$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/59029A32233A11E78D48837AC4F9AE02.roa File: 59029A32233A11E78D48837AC4F9AE02.roa (raw, json) Hash identifier: SHKOiZvRqjIWYHVBj0oxqj9M0CGAoo/R2Q0qC7ApZIE= Subject key identifier: 81:2B:A3:8A:1F:2E:6E:A5:CC:3C:A5:F7:D5:B7:12:B0:80:9A:B3:6D Certificate issuer: /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Certificate serial: 197E Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/59029A32233A11E78D48837AC4F9AE02.roa Signing time: Wed 24 May 2023 17:15:47 +0000 ROA not before: Wed 24 May 2023 17:15:47 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 45766 IP address blocks: 43.251.84.0/22 maxlen: 24 103.216.56.0/22 maxlen: 22 103.216.56.0/22 maxlen: 24 103.216.56.0/23 maxlen: 23 103.216.56.0/23 maxlen: 24 103.216.56.0/24 maxlen: 24 103.216.57.0/24 maxlen: 24 103.216.58.0/23 maxlen: 23 103.216.58.0/23 maxlen: 24 103.216.58.0/24 maxlen: 24 103.216.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 16:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6526 (0x197e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Validity Not Before: May 24 17:15:47 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=646e4643-4f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:62:ae:3a:9d:82:a4:2b:aa:97:f4:f4:d8: 55:31:24:44:05:33:d2:0f:14:a4:b4:3f:bd:40:99: 43:1e:ba:73:50:2e:5d:68:24:db:4b:b1:b4:fd:cd: f5:bc:30:40:c9:11:e5:a8:12:da:a9:91:07:ac:d4: 34:dc:6b:88:f8:a0:ad:92:42:7b:4d:cd:07:9c:9f: 7b:a0:af:8d:75:d1:34:97:f0:64:c7:e8:c3:32:8e: 1b:0d:fc:c8:cd:b2:9c:2c:71:e2:39:06:5b:92:22: 97:ec:c9:f4:27:a9:a4:7e:d7:6e:47:8e:a7:79:9f: ab:52:4b:1a:6a:84:d1:cf:49:d8:7e:c9:55:fb:58: 2b:bf:53:a9:41:47:be:ff:60:20:51:45:4e:9f:24: 74:92:6d:2c:ad:73:20:75:ed:01:c2:c5:39:c0:54: 33:41:ae:04:6b:6c:eb:c4:fa:64:01:1c:69:74:c3: f6:e6:fb:3f:af:44:24:f3:4a:0d:dc:21:90:11:7c: 39:4f:42:1e:a7:e4:76:f5:51:8b:f8:88:8b:57:da: e9:2d:d4:28:9d:04:28:b6:8d:38:ca:72:aa:fb:cc: 50:44:3c:c2:f7:0d:f9:dc:41:95:96:f6:ea:fc:60: de:a3:46:70:8e:25:20:b1:84:22:e6:5a:a5:eb:2d: 53:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2B:A3:8A:1F:2E:6E:A5:CC:3C:A5:F7:D5:B7:12:B0:80:9A:B3:6D X509v3 Authority Key Identifier: keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/59029A32233A11E78D48837AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.84.0/22 103.216.56.0/22 Signature Algorithm: sha256WithRSAEncryption 44:bd:40:aa:86:d6:f2:14:2d:2c:d0:8f:c1:6f:9d:68:d0:8e: 25:22:e7:8c:7e:b6:1f:c0:9c:e2:e1:82:e4:20:a7:79:98:71: 8d:cd:eb:81:f3:9b:a4:de:84:e7:71:55:64:73:8d:e6:5d:b8: cd:9f:f5:b8:e9:05:f6:13:73:1a:5e:3a:1f:ca:c9:cf:dd:a4: e2:e2:29:9b:08:35:42:4d:9c:bd:98:2e:f1:56:8c:72:1e:f6: 46:04:e9:c7:a5:40:3b:64:fd:14:ea:07:c8:ef:c4:58:56:ad: 2f:3d:84:ee:7f:72:26:b2:4e:af:cc:63:97:60:2c:f5:5e:11: ef:ac:f8:4f:ef:1a:91:d3:c7:f5:f3:f6:a5:ff:f2:a7:12:ad: cb:43:74:31:71:ba:de:ef:9b:75:ed:74:98:fd:af:f5:34:ca: f7:30:af:c4:e9:24:3f:da:e0:ee:a9:b8:5f:ee:89:0e:12:ad: be:79:4a:8e:1a:1f:95:a1:eb:71:9b:70:7f:87:68:ba:f7:09: 28:d3:ea:ff:8b:db:33:a9:d9:2f:2e:47:2b:da:48:bc:67:ee: 76:b6:8b:f7:0f:7c:12:b5:c9:77:72:aa:d4:69:dd:00:fe:5c: 6a:78:f1:6f:ca:2c:43:21:0c:4a:69:de:f3:9a:dc:fb:b4:78: c1:50:d0:0b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICGX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NkQxMTAvBgNVBAUTKEJEOEY1MzgxRTE4OEU0NTgwRkIyNDcyQzI3MUEwNTQy OUUyRDVDMjIwHhcNMjMwNTI0MTcxNTQ3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDZlNDY0My00ZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtp9irjqdgqQrqpf09NhVMSREBTPSDxSktD+9QJlDHrpzUC5daCTbS7G0/c31 vDBAyRHlqBLaqZEHrNQ03GuI+KCtkkJ7Tc0HnJ97oK+NddE0l/Bkx+jDMo4bDfzI zbKcLHHiOQZbkiKX7Mn0J6mkftduR46neZ+rUksaaoTRz0nYfslV+1grv1OpQUe+ /2AgUUVOnyR0km0srXMgde0BwsU5wFQzQa4Ea2zrxPpkARxpdMP25vs/r0Qk80oN 3CGQEXw5T0Iep+R29VGL+IiLV9rpLdQonQQoto04ynKq+8xQRDzC9w353EGVlvbq /GDeo0ZwjiUgsYQi5lql6y1TBwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIEro4of Lm6lzDyl99W3ErCAmrNtMB8GA1UdIwQYMBaAFL2PU4HhiORYD7JHLCcaBUKeLVwi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY2RC8xRUIwOTI1NDIz MzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVGZ1Bza2NzSnhvRlFwNHRY Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZOVRnZUdJNUZnUHNrY3NKeG9GUXA0dFhDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ2NkQvMUVCMDkyNTQyMzM5MTFFN0EwNkIyNTc5QzRGOUFFMDIvNTkwMjlBMzIy MzNBMTFFNzhENDg4MzdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+1QDBAJn2DgwDQYJKoZIhvcNAQELBQADggEBAES9QKqG 1vIULSzQj8FvnWjQjiUi54x+th/AnOLhguQgp3mYcY3N64Hzm6TehOdxVWRzjeZd uM2f9bjpBfYTcxpeOh/Kyc/dpOLiKZsINUJNnL2YLvFWjHIe9kYE6celQDtk/RTq B8jvxFhWrS89hO5/ciayTq/MY5dgLPVeEe+s+E/vGpHTx/Xz9qX/8qcSrctDdDFx ut7vm3XtdJj9r/U0yvcwr8TpJD/a4O6puF/uiQ4Srb55So4aH5Wh63GbcH+HaLr3 CSjT6v+L2zOp2S8uRyvaSLxn7na2i/cPfBK1yXdyqtRp3QD+XGp48W/KLEMhDEpp 3vOa3Pu0eMFQ0As= -----END CERTIFICATE-----Generated at Tue May 14 19:55:13 2024 by rpki-client on console-fra.rpki-client.org