$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/E57A64AA165C11EABB13924AC4F9AE02.roa File: E57A64AA165C11EABB13924AC4F9AE02.roa (raw, json) Hash identifier: fE+xNdMDYb/0HGjeyvMRDc1oxL2XxvnI8RrngGcNbSU= Subject key identifier: 76:48:5A:13:1C:70:8C:90:08:36:18:21:87:3E:B5:B7:9A:39:52:A7 Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 21D1 Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/E57A64AA165C11EABB13924AC4F9AE02.roa Signing time: Sun 31 Dec 2023 16:13:16 +0000 ROA not before: Sun 31 Dec 2023 16:13:16 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 40654 IP address blocks: 103.241.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8657 (0x21d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Dec 31 16:13:16 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6591931b-9f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:1f:56:a1:45:12:21:7a:16:32:02:ca:e8: 19:27:6a:c2:85:de:3b:dc:83:38:9b:20:e8:e4:7c: 73:8d:9a:50:a8:82:23:73:40:e8:fc:7c:59:f3:98: 71:81:d1:0f:9f:04:8a:d4:03:13:bb:7b:f3:55:3f: 09:5d:17:7b:32:8d:22:be:d7:14:b4:a8:92:d7:e9: 83:29:d0:dc:50:a2:f9:76:82:12:91:48:b4:b4:2e: 22:4b:ca:da:b1:c6:f7:fa:49:96:c1:50:44:34:16: 8e:0e:49:93:6a:49:1a:5e:7b:06:99:da:c0:39:6b: 96:d0:29:36:e6:6c:47:dd:ba:cd:85:ca:db:92:13: f9:31:20:36:f7:76:bc:06:e5:8e:37:de:90:6c:1f: f4:51:cb:10:ca:f3:99:de:7d:e5:03:f6:23:57:ac: 9c:45:bb:71:2e:25:41:36:9d:4c:bb:cb:48:0c:50: fa:1c:26:e1:b4:e3:9d:4b:7c:55:df:96:a2:d4:0f: b8:9f:3c:12:36:67:ad:af:0e:32:5b:0e:60:12:2f: 77:df:3c:5e:64:9d:c3:55:58:a9:79:c9:81:15:cf: e9:c9:10:21:07:16:1f:5e:19:fa:5d:32:26:f7:67: 31:46:07:09:e4:c0:ee:bf:9b:52:1f:eb:31:a8:72: 7b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:48:5A:13:1C:70:8C:90:08:36:18:21:87:3E:B5:B7:9A:39:52:A7 X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/E57A64AA165C11EABB13924AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.241.212.0/22 Signature Algorithm: sha256WithRSAEncryption b2:91:99:21:6b:0f:da:c3:a9:36:bc:df:db:30:fe:df:a1:7a: 9e:e5:e0:df:95:5d:4d:bf:77:4f:b6:95:0d:81:c8:d6:45:d8: ce:d7:cc:5b:c9:78:36:b4:fa:00:04:cf:2a:a2:61:06:5a:34: 04:ab:0d:44:6d:20:1c:49:9c:5b:bf:9f:ff:98:6d:d5:76:7a: fc:b9:ff:f0:dc:62:72:52:74:8f:a1:8a:e7:2f:c7:1d:4d:9a: 0b:72:af:b5:84:fc:87:76:61:da:b7:12:78:9f:29:0f:cc:5e: c6:dc:d9:bb:b3:91:9c:70:70:ff:2c:0b:6e:f5:8d:fe:00:77: 85:1c:45:48:87:bc:c5:43:a6:2e:9f:08:17:38:97:89:7f:0d: a1:6a:c3:72:4e:13:bb:f6:05:5d:68:cb:4f:55:b5:0c:89:64: a3:49:bc:95:40:c3:de:9a:c0:30:8c:84:e0:b4:24:fb:16:96: 76:ce:43:c7:ab:78:84:d1:b6:69:6e:ba:51:3e:b2:08:db:b9: cb:11:e5:b4:19:9f:71:ef:b9:c2:e4:b7:21:d5:4a:6e:a0:ab: 49:53:4d:76:e5:21:a9:74:4e:f5:6f:d8:1b:62:26:7f:ef:f6: 08:c0:cd:41:14:30:e8:e6:34:2d:02:f2:7e:08:0d:a5:c6:62: f5:8e:67:e6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjMxMjMxMTYxMzE2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTkxOTMxYi05ZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyT8fVqFFEiF6FjICyugZJ2rChd473IM4myDo5HxzjZpQqIIjc0Do/HxZ85hx gdEPnwSK1AMTu3vzVT8JXRd7Mo0ivtcUtKiS1+mDKdDcUKL5doISkUi0tC4iS8ra scb3+kmWwVBENBaODkmTakkaXnsGmdrAOWuW0Ck25mxH3brNhcrbkhP5MSA293a8 BuWON96QbB/0UcsQyvOZ3n3lA/YjV6ycRbtxLiVBNp1Mu8tIDFD6HCbhtOOdS3xV 35ai1A+4nzwSNmetrw4yWw5gEi933zxeZJ3DVVipecmBFc/pyRAhBxYfXhn6XTIm 92cxRgcJ5MDuv5tSH+sxqHJ7bwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHZIWhMc cIyQCDYYIYc+tbeaOVKnMB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzI2NjMvQjhBRUYxMzhBOTRDMTFFNTgyOTFDQTY3QzRGOUFFMDIvRTU3QTY0QUEx NjVDMTFFQUJCMTM5MjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn8dQwDQYJKoZIhvcNAQELBQADggEBALKRmSFrD9rDqTa8 39sw/t+hep7l4N+VXU2/d0+2lQ2ByNZF2M7XzFvJeDa0+gAEzyqiYQZaNASrDURt IBxJnFu/n/+YbdV2evy5//DcYnJSdI+hiucvxx1Nmgtyr7WE/Id2Ydq3EnifKQ/M Xsbc2buzkZxwcP8sC271jf4Ad4UcRUiHvMVDpi6fCBc4l4l/DaFqw3JOE7v2BV1o y09VtQyJZKNJvJVAw96awDCMhOC0JPsWlnbOQ8ereITRtmluulE+sgjbucsR5bQZ n3HvucLktyHVSm6gq0lTTXblIal0TvVv2BtiJn/v9gjAzUEUMOjmNC0C8n4IDaXG YvWOZ+Y= -----END CERTIFICATE-----Generated at Fri May 31 20:34:15 2024 by rpki-client on console-ams.rpki-client.org