$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/01B2AC1E064111E8A62EF586C4F9AE02.roa File: 01B2AC1E064111E8A62EF586C4F9AE02.roa (raw, json) Hash identifier: rgg5mb9NaJrKC43B9kmiIIRXNUmpRJVP8cl+RRNBMZM= Subject key identifier: FC:83:4C:FF:39:8C:16:7F:1B:D4:65:6C:DE:89:52:73:CF:44:77:22 Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Certificate serial: 15EC Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/01B2AC1E064111E8A62EF586C4F9AE02.roa Signing time: Fri 28 Jun 2024 17:16:42 +0000 ROA not before: Fri 28 Jun 2024 17:16:42 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 9834 IP address blocks: 103.88.104.0/22 maxlen: 24 122.252.184.0/21 maxlen: 24 202.21.128.0/24 maxlen: 24 202.162.72.0/23 maxlen: 24 203.57.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5612 (0x15ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Validity Not Before: Jun 28 17:16:42 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667eeffa-e5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:f6:39:5c:dd:9a:af:48:d0:8d:05:df:1f: 3e:c5:9f:e2:ef:75:9b:aa:ba:e3:2a:8f:c0:06:b4: 35:f9:73:95:57:49:43:33:9b:ab:10:89:c0:95:90: d4:17:a9:10:71:1a:e4:94:68:64:d4:b9:d7:1f:70: 92:e9:f5:c7:e9:28:01:b7:2f:23:85:13:8a:51:0c: 85:d6:58:a6:50:75:3a:aa:fe:9b:58:49:45:a0:99: 8c:9a:3d:93:77:80:15:1f:2b:96:d9:6f:f0:40:cb: 73:5e:9d:f5:67:4f:8c:cb:8c:bd:6b:cf:fb:a5:4b: a1:69:f6:45:aa:25:88:91:2a:68:09:e7:dd:f5:36: 7d:e5:43:02:ad:b1:70:b1:d6:31:d7:6f:7a:b1:33: a3:99:a0:db:a3:ec:f4:60:0d:18:d8:71:27:90:33: 2a:aa:94:72:8b:ce:86:1e:c2:e8:23:01:e7:9f:d0: a0:61:49:e9:7e:51:c2:e6:aa:59:18:2a:9d:5f:a8: bd:25:aa:9d:34:25:b0:19:ff:03:ff:78:91:b0:e5: 2d:51:6d:75:3b:8e:3e:65:ed:6c:b4:b8:8f:36:d8: a3:a5:da:51:23:a3:4f:b1:8c:f9:d6:d3:36:bb:3d: 10:a9:c4:4d:47:dd:c4:16:1c:57:24:7a:41:fa:30: ef:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:83:4C:FF:39:8C:16:7F:1B:D4:65:6C:DE:89:52:73:CF:44:77:22 X509v3 Authority Key Identifier: keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/01B2AC1E064111E8A62EF586C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.88.104.0/22 122.252.184.0/21 202.21.128.0/24 202.162.72.0/23 203.57.145.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:db:10:2d:07:b5:40:08:ea:d3:55:6e:3a:a5:b1:93:66:12: 1d:db:00:1e:cb:ae:87:bd:63:73:0f:06:31:3c:57:88:d0:f8: 09:38:1d:40:fa:ff:83:3b:69:49:fe:21:fb:84:b2:4c:f9:68: 79:21:6b:12:11:6a:a7:b1:93:43:8f:d6:23:da:5a:05:7d:c8: 3a:73:9b:22:bb:7a:8d:f5:55:f5:3c:ca:ee:e1:49:cf:1c:75: b3:d1:32:1f:cb:02:8d:20:59:7d:39:a4:b4:f5:f0:4d:fc:a3: 64:a9:63:93:87:f3:e2:c5:7b:e3:22:3b:36:43:15:39:18:93: a0:50:e9:50:11:76:84:a5:8a:b5:77:8d:4e:3c:fb:22:f1:0a: 6c:cb:25:19:40:90:90:58:b3:86:af:e9:ff:fc:9d:9e:38:36: 8e:ae:7c:d1:19:62:86:a8:5b:f4:56:5f:ad:d3:8b:33:f2:0c: 68:ea:ca:89:49:66:3f:16:30:29:d0:b8:4f:89:40:29:ad:b9: 4d:e9:31:e4:e0:ab:8f:aa:7d:fb:c6:df:11:3d:fc:a8:9f:ec: 57:ee:f5:79:8e:c1:a7:98:01:dd:e6:f1:6c:1f:2b:55:24:78: 5f:6d:a8:54:7a:d9:88:85:15:53:d3:67:fd:3d:94:6e:8a:bf: ed:9e:8d:b7 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICFewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM1RUExMTAvBgNVBAUTKEZEN0M0ODExQzg3QzU2NkVGNTVFREFCMEU3NDNGRjA2 NkI5RkE4NjYwHhcNMjQwNjI4MTcxNjQyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdlZWZmYS1lNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuen2OVzdmq9I0I0F3x8+xZ/i73WbqrrjKo/ABrQ1+XOVV0lDM5urEInAlZDU F6kQcRrklGhk1LnXH3CS6fXH6SgBty8jhROKUQyF1limUHU6qv6bWElFoJmMmj2T d4AVHyuW2W/wQMtzXp31Z0+My4y9a8/7pUuhafZFqiWIkSpoCefd9TZ95UMCrbFw sdYx1296sTOjmaDbo+z0YA0Y2HEnkDMqqpRyi86GHsLoIwHnn9CgYUnpflHC5qpZ GCqdX6i9JaqdNCWwGf8D/3iRsOUtUW11O44+Ze1stLiPNtijpdpRI6NPsYz51tM2 uz0QqcRNR93EFhxXJHpB+jDvHQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPyDTP85 jBZ/G9RlbN6JUnPPRHciMB8GA1UdIwQYMBaAFP18SBHIfFZu9V7asOdD/wZrn6hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzVFQS8xOURENDY3MDAw QUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZtNzFYdHF3NTBQX0JtdWZx R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YeElFY2g4Vm03MVh0cXc1MFBfQm11ZnFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTM1RUEvMTlERDQ2NzAwMEFFMTFFOEJDM0ExRjJGQzRGOUFFMDIvMDFCMkFDMUUw NjQxMTFFOEE2MkVGNTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAJnWGgDBAN6/LgDBADKFYADBAHKokgDBADLOZEwDQYJKoZI hvcNAQELBQADggEBAHvbEC0HtUAI6tNVbjqlsZNmEh3bAB7Lroe9Y3MPBjE8V4jQ +Ak4HUD6/4M7aUn+IfuEskz5aHkhaxIRaqexk0OP1iPaWgV9yDpzmyK7eo31VfU8 yu7hSc8cdbPRMh/LAo0gWX05pLT18E38o2SpY5OH8+LFe+MiOzZDFTkYk6BQ6VAR doSlirV3jU48+yLxCmzLJRlAkJBYs4av6f/8nZ44No6ufNEZYoaoW/RWX63TizPy DGjqyolJZj8WMCnQuE+JQCmtuU3pMeTgq4+qffvG3xE9/Kif7Ffu9XmOwaeYAd3m 8WwfK1UkeF9tqFR62YiFFVPTZ/09lG6Kv+2ejbc= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:08 2024 by rpki-client on console-ams.rpki-client.org