$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/4178B83237ED11E99B3C9C4AC4F9AE02.roa File: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (raw, json) Hash identifier: Zx1NZFaobsMkPgZlMNZ8S9A1zmjC7C3D22JCgStrQxA= Subject key identifier: F8:F1:B5:42:CC:CE:8B:5C:7E:54:79:CA:4F:52:A2:1E:76:BA:DE:4C Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 0FF1 Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/4178B83237ED11E99B3C9C4AC4F9AE02.roa Signing time: Fri 08 Nov 2024 17:25:24 +0000 ROA not before: Fri 08 Nov 2024 17:25:24 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 58433 IP address blocks: 103.5.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4081 (0xff1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: Nov 8 17:25:24 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672e4984-25a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:ff:fb:9d:e6:15:d6:bb:0c:54:54:a6:49: ce:86:28:ce:7a:f0:50:0f:35:3a:b3:2f:33:25:46: 0e:58:b4:51:20:35:d9:53:4d:a8:03:48:43:61:cd: 0e:ac:25:fc:a5:42:8d:76:41:4c:20:b7:fb:b8:b4: 0e:79:af:28:cc:6a:df:36:c9:1e:39:f6:a1:0d:c3: c7:16:80:0d:40:01:37:6c:6c:68:30:c7:3c:b0:c6: 43:f0:90:85:50:3e:f2:31:2a:81:a8:21:4a:e7:f6: 51:b9:2e:6c:1b:da:65:1f:7c:a5:4b:01:0c:5c:e7: fe:da:f9:6f:65:b0:5a:3f:eb:a3:44:15:4a:1a:a1: 15:89:1e:8a:86:2d:d3:03:df:18:87:1a:3f:f1:9c: b8:d7:ec:fe:99:48:ed:14:03:45:4f:91:0e:d8:c4: 98:01:e5:22:ed:11:a8:b5:10:a8:32:e7:55:ef:6f: e7:20:93:d7:ce:21:94:8d:02:3c:df:5d:4e:14:fb: 21:37:a3:f7:dd:88:1c:a7:6e:9c:8f:8e:8a:a7:ce: a5:21:55:9d:d6:ca:82:cc:ed:ac:0d:1c:e4:38:48: 2e:00:e0:71:2e:7f:1c:51:e8:19:ad:51:c8:ad:89: 29:07:bc:4d:2d:83:f7:3c:12:ca:29:25:7e:c7:75: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F1:B5:42:CC:CE:8B:5C:7E:54:79:CA:4F:52:A2:1E:76:BA:DE:4C X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/4178B83237ED11E99B3C9C4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.228.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:74:e6:fe:90:9a:68:d4:c7:bf:16:3c:05:4b:3b:80:d0:98: ae:f4:7e:a0:57:ce:85:b9:ed:23:08:3c:e2:83:c5:4d:6b:02: f9:e8:11:be:db:d1:cc:e2:49:46:ac:a1:d0:60:fa:fb:7c:85: d2:87:0c:90:c8:af:77:e3:1f:9b:1a:e9:1b:80:40:f0:97:36: bf:1c:1e:f1:7f:64:b7:77:e4:a0:ea:4c:85:67:9d:a2:0c:ba: f0:67:73:ce:d5:5f:33:66:70:84:4d:19:82:5c:84:4e:c8:e3: b1:90:d2:f6:49:10:8a:43:ec:b4:24:24:48:a3:3b:5d:18:9b: e5:66:20:3d:e0:91:cb:86:23:78:0e:c8:1c:6a:95:7f:c5:a1: 4d:ae:cf:db:c5:94:77:83:33:19:28:40:b2:3c:8f:c5:f1:33: 08:ab:72:2a:1a:e8:1c:f2:9a:ee:d0:cb:45:08:ff:f8:29:17: f3:5b:a2:df:20:7b:e6:a3:61:c8:4c:05:a4:3c:c7:23:de:ed: 29:c1:ed:6d:36:bd:07:fa:ee:3c:3e:0e:9f:ef:0f:46:7b:18: 06:cf:69:80:b5:3a:a7:93:6c:ca:ac:0a:d7:d9:83:31:2e:1a: bf:16:df:70:62:90:78:2a:2d:10:93:15:07:a5:9a:fd:63:5a: a4:8f:77:e4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjQxMTA4MTcyNTI0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJlNDk4NC0yNWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvS//+53mFda7DFRUpknOhijOevBQDzU6sy8zJUYOWLRRIDXZU02oA0hDYc0O rCX8pUKNdkFMILf7uLQOea8ozGrfNskeOfahDcPHFoANQAE3bGxoMMc8sMZD8JCF UD7yMSqBqCFK5/ZRuS5sG9plH3ylSwEMXOf+2vlvZbBaP+ujRBVKGqEViR6Khi3T A98Yhxo/8Zy41+z+mUjtFANFT5EO2MSYAeUi7RGotRCoMudV72/nIJPXziGUjQI8 311OFPshN6P33Ygcp26cj46Kp86lIVWd1sqCzO2sDRzkOEguAOBxLn8cUegZrVHI rYkpB7xNLYP3PBLKKSV+x3USewIDAQABo4IClTCCApEwHQYDVR0OBBYEFPjxtULM zotcflR5yk9Soh52ut5MMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkMxQ0UvMjRGQTYwRTQzN0VDMTFFOUE4NzVFODQ4QzRGOUFFMDIvNDE3OEI4MzIz N0VEMTFFOTlCM0M5QzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnBeQwDQYJKoZIhvcNAQELBQADggEBAH505v6QmmjUx78W PAVLO4DQmK70fqBXzoW57SMIPOKDxU1rAvnoEb7b0cziSUasodBg+vt8hdKHDJDI r3fjH5sa6RuAQPCXNr8cHvF/ZLd35KDqTIVnnaIMuvBnc87VXzNmcIRNGYJchE7I 47GQ0vZJEIpD7LQkJEijO10Ym+VmID3gkcuGI3gOyBxqlX/FoU2uz9vFlHeDMxko QLI8j8XxMwircioa6Bzymu7Qy0UI//gpF/Nbot8ge+ajYchMBaQ8xyPe7SnB7W02 vQf67jw+Dp/vD0Z7GAbPaYC1OqeTbMqsCtfZgzEuGr8W33BikHgqLRCTFQelmv1j WqSPd+Q= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org