$ rpki-client -vvf rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/E82DE3C290AB11ECAB81252FC4F9AE02.roa File: E82DE3C290AB11ECAB81252FC4F9AE02.roa (raw, json) Hash identifier: ymHEjZOmPNaZts/l9PmvTxzpZ65sqlxazk8ZELgre0M= Subject key identifier: 85:0E:19:8C:17:ED:6E:89:0A:01:47:CA:05:46:7E:26:03:44:1D:C5 Certificate issuer: /CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89 Certificate serial: 032A Authority key identifier: 89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/E82DE3C290AB11ECAB81252FC4F9AE02.roa Signing time: Fri 01 Dec 2023 02:54:31 +0000 ROA not before: Fri 01 Dec 2023 02:54:31 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 148968 IP address blocks: 103.174.228.0/23 maxlen: 24 202.130.206.0/24 maxlen: 24 203.12.29.0/24 maxlen: 24 2001:df7:d980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 810 (0x32a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89 Validity Not Before: Dec 1 02:54:31 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65694ae6-6e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:aa:11:b4:bc:ae:d3:0f:8e:3f:0c:56:51:fc: 35:a5:6c:a8:92:15:58:9b:68:18:cf:3f:14:cf:3d: b8:38:4a:64:ca:19:23:99:26:08:a1:c8:19:1f:a4: b8:80:c2:dc:ad:72:48:3e:d9:74:6e:d4:15:d5:4f: 5f:ae:99:cd:17:0f:dd:7c:5f:7f:5b:6a:55:06:f3: 75:0e:b9:9c:29:16:03:95:2c:82:dd:d3:36:45:72: 11:57:67:18:0c:be:60:09:cd:3f:68:62:55:59:4d: 54:51:ca:ca:e8:fe:2c:c9:e9:eb:b1:4e:c7:fd:76: 50:a1:79:04:49:7c:3e:1f:f7:88:97:1d:32:d6:a8: 8e:29:da:3b:fe:78:b0:3e:17:58:42:0e:f0:74:a7: ef:8e:26:e7:97:1f:52:50:1a:21:61:8a:0b:71:3e: 35:69:eb:fe:35:ee:a7:89:16:19:fc:d3:4c:8b:3c: 16:1a:b3:f1:f2:e0:35:b3:ee:86:b0:5e:43:34:33: 7e:8d:f1:75:40:9b:1d:fa:6c:67:3e:dd:56:c0:af: 63:2f:dc:16:a9:b2:07:da:c3:ab:6f:27:ca:55:7d: e3:28:b8:73:62:17:0f:57:89:6b:d7:5e:be:23:50: a8:88:e0:c2:79:d0:5c:1f:14:b8:54:c6:46:7a:55: 21:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0E:19:8C:17:ED:6E:89:0A:01:47:CA:05:46:7E:26:03:44:1D:C5 X509v3 Authority Key Identifier: keyid:89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/E82DE3C290AB11ECAB81252FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.228.0/23 202.130.206.0/24 203.12.29.0/24 IPv6: 2001:df7:d980::/48 Signature Algorithm: sha256WithRSAEncryption 4a:10:bc:16:6d:69:12:aa:c1:47:b6:ef:48:0e:da:d5:ff:3f: 2d:a3:e0:ed:0a:55:4b:6d:2f:28:3b:ae:75:29:c7:7b:35:a0: a4:90:6f:ea:4d:2c:66:0b:43:e6:62:fe:e6:74:49:cf:f7:b0: 1b:41:04:7b:20:c8:29:b0:12:e2:66:d4:51:54:05:e0:b0:b1: 61:9d:90:0a:47:b4:84:9d:43:66:06:1c:32:0d:44:6d:4b:01: 43:d1:81:76:bc:c6:12:75:84:36:71:12:f2:3a:19:e8:38:c5: 66:ae:52:9f:5d:91:d1:f3:0e:09:99:3b:27:78:4e:90:d4:a5: 06:90:e6:b1:39:0a:49:53:83:7b:6f:55:1e:ce:7b:65:1a:d6: a6:45:cf:d2:e8:8d:26:1b:1b:5f:96:fa:b5:67:b5:92:38:c0: 5b:da:70:d7:f4:df:9f:a7:c3:c4:7b:0c:e0:e1:c5:35:d8:9d: 47:f9:47:b7:6f:47:2d:e7:5f:9d:30:23:ea:27:f4:2b:31:83: a2:35:59:ac:55:6f:31:93:31:da:12:b9:85:c2:e8:5c:98:79: c6:db:60:e1:74:e0:48:2b:92:f0:4a:70:ec:93:0e:d0:9e:df: 86:aa:41:cd:63:1a:16:97:c4:4e:e8:4b:93:73:14:ab:71:f7: 65:37:ea:06 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICAyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5MUIxMTAvBgNVBAUTKDg5QTE5N0QwOTc2ODlDNkVCMzM4NjdBOUNDOEFDQ0Q3 RkIzNjRFODkwHhcNMjMxMjAxMDI1NDMxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY5NGFlNi02ZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5KoRtLyu0w+OPwxWUfw1pWyokhVYm2gYzz8Uzz24OEpkyhkjmSYIocgZH6S4 gMLcrXJIPtl0btQV1U9frpnNFw/dfF9/W2pVBvN1DrmcKRYDlSyC3dM2RXIRV2cY DL5gCc0/aGJVWU1UUcrK6P4syenrsU7H/XZQoXkESXw+H/eIlx0y1qiOKdo7/niw PhdYQg7wdKfvjibnlx9SUBohYYoLcT41aev+Ne6niRYZ/NNMizwWGrPx8uA1s+6G sF5DNDN+jfF1QJsd+mxnPt1WwK9jL9wWqbIH2sOrbyfKVX3jKLhzYhcPV4lr116+ I1CoiODCedBcHxS4VMZGelUh/wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFIUOGYwX 7W6JCgFHygVGfiYDRB3FMB8GA1UdIwQYMBaAFImhl9CXaJxuszhnqcyKzNf7Nk6J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTkxQi83RDBDMzdEMDYw NDMxMUVDOEQzNzUxMEVDNEY5QUUwMi9pYUdYMEpkb25HNnpPR2VweklyTTFfczJU b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhR1gwSmRvbkc2ek9HZXB6SXJNMV9zMlRvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk5MUIvN0QwQzM3RDA2MDQzMTFFQzhEMzc1MTBFQzRGOUFFMDIvRTgyREUzQzI5 MEFCMTFFQ0FCODEyNTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAFnruQDBADKgs4DBADLDB0wDwQCAAIwCQMHACABDffZgDAN BgkqhkiG9w0BAQsFAAOCAQEAShC8Fm1pEqrBR7bvSA7a1f8/LaPg7QpVS20vKDuu dSnHezWgpJBv6k0sZgtD5mL+5nRJz/ewG0EEeyDIKbAS4mbUUVQF4LCxYZ2QCke0 hJ1DZgYcMg1EbUsBQ9GBdrzGEnWENnES8joZ6DjFZq5Sn12R0fMOCZk7J3hOkNSl BpDmsTkKSVODe29VHs57ZRrWpkXP0uiNJhsbX5b6tWe1kjjAW9pw1/Tfn6fDxHsM 4OHFNdidR/lHt29HLedfnTAj6if0KzGDojVZrFVvMZMx2hK5hcLoXJh5xttg4XTg SCuS8Epw7JMO0J7fhqpBzWMaFpfETuhLk3MUq3H3ZTfqBg== -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org