$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/53F2219C3FFE11EE864C8A4CC4F9AE02.roa File: 53F2219C3FFE11EE864C8A4CC4F9AE02.roa (raw, json) Hash identifier: 4nYOg8Rn9QohcgSqIyIFdQgJoL/+yUzbG/kUO5Wm4us= Subject key identifier: 77:B5:E1:03:F8:62:72:F5:08:97:FD:2D:93:72:13:85:D6:BC:24:41 Certificate issuer: /CN=A91A1ABC/serialNumber=21D7B872105481ED82A9E6223B25406BB7522F23 Certificate serial: 1C Authority key identifier: 21:D7:B8:72:10:54:81:ED:82:A9:E6:22:3B:25:40:6B:B7:52:2F:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ide4chBUge2CqeYiOyVAa7dSLyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/53F2219C3FFE11EE864C8A4CC4F9AE02.roa Signing time: Wed 23 Aug 2023 05:24:43 +0000 ROA not before: Wed 23 Aug 2023 05:24:43 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 133467 IP address blocks: 103.97.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/Ide4chBUge2CqeYiOyVAa7dSLyM.crl rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/Ide4chBUge2CqeYiOyVAa7dSLyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ide4chBUge2CqeYiOyVAa7dSLyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1ABC/serialNumber=21D7B872105481ED82A9E6223B25406BB7522F23 Validity Not Before: Aug 23 05:24:43 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64e5981b-7881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:db:2f:99:f1:40:a0:cf:c5:af:98:a7:a3: 85:c3:91:98:55:e0:1f:9e:be:e7:e9:dd:08:07:51: 9d:8d:96:75:50:c0:a1:8b:3a:d7:06:fd:2f:17:69: 71:6b:35:48:4a:2c:f6:fe:41:da:bf:17:5f:68:fd: 51:69:f9:6b:e4:c0:3a:79:93:9e:fb:f0:50:1b:2a: 8e:88:e6:b0:04:99:ca:e3:64:85:c0:59:76:a4:ea: 20:42:c4:4b:2b:05:65:47:c0:7e:f7:4e:03:fc:a2: 00:ab:b6:e9:db:d5:02:65:11:de:d1:9e:e7:a9:30: af:48:17:4a:a7:43:c0:62:f7:59:14:c2:70:a2:be: 01:bc:24:0a:3b:a0:ab:0d:0a:f7:76:5d:d3:75:8a: f2:97:33:3e:6b:64:2d:71:a2:a0:ac:08:b4:6b:4c: bb:1f:af:09:d4:90:56:a6:29:e4:59:32:f4:91:7c: 04:22:54:04:6d:35:ed:73:bf:7b:97:df:81:bf:8d: c8:56:9c:34:f0:f7:01:e9:3f:7b:6c:de:98:2a:3b: c7:ef:2c:07:0c:15:7a:93:e3:58:b4:77:88:6d:46: 10:61:cc:0a:93:38:03:ab:b8:9c:16:c8:5b:61:86: ad:2a:30:cf:76:e6:b0:73:82:0a:6f:fc:e5:2e:24: 5c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B5:E1:03:F8:62:72:F5:08:97:FD:2D:93:72:13:85:D6:BC:24:41 X509v3 Authority Key Identifier: keyid:21:D7:B8:72:10:54:81:ED:82:A9:E6:22:3B:25:40:6B:B7:52:2F:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/Ide4chBUge2CqeYiOyVAa7dSLyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ide4chBUge2CqeYiOyVAa7dSLyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/53F2219C3FFE11EE864C8A4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.156.0/22 