$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/B5A58DFAA1DB11EDA7229653C4F9AE02.roa File: B5A58DFAA1DB11EDA7229653C4F9AE02.roa (raw, json) Hash identifier: uqa8g1C28MUoA21YpNtb7zHbRZJuEhj3XqsYhfug7Rk= Subject key identifier: A6:86:79:6F:8F:0A:6B:FD:EA:4E:3E:58:6E:FD:EB:75:20:4D:9C:81 Certificate issuer: /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5 Certificate serial: 0230 Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/B5A58DFAA1DB11EDA7229653C4F9AE02.roa Signing time: Tue 05 Dec 2023 03:14:10 +0000 ROA not before: Tue 05 Dec 2023 03:14:10 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 40747 IP address blocks: 103.68.200.0/24 maxlen: 24 103.68.201.0/24 maxlen: 24 103.163.77.0/24 maxlen: 30 2001:df1:c081::/48 maxlen: 49 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5 Validity Not Before: Dec 5 03:14:10 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656e9581-e4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d5:d0:2c:67:24:a1:79:2e:00:80:9c:68:7b: 25:e3:62:15:ca:eb:0f:2b:7b:ee:d6:87:e9:b8:dc: 1c:c4:b4:8a:0d:b8:db:ac:8f:96:59:ac:dd:ee:c2: 6b:2d:b9:0c:cb:9e:b7:c5:bd:1a:02:f9:a0:b2:27: 64:78:cc:ae:f6:65:19:53:7e:ef:c7:61:bd:6b:c4: 40:d7:9d:85:dc:34:50:d0:30:13:41:8b:53:1f:a2: bf:d0:e6:6b:66:82:c1:c7:f1:b3:49:af:9b:60:34: d5:ba:bd:a7:ad:b9:29:f7:91:7a:f4:1d:d6:90:9e: eb:04:22:06:76:07:14:de:c9:be:11:84:00:5d:b7: 79:95:ed:74:08:5e:d1:a5:d5:67:52:11:6e:51:17: 34:30:39:52:6f:de:3f:71:b2:fd:77:65:46:8a:50: 75:e0:02:5c:e4:8e:e3:26:6c:fa:13:d8:3c:e9:03: f2:90:5c:57:dc:c6:53:8e:33:d1:16:da:57:8e:79: cf:a8:4a:41:81:7e:ea:2e:9f:fa:86:6f:ce:37:bd: 09:be:c0:30:8a:0e:06:1d:93:45:a0:78:cf:74:1a: 5f:93:37:48:56:72:d7:9e:5b:15:2e:d1:85:80:3a: d8:b6:d6:07:e4:70:1d:17:7b:9c:71:a7:0a:13:9e: fe:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:86:79:6F:8F:0A:6B:FD:EA:4E:3E:58:6E:FD:EB:75:20:4D:9C:81 X509v3 Authority Key Identifier: keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/B5A58DFAA1DB11EDA7229653C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.200.0/23 103.163.77.0/24 IPv6: 2001:df1:c081::/48 Signature Algorithm: sha256WithRSAEncryption 28:99:36:56:5f:ed:be:0c:43:fb:98:6b:b8:57:a3:1a:9e:95: 15:d9:e5:fa:a1:5e:37:f5:4f:93:09:62:f9:85:b1:e3:07:d1: ec:b6:39:79:c7:42:b3:b8:dd:26:e8:52:a6:d5:56:32:49:dc: 16:09:70:14:57:8f:37:9b:3a:97:95:68:ee:f3:6e:e6:bd:b2: 99:76:10:65:e4:ff:56:20:b4:a5:65:a1:ae:4a:52:19:e6:34: 91:c9:b6:72:42:e7:d3:4a:9d:c5:cc:95:5e:8f:9b:f5:ae:84: 3e:9f:ca:44:57:82:fb:82:62:7d:5f:c2:13:ef:46:2b:82:33: 38:9f:e5:d5:54:52:59:45:e4:7e:ed:61:67:da:0f:0c:b1:68: 58:1b:e1:90:9b:f5:3e:b4:b2:46:da:b9:ca:6b:52:6b:97:0d: 24:94:a5:cb:66:ec:9b:16:50:93:ab:a8:3a:33:b6:38:0f:6a: fb:13:8c:23:3d:5d:2b:20:b9:1b:2f:20:33:f9:8d:ed:ae:78: 3d:f9:94:27:5d:c5:3a:da:3f:33:3f:a2:ec:1a:a3:dd:be:f9: 48:f8:77:7f:a9:a6:4a:97:15:fd:72:e0:61:8b:bc:cb:7b:fd: 45:7f:ad:bb:c9:3a:cb:31:ad:ba:a4:e2:73:b8:70:ff:f7:74: c5:54:ac:b8 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDc3Mjg0MUEyNjMyNjMxNEVBMkU0MzgzNDc1REUzMUI2 RENFN0RCQTUwHhcNMjMxMjA1MDMxNDEwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZlOTU4MS1lNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtXQLGckoXkuAICcaHsl42IVyusPK3vu1ofpuNwcxLSKDbjbrI+WWazd7sJr LbkMy563xb0aAvmgsidkeMyu9mUZU37vx2G9a8RA152F3DRQ0DATQYtTH6K/0OZr ZoLBx/GzSa+bYDTVur2nrbkp95F69B3WkJ7rBCIGdgcU3sm+EYQAXbd5le10CF7R pdVnUhFuURc0MDlSb94/cbL9d2VGilB14AJc5I7jJmz6E9g86QPykFxX3MZTjjPR FtpXjnnPqEpBgX7qLp/6hm/ON70JvsAwig4GHZNFoHjPdBpfkzdIVnLXnlsVLtGF gDrYttYH5HAdF3uccacKE57+rQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFKaGeW+P Cmv96k4+WG7963UgTZyBMB8GA1UdIwQYMBaAFHcoQaJjJjFOouQ4NHXeMbbc59ul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC9FRjgzRTMwRUQw MDkxMUVDOTJBMTZBM0NDNEY5QUUwMi9keWhCb21NbU1VNmk1RGcwZGQ0eHR0em4y NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R5aEJvbU1tTVU2aTVEZzBkZDR4dHR6bjI2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzMjQvRUY4M0UzMEVEMDA5MTFFQzkyQTE2QTNDQzRGOUFFMDIvQjVBNThERkFB MURCMTFFREE3MjI5NjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnRMgDBABno00wDwQCAAIwCQMHACABDfHAgTANBgkqhkiG 9w0BAQsFAAOCAQEAKJk2Vl/tvgxD+5hruFejGp6VFdnl+qFeN/VPkwli+YWx4wfR 7LY5ecdCs7jdJuhSptVWMkncFglwFFePN5s6l5Vo7vNu5r2ymXYQZeT/ViC0pWWh rkpSGeY0kcm2ckLn00qdxcyVXo+b9a6EPp/KRFeC+4JifV/CE+9GK4IzOJ/l1VRS WUXkfu1hZ9oPDLFoWBvhkJv1PrSyRtq5ymtSa5cNJJSly2bsmxZQk6uoOjO2OA9q +xOMIz1dKyC5Gy8gM/mN7a54PfmUJ13FOto/Mz+i7Bqj3b75SPh3f6mmSpcV/XLg YYu8y3v9RX+tu8k6yzGtuqTic7hw//d0xVSsuA== -----END CERTIFICATE-----Generated at Thu Jun 13 05:10:05 2024 by rpki-client on console-ams.rpki-client.org