$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/278EE7F0F4FD11EB975E376BC4F9AE02.roa File: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (raw, json) Hash identifier: S81M7e3Z5RRA/O/SvI4bJKkG3huHkCrPY93T4QjrDjk= Subject key identifier: B6:B4:73:58:EF:68:F4:8C:67:95:F6:0E:FF:01:D7:9A:AD:F7:EB:A9 Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Certificate serial: 0475 Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/278EE7F0F4FD11EB975E376BC4F9AE02.roa Signing time: Tue 09 Apr 2024 02:04:08 +0000 ROA not before: Tue 09 Apr 2024 02:04:08 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135158 IP address blocks: 103.211.92.0/22 maxlen: 22 160.202.56.0/22 maxlen: 22 160.202.56.0/24 maxlen: 24 160.202.57.0/24 maxlen: 24 160.202.58.0/24 maxlen: 24 2404:8380::/32 maxlen: 32 2404:8380::/36 maxlen: 36 2404:8380:1000::/36 maxlen: 36 2404:8380:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Validity Not Before: Apr 9 02:04:08 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6614a218-2e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ed:a6:94:0d:ff:c1:85:bd:ed:9c:03:77:5f: 79:ce:9b:f5:51:47:3f:08:80:4a:18:22:ba:4e:39: e4:c7:d6:b6:c1:91:74:13:cb:53:4e:a5:33:e6:24: 2d:da:50:9c:7a:3e:4b:eb:b2:db:19:50:b0:3e:3e: 9b:f4:d0:08:51:4d:62:f6:58:5a:ce:89:f5:c1:49: 6c:32:9f:13:e8:c5:51:20:2b:44:f7:98:6b:2b:d6: 22:60:07:fc:07:59:10:15:ee:a2:72:04:56:df:ef: 44:53:38:95:06:ce:cc:28:f0:22:54:5d:99:1b:5e: 41:ce:8c:cd:7c:7d:17:06:2a:de:63:87:da:15:fc: 29:a7:ba:6e:f6:19:02:03:a4:a3:87:c8:3a:1b:e2: cd:ba:11:7c:81:aa:d5:40:90:7e:16:63:cd:c1:8d: a1:1e:c4:4a:6c:45:cc:29:b0:a1:9a:4c:23:3e:90: 3b:d4:1d:d1:e0:f9:57:c3:e5:87:21:ad:a3:1a:4d: 35:e0:c4:f7:5b:cf:e6:8f:fb:d4:99:51:39:5f:8f: 0e:72:ee:c4:70:65:f9:d9:4c:1f:71:e2:3b:d8:7f: ec:85:3d:53:61:fa:13:05:da:d5:7d:2a:bc:52:af: 35:c3:43:c0:0b:26:f0:3d:0c:bf:ec:be:ea:9e:2b: 58:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B4:73:58:EF:68:F4:8C:67:95:F6:0E:FF:01:D7:9A:AD:F7:EB:A9 X509v3 Authority Key Identifier: keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/278EE7F0F4FD11EB975E376BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.211.92.0/22 160.202.56.0/22 IPv6: 2404:8380::/32 Signature Algorithm: sha256WithRSAEncryption 8f:71:12:a9:ff:f5:38:01:69:91:3f:c0:b4:10:42:6c:75:44: b4:04:b6:fc:0b:d7:21:1a:f4:e5:f3:35:13:7f:37:82:e2:49: 2e:e8:04:b6:ba:aa:bf:0a:78:8e:4b:27:83:c8:dc:32:d0:5d: 1d:8f:63:7c:ab:13:15:6f:1a:e0:f3:b3:38:6f:28:8e:c7:2d: 86:ab:d6:52:37:18:40:85:11:9a:8f:e1:ad:93:74:0f:e2:d2: 59:69:b5:9e:62:80:5a:d0:f1:43:4d:cc:f4:93:53:8b:4a:9e: f2:94:66:ba:b4:07:cd:ca:47:c4:a0:bf:93:c9:ae:b1:3c:ac: b5:e6:be:52:e2:85:06:1e:83:b0:67:fe:ff:14:47:3d:fd:57: d5:d1:91:06:05:b2:ca:92:6a:18:93:ce:ce:9d:2a:28:bc:c5: 53:aa:5d:91:94:c1:9c:91:a3:36:bc:bf:35:9c:5c:ec:95:8d: 04:50:88:f5:fb:9e:19:a6:6f:44:89:a2:fe:da:f5:4b:08:d2: 69:ec:d2:32:b8:49:63:41:79:7a:99:64:4f:a2:04:9c:63:64: a4:32:91:73:f1:c2:8c:37:14:d6:e3:77:87:ce:f1:2c:55:52: c6:f8:f7:ce:d6:8f:4d:83:ef:a8:3b:9e:31:d8:8c:93:96:b7: 06:db:0f:d6 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1QzMxMTAvBgNVBAUTKDAxMDgwRTI0MkU0NTA0NjA2NTZGRkZGOUU2QUE0MzJF MUQ0MEUyNUMwHhcNMjQwNDA5MDIwNDA4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE0YTIxOC0yZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0e2mlA3/wYW97ZwDd195zpv1UUc/CIBKGCK6Tjnkx9a2wZF0E8tTTqUz5iQt 2lCcej5L67LbGVCwPj6b9NAIUU1i9lhazon1wUlsMp8T6MVRICtE95hrK9YiYAf8 B1kQFe6icgRW3+9EUziVBs7MKPAiVF2ZG15BzozNfH0XBireY4faFfwpp7pu9hkC A6Sjh8g6G+LNuhF8garVQJB+FmPNwY2hHsRKbEXMKbChmkwjPpA71B3R4PlXw+WH Ia2jGk014MT3W8/mj/vUmVE5X48Ocu7EcGX52UwfceI72H/shT1TYfoTBdrVfSq8 Uq81w0PACybwPQy/7L7qnitY/QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLa0c1jv aPSMZ5X2Dv8B15qt9+upMB8GA1UdIwQYMBaAFAEIDiQuRQRgZW//+eaqQy4dQOJc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVDMy84QTMzRDcyMEY0 RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJHQmxiX181NXFwRExoMUE0 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRZ09KQzVGQkdCbGJfXzU1cXBETGgxQTRsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ1QzMvOEEzM0Q3MjBGNEY5MTFFQjkxMkMyQjIwQzRGOUFFMDIvMjc4RUU3RjBG NEZEMTFFQjk3NUUzNzZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn01wDBAKgyjgwDQQCAAIwBwMFACQEg4AwDQYJKoZIhvcN AQELBQADggEBAI9xEqn/9TgBaZE/wLQQQmx1RLQEtvwL1yEa9OXzNRN/N4LiSS7o BLa6qr8KeI5LJ4PI3DLQXR2PY3yrExVvGuDzszhvKI7HLYar1lI3GECFEZqP4a2T dA/i0llptZ5igFrQ8UNNzPSTU4tKnvKUZrq0B83KR8Sgv5PJrrE8rLXmvlLihQYe g7Bn/v8URz39V9XRkQYFssqSahiTzs6dKii8xVOqXZGUwZyRoza8vzWcXOyVjQRQ iPX7nhmmb0SJov7a9UsI0mns0jK4SWNBeXqZZE+iBJxjZKQykXPxwow3FNbjd4fO 8SxVUsb4987Wj02D76g7njHYjJOWtwbbD9Y= -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:04 2024 by rpki-client on console-fra.rpki-client.org