$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa File: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (raw, json) Hash identifier: UOaxMQztH6OfRmI3k4wAxIdXb76oWhevbZkXsQ8dCZc= Subject key identifier: C3:A8:A6:29:00:68:B5:95:9D:C5:FB:07:CC:36:2E:CA:1D:AE:1B:42 Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Certificate serial: 222E Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa Signing time: Thu 18 Jan 2024 16:43:09 +0000 ROA not before: Thu 18 Jan 2024 16:43:09 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 55943 IP address blocks: 43.249.176.0/22 maxlen: 23 103.4.72.0/22 maxlen: 23 113.197.68.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 16:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8750 (0x222e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Validity Not Before: Jan 18 16:43:09 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65a9551d-2d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:2c:b2:6c:04:31:76:05:16:3b:46:41:ed: 56:ca:1e:85:09:ca:26:83:dc:98:39:ac:17:fa:3b: 8c:61:08:08:4e:7c:01:57:dc:5f:dc:15:be:0e:92: 76:9c:f6:66:97:35:43:41:64:aa:b7:90:b9:bf:76: c6:9c:61:4d:7e:d3:a0:6e:9f:de:b4:dc:e5:4c:b3: e6:73:8c:50:07:ea:f6:a7:4b:bf:1f:1e:d2:0c:10: 27:99:77:7b:a7:43:a9:df:34:81:18:a4:4f:46:cc: 8c:50:ae:d5:6f:cb:a6:89:bc:94:86:32:44:37:d1: f5:62:24:62:42:7b:58:ab:07:65:96:0a:4f:d4:65: aa:5b:69:24:59:cd:18:61:db:65:47:d3:6e:77:81: 3a:08:3b:1b:ca:03:44:65:3a:d5:76:57:86:9a:de: 57:3d:9c:de:fe:e8:83:cc:a6:3e:a4:75:cc:a4:14: 13:60:5a:1c:61:65:83:c6:47:2e:e9:dc:eb:a9:17: 10:80:39:76:6c:34:3c:bb:d8:ae:ae:39:60:84:2c: 2b:1e:36:65:8c:ba:17:57:d1:d4:5e:14:d8:5b:39: 35:27:c0:c9:c0:93:bc:01:f2:ac:b5:94:03:64:a4: bf:d6:a3:de:31:73:e5:a0:97:b3:15:2d:cb:81:41: 07:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A8:A6:29:00:68:B5:95:9D:C5:FB:07:CC:36:2E:CA:1D:AE:1B:42 X509v3 Authority Key Identifier: keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.176.0/22 103.4.72.0/22 113.197.68.0/22 Signature Algorithm: sha256WithRSAEncryption 20:6f:5b:a7:00:f6:fc:0f:e6:7a:2c:a5:71:bf:1f:de:31:7d: dc:da:c1:40:a4:5c:a2:b0:7d:f5:19:19:6c:32:9d:43:d4:f3: 27:92:63:27:f1:22:76:51:4a:89:bb:12:a3:51:14:66:60:6c: 36:da:5b:54:82:46:db:83:09:01:d6:ce:1b:80:cc:ab:80:14: 20:5a:df:de:a7:d0:b8:4e:86:14:fd:e7:a7:f5:7e:28:41:e6: 07:fc:d6:d8:1b:ec:75:1f:a2:2c:55:94:7c:3d:dd:89:ae:85: 0c:67:07:42:4d:71:e4:52:38:52:12:95:79:59:28:25:04:82: d2:82:01:0a:57:ae:f2:58:d4:39:1b:ce:fc:bd:13:c8:6e:49: 81:17:13:43:8c:64:21:9b:ac:82:87:31:ae:08:f8:45:5b:3c: 04:53:7c:8f:c0:a0:1c:67:42:f1:f3:c0:9a:a5:ea:fc:2f:4e: 0c:a9:66:35:10:2e:db:0e:f1:17:ad:65:2f:93:7c:6e:96:19: e7:01:e8:c7:ba:10:df:3c:54:9c:e5:50:ef:f4:9f:6f:c0:3d: 56:37:69:14:fb:2f:0b:d7:6e:d6:50:c2:6c:be:86:39:f1:f7: 84:6b:35:0f:13:eb:d5:4a:6e:fa:43:f9:93:58:bd:2a:6c:9b: c9:05:69:59 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICIi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1 QkQ5NDFFNDAwHhcNMjQwMTE4MTY0MzA5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWE5NTUxZC0yZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwncssmwEMXYFFjtGQe1Wyh6FCcomg9yYOawX+juMYQgITnwBV9xf3BW+DpJ2 nPZmlzVDQWSqt5C5v3bGnGFNftOgbp/etNzlTLPmc4xQB+r2p0u/Hx7SDBAnmXd7 p0Op3zSBGKRPRsyMUK7Vb8umibyUhjJEN9H1YiRiQntYqwdllgpP1GWqW2kkWc0Y YdtlR9Nud4E6CDsbygNEZTrVdleGmt5XPZze/uiDzKY+pHXMpBQTYFocYWWDxkcu 6dzrqRcQgDl2bDQ8u9iurjlghCwrHjZljLoXV9HUXhTYWzk1J8DJwJO8AfKstZQD ZKS/1qPeMXPloJezFS3LgUEH1QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMOopikA aLWVncX7B8w2LsodrhtCMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0 ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURGRDMvMUZEMUE4QkU5NDg2MTFFNUFFMEM4QjcyQzRGOUFFMDIvNjc4REE4RkU1 OUQyMTFFQUI3N0M4QzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIr+bADBAJnBEgDBAJxxUQwDQYJKoZIhvcNAQELBQADggEB ACBvW6cA9vwP5nospXG/H94xfdzawUCkXKKwffUZGWwynUPU8yeSYyfxInZRSom7 EqNRFGZgbDbaW1SCRtuDCQHWzhuAzKuAFCBa396n0LhOhhT956f1fihB5gf81tgb 7HUfoixVlHw93YmuhQxnB0JNceRSOFISlXlZKCUEgtKCAQpXrvJY1Dkbzvy9E8hu SYEXE0OMZCGbrIKHMa4I+EVbPARTfI/AoBxnQvHzwJql6vwvTgypZjUQLtsO8Ret ZS+TfG6WGecB6Me6EN88VJzlUO/0n2/APVY3aRT7LwvXbtZQwmy+hjnx94RrNQ8T 69VKbvpD+ZNYvSpsm8kFaVk= -----END CERTIFICATE-----Generated at Thu Jun 6 18:48:19 2024 by rpki-client on console-fra.rpki-client.org