$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/B5AE4CBAB4E111EDABDE6465C4F9AE02.roa File: B5AE4CBAB4E111EDABDE6465C4F9AE02.roa (raw, json) Hash identifier: oIRC/aQgJAallAP6T7346kNwrc54H/9fYzZwh6vtxAk= Subject key identifier: 19:09:06:F8:71:E3:EC:F2:DA:9E:EE:52:81:16:45:71:5E:B7:DB:C7 Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: E1 Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/B5AE4CBAB4E111EDABDE6465C4F9AE02.roa Signing time: Fri 19 Jan 2024 05:05:57 +0000 ROA not before: Fri 19 Jan 2024 05:05:57 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 150742 IP address blocks: 103.42.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: Jan 19 05:05:57 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65aa0335-5cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:98:ae:85:11:2d:48:53:6b:ed:5e:4d:9c:97: 80:e1:98:e1:24:0d:b1:64:d0:1b:0d:7c:63:2f:1f: ed:48:fa:86:5b:95:63:d6:84:b2:56:80:27:a7:33: 7c:78:71:86:02:ef:91:69:5c:ce:96:40:f6:65:e6: 93:b6:ef:75:eb:31:56:c5:99:27:80:eb:2d:d1:39: 47:c6:2e:e6:33:51:30:9a:a0:13:2e:cd:c4:ba:e3: 01:96:22:c4:23:cc:1f:8a:ab:36:b1:6c:79:25:03: 4b:46:a9:16:fb:53:24:d8:2c:13:80:0b:16:da:b0: ef:ee:08:b1:52:e4:44:86:da:68:22:ca:b3:bf:de: da:f6:be:20:f8:f4:ee:8a:4d:36:16:13:ba:fb:b5: 46:21:21:f4:3e:b9:50:b6:15:d6:e3:32:a7:84:50: 55:32:8d:4f:11:b8:38:c5:73:72:dd:59:69:fb:64: 39:e9:c2:55:30:ce:9e:6f:f8:bd:8f:90:3b:ec:1b: 16:11:80:eb:69:73:e0:a0:8d:59:85:15:32:29:f6: 8f:52:82:ef:34:d1:50:55:0f:a4:c4:4e:af:fe:01: ec:bd:07:25:d8:46:42:05:0a:af:e4:26:99:cb:bd: 27:58:1d:96:de:fe:79:51:ac:e7:95:75:cf:c0:f1: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:09:06:F8:71:E3:EC:F2:DA:9E:EE:52:81:16:45:71:5E:B7:DB:C7 X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/B5AE4CBAB4E111EDABDE6465C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.229.0/24 Signature Algorithm: sha256WithRSAEncryption a5:66:de:ba:1a:ba:5b:60:0d:b9:97:2e:4d:ce:f7:e0:c2:fd: 9e:c7:b9:1d:78:a0:2d:9a:33:5d:db:e0:d9:09:eb:fb:f4:a9: 87:26:26:2c:21:06:e2:d7:d0:ff:fe:2e:24:11:e7:5d:60:e8: ae:80:ce:63:83:06:fa:ce:26:b5:ce:c1:32:2c:0b:c6:a7:3f: 75:a1:32:a5:d4:80:00:b7:fe:81:4f:4b:5f:aa:da:72:8d:63: d4:29:e3:dd:e9:ac:20:76:51:a6:c4:ed:f0:3a:46:27:be:1e: 78:0b:2a:96:9f:fd:96:22:6e:12:a5:f1:f2:bb:6f:24:a4:e1: 99:5f:e1:6a:41:25:d7:46:3b:0b:94:1a:a6:14:46:49:69:55: ba:b6:40:e9:07:f4:90:0c:e2:30:f8:91:23:4c:8a:c8:9f:e6: 13:a8:10:a7:7f:62:e1:8d:28:33:da:45:bf:9b:d7:24:16:b7: 5e:b5:d6:7e:17:15:78:22:38:ec:70:a3:57:3b:b1:41:ea:ed: 53:fe:8a:47:5f:36:a1:a7:41:ea:94:96:ac:3f:c7:2f:2d:ee: 68:ab:1f:26:1e:64:2d:42:72:db:76:a5:cc:91:44:a3:0a:f1: 5d:3e:04:8f:3f:1f:9d:41:47:ef:78:b9:c1:b2:db:39:1c:68: 5a:0e:79:0f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjQwMTE5MDUwNTU3WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWFhMDMzNS01Y2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpiuhREtSFNr7V5NnJeA4ZjhJA2xZNAbDXxjLx/tSPqGW5Vj1oSyVoAnpzN8 eHGGAu+RaVzOlkD2ZeaTtu916zFWxZkngOst0TlHxi7mM1EwmqATLs3EuuMBliLE I8wfiqs2sWx5JQNLRqkW+1Mk2CwTgAsW2rDv7gixUuREhtpoIsqzv97a9r4g+PTu ik02FhO6+7VGISH0PrlQthXW4zKnhFBVMo1PEbg4xXNy3Vlp+2Q56cJVMM6eb/i9 j5A77BsWEYDraXPgoI1ZhRUyKfaPUoLvNNFQVQ+kxE6v/gHsvQcl2EZCBQqv5CaZ y70nWB2W3v55UaznlXXPwPEqbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBkJBvhx 4+zy2p7uUoEWRXFet9vHMB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThBNTIvRkI3RTRCREU3MEI1MTFFRDkzRjBERDE2QzRGOUFFMDIvQjVBRTRDQkFC NEUxMTFFREFCREU2NDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnKuUwDQYJKoZIhvcNAQELBQADggEBAKVm3roaultgDbmX Lk3O9+DC/Z7HuR14oC2aM13b4NkJ6/v0qYcmJiwhBuLX0P/+LiQR511g6K6AzmOD BvrOJrXOwTIsC8anP3WhMqXUgAC3/oFPS1+q2nKNY9Qp493prCB2UabE7fA6Rie+ HngLKpaf/ZYibhKl8fK7bySk4Zlf4WpBJddGOwuUGqYURklpVbq2QOkH9JAM4jD4 kSNMisif5hOoEKd/YuGNKDPaRb+b1yQWt1611n4XFXgiOOxwo1c7sUHq7VP+ikdf NqGnQeqUlqw/xy8t7mirHyYeZC1Cctt2pcyRRKMK8V0+BI8/H51BR+94ucGy2zkc aFoOeQ8= -----END CERTIFICATE-----Generated at Sat Jun 1 07:09:20 2024 by rpki-client on console-fra.rpki-client.org