$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/44B42A0EFDE511EEAD5A6432C4F9AE02.roa File: 44B42A0EFDE511EEAD5A6432C4F9AE02.roa (raw, json) Hash identifier: j8TVDnQNxdrKAo9n6JHtnB5eeit+C4Hgh115UzRpapo= Subject key identifier: EC:8E:05:89:CA:B5:56:D3:3D:46:3C:C1:B3:5E:0A:8C:AE:AF:6D:64 Certificate issuer: /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525 Certificate serial: 02 Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/44B42A0EFDE511EEAD5A6432C4F9AE02.roa Signing time: Fri 19 Apr 2024 00:39:24 +0000 ROA not before: Fri 19 Apr 2024 00:39:24 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 132584 IP address blocks: 203.16.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525 Validity Not Before: Apr 19 00:39:24 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=6621bd3b-29cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2f:7c:bb:ed:5f:cf:f2:c6:13:27:d1:60:68: 20:16:2f:ae:e1:aa:3f:b7:e1:20:1c:30:d6:75:03: 5f:f2:00:87:3a:99:c7:c4:52:12:29:b1:c2:68:14: 6d:87:1b:63:2f:9c:b7:98:b7:8b:3b:e2:ad:8a:01: 57:03:d1:ee:45:ec:25:dd:7d:74:aa:b4:1f:90:20: f3:9c:63:53:26:2f:44:cd:5c:2a:cd:ec:54:3d:2b: 68:e0:dc:98:3e:fd:f2:1d:45:d3:a1:93:8d:78:93: 0a:aa:2b:11:df:5b:98:fe:b2:7b:a4:7e:c8:d4:b8: 39:21:06:d2:0d:2c:c7:35:dc:9e:ff:2a:77:72:6a: b5:07:0c:29:09:22:4d:55:1c:e8:18:f5:4d:ee:bc: 62:37:1f:34:d3:9b:1f:bf:b7:50:52:73:0c:07:57: 1a:4a:13:53:31:cc:37:49:e2:32:4b:09:1a:d8:cf: 4f:c0:fe:25:6a:32:57:a2:2e:19:46:af:e5:0e:78: 44:40:08:d9:ff:bc:c2:70:1d:0a:f8:aa:f1:22:87: e0:dc:ea:e5:3f:cb:d1:b8:6d:96:51:a8:40:b5:a9: 1c:05:c9:3d:9a:ec:db:37:7d:c8:8c:81:92:10:1e: 9d:b1:d7:a0:87:61:0a:ca:8b:95:79:3a:06:19:ba: 5c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8E:05:89:CA:B5:56:D3:3D:46:3C:C1:B3:5E:0A:8C:AE:AF:6D:64 X509v3 Authority Key Identifier: keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/44B42A0EFDE511EEAD5A6432C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.16.177.0/24 Signature Algorithm: sha256WithRSAEncryption 15:aa:96:45:64:41:cf:df:0d:c7:81:5f:67:64:16:2d:82:ca: 47:a6:f1:85:14:f2:31:79:b4:9a:8c:22:c1:c8:2b:35:f3:0b: 64:30:cc:57:7e:03:af:3d:8b:c6:4e:f5:06:60:37:0e:56:9a: bd:3f:e7:ca:e0:ca:0f:db:9b:a4:6d:41:d7:40:0b:0c:21:34: 42:26:de:e3:d0:71:3f:7d:de:d8:65:49:fa:a2:4d:3f:9c:5f: eb:08:f4:6c:67:d3:bb:0b:41:97:f4:09:bd:e4:52:d9:92:bb: b8:27:9c:fc:54:d5:09:00:3b:4e:46:5b:93:ec:a0:1a:1b:0f: 08:b2:19:f8:74:10:fe:80:55:63:8f:29:d6:ef:78:36:a5:3c: 0c:a5:71:20:e8:91:be:8c:df:b4:09:eb:0a:e6:85:d7:93:5f: 4e:04:63:8a:fe:70:c2:94:ff:b3:58:db:f8:0e:45:1f:50:26: 50:b7:af:ec:c5:6b:94:8a:7f:41:ce:7b:5e:8b:cc:f2:0e:60: 69:54:b6:f6:23:6b:2d:95:04:56:d4:c5:c8:b5:bc:4e:04:b7: d7:1b:3d:a6:3f:87:e1:25:13:b8:57:b1:79:bf:29:db:0e:d8: e1:52:1c:a8:32:19:53:4d:15:f6:a0:30:48:d2:ab:d3:f0:0a: 89:70:93:3d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzJFNjExMC8GA1UEBRMoRTQ2RUFDREMyMTQzODVDMTQyMDM0Njc0RTQ2QzY4RTdC QkUyOTUyNTAeFw0yNDA0MTkwMDM5MjRaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MjFiZDNiLTI5Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYL3y77V/P8sYTJ9FgaCAWL67hqj+34SAcMNZ1A1/yAIc6mcfEUhIpscJoFG2H G2MvnLeYt4s74q2KAVcD0e5F7CXdfXSqtB+QIPOcY1MmL0TNXCrN7FQ9K2jg3Jg+ /fIdRdOhk414kwqqKxHfW5j+snukfsjUuDkhBtINLMc13J7/KndyarUHDCkJIk1V HOgY9U3uvGI3HzTTmx+/t1BScwwHVxpKE1MxzDdJ4jJLCRrYz0/A/iVqMleiLhlG r+UOeERACNn/vMJwHQr4qvEih+Dc6uU/y9G4bZZRqEC1qRwFyT2a7Ns3fciMgZIQ Hp2x16CHYQrKi5V5OgYZulxBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU7I4Ficq1 VtM9RjzBs14KjK6vbWQwHwYDVR0jBBgwFoAU5G6s3CFDhcFCA0Z05Gxo57vilSUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MkU2L0YzNTkwODI0RkRF MzExRUVBQTc3N0QxMUM0RjlBRTAyLzVHNnMzQ0ZEaGNGQ0EwWjA1R3hvNTd2aWxT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUc2czNDRkRoY0ZDQTBaMDVHeG81N3ZpbFNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzJFNi9GMzU5MDgyNEZERTMxMUVFQUE3NzdEMTFDNEY5QUUwMi80NEI0MkEwRUZE RTUxMUVFQUQ1QTY0MzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsQsTANBgkqhkiG9w0BAQsFAAOCAQEAFaqWRWRBz98Nx4Ff Z2QWLYLKR6bxhRTyMXm0mowiwcgrNfMLZDDMV34Drz2Lxk71BmA3DlaavT/nyuDK D9ubpG1B10ALDCE0Qibe49BxP33e2GVJ+qJNP5xf6wj0bGfTuwtBl/QJveRS2ZK7 uCec/FTVCQA7TkZbk+ygGhsPCLIZ+HQQ/oBVY48p1u94NqU8DKVxIOiRvozftAnr CuaF15NfTgRjiv5wwpT/s1jb+A5FH1AmULev7MVrlIp/Qc57XovM8g5gaVS29iNr LZUEVtTFyLW8TgS31xs9pj+H4SUTuFexeb8p2w7Y4VIcqDIZU00V9qAwSNKr0/AK iXCTPQ== -----END CERTIFICATE-----