$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/6A04CB5AECED11EE96BA986AC4F9AE02.roa File: 6A04CB5AECED11EE96BA986AC4F9AE02.roa (raw, json) Hash identifier: 1eyVNCv0bYa+oRMSsFepC+g3Hj45qO1N9el05KcjmWs= Subject key identifier: 1F:54:BE:F0:5D:11:67:9F:6F:3D:C9:16:E0:CA:10:C5:0A:7E:B9:50 Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Certificate serial: 07A7 Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/6A04CB5AECED11EE96BA986AC4F9AE02.roa Signing time: Thu 28 Mar 2024 10:24:53 +0000 ROA not before: Thu 28 Mar 2024 10:24:53 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 834 IP address blocks: 103.125.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Validity Not Before: Mar 28 10:24:53 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66054574-09f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7b:6a:72:8e:d7:09:64:e0:f4:7f:ac:6b:d6: fc:82:64:40:02:e0:1e:af:dc:7f:da:c1:d3:3a:b4: c0:0c:3d:45:35:f7:79:dd:b4:6b:66:08:65:b6:20: 86:34:73:c4:3b:77:d0:83:fc:a0:53:cc:b3:7e:d1: 46:14:40:ee:62:2e:22:64:3f:fd:80:5d:db:56:eb: 57:de:07:40:2b:1c:05:20:ba:60:0a:05:85:f9:4b: 68:05:a0:d5:90:5a:5e:5a:79:e4:4e:e8:7c:57:c1: 46:d0:e5:8f:f6:50:26:8f:a5:e3:7c:d3:cd:d9:3b: a9:ea:8b:f7:65:4c:f1:7b:79:fc:a2:41:d2:da:95: cf:b6:4e:7f:1d:91:cb:fc:e6:7f:e8:10:6f:34:11: 6e:77:54:d9:6a:21:79:d7:cf:8a:5f:24:46:d7:0c: 64:0c:a9:b8:37:03:58:15:70:a1:51:ed:38:93:10: 8e:6d:55:bd:44:89:0d:74:56:2f:72:2c:e5:51:e3: fa:ef:d2:dc:e5:59:93:15:99:97:52:a4:c2:30:32: 7e:e3:f4:95:73:99:ea:f5:59:c2:d8:a9:55:93:08: fb:6b:4a:a9:50:80:9c:8c:fc:31:11:0c:cd:a7:b8: 4a:91:31:0d:a9:88:ee:65:9b:13:d2:68:e3:00:b4: 36:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:54:BE:F0:5D:11:67:9F:6F:3D:C9:16:E0:CA:10:C5:0A:7E:B9:50 X509v3 Authority Key Identifier: keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/6A04CB5AECED11EE96BA986AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.125.147.0/24 Signature Algorithm: sha256WithRSAEncryption 42:d8:ec:7d:39:8a:fb:34:d8:9f:4c:fa:df:5e:c9:fb:59:38: d6:b9:17:e7:72:cd:20:b0:b3:d1:d6:e5:61:5a:43:15:20:81: b5:16:b7:81:e4:a7:f7:69:c2:e3:c8:e4:79:76:cf:16:12:fc: b1:24:05:b1:c8:75:ca:60:95:4a:14:fc:61:fe:32:59:ca:ea: c1:40:14:2b:c8:7a:b2:3a:6b:d8:84:80:e8:c5:e2:6b:ff:a8: c0:06:ba:4d:1d:3d:31:ac:eb:4c:d6:08:a2:d8:4f:1e:ee:ab: da:62:1b:26:05:44:d4:06:6b:3e:03:88:85:44:3f:ed:72:10: a2:59:93:50:82:26:ea:e8:4c:e7:3a:d2:ea:c1:cd:a8:80:e8: c0:02:99:e0:5e:ef:2e:47:28:2b:a2:a0:57:d0:f0:9d:61:3b: 9a:d6:5a:b2:bc:b6:0b:3e:0b:8c:0b:96:60:58:2a:5b:79:b2: 98:50:e8:cc:0f:a6:e6:89:89:e2:10:8c:10:12:34:c2:a7:1e: 86:63:6d:2d:42:ea:14:15:cc:8d:46:ae:78:95:8a:bb:24:7e: fc:8b:04:b7:62:98:ce:c2:ec:12:cd:95:75:48:3d:8e:b7:15: dc:b7:05:ea:33:43:83:89:86:a2:61:36:6a:ff:ff:f4:e8:93: c6:db:24:38 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw NTYwMTc0QTIwHhcNMjQwMzI4MTAyNDUzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NjA1NDU3NC0wOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXtqco7XCWTg9H+sa9b8gmRAAuAer9x/2sHTOrTADD1FNfd53bRrZghltiCG NHPEO3fQg/ygU8yzftFGFEDuYi4iZD/9gF3bVutX3gdAKxwFILpgCgWF+UtoBaDV kFpeWnnkTuh8V8FG0OWP9lAmj6XjfNPN2Tup6ov3ZUzxe3n8okHS2pXPtk5/HZHL /OZ/6BBvNBFud1TZaiF518+KXyRG1wxkDKm4NwNYFXChUe04kxCObVW9RIkNdFYv cizlUeP679Lc5VmTFZmXUqTCMDJ+4/SVc5nq9VnC2KlVkwj7a0qpUICcjPwxEQzN p7hKkTENqYjuZZsT0mjjALQ2KQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB9UvvBd EWefbz3JFuDKEMUKfrlQMB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTk4QkUvMTUwRTU3QzZDRjQ5MTFFQTlDQzkzNTNFQzRGOUFFMDIvNkEwNENCNUFF Q0VEMTFFRTk2QkE5ODZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnfZMwDQYJKoZIhvcNAQELBQADggEBAELY7H05ivs02J9M +t9eyftZONa5F+dyzSCws9HW5WFaQxUggbUWt4Hkp/dpwuPI5Hl2zxYS/LEkBbHI dcpglUoU/GH+MlnK6sFAFCvIerI6a9iEgOjF4mv/qMAGuk0dPTGs60zWCKLYTx7u q9piGyYFRNQGaz4DiIVEP+1yEKJZk1CCJuroTOc60urBzaiA6MACmeBe7y5HKCui oFfQ8J1hO5rWWrK8tgs+C4wLlmBYKlt5sphQ6MwPpuaJieIQjBASNMKnHoZjbS1C 6hQVzI1GrniVirskfvyLBLdimM7C7BLNlXVIPY63Fdy3BeozQ4OJhqJhNmr///To k8bbJDg= -----END CERTIFICATE-----Generated at Tue Apr 30 23:40:16 2024 by rpki-client on console-fra.rpki-client.org