$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/5D001D76932811E8BC93865BC4F9AE02.roa File: 5D001D76932811E8BC93865BC4F9AE02.roa (raw, json) Hash identifier: 4hZ16gCIk+RsBL0u6it3OvUakXI2/pdXfz/ORJbE0RI= Subject key identifier: 86:47:08:6C:30:AB:84:F7:61:D1:4E:7A:32:04:81:7D:F3:59:0D:2A Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 3422 Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/5D001D76932811E8BC93865BC4F9AE02.roa Signing time: Mon 02 Oct 2023 15:10:59 +0000 ROA not before: Mon 02 Oct 2023 15:10:59 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 45887 IP address blocks: 103.68.121.0/24 maxlen: 24 103.68.122.0/24 maxlen: 24 103.68.123.0/24 maxlen: 24 103.206.30.0/23 maxlen: 23 103.230.71.0/24 maxlen: 24 117.121.240.0/24 maxlen: 24 117.121.241.0/24 maxlen: 24 117.121.242.0/24 maxlen: 24 182.54.232.0/24 maxlen: 24 2403:cc00:8000::/36 maxlen: 36 2403:cc00:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Oct 2 15:10:59 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651add83-a3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:72:89:2e:77:86:56:e4:25:bb:1c:aa:5d: 38:1b:cc:5f:d5:e6:e9:c3:04:8c:e5:a6:0e:7c:88: 9a:a2:c7:5a:81:6d:4d:de:15:0a:ff:11:82:63:e1: a3:c0:f2:83:73:ae:c9:57:3e:46:67:0e:6f:cb:3b: 1d:9b:63:26:6f:46:d9:f7:42:6d:0f:3c:ac:71:41: 22:19:b5:80:7a:d5:13:d9:6d:aa:65:05:98:34:9c: ff:16:c3:f5:85:56:7b:78:b8:b9:33:11:38:fd:87: 1b:b5:b2:79:02:ab:37:97:94:86:78:c3:23:ef:11: 9d:5b:cd:d0:55:3a:ef:b7:ab:65:5c:69:d0:be:2c: 88:46:b8:09:e9:54:55:71:30:e0:22:c6:a7:a9:39: 93:71:aa:d6:9c:86:f2:62:52:d4:5b:a7:13:55:00: 9d:57:d6:10:de:1e:9b:94:10:fb:0f:b0:10:d7:35: c6:f6:9c:23:f3:9e:86:93:07:64:2b:bd:10:4a:32: f8:09:54:b4:de:1e:1d:0f:bc:e8:5f:87:cf:a9:26: e4:97:09:be:ed:09:9e:a9:92:9b:d7:34:27:b7:ec: a0:fd:22:5f:d2:44:f4:95:93:ad:0f:3c:2f:c6:13: 52:17:f2:49:ba:50:c0:28:e8:0e:a8:bd:c7:f5:28: 80:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:47:08:6C:30:AB:84:F7:61:D1:4E:7A:32:04:81:7D:F3:59:0D:2A X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/5D001D76932811E8BC93865BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.121.0-103.68.123.255 103.206.30.0/23 103.230.71.0/24 117.121.240.0-117.121.242.255 182.54.232.0/24 IPv6: 2403:cc00:8000::/36 2403:cc00:a000::/36 Signature Algorithm: sha256WithRSAEncryption 5b:eb:7a:81:b2:c8:e4:92:54:31:f7:b0:b8:ce:0a:bf:69:2c: f2:b3:11:9c:6c:60:8d:2d:e3:4d:5f:a6:e4:51:7a:3b:d3:f5: ed:b0:c1:f2:ee:b6:b3:f7:18:52:46:d5:b2:60:9d:2c:c6:39: 38:94:ae:5a:93:73:2d:2f:fc:8e:d0:f0:a0:ab:53:db:cb:0a: 71:0c:2d:08:49:c6:8b:06:a7:3f:72:02:44:c0:52:45:21:e9: 97:dd:fb:6c:d7:e8:4c:69:07:69:b0:05:a6:99:4d:60:ff:56: 85:df:6a:4d:1d:02:aa:62:1d:4a:f5:2a:92:ab:91:48:52:e8: 01:c9:18:d9:87:cd:d5:16:a4:19:04:a1:6c:9f:61:18:80:a8: dc:48:c1:90:70:8c:55:60:2e:d6:be:e6:d9:c8:81:fc:c8:ad: b0:e4:ac:74:07:6b:fc:43:af:32:a8:57:28:7e:2e:d3:12:7a: 51:32:f5:de:5d:fe:90:42:6f:e6:bf:ef:54:f4:e7:ba:b6:8f: 98:cb:f8:1b:4b:d9:fc:02:16:cb:eb:f7:93:bb:f8:d1:0c:60: bd:a0:d8:33:85:c4:03:ca:c4:cb:02:43:81:7f:58:83:d1:fc: 65:3c:ec:66:b0:4d:c8:36:7a:89:7e:e5:ad:cf:cc:97:e7:06: e3:e2:34:93 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjMxMDAyMTUxMDU5WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFhZGQ4My1hM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBByiS53hlbkJbscql04G8xf1ebpwwSM5aYOfIiaosdagW1N3hUK/xGCY+Gj wPKDc67JVz5GZw5vyzsdm2Mmb0bZ90JtDzyscUEiGbWAetUT2W2qZQWYNJz/FsP1 hVZ7eLi5MxE4/YcbtbJ5Aqs3l5SGeMMj7xGdW83QVTrvt6tlXGnQviyIRrgJ6VRV cTDgIsanqTmTcarWnIbyYlLUW6cTVQCdV9YQ3h6blBD7D7AQ1zXG9pwj856Gkwdk K70QSjL4CVS03h4dD7zoX4fPqSbklwm+7QmeqZKb1zQnt+yg/SJf0kT0lZOtDzwv xhNSF/JJulDAKOgOqL3H9SiAIQIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFIZHCGww q4T3YdFOejIEgX3zWQ0qMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvNUQwMDFENzY5 MzI4MTFFOEJDOTM4NjVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXwYIKwYBBQUHAQcBAf8E UDBOMDQEAgABMC4wDAMEAGdEeQMEAmdEeAMEAWfOHgMEAGfmRzAMAwQEdXnwAwQA dXnyAwQAtjboMBYEAgACMBADBgQkA8wAgAMGBCQDzACgMA0GCSqGSIb3DQEBCwUA A4IBAQBb63qBssjkklQx97C4zgq/aSzysxGcbGCNLeNNX6bkUXo70/XtsMHy7raz 9xhSRtWyYJ0sxjk4lK5ak3MtL/yO0PCgq1PbywpxDC0IScaLBqc/cgJEwFJFIemX 3fts1+hMaQdpsAWmmU1g/1aF32pNHQKqYh1K9SqSq5FIUugByRjZh83VFqQZBKFs n2EYgKjcSMGQcIxVYC7WvubZyIH8yK2w5Kx0B2v8Q68yqFcofi7TEnpRMvXeXf6Q Qm/mv+9U9Oe6to+Yy/gbS9n8AhbL6/eTu/jRDGC9oNgzhcQDysTLAkOBf1iD0fxl POxmsE3INnqJfuWtz8yX5wbj4jST -----END CERTIFICATE-----Generated at Thu May 16 16:15:00 2024 by rpki-client on console-fra.rpki-client.org