$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/F47CB05C5AE011EFB4CD7428C4F9AE02.roa File: F47CB05C5AE011EFB4CD7428C4F9AE02.roa (raw, json) Hash identifier: dP/ms8awhu5P0L5X1kq3UaHwPpJfEdsfRvw8IFgrpFk= Subject key identifier: 69:5B:84:63:CE:F6:EB:E4:0A:87:7B:53:56:A7:80:7E:9C:5A:23:59 Certificate issuer: /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720 Certificate serial: 3B Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/F47CB05C5AE011EFB4CD7428C4F9AE02.roa Signing time: Fri 29 Nov 2024 05:49:52 +0000 ROA not before: Fri 29 Nov 2024 05:49:52 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 26658 IP address blocks: 59.153.144.0/22 maxlen: 22 103.198.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B62 Validity Not Before: Nov 29 05:49:52 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67495600-a4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:2e:a7:71:5d:2f:9a:92:73:76:c4:76:98: 38:7c:e1:45:b7:51:33:2f:25:76:e3:6e:0b:f3:f6: 88:fe:64:53:7c:a4:d2:5c:8c:29:35:58:87:c6:b7: 63:42:b1:0f:dc:ba:17:82:9a:9f:cc:03:6a:7d:ea: 2c:84:22:b3:d0:fa:d6:01:1c:5c:8e:90:49:de:1c: 65:24:26:ea:ef:ea:05:d2:3b:b8:59:00:75:aa:a2: fd:21:20:8a:94:33:62:e4:9e:fa:42:cc:38:ff:61: 4b:9d:18:92:eb:1f:fa:e4:6d:01:c2:f4:48:0c:1a: ea:35:17:f3:ad:98:94:4a:a0:f3:70:cd:26:57:ff: 13:1b:18:4a:8e:a3:2d:ad:4f:30:a8:4f:83:2e:7d: 9f:e6:3f:43:7a:49:66:cf:8e:e7:3d:4c:5a:a8:ef: 8a:5b:df:bc:e2:71:a1:fb:e0:13:92:17:e7:78:87: 53:26:03:40:11:44:b2:de:12:72:90:bc:df:c7:8e: 91:25:48:21:3b:a0:c3:a7:e6:b4:2e:df:32:88:66: 21:29:79:84:f9:e9:93:92:f3:bc:38:54:df:57:85: ef:d0:50:25:85:dc:9f:41:48:64:d7:e2:7c:16:bb: 36:b3:70:f8:dd:cb:d8:26:8d:9a:65:f5:74:ae:c9: 9c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5B:84:63:CE:F6:EB:E4:0A:87:7B:53:56:A7:80:7E:9C:5A:23:59 X509v3 Authority Key Identifier: keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/F47CB05C5AE011EFB4CD7428C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.153.144.0/22 103.198.188.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:b0:32:f5:4a:db:d4:82:44:26:62:e0:3c:10:62:5d:64:2e: 25:40:9d:2b:01:30:39:fb:b1:e3:ac:f4:b2:93:c3:03:72:9e: c3:ae:c7:40:6a:c6:c5:5d:46:76:b1:0b:bc:8c:7d:b9:1d:d1: db:92:20:c3:fc:47:fb:98:1c:cf:f3:5e:a7:8c:3c:70:e4:18: 97:3b:0e:96:ea:ee:75:ec:0f:62:f3:4d:3f:5d:99:58:04:99: 1c:f0:9c:25:e4:40:48:35:1f:da:de:67:a8:ef:8a:db:85:e0: 90:14:4b:e6:b1:0a:05:1b:70:2b:8b:4b:fe:a7:88:15:a7:6d: 5c:fa:dc:9e:42:31:b5:ea:76:52:07:3f:4e:40:61:ef:7c:fd: 8c:01:55:b1:30:ac:fe:7d:67:17:3b:7d:99:91:14:91:70:ad: 90:10:70:cd:4b:cc:3c:72:ed:06:57:d2:87:48:fd:62:1c:04: 7d:c6:02:62:13:16:1c:c3:44:c2:3d:02:1b:0c:49:30:ac:c4: ca:9b:35:b5:41:fa:dd:0b:dd:2a:61:d7:f1:ef:d2:46:c6:e8: fa:61:8c:49:8a:68:a2:58:15:3e:ee:00:90:fb:35:5f:ad:9d: 1f:43:88:6b:30:09:e0:be:a0:ad:e3:a5:d3:0b:61:c5:10:da: 34:81:cb:74 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkI2MjExMC8GA1UEBRMoRTZGNjVEMjIxQjU5NUY2QkExM0VCMzE0REVFMzM4Q0Ey NDFFMjcyMDAeFw0yNDExMjkwNTQ5NTJaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NDk1NjAwLWE0ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6Ry6ncV0vmpJzdsR2mDh84UW3UTMvJXbjbgvz9oj+ZFN8pNJcjCk1WIfGt2NC sQ/cuheCmp/MA2p96iyEIrPQ+tYBHFyOkEneHGUkJurv6gXSO7hZAHWqov0hIIqU M2LknvpCzDj/YUudGJLrH/rkbQHC9EgMGuo1F/OtmJRKoPNwzSZX/xMbGEqOoy2t TzCoT4MufZ/mP0N6SWbPjuc9TFqo74pb37zicaH74BOSF+d4h1MmA0ARRLLeEnKQ vN/HjpElSCE7oMOn5rQu3zKIZiEpeYT56ZOS87w4VN9Xhe/QUCWF3J9BSGTX4nwW uzazcPjdy9gmjZpl9XSuyZzRAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUaVuEY872 6+QKh3tTVqeAfpxaI1kwHwYDVR0jBBgwFoAU5vZdIhtZX2uhPrMU3uM4yiQeJyAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjYyL0JEMjlCODE2NUFF MDExRUY4NjUxQjYxQkM0RjlBRTAyLzV2WmRJaHRaWDJ1aFByTVUzdU00eWlRZUp5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNXZaZElodFpYMnVoUHJNVTN1TTR5aVFlSnlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkI2Mi9CRDI5QjgxNjVBRTAxMUVGODY1MUI2MUJDNEY5QUUwMi9GNDdDQjA1QzVB RTAxMUVGQjRDRDc0MjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAjuZkAMEAmfGvDANBgkqhkiG9w0BAQsFAAOCAQEAb7Ay9Urb 1IJEJmLgPBBiXWQuJUCdKwEwOfux46z0spPDA3Kew67HQGrGxV1GdrELvIx9uR3R 25Igw/xH+5gcz/Nep4w8cOQYlzsOlurudewPYvNNP12ZWASZHPCcJeRASDUf2t5n qO+K24XgkBRL5rEKBRtwK4tL/qeIFadtXPrcnkIxtep2Ugc/TkBh73z9jAFVsTCs /n1nFzt9mZEUkXCtkBBwzUvMPHLtBlfSh0j9YhwEfcYCYhMWHMNEwj0CGwxJMKzE yps1tUH63QvdKmHX8e/SRsbo+mGMSYpoolgVPu4AkPs1X62dH0OIazAJ4L6greOl 0wthxRDaNIHLdA== -----END CERTIFICATE-----Generated at Sat Apr 5 07:14:01 2025 by rpki-client