$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C1CAF6C602B311EAABAF727DC4F9AE02.roa File: C1CAF6C602B311EAABAF727DC4F9AE02.roa (raw, json) Hash identifier: G3Qc6m6Md1/HMosoucJ9nNLXdAyquVgUZsxf+L03AvI= Subject key identifier: AD:64:DA:A8:87:87:DB:2F:E2:32:5A:CD:5A:62:79:5F:AD:F2:9A:62 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0B9C Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C1CAF6C602B311EAABAF727DC4F9AE02.roa Signing time: Thu 16 May 2024 19:28:17 +0000 ROA not before: Thu 16 May 2024 19:28:17 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 139085 IP address blocks: 103.139.132.0/23 maxlen: 23 103.139.132.0/24 maxlen: 24 103.139.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2972 (0xb9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: May 16 19:28:17 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66465e50-dade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:b5:d1:81:83:67:e6:86:4b:03:b0:e3:f6: 12:9a:b4:65:e6:2f:d7:57:7f:ab:e2:37:0d:82:54: 34:a3:ad:4e:7d:08:67:ef:45:c7:59:98:e9:12:0f: e7:3a:ca:aa:58:33:5e:4d:3a:86:45:40:63:45:4b: c4:2f:ab:9c:12:b6:e4:cd:96:ff:9d:46:1e:7d:b4: a7:6a:f2:06:b1:6c:83:04:05:55:bf:2d:2a:95:20: 50:0d:f2:85:2e:26:d4:46:da:16:47:6d:6b:4a:d0: 12:c7:5e:87:5f:10:8e:74:b9:1c:26:c6:ab:50:d4: 40:fc:bf:08:ee:94:be:a8:37:35:5a:b6:42:8f:67: 5d:37:56:fb:ec:8e:65:a1:c5:f0:04:52:d8:73:a4: 39:08:1c:03:87:e2:7b:5a:48:1b:d9:e8:c0:ad:ab: c0:b6:c3:6e:49:25:2b:73:01:07:10:dc:c2:4d:0b: b3:98:75:68:ee:7a:32:1f:39:05:b5:88:8b:e5:a5: 34:4d:21:df:bf:2d:e0:ef:04:17:e9:c7:84:75:07: 0f:de:07:9f:f3:43:7f:16:7a:80:2c:e2:54:64:08: 5a:c5:eb:ad:4d:70:89:34:b5:99:38:2e:c3:36:b3: a5:41:b8:03:23:ba:5e:04:d7:c3:a1:53:94:c2:f1: b9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:64:DA:A8:87:87:DB:2F:E2:32:5A:CD:5A:62:79:5F:AD:F2:9A:62 X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C1CAF6C602B311EAABAF727DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.132.0/23 Signature Algorithm: sha256WithRSAEncryption 78:d0:be:6c:47:b2:b7:65:4c:23:90:a4:15:ac:c8:ea:c7:b5: cb:59:a9:09:b2:67:fb:ba:0f:fa:03:af:d7:b9:f9:a2:a1:b8: 42:e6:9b:ce:39:bd:3c:da:1e:a5:d5:1e:cb:03:e3:24:65:50: f1:15:25:1f:db:e2:9e:b3:4e:9a:5c:27:fa:af:92:e8:c4:98: bb:9e:3d:8d:7e:40:b4:ff:6b:43:c6:c5:aa:4b:fb:eb:26:5f: 5d:00:e8:83:1c:21:ec:15:a0:4a:8c:52:90:50:95:8b:bd:ec: e5:d8:c8:dd:e8:67:52:2f:d5:31:d9:1a:d7:65:2c:2e:41:7b: a9:f5:9a:74:7e:ea:10:80:ca:da:f4:be:8e:29:24:03:26:91: 4e:ce:d4:a6:08:ce:b6:ce:a7:66:6b:1e:09:7f:a2:d6:fb:e4: e6:17:4a:4e:d4:10:31:a1:43:cd:d4:de:65:a8:85:21:05:b7: 1b:fd:98:bf:a4:34:b7:18:df:ae:d1:ee:d3:47:36:c9:d5:ce: 27:43:72:0d:26:69:b3:f1:da:8e:f2:da:5c:36:b5:32:47:24: 83:48:09:fb:98:4b:07:29:a7:6c:55:f1:fe:5a:f9:06:99:6f: 3c:60:b1:4d:5b:21:ce:ff:46:67:d6:4f:c3:b7:cd:9a:23:82: e8:e9:35:89 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjQwNTE2MTkyODE3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ2NWU1MC1kYWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26G10YGDZ+aGSwOw4/YSmrRl5i/XV3+r4jcNglQ0o61OfQhn70XHWZjpEg/n OsqqWDNeTTqGRUBjRUvEL6ucErbkzZb/nUYefbSnavIGsWyDBAVVvy0qlSBQDfKF LibURtoWR21rStASx16HXxCOdLkcJsarUNRA/L8I7pS+qDc1WrZCj2ddN1b77I5l ocXwBFLYc6Q5CBwDh+J7Wkgb2ejAravAtsNuSSUrcwEHENzCTQuzmHVo7noyHzkF tYiL5aU0TSHfvy3g7wQX6ceEdQcP3gef80N/FnqALOJUZAhaxeutTXCJNLWZOC7D NrOlQbgDI7peBNfDoVOUwvG5BwIDAQABo4IClTCCApEwHQYDVR0OBBYEFK1k2qiH h9sv4jJazVpieV+t8ppiMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZDMUQvNURDQ0Y3MjgwMkIzMTFFQTlFNzc0QjdEQzRGOUFFMDIvQzFDQUY2QzYw MkIzMTFFQUFCQUY3MjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFni4QwDQYJKoZIhvcNAQELBQADggEBAHjQvmxHsrdlTCOQ pBWsyOrHtctZqQmyZ/u6D/oDr9e5+aKhuELmm845vTzaHqXVHssD4yRlUPEVJR/b 4p6zTppcJ/qvkujEmLuePY1+QLT/a0PGxapL++smX10A6IMcIewVoEqMUpBQlYu9 7OXYyN3oZ1Iv1THZGtdlLC5Be6n1mnR+6hCAytr0vo4pJAMmkU7O1KYIzrbOp2Zr Hgl/otb75OYXSk7UEDGhQ83U3mWohSEFtxv9mL+kNLcY367R7tNHNsnVzidDcg0m abPx2o7y2lw2tTJHJINICfuYSwcpp2xV8f5a+QaZbzxgsU1bIc7/RmfWT8O3zZoj gujpNYk= -----END CERTIFICATE-----Generated at Fri May 31 22:13:10 2024 by rpki-client on console-fra.rpki-client.org