:23:0c:4c:f9: f7:ab:e8:ac:28:f6:a7:2d:70:2b:4c:3b:4f:dc:aa: f9:d7:b0:2e:01:0b:59:eb:ab:cd:ec:b7:51:77:18: 0c:05:7a:5d:20:b7:9b:a9:4b:42:4d:a7:05:b1:4b: b2:cb:a5:80:f2:31:64:7c:37:3c:f2:90:ff:d3:bf: 45:44:86:0b:60:d2:f0:19:3a:55:64:09:81:25:5a: c4:0d:95:54:98:c9:e7:1e:c6:07:06:73:a7:ee:3d: 9d:72:f8:7b:a9:97:26:84:5a:2e:c3:04:7c:7b:6b: 36:ff:45:76:6f:bc:35:77:8c:f8:e9:7d:b7:fc:7d: 3c:3c:b9:eb:8c:db:9b:d4:b0:38:1b:a4:a9:01:a8: 57:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:06:5D:18:16:1A:0C:86:A6:DE:32:7F:54:D6:AB:7D:24:E8:3D:AA X509v3 Authority Key Identifier: keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/84FDF6D0AABA11EABB84756CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.90.24.0/22 203.90.29.0/24 IPv6: 2406:ca00:1::-2406:ca00:3:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 06:9f:da:2f:e2:77:8d:43:53:14:5b:3c:e1:9c:e1:20:42:fe: ca:92:c3:f1:9a:22:79:40:63:81:d7:34:67:db:fe:ee:b1:68: a1:c2:b0:17:d1:73:1b:ad:e5:46:91:41:60:91:ad:eb:53:aa: 46:25:7e:fc:40:df:9f:18:99:23:23:61:d2:fd:c2:ca:51:b3: 9f:2d:a3:cc:16:19:54:56:6c:b8:8e:0f:c4:7d:49:2e:a3:b0: c5:12:6b:8c:7d:74:49:1d:47:b2:ac:7a:4d:7f:03:f3:fd:4c: e9:81:de:e2:37:02:5d:28:c1:db:39:3c:eb:59:18:f6:c9:17: 35:d7:e9:1c:ea:5b:5d:12:7b:e3:fb:64:63:fb:38:bf:1c:12: 22:5d:31:75:a8:e5:80:4b:f0:f2:77:63:35:6b:7b:80:b9:4c: 0a:6a:13:a2:04:7d:a4:46:95:87:36:1d:7a:03:b3:eb:f3:c1: 5d:02:9f:cb:cb:1f:e8:ea:c4:d0:7e:81:ca:82:d2:7b:fc:2a: 13:ee:b5:7c:90:f3:99:15:93:88:2d:b4:b6:94:da:92:a4:06: ce:82:d4:80:84:af:91:79:5a:45:78:fc:29:b2:ae:a7:32:03: b6:49:05:af:0e:14:6b:92:57:2a:78:f4:e2:bd:1c:18:d6:ba: 56:25:73:c1 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICCA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2RDYxMTAvBgNVBAUTKEFFMDBDMUEyQzAzNDJBNzE1MjgzNTQ0RUQ2NUI0NjE4 NjU4MkYyNkMwHhcNMjQwMjIxMDQ0NzMxWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ1ODA2My1mYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkjxkdQXPvUNZhf4QdhhmtI2yyU03vL9TUuMZwcE0sjAHa7GJprYv4arMa7K JTSObmJEEq1+5/SUb/KAsIkhx7O+sHT+Qs3/MGR7JjI+50fd4rHLqEY0Gyd3YBHR wCP927K3wFzukvNuUMd0evJeLxnGaCMMTPn3q+isKPanLXArTDtP3Kr517AuAQtZ 66vN7LdRdxgMBXpdILebqUtCTacFsUuyy6WA8jFkfDc88pD/079FRIYLYNLwGTpV ZAmBJVrEDZVUmMnnHsYHBnOn7j2dcvh7qZcmhFouwwR8e2s2/0V2b7w1d4z46X23 /H08PLnrjNub1LA4G6SpAahX5wIDAQABo4ICtzCCArMwHQYDVR0OBBYEFJsGXRgW GgyGpt4yf1TWq30k6D2qMB8GA1UdIwQYMBaAFK4AwaLANCpxUoNUTtZbRhhlgvJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjZENi85QTU2Q0MyRUFB QjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtuRlNnMVJPMWx0R0dHV0M4 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnREJvc0EwS25GU2cxUk8xbHRHR0dXQzhtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODY2RDYvOUE1NkNDMkVBQUI5MTFFQTk0RDY4MTZCQzRGOUFFMDIvODRGREY2RDBB QUJBMTFFQUJCODQ3NTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMBIEAgABMAwDBALLWhgDBADLWh0wGgQCAAIwFDASAwcAJAbKAAABAwcCJAbK AAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAGn9ov4neNQ1MUWzzhnOEgQv7KksPxmiJ5 QGOB1zRn2/7usWihwrAX0XMbreVGkUFgka3rU6pGJX78QN+fGJkjI2HS/cLKUbOf LaPMFhlUVmy4jg/EfUkuo7DFEmuMfXRJHUeyrHpNfwPz/Uzpgd7iNwJdKMHbOTzr WRj2yRc11+kc6ltdEnvj+2Rj+zi/HBIiXTF1qOWAS/Dyd2M1a3uAuUwKahOiBH2k RpWHNh16A7Pr88FdAp/Lyx/o6sTQfoHKgtJ7/CoT7rV8kPOZFZOILbS2lNqSpAbO gtSAhK+ReVpFePwpsq6nMgO2SQWvDhRrklcqePTivRwY1rpWJXPB -----END CERTIFICATE-----Generated at Fri May 31 23:53:07 2024 by rpki-client on console-fra.rpki-client.org