$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/521FC3D8E74211EE9A78EC6EC4F9AE02.roa File: 521FC3D8E74211EE9A78EC6EC4F9AE02.roa (raw, json) Hash identifier: 5XcitYYfn/BDYPUJL97dbacpyj7WrNOJRovactqO4kE= Subject key identifier: 1B:7B:A3:0E:D8:B4:CC:A6:EE:F9:70:B8:FF:15:14:E4:E7:D1:F6:9B Certificate issuer: /CN=A91AB574/serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Certificate serial: 02 Authority key identifier: EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/521FC3D8E74211EE9A78EC6EC4F9AE02.roa Signing time: Thu 21 Mar 2024 05:17:33 +0000 ROA not before: Thu 21 Mar 2024 05:17:33 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 9449 IP address blocks: 103.197.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB574/serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Validity Not Before: Mar 21 05:17:33 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65fbc2ec-38bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a5:e1:45:0a:c7:99:cf:6c:42:2a:07:6e:e9: 9c:ea:0a:7a:76:ac:b7:fe:9b:49:21:05:b8:96:83: 99:b5:a2:6c:2a:16:32:56:fd:04:af:f4:ab:42:c9: f5:af:fe:7b:c7:f5:23:b5:e6:87:df:49:2f:e8:10: 8b:c6:fe:15:8d:f4:d4:ca:83:52:4f:c7:3c:89:ca: d2:8e:86:7d:bf:ba:99:6b:77:28:3c:03:08:b1:99: 97:1e:ec:92:fa:c7:c2:5e:21:66:a1:b1:b4:4f:a0: e6:c1:9c:eb:43:bd:a5:bb:f2:d8:d7:2a:2e:95:f0: fc:57:96:15:df:af:7f:0b:8c:be:a5:52:08:3a:c7: 2e:87:bf:ab:25:20:ca:42:bc:fe:74:47:4c:69:b9: 3c:7b:67:b4:4b:10:8a:8f:cb:0f:c2:4e:95:70:98: 40:53:9c:55:8e:2f:2e:9f:b3:1f:bf:d8:e7:6a:f7: c5:31:53:c0:f0:9f:0d:2e:f2:97:eb:dd:f5:4c:4b: 02:49:cc:46:a4:1f:b6:b4:4b:08:53:f9:7c:3f:2f: 32:30:1d:75:24:22:6e:a6:f8:f6:1b:60:a8:2d:34: f1:86:b0:a9:c5:3b:3e:79:cd:63:6b:94:7c:c3:3b: 5e:6e:c9:f7:00:99:71:7b:08:90:ab:9a:54:3a:28: 25:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7B:A3:0E:D8:B4:CC:A6:EE:F9:70:B8:FF:15:14:E4:E7:D1:F6:9B X509v3 Authority Key Identifier: keyid:EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/521FC3D8E74211EE9A78EC6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.252.0/23 Signature Algorithm: sha256WithRSAEncryption 44:b1:bd:46:3d:03:ac:bc:59:ef:ee:ee:f1:4b:4e:73:64:79: 95:28:0f:61:64:90:4f:eb:4f:cf:7e:02:e4:60:b1:5b:9c:11: 8f:71:e8:73:a0:74:65:35:c2:75:66:66:d4:51:32:e3:83:1b: 24:84:68:df:1f:b9:e0:3e:60:73:6e:f6:76:38:9c:68:72:93: 95:65:11:69:7b:65:f4:c1:43:b7:58:c3:ab:82:c6:5b:0e:b0: b5:5c:79:2d:81:e3:51:d6:70:06:1d:8c:92:32:a2:b9:a6:60: a7:7f:5a:f1:dd:46:20:f5:70:85:a7:6d:78:12:79:17:d9:9e: 16:05:72:e2:ff:d2:d4:3a:a9:8c:6d:88:58:9d:db:7b:8d:78: 8a:c1:56:c0:d0:35:28:ac:f3:f3:af:7f:86:c3:aa:45:06:02: 4c:3f:13:79:71:73:ae:25:ab:47:3e:f2:aa:5e:b0:88:7a:32: ba:13:11:f8:6b:1f:d8:56:86:a7:78:f5:9b:54:3d:68:d3:69: 93:71:48:76:7a:36:ea:98:a3:ef:2f:99:4b:a8:59:9b:36:2a: 7b:a7:1b:57:f0:e7:21:d3:0b:7b:79:fa:1c:b6:40:e3:27:a9: 37:aa:87:0d:85:1c:65:6d:ab:0d:48:55:19:9e:b9:6e:4e:3b: 7a:ed:a0:fd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjU3NDExMC8GA1UEBRMoRUU1QTBBMEEwRDVFMEY1QzYyOEQxQTcwNUI1QUM2OEZF RjIwQzQ2RjAeFw0yNDAzMjEwNTE3MzNaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZmJjMmVjLTM4YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlpeFFCseZz2xCKgdu6ZzqCnp2rLf+m0khBbiWg5m1omwqFjJW/QSv9KtCyfWv /nvH9SO15offSS/oEIvG/hWN9NTKg1JPxzyJytKOhn2/uplrdyg8AwixmZce7JL6 x8JeIWahsbRPoObBnOtDvaW78tjXKi6V8PxXlhXfr38LjL6lUgg6xy6Hv6slIMpC vP50R0xpuTx7Z7RLEIqPyw/CTpVwmEBTnFWOLy6fsx+/2Odq98UxU8Dwnw0u8pfr 3fVMSwJJzEakH7a0SwhT+Xw/LzIwHXUkIm6m+PYbYKgtNPGGsKnFOz55zWNrlHzD O15uyfcAmXF7CJCrmlQ6KCVTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUG3ujDti0 zKbu+XC4/xUU5OfR9pswHwYDVR0jBBgwFoAU7loKCg1eD1xijRpwW1rGj+8gxG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCNTc0L0YwN0VCQTI2RTc0 MTExRUU5M0U4RkM2REM0RjlBRTAyLzdsb0tDZzFlRDF4aWpScHdXMXJHai04Z3hH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2xvS0NnMWVEMXhpalJwd1cxckdqLThneEc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjU3NC9GMDdFQkEyNkU3NDExMUVFOTNFOEZDNkRDNEY5QUUwMi81MjFGQzNEOEU3 NDIxMUVFOUE3OEVDNkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWfF/DANBgkqhkiG9w0BAQsFAAOCAQEARLG9Rj0DrLxZ7+7u 8UtOc2R5lSgPYWSQT+tPz34C5GCxW5wRj3Hoc6B0ZTXCdWZm1FEy44MbJIRo3x+5 4D5gc272djicaHKTlWURaXtl9MFDt1jDq4LGWw6wtVx5LYHjUdZwBh2MkjKiuaZg p39a8d1GIPVwhadteBJ5F9meFgVy4v/S1DqpjG2IWJ3be414isFWwNA1KKzz869/ hsOqRQYCTD8TeXFzriWrRz7yql6wiHoyuhMR+Gsf2FaGp3j1m1Q9aNNpk3FIdno2 6pij7y+ZS6hZmzYqe6cbV/DnIdMLe3n6HLZA4yepN6qHDYUcZW2rDUhVGZ65bk47 eu2g/Q== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:30 2024 by rpki-client on console-ams.rpki-client.org