$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4C5CCE6EB46A11EAB5A01176C4F9AE02.roa File: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (raw, json) Hash identifier: F+y8Vt3UZ3tBT9+4n44une0lPJxbxMN06TpuroDpxKM= Subject key identifier: 5F:EC:15:AB:0E:4B:A7:9F:86:2B:E9:4B:36:74:77:90:AD:23:76:9C Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 078F Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4C5CCE6EB46A11EAB5A01176C4F9AE02.roa Signing time: Fri 28 Jul 2023 21:38:03 +0000 ROA not before: Fri 28 Jul 2023 21:38:03 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 45634 IP address blocks: 103.5.44.0/22 maxlen: 22 103.5.44.0/24 maxlen: 24 103.5.45.0/24 maxlen: 24 103.5.46.0/24 maxlen: 24 103.5.47.0/24 maxlen: 24 103.35.204.0/22 maxlen: 22 103.35.204.0/24 maxlen: 24 103.35.205.0/24 maxlen: 24 103.35.206.0/24 maxlen: 24 103.35.207.0/24 maxlen: 24 103.249.160.0/22 maxlen: 22 103.249.160.0/24 maxlen: 24 103.249.161.0/24 maxlen: 24 103.249.162.0/24 maxlen: 24 103.249.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 22:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1935 (0x78f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Jul 28 21:38:03 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=64c4353b-21db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:cc:23:52:62:5d:8b:57:e6:22:f3:c9:f6: 15:f3:b3:5b:de:5f:f6:34:c4:9c:a1:04:f7:82:e5: 0b:52:d2:54:f1:ac:6b:40:8e:00:6a:3d:af:c7:fb: 86:35:1f:18:d8:93:d7:19:61:d0:ae:6a:1f:c7:d8: b1:00:f6:da:7c:ce:df:35:47:e0:bb:13:65:2b:3d: 4d:1f:15:ca:e2:51:61:06:29:b2:6f:92:70:22:42: 57:e7:cf:95:82:8e:f5:b1:b0:49:c6:d2:e3:fd:2c: da:f6:b0:6b:6d:b8:74:5a:7e:7e:6c:f8:1b:e6:19: a1:ce:31:6a:c4:54:33:56:75:46:67:57:d0:90:28: 72:62:76:83:96:f9:97:2b:ad:6a:a0:20:10:45:7f: b0:34:31:3f:01:b9:ca:39:9e:1f:ff:df:c6:a9:b5: 24:5c:ea:a9:a6:69:ee:b3:7a:f7:49:85:9a:1d:2b: 08:d1:f9:d0:ca:41:70:74:b9:2c:3e:e0:84:92:bb: 2f:b7:96:42:d4:cb:35:f8:39:65:8d:cf:d5:bc:10: 8c:67:cf:dd:3a:51:0c:88:47:1b:ff:2b:63:38:c1: 9e:28:fe:a1:9c:15:85:79:4c:c8:96:bc:ff:82:ac: d9:c3:e1:2e:d1:8c:2b:56:35:5a:b1:3d:39:54:3e: a7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EC:15:AB:0E:4B:A7:9F:86:2B:E9:4B:36:74:77:90:AD:23:76:9C X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4C5CCE6EB46A11EAB5A01176C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.44.0/22 103.35.204.0/22 103.249.160.0/22 Signature Algorithm: sha256WithRSAEncryption 64:c7:d4:7d:67:23:96:f9:f3:28:18:cf:f4:54:45:d4:73:f1: 3c:8c:75:71:d9:5d:27:8e:75:5b:b0:cc:f7:c7:6a:79:3a:fc: 93:a8:83:9d:09:a9:9d:f3:02:33:d7:0b:67:ff:66:22:01:4f: 0b:6b:d0:f4:ee:9c:a7:b9:b6:fb:da:ab:e4:b0:55:b4:f7:b1: 23:69:21:0d:44:a4:ba:35:93:1e:82:83:29:08:37:fe:f3:c5: bc:34:29:3f:91:d5:62:35:fc:6e:94:88:29:a6:64:57:2b:21: b6:d3:d1:59:b3:a3:a0:31:40:41:77:e2:7d:14:15:8c:0c:78: db:81:8d:8d:54:25:98:9d:dd:d8:33:d0:66:77:ea:a9:79:5c: b4:38:ae:a1:a4:dc:bc:8b:b4:8e:39:90:d3:4a:6f:03:a3:6b: 41:91:56:03:84:50:28:e8:ae:0d:20:d5:24:0c:47:61:e0:b1: da:66:15:0e:4f:49:4a:9e:58:95:fd:b2:1f:26:fc:eb:c9:61: f5:94:c3:5a:97:f4:e3:11:f1:13:49:f6:3e:65:60:e1:94:b5: b0:fc:50:7d:5a:5f:a4:74:bd:82:2d:88:a1:d2:8d:1d:10:04: 70:1a:a9:ff:6e:d4:ad:f8:24:d3:57:d2:85:30:80:13:46:9a: 3f:50:49:36 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICB48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjMwNzI4MjEzODAzWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGM0MzUzYi0yMWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+7MI1JiXYtX5iLzyfYV87Nb3l/2NMScoQT3guULUtJU8axrQI4Aaj2vx/uG NR8Y2JPXGWHQrmofx9ixAPbafM7fNUfguxNlKz1NHxXK4lFhBimyb5JwIkJX58+V go71sbBJxtLj/Sza9rBrbbh0Wn5+bPgb5hmhzjFqxFQzVnVGZ1fQkChyYnaDlvmX K61qoCAQRX+wNDE/AbnKOZ4f/9/GqbUkXOqppmnus3r3SYWaHSsI0fnQykFwdLks PuCEkrsvt5ZC1Ms1+Dlljc/VvBCMZ8/dOlEMiEcb/ytjOMGeKP6hnBWFeUzIlrz/ gqzZw+Eu0YwrVjVasT05VD6nLQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFF/sFasO S6efhivpSzZ0d5CtI3acMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUxMkYvNEI4QkZGRUNCNDY5MTFFQUFCQTcxQzc1QzRGOUFFMDIvNEM1Q0NFNkVC NDZBMTFFQUI1QTAxMTc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnBSwDBAJnI8wDBAJn+aAwDQYJKoZIhvcNAQELBQADggEB AGTH1H1nI5b58ygYz/RURdRz8TyMdXHZXSeOdVuwzPfHank6/JOog50JqZ3zAjPX C2f/ZiIBTwtr0PTunKe5tvvaq+SwVbT3sSNpIQ1EpLo1kx6CgykIN/7zxbw0KT+R 1WI1/G6UiCmmZFcrIbbT0Vmzo6AxQEF34n0UFYwMeNuBjY1UJZid3dgz0GZ36ql5 XLQ4rqGk3LyLtI45kNNKbwOja0GRVgOEUCjorg0g1SQMR2HgsdpmFQ5PSUqeWJX9 sh8m/OvJYfWUw1qX9OMR8RNJ9j5lYOGUtbD8UH1aX6R0vYItiKHSjR0QBHAaqf9u 1K34JNNX0oUwgBNGmj9QSTY= -----END CERTIFICATE-----Generated at Tue May 14 23:01:09 2024 by rpki-client on console-fra.rpki-client.org