$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/5CE70ACC074E11ED99CF6642C4F9AE02.roa File: 5CE70ACC074E11ED99CF6642C4F9AE02.roa (raw, json) Hash identifier: u8H4NSNtBcIg5GrlIWnmn+sl29NyMYEZMtRVlCln8c0= Subject key identifier: 39:BB:73:A6:AB:0D:4A:01:D1:F1:18:F3:42:D9:57:87:F0:4C:9D:96 Certificate issuer: /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448 Certificate serial: 0222 Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/5CE70ACC074E11ED99CF6642C4F9AE02.roa Signing time: Sun 03 Nov 2024 01:34:57 +0000 ROA not before: Sun 03 Nov 2024 01:34:57 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 63843 IP address blocks: 103.41.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448 Validity Not Before: Nov 3 01:34:57 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6726d341-f6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:4e:49:c8:dc:81:bd:29:f1:5f:c2:5c:03: ee:5c:e8:34:23:f2:1d:60:55:b9:91:4d:5b:e8:9d: 9c:2c:8a:02:0f:c5:a2:43:31:ab:f3:83:a9:a2:3d: d9:b4:0c:ec:3f:c8:bb:ad:d9:9f:ce:01:5d:c1:ae: a3:bd:3c:21:0b:52:d3:a3:27:23:6e:97:4f:e3:5f: 3a:36:d1:c6:49:6a:19:60:66:e1:a2:5f:58:df:4e: 2e:32:7a:83:8a:55:0c:0f:9c:e2:17:f4:f0:1f:fc: 0d:9c:fe:e2:60:25:9c:cf:a5:20:fd:b8:36:98:f3: 67:4f:80:fd:01:ec:e0:13:10:76:90:a4:e8:07:64: 99:65:be:d2:e0:f8:b1:09:be:88:62:83:04:38:00: 31:55:9e:7e:aa:57:4d:e9:d5:5b:06:94:88:c6:a6: 18:af:4d:8d:62:ac:45:90:df:e2:80:7f:95:aa:e2: 5b:3c:ae:64:a0:84:c0:15:d8:45:2c:1a:1a:64:31: bf:f3:2b:1f:cf:f8:59:8f:49:62:37:d4:b4:05:3d: 2b:27:6f:ba:c3:7d:1d:bd:38:13:8b:3f:d2:c9:a7: c0:5e:58:f2:47:48:af:99:c9:0e:87:17:f0:d8:0d: b0:9e:36:06:53:27:29:23:83:ef:3f:a9:78:91:e4: 83:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BB:73:A6:AB:0D:4A:01:D1:F1:18:F3:42:D9:57:87:F0:4C:9D:96 X509v3 Authority Key Identifier: keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/5CE70ACC074E11ED99CF6642C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.41.111.0/24 Signature Algorithm: sha256WithRSAEncryption 37:4b:24:87:78:96:c2:40:01:fd:cb:c4:95:d7:0b:0f:b7:74: 6c:f7:16:5a:96:43:7a:e5:29:47:79:49:78:90:68:01:de:eb: 55:c5:52:a7:91:f5:de:a3:f9:af:ec:bd:2b:2a:ba:7c:c2:8d: 01:7b:8d:89:b1:49:2a:68:bc:37:ba:a9:a3:e3:c0:bd:e8:b8: 93:02:65:4b:03:31:ad:49:15:2c:d9:14:e1:2b:a0:1e:ee:f9: eb:4a:60:b5:8a:50:c5:4d:76:02:42:ec:06:4a:37:21:c8:d4: a7:05:ec:0d:20:19:aa:1c:b6:fc:45:77:1a:bd:4f:4f:d4:84: 23:67:f8:31:87:2a:02:f0:ff:07:44:b2:40:79:d0:13:6b:74: e5:32:4c:a8:a6:8b:33:f6:73:7f:b1:1f:a3:7e:c6:96:c6:ee: 4f:3c:44:86:90:0b:cd:44:71:c1:25:51:1a:95:46:3f:5b:af: 2b:e9:5e:9b:30:ae:80:26:62:5a:b0:c4:2a:d5:ad:ab:ca:38: 38:31:9f:46:5e:55:9c:5a:af:5f:64:07:cd:f0:50:ef:08:4e: db:5e:6c:23:60:31:8f:b2:77:8f:4f:da:cf:13:2a:23:3f:7d: d1:67:65:33:63:fd:cf:cf:84:20:52:d0:c0:cf:f7:b1:d4:7a: 33:4e:21:21 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwNDQxMTAvBgNVBAUTKDAyNUFGRTkxOTU0ODIwNDlGMjUwOTNFQjg5ODExNUM2 QkQzNzE0NDgwHhcNMjQxMTAzMDEzNDU3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2ZDM0MS1mNmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPROScjcgb0p8V/CXAPuXOg0I/IdYFW5kU1b6J2cLIoCD8WiQzGr84Opoj3Z tAzsP8i7rdmfzgFdwa6jvTwhC1LToycjbpdP4186NtHGSWoZYGbhol9Y304uMnqD ilUMD5ziF/TwH/wNnP7iYCWcz6Ug/bg2mPNnT4D9AezgExB2kKToB2SZZb7S4Pix Cb6IYoMEOAAxVZ5+qldN6dVbBpSIxqYYr02NYqxFkN/igH+VquJbPK5koITAFdhF LBoaZDG/8ysfz/hZj0liN9S0BT0rJ2+6w30dvTgTiz/SyafAXljyR0ivmckOhxfw 2A2wnjYGUycpI4PvP6l4keSD+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDm7c6ar DUoB0fEY80LZV4fwTJ2WMB8GA1UdIwQYMBaAFAJa/pGVSCBJ8lCT64mBFca9NxRI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTA0NC9BN0M3RTY1QTA3 NEExMUVEOTBBMzU0MTRDNEY5QUUwMi9BbHIta1pWSUlFbnlVSlByaVlFVnhyMDNG RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Fsci1rWlZJSUVueVVKUHJpWUVWeHIwM0ZFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkEwNDQvQTdDN0U2NUEwNzRBMTFFRDkwQTM1NDE0QzRGOUFFMDIvNUNFNzBBQ0Mw NzRFMTFFRDk5Q0Y2NjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnKW8wDQYJKoZIhvcNAQELBQADggEBADdLJId4lsJAAf3L xJXXCw+3dGz3FlqWQ3rlKUd5SXiQaAHe61XFUqeR9d6j+a/svSsqunzCjQF7jYmx SSpovDe6qaPjwL3ouJMCZUsDMa1JFSzZFOEroB7u+etKYLWKUMVNdgJC7AZKNyHI 1KcF7A0gGaoctvxFdxq9T0/UhCNn+DGHKgLw/wdEskB50BNrdOUyTKimizP2c3+x H6N+xpbG7k88RIaQC81EccElURqVRj9bryvpXpswroAmYlqwxCrVravKODgxn0Ze VZxar19kB83wUO8ITttebCNgMY+yd49P2s8TKiM/fdFnZTNj/c/PhCBS0MDP97HU ejNOISE= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:44 2024 by rpki-client on console-fra.rpki-client.org