$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa File: 589FBEDC860311EBAFE18309C4F9AE02.roa (raw, json) Hash identifier: kbf3PCEGhvUXFavU5qFv+aaFLjEOZ7TZ8kHgmg3vUUE= Subject key identifier: 8F:A2:93:60:3B:BB:9A:39:F5:EB:C9:2A:D1:7C:20:AD:4B:E1:19:BF Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Certificate serial: 04FB Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa Signing time: Fri 14 Jul 2023 23:20:01 +0000 ROA not before: Fri 14 Jul 2023 23:20:01 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 55555 IP address blocks: 43.245.28.0/22 maxlen: 24 103.246.96.0/22 maxlen: 24 180.200.244.0/22 maxlen: 24 2400:b100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 00:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1275 (0x4fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Validity Not Before: Jul 14 23:20:01 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64b1d820-ac34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:59:d3:46:04:45:92:d9:78:29:20:b1:9a:fb: 56:45:5a:98:c7:b1:7b:63:c6:64:42:30:92:7a:21: ee:bd:dd:74:6b:c1:e3:02:2f:22:00:6a:28:5f:9e: 1a:13:5f:5b:e9:56:0f:ab:b3:50:f7:77:e4:9f:d5: 73:96:ad:d5:33:d4:ae:59:a1:7c:a6:01:f4:a0:5c: e0:e8:7c:0d:c0:9e:bd:32:6b:96:9c:55:98:dc:d8: 1f:5c:04:03:a1:48:b4:c7:64:75:97:3d:b8:9d:c4: b7:b2:26:70:46:00:67:73:40:0c:80:ec:df:92:2e: a0:af:ef:5a:f1:3c:64:b1:91:81:c9:45:65:a3:6c: b4:74:ff:cc:77:e4:89:36:08:2b:bc:0a:b0:16:d2: a0:98:39:f6:71:42:40:a7:bb:eb:54:e1:96:56:09: 23:2e:f4:bc:d8:59:c3:94:68:ed:85:ef:a0:86:14: 9e:97:2b:eb:45:6b:8b:28:44:d6:b1:33:f2:23:7b: 32:a8:bc:11:50:91:0b:10:21:08:33:1d:ec:a5:7b: bf:9a:06:ac:c9:15:fd:3d:b1:78:1d:1e:95:45:ef: c2:13:89:8f:dd:d2:e4:95:02:94:fd:ad:10:1a:b1: bd:40:13:3b:5d:6d:5b:7b:56:08:9f:fe:62:ba:1e: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A2:93:60:3B:BB:9A:39:F5:EB:C9:2A:D1:7C:20:AD:4B:E1:19:BF X509v3 Authority Key Identifier: keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.28.0/22 103.246.96.0/22 180.200.244.0/22 IPv6: 2400:b100::/32 Signature Algorithm: sha256WithRSAEncryption 2e:91:71:e4:8c:44:6f:57:ed:84:9a:33:d9:de:a3:42:a4:a0: 8a:1e:31:3c:96:41:83:7f:5b:08:92:bf:eb:bb:54:72:88:84: e1:b0:4e:40:70:b0:0e:42:c0:8a:b1:81:48:11:a0:50:4e:47: 25:45:bc:48:4a:e4:7f:fc:2c:16:11:68:7f:08:66:4a:16:1e: 92:1d:9f:5b:ea:c2:dc:52:4d:f3:bf:39:3c:f9:af:69:74:b4: e9:8e:a2:8c:c9:7d:6d:b6:a5:4d:4c:3b:13:f3:de:7f:31:4f: 1c:49:a7:54:4d:d2:53:1a:8a:78:02:50:34:4f:76:73:c5:a3: e1:b2:49:a6:f7:74:4b:d9:d2:5e:7b:f3:b6:ba:1b:cf:ea:f1: f6:32:32:2b:0c:73:55:5c:bf:4c:07:97:b0:26:14:80:c6:a0: 2a:82:e1:ad:f0:e7:2a:19:0d:66:6e:f8:fe:d7:bd:79:25:19: 2f:cc:41:b9:61:1f:04:b3:54:41:1f:64:aa:29:f7:fc:5e:27: cd:55:9b:44:e9:eb:e9:e6:8a:43:11:12:05:a5:fc:3b:62:29: d4:b0:b4:3a:12:16:09:6e:77:2d:e5:3a:28:f5:34:db:f3:8d: 84:e4:e3:7f:69:e8:c9:6d:bb:b4:0a:dd:07:fe:01:bd:d9:d6: 6b:a9:96:0d -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICBPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMzNEQxMTAvBgNVBAUTKDk1MTY5MTgwOTU3NjAwNDRFNzRGQUFBNTQ5N0QwNjcz MEFEQTVGMzIwHhcNMjMwNzE0MjMyMDAxWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGIxZDgyMC1hYzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7VnTRgRFktl4KSCxmvtWRVqYx7F7Y8ZkQjCSeiHuvd10a8HjAi8iAGooX54a E19b6VYPq7NQ93fkn9Vzlq3VM9SuWaF8pgH0oFzg6HwNwJ69MmuWnFWY3NgfXAQD oUi0x2R1lz24ncS3siZwRgBnc0AMgOzfki6gr+9a8TxksZGByUVlo2y0dP/Md+SJ NggrvAqwFtKgmDn2cUJAp7vrVOGWVgkjLvS82FnDlGjthe+ghhSelyvrRWuLKETW sTPyI3syqLwRUJELECEIMx3spXu/mgasyRX9PbF4HR6VRe/CE4mP3dLklQKU/a0Q GrG9QBM7XW1be1YIn/5iuh4pGQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFI+ik2A7 u5o59evJKtF8IK1L4Rm/MB8GA1UdIwQYMBaAFJUWkYCVdgBE50+qpUl9BnMK2l8y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzM0RC8yN0U4NjFEODg1 RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFFVG5UNnFsU1gwR2N3cmFY ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSYVJnSlYyQUVUblQ2cWxTWDBHY3dyYVh6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjMzNEQvMjdFODYxRDg4NUY3MTFFQjkyMDgxNzExQzRGOUFFMDIvNTg5RkJFREM4 NjAzMTFFQkFGRTE4MzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIr9RwDBAJn9mADBAK0yPQwDQQCAAIwBwMFACQAsQAwDQYJ KoZIhvcNAQELBQADggEBAC6RceSMRG9X7YSaM9neo0KkoIoeMTyWQYN/WwiSv+u7 VHKIhOGwTkBwsA5CwIqxgUgRoFBORyVFvEhK5H/8LBYRaH8IZkoWHpIdn1vqwtxS TfO/OTz5r2l0tOmOoozJfW22pU1MOxPz3n8xTxxJp1RN0lMaingCUDRPdnPFo+Gy Sab3dEvZ0l5787a6G8/q8fYyMisMc1Vcv0wHl7AmFIDGoCqC4a3w5yoZDWZu+P7X vXklGS/MQblhHwSzVEEfZKop9/xeJ81Vm0Tp6+nmikMREgWl/DtiKdSwtDoSFglu dy3lOij1NNvzjYTk439p6Mltu7QK3Qf+Ab3Z1muplg0= -----END CERTIFICATE-----Generated at Fri Jun 7 02:21:18 2024 by rpki-client on console-fra.rpki-client.org