$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/50C07FEE992611EC94DB646EC4F9AE02.roa File: 50C07FEE992611EC94DB646EC4F9AE02.roa (raw, json) Hash identifier: hhMHrlTw/yHZFceU4JaP729MzspVVwzWspaffhUjsfw= Subject key identifier: DC:B3:32:F7:B0:76:98:95:55:1C:BB:7A:FB:30:B2:A9:53:73:52:77 Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Certificate serial: 06D5 Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/50C07FEE992611EC94DB646EC4F9AE02.roa Signing time: Fri 02 Feb 2024 23:11:21 +0000 ROA not before: Fri 02 Feb 2024 23:11:21 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 55766 IP address blocks: 43.252.96.0/22 maxlen: 24 103.22.184.0/22 maxlen: 24 103.27.152.0/22 maxlen: 24 115.165.172.0/24 maxlen: 24 223.29.240.0/22 maxlen: 24 2400:f280::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 22:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Validity Not Before: Feb 2 23:11:21 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65bd7698-cee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:62:f7:7b:b1:f4:64:c8:84:51:68:aa:01:74: 73:69:0b:31:d1:ef:c7:c0:4e:b2:7c:ad:1c:aa:71: fd:b6:85:43:7d:d3:ee:ff:62:62:53:81:49:18:16: 7e:0e:de:3d:e5:d0:89:2d:08:e5:6e:23:12:6a:6f: 48:81:26:be:3d:67:fc:f4:ba:bd:39:79:ee:85:de: b6:83:d0:f6:74:e6:2a:b8:07:c6:d2:c0:4a:88:2f: 02:76:2d:eb:89:09:a5:4d:df:f1:d7:31:83:5d:4b: cf:89:51:48:1a:59:f5:4d:9e:97:f9:94:35:42:f0: 2c:11:a0:23:19:d5:a3:cf:0d:dc:1b:ba:8d:5e:8b: 97:d0:3c:12:87:61:07:a9:cc:b2:11:fe:8e:82:d8: a4:72:e9:79:c9:e3:e2:13:63:4e:c5:06:43:f2:7e: e9:63:22:05:28:ef:3c:69:83:fa:47:a4:fc:b0:4b: 19:d4:7c:56:d0:85:8a:7d:fe:55:ba:1b:f2:cd:3f: f1:ee:4f:27:1e:1e:d1:6a:5b:f8:a6:5a:0f:2d:6a: 08:a4:00:fc:5a:cf:0d:32:49:7b:db:b3:34:6d:1d: f4:6b:30:8a:2f:e8:00:d9:14:6d:e6:90:89:26:06: ea:6f:f7:6b:33:a7:de:67:55:ce:94:1f:a9:a6:45: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B3:32:F7:B0:76:98:95:55:1C:BB:7A:FB:30:B2:A9:53:73:52:77 X509v3 Authority Key Identifier: keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/50C07FEE992611EC94DB646EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.96.0/22 103.22.184.0/22 103.27.152.0/22 115.165.172.0/24 223.29.240.0/22 IPv6: 2400:f280::/32 Signature Algorithm: sha256WithRSAEncryption 20:a1:26:bb:52:89:f0:99:c6:74:88:cb:a2:19:dc:8f:77:1b: 59:54:ed:ec:53:a7:5d:d0:4b:68:0b:3f:a0:70:41:04:0e:01: 46:94:88:c0:e6:5d:5c:9c:95:84:25:8b:5e:48:9d:30:4f:4f: 1d:cd:18:4f:bf:40:ad:a0:63:48:f6:b9:6f:8b:08:87:61:3c: 78:88:51:d7:71:e8:d4:e7:3d:6b:3d:de:9c:d9:4b:9a:a5:38: 7e:d4:98:4e:99:7e:82:12:c4:63:1c:53:2b:10:94:97:0e:94: cf:47:1b:e7:cf:83:e5:7f:99:ec:d1:a1:4d:ae:54:58:48:4f: 1e:ef:fe:ce:90:1e:b3:ed:54:01:dc:24:cf:6c:2d:5b:ce:66: 5f:74:0e:ce:19:93:e6:81:4f:44:1b:26:1f:8d:94:eb:58:cd: 77:5a:73:4c:92:a2:f7:c4:97:a9:2d:ca:3d:90:10:22:2e:94: 4d:24:04:94:d3:c6:95:31:ed:84:86:65:f9:f4:0a:b4:ca:21: 82:eb:91:1d:5b:24:ab:eb:9b:ce:3f:bc:37:07:95:69:4c:71: 0a:52:51:15:c4:e4:95:2a:65:82:70:55:94:72:fd:7a:41:d2: 77:45:89:f9:5c:13:64:56:28:47:2a:d5:ee:e3:33:a3:bd:4d: ff:10:b4:18 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUwQTQxMTAvBgNVBAUTKDNEMUQ2QTMzMkFFQTRFQzUwMjAzN0EwOTA5RjRDQzE5 RDQyREIxOTgwHhcNMjQwMjAyMjMxMTIxWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWJkNzY5OC1jZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GL3e7H0ZMiEUWiqAXRzaQsx0e/HwE6yfK0cqnH9toVDfdPu/2JiU4FJGBZ+ Dt495dCJLQjlbiMSam9IgSa+PWf89Lq9OXnuhd62g9D2dOYquAfG0sBKiC8Cdi3r iQmlTd/x1zGDXUvPiVFIGln1TZ6X+ZQ1QvAsEaAjGdWjzw3cG7qNXouX0DwSh2EH qcyyEf6Ogtikcul5yePiE2NOxQZD8n7pYyIFKO88aYP6R6T8sEsZ1HxW0IWKff5V uhvyzT/x7k8nHh7Ralv4ploPLWoIpAD8Ws8NMkl727M0bR30azCKL+gA2RRt5pCJ Jgbqb/drM6feZ1XOlB+ppkUolwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFNyzMvew dpiVVRy7evswsqlTc1J3MB8GA1UdIwQYMBaAFD0dajMq6k7FAgN6CQn0zBnULbGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTBBNC9ERDQ3MzY5ODBD MzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRzVUNBM29KQ2ZUTUdkUXRz WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSMXFNeXJxVHNVQ0Ezb0pDZlRNR2RRdHNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDUwQTQvREQ0NzM2OTgwQzM2MTFFQkE0RTQ5RTIxQzRGOUFFMDIvNTBDMDdGRUU5 OTI2MTFFQzk0REI2NDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAIr/GADBAJnFrgDBAJnG5gDBABzpawDBALfHfAwDQQCAAIw BwMFACQA8oAwDQYJKoZIhvcNAQELBQADggEBACChJrtSifCZxnSIy6IZ3I93G1lU 7exTp13QS2gLP6BwQQQOAUaUiMDmXVyclYQli15InTBPTx3NGE+/QK2gY0j2uW+L CIdhPHiIUddx6NTnPWs93pzZS5qlOH7UmE6ZfoISxGMcUysQlJcOlM9HG+fPg+V/ mezRoU2uVFhITx7v/s6QHrPtVAHcJM9sLVvOZl90Ds4Zk+aBT0QbJh+NlOtYzXda c0ySovfEl6ktyj2QECIulE0kBJTTxpUx7YSGZfn0CrTKIYLrkR1bJKvrm84/vDcH lWlMcQpSURXE5JUqZYJwVZRy/XpB0ndFiflcE2RWKEcq1e7jM6O9Tf8QtBg= -----END CERTIFICATE-----Generated at Mon May 20 23:50:58 2024 by rpki-client on console-fra.rpki-client.org