Signature Algorithm: sha256WithRSAEncryption 04:9c:31:49:52:f1:a5:27:cd:27:32:8c:6d:77:c6:1e:7e:6f: c4:07:5e:ad:65:ec:60:d5:38:19:10:95:60:61:31:45:4f:b5: ff:ca:35:e7:02:df:bc:14:11:8c:bf:b3:38:1e:4f:09:26:ad: 4c:ea:d4:81:c9:9f:6b:a0:4c:25:68:b4:28:32:80:f8:48:e3: 9b:84:c4:07:3d:87:d0:9f:9a:c8:1b:33:2d:f6:42:a1:b4:e0: e8:1b:38:ca:31:a0:66:7d:c7:ae:06:16:25:3e:24:0e:ab:24: 23:0d:ba:a6:ff:c9:46:f7:d5:45:8b:67:ea:e6:98:0d:50:a2: 28:1e:00:4f:15:bd:7f:6c:ee:7b:5a:f5:1b:bc:27:4a:f4:78: 18:e6:1b:d2:40:c1:02:8f:cf:16:fc:b2:35:c9:42:a5:e6:f1: d4:cb:be:b5:bc:db:92:98:77:85:f9:cc:71:dc:f0:aa:b8:c7: a1:1b:74:f5:47:c5:7b:2f:c4:bf:60:a2:08:95:0a:3f:96:3b: 54:de:e3:b6:6c:2b:16:74:59:43:f6:24:5b:41:f4:d1:4f:c8: 1f:0a:cf:05:0c:55:6b:95:51:46:3d:08:45:a6:e7:94:c7:13: 52:cd:01:d9:02:12:06:fc:54:6d:b5:fb:67:97:b7:2b:24:8f: be:71:ec:98 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MUFCQzExMC8GA1UEBRMoMjFEN0I4NzIxMDU0ODFFRDgyQTlFNjIyM0IyNTQwNkJC NzUyMkYyMzAeFw0yMzA4MjMwNTI0NDNaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0ZTU5ODFiLTc4ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3SNsvmfFAoM/Fr5ino4XDkZhV4B+evufp3QgHUZ2NlnVQwKGLOtcG/S8XaXFr NUhKLPb+Qdq/F19o/VFp+WvkwDp5k5778FAbKo6I5rAEmcrjZIXAWXak6iBCxEsr BWVHwH73TgP8ogCrtunb1QJlEd7RnuepMK9IF0qnQ8Bi91kUwnCivgG8JAo7oKsN Cvd2XdN1ivKXMz5rZC1xoqCsCLRrTLsfrwnUkFamKeRZMvSRfAQiVARtNe1zv3uX 34G/jchWnDTw9wHpP3ts3pgqO8fvLAcMFXqT41i0d4htRhBhzAqTOAOruJwWyFth hq0qMM925rBzggpv/OUuJFyVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUd7XhA/hi cvUIl/0tk3IThda8JEEwHwYDVR0jBBgwFoAUIde4chBUge2CqeYiOyVAa7dSLyMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExQUJDL0UzMEJGNURBMjIy OTExRUU4NDQ0QzYyMUM0RjlBRTAyL0lkZTRjaEJVZ2UyQ3FlWWlPeVZBYTdkU0x5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWRlNGNoQlVnZTJDcWVZaU95VkFhN2RTTHlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUFCQy9FMzBCRjVEQTIyMjkxMUVFODQ0NEM2MjFDNEY5QUUwMi81M0YyMjE5QzNG RkUxMUVFODY0QzhBNENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmdhnDANBgkqhkiG9w0BAQsFAAOCAQEABJwxSVLxpSfNJzKM bXfGHn5vxAderWXsYNU4GRCVYGExRU+1/8o15wLfvBQRjL+zOB5PCSatTOrUgcmf a6BMJWi0KDKA+Ejjm4TEBz2H0J+ayBszLfZCobTg6Bs4yjGgZn3HrgYWJT4kDqsk Iw26pv/JRvfVRYtn6uaYDVCiKB4ATxW9f2zue1r1G7wnSvR4GOYb0kDBAo/PFvyy NclCpebx1Mu+tbzbkph3hfnMcdzwqrjHoRt09UfFey/Ev2CiCJUKP5Y7VN7jtmwr FnRZQ/YkW0H00U/IHwrPBQxVa5VRRj0IRabnlMcTUs0B2QISBvxUbbX7Z5e3KySP vnHsmA== -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:36 2024 by rpki-client on console-fra.rpki-client.org