$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/81C7EE088DF111EEBAF5601BC4F9AE02.roa File: 81C7EE088DF111EEBAF5601BC4F9AE02.roa (raw, json) Hash identifier: CRI92XbMS3q/rRPmQg3wO3RSp8ZmrhL7Jbxpo/V0XVM= Subject key identifier: 98:3A:39:6B:9F:E1:6C:E6:3F:5B:43:33:15:BF:DE:82:EB:E0:AA:AA Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Certificate serial: 01AC Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/81C7EE088DF111EEBAF5601BC4F9AE02.roa Signing time: Fri 03 May 2024 05:17:40 +0000 ROA not before: Fri 03 May 2024 05:17:39 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 149766 IP address blocks: 103.185.146.0/23 maxlen: 23 103.185.146.0/24 maxlen: 24 103.185.147.0/24 maxlen: 24 2001:df0:9840::/48 maxlen: 48 2401:93e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Validity Not Before: May 3 05:17:39 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66347373-cfc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:b5:0a:1d:e7:67:ad:da:d1:84:c1:e8:c5: 3d:65:72:49:cc:e6:31:3e:0f:a4:2f:7f:24:58:98: 2e:d8:91:e0:8b:be:e7:bc:77:96:40:03:86:03:e3: 53:da:72:aa:fd:ff:4b:41:1b:e4:c4:a4:bd:90:60: 2e:f4:ef:0c:0e:31:e3:34:7e:83:ca:36:ba:92:46: 0c:e6:3c:54:65:b5:36:7c:60:c1:5d:8b:18:24:ba: 9a:4c:12:26:00:d0:3c:f0:8b:4e:1d:51:19:72:82: fc:7e:41:da:fe:58:32:9f:27:34:5b:00:8c:e8:9c: c8:53:63:14:69:f5:3b:1b:c6:19:9e:8d:1a:bb:77: 6b:44:b1:07:7f:cf:2b:39:74:5b:9f:e3:df:18:dd: ad:9f:e3:a8:23:62:7c:68:4e:f0:9b:ee:a3:a9:15: a4:12:dc:e8:68:9b:f2:5f:03:43:e3:74:a2:a4:da: 03:1f:f6:ec:0b:ca:a7:5f:e8:3d:a4:65:36:2f:1a: ca:55:2f:f2:92:0f:1d:0d:57:b0:9a:3a:9e:1f:e9: 52:3a:83:ab:08:d9:1e:f4:73:d8:41:9e:6a:5e:22: 47:72:a2:fc:e0:4a:96:35:dd:20:9e:ca:0c:fe:99: 47:6c:0d:73:c4:a4:f3:69:67:d5:e6:43:9f:ba:97: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3A:39:6B:9F:E1:6C:E6:3F:5B:43:33:15:BF:DE:82:EB:E0:AA:AA X509v3 Authority Key Identifier: keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/81C7EE088DF111EEBAF5601BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.185.146.0/23 IPv6: 2001:df0:9840::/48 2401:93e0::/32 Signature Algorithm: sha256WithRSAEncryption 78:e9:f6:b7:19:0e:e7:04:99:27:bc:f2:08:1a:c4:98:68:fc: bb:de:4d:b8:6c:00:10:88:9f:15:37:76:97:24:01:ed:33:50: 90:95:90:53:cc:65:05:30:38:6f:3d:54:87:4c:82:52:d8:37: 63:e0:58:61:9e:0e:e6:70:48:a9:e1:2c:ce:34:ee:d6:c0:f9: f7:04:f1:92:e0:e2:ec:f9:d8:9e:42:f9:45:f6:10:a0:a4:d8: bd:53:50:9c:d5:91:6f:1d:93:6a:69:9c:19:72:a1:24:c4:d9: 44:24:37:06:28:ed:6b:8e:43:ac:db:44:9d:95:18:39:3f:28: f1:4a:f7:c4:2b:f6:3a:0b:f0:a6:47:2a:78:c6:36:6a:89:85: b6:87:ff:8f:64:79:57:11:09:a4:b3:c9:38:90:15:7e:41:77: 0d:13:99:91:e5:20:cf:df:ee:d6:7b:2e:73:ac:c0:29:31:8b: 55:d0:80:18:d7:1b:ab:ba:23:0e:c4:f5:03:cd:8f:80:d9:3d: 0b:81:87:6d:ab:64:b1:92:2c:78:c9:d3:a6:8d:69:f2:4e:7a: 15:cf:36:ee:63:c1:4f:46:14:90:54:0b:30:fb:a0:1e:54:c7: 94:a8:2d:25:23:a0:50:89:a1:b5:18:4c:d1:7c:57:c1:93:d8: b0:fb:50:69 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx MkU1MTRGQjMwHhcNMjQwNTAzMDUxNzM5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM0NzM3My1jZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9y1Ch3nZ63a0YTB6MU9ZXJJzOYxPg+kL38kWJgu2JHgi77nvHeWQAOGA+NT 2nKq/f9LQRvkxKS9kGAu9O8MDjHjNH6Dyja6kkYM5jxUZbU2fGDBXYsYJLqaTBIm ANA88ItOHVEZcoL8fkHa/lgynyc0WwCM6JzIU2MUafU7G8YZno0au3drRLEHf88r OXRbn+PfGN2tn+OoI2J8aE7wm+6jqRWkEtzoaJvyXwND43SipNoDH/bsC8qnX+g9 pGU2LxrKVS/ykg8dDVewmjqeH+lSOoOrCNke9HPYQZ5qXiJHcqL84EqWNd0gnsoM /plHbA1zxKTzaWfV5kOfupfyjwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJg6OWuf 4WzmP1tDMxW/3oLr4KqqMB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5 NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTNBQjMvMDVFRDk0Q0UxOTRDMTFFREFEMzhGMjJCQzRGOUFFMDIvODFDN0VFMDg4 REYxMTFFRUJBRjU2MDFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBAFnuZIwFgQCAAIwEAMHACABDfCYQAMFACQBk+AwDQYJKoZI hvcNAQELBQADggEBAHjp9rcZDucEmSe88ggaxJho/LveTbhsABCInxU3dpckAe0z UJCVkFPMZQUwOG89VIdMglLYN2PgWGGeDuZwSKnhLM407tbA+fcE8ZLg4uz52J5C +UX2EKCk2L1TUJzVkW8dk2ppnBlyoSTE2UQkNwYo7WuOQ6zbRJ2VGDk/KPFK98Qr 9joL8KZHKnjGNmqJhbaH/49keVcRCaSzyTiQFX5Bdw0TmZHlIM/f7tZ7LnOswCkx i1XQgBjXG6u6Iw7E9QPNj4DZPQuBh22rZLGSLHjJ06aNafJOehXPNu5jwU9GFJBU CzD7oB5Ux5SoLSUjoFCJobUYTNF8V8GT2LD7UGk= -----END CERTIFICATE-----Generated at Sat Jun 1 06:27:37 2024 by rpki-client on console-fra.rpki-client.org