$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/B0425744D7E211ECBD1D447FC4F9AE02.roa File: B0425744D7E211ECBD1D447FC4F9AE02.roa (raw, json) Hash identifier: SpHAj3YhaNQhZZDgKZjsIMSyKIiL010U5N0b38nH1Ug= Subject key identifier: 15:00:97:65:7C:36:E2:00:40:E1:BC:C0:9A:8F:41:AE:81:FB:07:5D Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Certificate serial: 065C Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/B0425744D7E211ECBD1D447FC4F9AE02.roa Signing time: Wed 02 Aug 2023 22:19:37 +0000 ROA not before: Wed 02 Aug 2023 22:19:37 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 2519 IP address blocks: 43.231.220.0/22 maxlen: 22 43.251.48.0/22 maxlen: 22 103.3.28.0/22 maxlen: 22 103.8.240.0/22 maxlen: 22 103.20.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1628 (0x65c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Validity Not Before: Aug 2 22:19:37 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64cad679-0967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c0:1c:30:a3:8d:bf:71:f3:90:8d:eb:00:a2: 7e:39:94:48:ef:4f:9c:25:99:63:21:86:ec:1a:c6: 89:39:78:17:9f:29:3d:2e:73:ec:36:5e:1c:d2:42: ea:c3:55:96:6f:46:51:0f:ac:c2:0c:e8:f2:4d:77: 16:8a:55:97:60:d0:dc:72:3f:71:26:46:30:99:fe: 2c:42:19:76:ab:1d:e2:59:c4:37:35:50:5f:aa:bd: f4:c3:dc:52:db:80:f5:eb:f1:c4:64:1f:4c:e0:f1: 1d:b3:f6:77:11:14:91:dc:36:d8:10:4e:1f:d9:ef: 89:50:06:15:4a:67:61:11:a7:bc:ce:35:54:a8:d8: 5f:b9:2c:e3:58:04:5f:e3:de:1e:67:e3:60:63:62: b8:27:77:86:2f:42:ce:98:3d:c4:8b:a4:e5:7a:5f: 86:37:4d:04:5c:99:d1:92:e5:be:75:01:fb:e1:87: 87:a9:e8:cd:11:e8:c8:ef:b8:34:0e:df:d5:63:12: 93:f3:69:21:70:54:c5:3a:75:00:fc:ab:4c:1a:df: 1d:41:aa:0d:57:83:4d:af:5a:64:b8:52:a0:d3:46: 86:d6:98:2c:e7:18:19:4b:a2:85:09:f5:be:0e:1f: 41:1b:eb:c2:c8:e7:1b:3c:23:16:6d:18:42:6e:16: 31:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:00:97:65:7C:36:E2:00:40:E1:BC:C0:9A:8F:41:AE:81:FB:07:5D X509v3 Authority Key Identifier: keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/B0425744D7E211ECBD1D447FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.220.0/22 43.251.48.0/22 103.3.28.0/22 103.8.240.0/22 103.20.156.0/22 Signature Algorithm: sha256WithRSAEncryption 96:e1:48:b0:1a:1a:ef:d8:c3:ed:8b:e4:07:50:1a:1a:11:ee: 5b:12:40:72:54:9f:70:a6:cc:af:3d:66:87:cb:f2:74:93:53: 2b:93:cd:0f:45:91:a1:9a:b0:57:d8:e4:c5:db:cc:60:65:aa: d4:da:aa:33:b7:05:b1:9f:ce:d3:f5:f6:94:2a:40:6a:ca:16: be:17:aa:c8:cb:6e:9e:59:3d:16:63:55:17:b5:03:cf:50:8d: 04:5a:3e:69:1a:cf:f1:41:67:00:73:8a:28:6c:2b:1f:03:d7: 33:fe:53:2e:1e:06:8a:db:2e:9d:34:c3:be:c8:26:5c:8a:46: 2a:eb:b5:e5:50:7b:d4:ac:70:26:ce:34:73:45:cd:6c:0e:bd: 5a:a6:db:fa:24:b2:73:fc:98:b6:5b:8f:2d:15:2a:c2:f8:93: 4a:2b:ab:b4:97:f6:e8:89:9d:72:4d:8b:71:a9:9d:1c:18:d0: 75:81:ec:a6:52:5e:a0:07:11:1f:52:72:51:70:f8:97:59:a1: 44:e6:e1:74:6b:4c:83:b2:30:f7:7e:e1:35:a9:59:2e:4c:5e: 53:7e:d9:ea:a4:a5:92:61:d3:8a:4e:77:ff:1e:60:59:06:a5: 90:cb:c4:af:df:52:13:12:97:3d:33:68:1b:d1:8d:33:ea:b7: eb:42:01:de -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD RDI2QkQ2QkMwHhcNMjMwODAyMjIxOTM3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNhZDY3OS0wOTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8AcMKONv3HzkI3rAKJ+OZRI70+cJZljIYbsGsaJOXgXnyk9LnPsNl4c0kLq w1WWb0ZRD6zCDOjyTXcWilWXYNDccj9xJkYwmf4sQhl2qx3iWcQ3NVBfqr30w9xS 24D16/HEZB9M4PEds/Z3ERSR3DbYEE4f2e+JUAYVSmdhEae8zjVUqNhfuSzjWARf 494eZ+NgY2K4J3eGL0LOmD3Ei6Tlel+GN00EXJnRkuW+dQH74YeHqejNEejI77g0 Dt/VYxKT82khcFTFOnUA/KtMGt8dQaoNV4NNr1pkuFKg00aG1pgs5xgZS6KFCfW+ Dh9BG+vCyOcbPCMWbRhCbhYxswIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFBUAl2V8 NuIAQOG8wJqPQa6B+wddMB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3 OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQxRTkvREFEOEZCODAwNzkwMTFFQkJCOThDMDc2QzRGOUFFMDIvQjA0MjU3NDRE N0UyMTFFQ0JEMUQ0NDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAIr59wDBAIr+zADBAJnAxwDBAJnCPADBAJnFJwwDQYJKoZI hvcNAQELBQADggEBAJbhSLAaGu/Yw+2L5AdQGhoR7lsSQHJUn3CmzK89ZofL8nST UyuTzQ9FkaGasFfY5MXbzGBlqtTaqjO3BbGfztP19pQqQGrKFr4XqsjLbp5ZPRZj VRe1A89QjQRaPmkaz/FBZwBziihsKx8D1zP+Uy4eBorbLp00w77IJlyKRirrteVQ e9SscCbONHNFzWwOvVqm2/oksnP8mLZbjy0VKsL4k0orq7SX9uiJnXJNi3GpnRwY 0HWB7KZSXqAHER9SclFw+JdZoUTm4XRrTIOyMPd+4TWpWS5MXlN+2eqkpZJh04pO d/8eYFkGpZDLxK/fUhMSlz0zaBvRjTPqt+tCAd4= -----END CERTIFICATE-----Generated at Tue May 7 01:58:24 2024 by rpki-client on console-fra.rpki-client.org