$ rpki-client -vvf rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C874A7C0058511ECA3212F6DC4F9AE02.roa File: C874A7C0058511ECA3212F6DC4F9AE02.roa (raw, json) Hash identifier: ElYbSEk4rRJAjj7lezEHri8iWNpjG/As8ucdEHqyHv8= Subject key identifier: 58:8E:FC:D5:2C:A6:E2:5A:69:B4:83:AC:42:FF:89:A1:1A:0E:EE:85 Certificate issuer: /CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5 Certificate serial: 0464 Authority key identifier: 64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C874A7C0058511ECA3212F6DC4F9AE02.roa Signing time: Tue 01 Aug 2023 01:01:54 +0000 ROA not before: Tue 01 Aug 2023 01:01:54 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 399955 IP address blocks: 103.66.56.0/22 maxlen: 24 103.228.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.crl rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 00:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5 Validity Not Before: Aug 1 01:01:54 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c85982-bc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:35:df:5b:48:3e:33:01:fa:f5:04:7d:bb:f9: 4a:f9:fa:de:7d:9e:3e:e5:b0:e5:ea:3f:f1:bc:a0: 00:15:36:95:a3:07:4a:77:29:67:2f:19:9b:7c:ef: 7c:c1:c6:65:21:5c:e1:63:52:07:0b:17:ce:41:5c: 20:54:e6:bb:be:be:53:95:95:c4:a6:0c:d6:b6:73: 5c:ca:5c:b4:49:23:78:88:76:bc:5a:c1:b4:b2:b7: 76:c5:1a:61:1b:3e:03:5c:1b:7c:a1:ae:72:78:03: f9:13:2f:f8:8d:f3:fb:52:0e:54:aa:c6:89:92:21: ed:f6:49:64:46:d6:a2:92:06:2f:1e:6b:e9:bb:18: 50:fc:87:a1:83:5d:59:b1:60:20:b7:72:30:8d:aa: 02:5c:a8:37:40:35:0c:a7:58:68:62:fa:7e:48:02: e7:e7:31:81:66:a6:d3:13:4a:f4:ae:6e:c5:25:12: 61:17:c2:75:9e:c9:09:43:6b:c0:3e:28:ec:6b:09: dd:42:1f:68:90:68:7a:17:b5:94:19:5c:3b:92:13: 78:39:98:b0:46:37:09:63:97:5b:7c:f4:68:c9:ef: aa:a1:0e:dd:f8:c1:09:2b:22:49:72:db:2a:ff:0b: 33:51:7b:9a:f6:0d:53:f4:83:37:e8:c4:44:13:0c: bc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8E:FC:D5:2C:A6:E2:5A:69:B4:83:AC:42:FF:89:A1:1A:0E:EE:85 X509v3 Authority Key Identifier: keyid:64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C874A7C0058511ECA3212F6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.56.0/22 103.228.168.0/22 Signature Algorithm: sha256WithRSAEncryption 56:09:22:6f:be:dd:56:53:ff:73:db:bd:24:f0:72:03:10:77: 6e:40:96:91:a5:ca:47:29:34:3d:32:bb:4f:fe:c9:c9:97:c5: 37:cd:75:19:d0:3f:02:d8:17:30:a1:65:9b:54:b5:d2:c5:6a: 2b:81:ec:e3:f3:c8:db:60:46:ad:2e:57:38:7b:3e:cb:86:8a: b6:e9:fc:7d:56:9d:42:5d:66:76:e9:09:18:c3:cd:dc:84:32: 1c:12:15:87:f1:8c:7b:9b:cf:c5:7c:c1:83:28:ce:42:07:2d: b4:49:92:75:ae:54:b9:2a:e9:7c:af:f0:ca:ed:c9:ec:94:24: a1:ac:c9:99:72:48:a3:1e:76:e5:16:6b:3d:7f:59:33:7e:6e: 94:ea:c3:4c:8c:f5:38:34:e5:30:0b:5c:08:be:a7:95:e1:9e: 24:80:4a:31:0a:fb:d9:5d:a0:48:60:70:05:ec:b2:fe:2b:a2: 7e:d9:44:7a:0d:52:71:22:cb:90:45:e0:dc:7d:9a:e8:a0:d2: 42:e7:1f:b5:6e:93:bc:b0:f6:cb:a6:51:71:a5:fa:40:f1:a6: 73:94:e5:fb:45:47:53:a6:b9:48:08:0b:f7:c5:a1:4c:81:18: 6f:fb:83:91:6f:3c:cd:a6:ba:30:e1:30:cb:03:55:88:80:e8: f4:b1:45:0b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2RjIxMTAvBgNVBAUTKDY0QjY4NkIwNURDQkU4QkVBOTI4MDc1MzJERTI5QTc3 OTA1MTU2RjUwHhcNMjMwODAxMDEwMTU0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGM4NTk4Mi1iYzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzXfW0g+MwH69QR9u/lK+frefZ4+5bDl6j/xvKAAFTaVowdKdylnLxmbfO98 wcZlIVzhY1IHCxfOQVwgVOa7vr5TlZXEpgzWtnNcyly0SSN4iHa8WsG0srd2xRph Gz4DXBt8oa5yeAP5Ey/4jfP7Ug5UqsaJkiHt9klkRtaikgYvHmvpuxhQ/Iehg11Z sWAgt3IwjaoCXKg3QDUMp1hoYvp+SALn5zGBZqbTE0r0rm7FJRJhF8J1nskJQ2vA PijsawndQh9okGh6F7WUGVw7khN4OZiwRjcJY5dbfPRoye+qoQ7d+MEJKyJJctsq /wszUXua9g1T9IM36MREEwy88wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFiO/NUs puJaabSDrEL/iaEaDu6FMB8GA1UdIwQYMBaAFGS2hrBdy+i+qSgHUy3imneQUVb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzZGMi8yQkU0M0RBMENC MkMxMUVCQkMzNUM0NDBDNEY5QUUwMi9aTGFHc0YzTDZMNnBLQWRUTGVLYWQ1QlJW dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pMYUdzRjNMNkw2cEtBZFRMZUthZDVCUlZ2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc2RjIvMkJFNDNEQTBDQjJDMTFFQkJDMzVDNDQwQzRGOUFFMDIvQzg3NEE3QzAw NTg1MTFFQ0EzMjEyRjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnQjgDBAJn5KgwDQYJKoZIhvcNAQELBQADggEBAFYJIm++ 3VZT/3PbvSTwcgMQd25AlpGlykcpND0yu0/+ycmXxTfNdRnQPwLYFzChZZtUtdLF aiuB7OPzyNtgRq0uVzh7PsuGirbp/H1WnUJdZnbpCRjDzdyEMhwSFYfxjHubz8V8 wYMozkIHLbRJknWuVLkq6Xyv8MrtyeyUJKGsyZlySKMeduUWaz1/WTN+bpTqw0yM 9Tg05TALXAi+p5XhniSASjEK+9ldoEhgcAXssv4ron7ZRHoNUnEiy5BF4Nx9muig 0kLnH7Vuk7yw9sumUXGl+kDxpnOU5ftFR1OmuUgIC/fFoUyBGG/7g5FvPM2mujDh MMsDVYiA6PSxRQs= -----END CERTIFICATE-----Generated at Thu Apr 25 02:05:25 2024 by rpki-client on console-fra.rpki-client.org