$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/28E9FEB86F0511EDAF35FA28C4F9AE02.roa File: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (raw, json) Hash identifier: mJK1+Pof5bQaRvEY9dUz/opDFV08l/3BLd/izY6LSvk= Subject key identifier: 01:79:90:CB:FB:DC:AF:6B:BD:9C:D7:BC:26:68:B1:8F:38:A5:F9:56 Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Certificate serial: 0358 Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/28E9FEB86F0511EDAF35FA28C4F9AE02.roa Signing time: Sun 07 Jan 2024 02:24:22 +0000 ROA not before: Sun 07 Jan 2024 02:24:22 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 149041 IP address blocks: 103.177.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Validity Not Before: Jan 7 02:24:22 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=659a0b55-8150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ee:f1:f4:06:e2:d8:c8:20:76:23:cf:7c:04: 81:48:e5:51:a2:02:c2:50:c2:d7:c6:92:3c:06:24: a4:73:6b:4e:4a:9c:60:90:6b:c5:ad:41:6c:57:31: 46:50:fb:01:ca:91:5f:e9:d6:20:9a:54:82:fc:15: e7:d8:d6:15:af:4a:63:35:26:f2:4c:d5:03:90:18: 84:2a:17:32:5f:8b:19:9d:e2:68:93:c6:e5:c4:5a: db:25:46:c1:2d:b3:75:fd:99:b9:7e:a1:f5:5c:f4: 48:58:06:43:cb:dd:52:5d:68:29:d0:ee:a8:1f:06: c2:ca:5d:d1:df:c3:77:79:61:5b:88:fa:39:3d:ca: c8:78:e2:a5:d0:2c:d4:4c:6a:97:fe:25:aa:be:8a: 6a:cd:bb:ca:9a:da:e5:6a:ce:91:2a:35:a7:62:7f: b6:15:56:73:4c:ae:cc:8f:ee:a0:b9:d0:2d:88:1f: 34:5c:0e:1d:94:9d:3e:69:7b:4f:7a:33:d5:15:78: 42:88:f2:45:2a:6e:c9:95:a2:ee:e8:bb:45:c4:ef: 6e:28:c6:e0:ac:f9:8b:6f:f7:e1:f6:f3:48:29:6b: 6f:27:d9:75:5a:a7:31:29:4e:b4:3b:ef:55:7a:26: 37:e0:39:a3:86:6a:f9:86:0a:36:94:2b:2e:09:d3: b8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:79:90:CB:FB:DC:AF:6B:BD:9C:D7:BC:26:68:B1:8F:38:A5:F9:56 X509v3 Authority Key Identifier: keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/28E9FEB86F0511EDAF35FA28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.74.0/24 Signature Algorithm: sha256WithRSAEncryption 92:a4:97:10:71:30:ef:57:29:51:be:69:dc:ea:04:d4:91:3d: a2:1b:7e:40:89:4a:69:b2:52:59:20:1f:de:9e:f8:dd:5b:5c: 1e:2a:e7:6b:66:4d:97:87:f7:6f:df:0d:f3:3d:74:8f:54:51: 3a:48:44:b0:58:2b:e8:01:4c:fc:fa:89:89:5f:a7:19:e0:99: 9a:4f:8e:c6:4a:0e:b3:a6:1f:e6:4b:ef:24:61:53:19:7b:fa: 87:69:c9:84:9e:29:bc:04:46:8a:37:bb:08:2d:eb:31:88:e8: 1f:9b:9a:50:a3:23:f6:38:85:73:c7:54:46:6c:ff:1d:09:d0: 23:17:1a:8c:04:0d:e0:ce:0e:51:de:36:9d:3d:5d:1c:05:7e: 0c:2d:d6:10:12:60:48:81:d0:d3:1a:08:25:a0:aa:c3:2a:88: 14:37:83:6f:7e:75:bd:37:ea:25:33:cb:63:2e:0c:ca:d4:31: 66:45:b9:c5:db:48:0a:83:88:a6:62:20:99:a3:32:24:4a:88: fb:8c:c1:7d:78:f2:66:d4:95:6d:e8:44:c3:cb:47:cb:9e:9c: 0c:20:c0:3a:32:aa:bf:9c:69:3e:cc:b5:95:49:e5:5d:f9:24: 68:53:1a:22:56:40:2a:05:34:77:43:af:ec:3c:c3:6b:fc:36: 41:24:fe:71 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2RTIxMTAvBgNVBAUTKEE2MTIwQUU5OUFBQURDMDBBMzVBMEM4QkY1MTY1RTBC NjNBMzhBMUUwHhcNMjQwMTA3MDIyNDIyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTlhMGI1NS04MTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+7x9Abi2MggdiPPfASBSOVRogLCUMLXxpI8BiSkc2tOSpxgkGvFrUFsVzFG UPsBypFf6dYgmlSC/BXn2NYVr0pjNSbyTNUDkBiEKhcyX4sZneJok8blxFrbJUbB LbN1/Zm5fqH1XPRIWAZDy91SXWgp0O6oHwbCyl3R38N3eWFbiPo5PcrIeOKl0CzU TGqX/iWqvopqzbvKmtrlas6RKjWnYn+2FVZzTK7Mj+6gudAtiB80XA4dlJ0+aXtP ejPVFXhCiPJFKm7JlaLu6LtFxO9uKMbgrPmLb/fh9vNIKWtvJ9l1WqcxKU60O+9V eiY34Dmjhmr5hgo2lCsuCdO4NwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAF5kMv7 3K9rvZzXvCZosY84pflWMB8GA1UdIwQYMBaAFKYSCumaqtwAo1oMi/UWXgtjo4oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZFMi9BMUZBQ0JGQzUy MDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNBQ2pXZ3lMOVJaZUMyT2pp aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoSUs2WnFxM0FDaldneUw5UlplQzJPamloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU2RTIvQTFGQUNCRkM1MjA1MTFFQzkzNkFBQjIyQzRGOUFFMDIvMjhFOUZFQjg2 RjA1MTFFREFGMzVGQTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnsUowDQYJKoZIhvcNAQELBQADggEBAJKklxBxMO9XKVG+ adzqBNSRPaIbfkCJSmmyUlkgH96e+N1bXB4q52tmTZeH92/fDfM9dI9UUTpIRLBY K+gBTPz6iYlfpxngmZpPjsZKDrOmH+ZL7yRhUxl7+odpyYSeKbwERoo3uwgt6zGI 6B+bmlCjI/Y4hXPHVEZs/x0J0CMXGowEDeDODlHeNp09XRwFfgwt1hASYEiB0NMa CCWgqsMqiBQ3g29+db036iUzy2MuDMrUMWZFucXbSAqDiKZiIJmjMiRKiPuMwX14 8mbUlW3oRMPLR8uenAwgwDoyqr+caT7MtZVJ5V35JGhTGiJWQCoFNHdDr+w8w2v8 NkEk/nE= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org