$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1ACED69481C311ECA399B842C4F9AE02.roa File: 1ACED69481C311ECA399B842C4F9AE02.roa (raw, json) Hash identifier: r2Hb/UqD5pmyQy7TRsBROP5SA9uVdOaaIbgMPTbiWBE= Subject key identifier: A3:B8:FC:25:5E:70:A8:88:05:4C:F5:52:5C:2A:B2:A5:58:70:07:D7 Certificate issuer: /CN=A91A4F53/serialNumber=D413CDEBD5229263D18F403F4421785255546CC4 Certificate serial: 02CC Authority key identifier: D4:13:CD:EB:D5:22:92:63:D1:8F:40:3F:44:21:78:52:55:54:6C:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1ACED69481C311ECA399B842C4F9AE02.roa Signing time: Sun 03 Dec 2023 02:34:09 +0000 ROA not before: Sun 03 Dec 2023 02:34:09 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 133099 IP address blocks: 103.173.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.crl rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4F53/serialNumber=D413CDEBD5229263D18F403F4421785255546CC4 Validity Not Before: Dec 3 02:34:09 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=656be921-c1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:06:ca:a1:c5:70:21:0d:c6:7c:9b:58:56:14: 1b:d0:cb:48:9f:db:7b:59:4d:7b:01:52:67:58:5b: 60:74:10:5c:60:4d:c9:5e:22:3e:bf:e4:78:cb:6e: c3:f2:2e:2d:84:fd:84:00:fd:ea:d6:dc:52:15:64: a6:f4:f0:88:9c:72:5c:9e:7b:5a:54:7c:24:e3:4e: 66:27:6d:24:8e:71:aa:03:48:20:e9:d4:ff:01:0a: 35:b2:5e:8e:02:28:f8:04:0d:d8:85:83:95:d6:83: a2:2c:1c:41:c6:f5:73:76:07:fc:16:25:29:45:2b: 24:41:01:a0:95:85:18:db:2b:6b:9b:1b:b9:f2:fc: 7a:de:6a:d5:45:00:bf:10:49:e0:77:3e:37:a3:60: 26:c7:ee:1b:f6:fd:34:d7:66:3a:53:93:3b:5d:7c: 4e:4d:62:24:a1:43:82:7d:aa:d3:98:ec:52:e5:e8: b7:e4:e8:9d:e1:f4:38:6a:ef:b9:67:d4:ba:b7:6a: a2:44:c9:42:ce:82:29:4f:92:93:cd:ba:61:ff:ff: 2e:19:30:b9:a1:ac:b6:94:93:1e:c1:05:f6:5b:b2: 12:d7:f7:ca:db:64:e7:46:73:0f:68:93:a5:25:96: 49:23:84:6a:65:1c:f0:e9:28:74:62:d7:82:82:43: ab:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B8:FC:25:5E:70:A8:88:05:4C:F5:52:5C:2A:B2:A5:58:70:07:D7 X509v3 Authority Key Identifier: keyid:D4:13:CD:EB:D5:22:92:63:D1:8F:40:3F:44:21:78:52:55:54:6C:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1ACED69481C311ECA399B842C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.36.0/23 Signature Algorithm: sha256WithRSAEncryption d2:be:cc:ae:07:3c:c1:36:93:f4:70:12:44:6b:fa:bf:94:28: 40:ff:81:87:91:85:a3:38:34:ea:ee:63:cb:46:f5:93:f9:f1: cd:ca:f1:93:c4:5d:7b:6b:ab:0a:8f:08:61:fa:aa:64:d0:ee: b3:8e:9f:d1:ab:36:56:79:a4:65:a2:09:0c:4d:60:83:e7:ec: d9:91:8d:05:d2:f4:60:52:c0:c4:54:67:af:de:65:de:43:41: f8:4f:50:39:a8:5c:d6:e5:30:c1:33:da:dc:40:5e:2d:11:a6: 02:21:ff:a7:7b:7f:1f:17:86:97:c7:8c:e4:56:f2:b2:6d:89: 80:b2:42:4d:05:bd:10:1d:04:56:5d:06:6c:07:7b:f8:97:6e: 4a:95:bf:3b:cb:88:23:53:70:e7:6d:9f:6e:7f:50:52:18:ed: 47:03:36:49:4d:45:c8:23:0e:51:52:a2:dc:ae:20:64:a5:83: ac:42:bd:e3:d9:a3:18:e9:c0:f8:7f:4b:cb:c3:fa:8d:91:ba: 38:2c:8b:e6:84:fb:6c:84:c1:a9:68:d4:56:29:a7:f7:77:c1: 53:56:11:a8:57:65:3b:4f:de:87:0e:34:4e:cf:24:98:ed:1a: 64:3b:15:11:d4:47:14:b2:60:90:4f:d6:ba:76:5e:e3:54:21: 7b:1f:24:e2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRGNTMxMTAvBgNVBAUTKEQ0MTNDREVCRDUyMjkyNjNEMThGNDAzRjQ0MjE3ODUy NTU1NDZDQzQwHhcNMjMxMjAzMDIzNDA5WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiZTkyMS1jMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5AbKocVwIQ3GfJtYVhQb0MtIn9t7WU17AVJnWFtgdBBcYE3JXiI+v+R4y27D 8i4thP2EAP3q1txSFWSm9PCInHJcnntaVHwk405mJ20kjnGqA0gg6dT/AQo1sl6O Aij4BA3YhYOV1oOiLBxBxvVzdgf8FiUpRSskQQGglYUY2ytrmxu58vx63mrVRQC/ EEngdz43o2Amx+4b9v0012Y6U5M7XXxOTWIkoUOCfarTmOxS5ei35Oid4fQ4au+5 Z9S6t2qiRMlCzoIpT5KTzbph//8uGTC5oay2lJMewQX2W7IS1/fK22TnRnMPaJOl JZZJI4RqZRzw6Sh0YteCgkOraQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKO4/CVe cKiIBUz1UlwqsqVYcAfXMB8GA1UdIwQYMBaAFNQTzevVIpJj0Y9AP0QheFJVVGzE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEY1My81QjJCQzdEQTgx QzExMUVDQUI3QzlBNDJDNEY5QUUwMi8xQlBONjlVaWttUFJqMEFfUkNGNFVsVlVi TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFCUE42OVVpa21QUmowQV9SQ0Y0VWxWVWJNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRGNTMvNUIyQkM3REE4MUMxMTFFQ0FCN0M5QTQyQzRGOUFFMDIvMUFDRUQ2OTQ4 MUMzMTFFQ0EzOTlCODQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrSQwDQYJKoZIhvcNAQELBQADggEBANK+zK4HPME2k/Rw EkRr+r+UKED/gYeRhaM4NOruY8tG9ZP58c3K8ZPEXXtrqwqPCGH6qmTQ7rOOn9Gr NlZ5pGWiCQxNYIPn7NmRjQXS9GBSwMRUZ6/eZd5DQfhPUDmoXNblMMEz2txAXi0R pgIh/6d7fx8XhpfHjORW8rJtiYCyQk0FvRAdBFZdBmwHe/iXbkqVvzvLiCNTcOdt n25/UFIY7UcDNklNRcgjDlFSotyuIGSlg6xCvePZoxjpwPh/S8vD+o2Rujgsi+aE +2yEwalo1FYpp/d3wVNWEahXZTtP3ocONE7PJJjtGmQ7FRHURxSyYJBP1rp2XuNU IXsfJOI= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:43 2024 by rpki-client on console-fra.rpki-client.org