$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/DE56B490143611EEAB1A5D73C4F9AE02.roa File: DE56B490143611EEAB1A5D73C4F9AE02.roa (raw, json) Hash identifier: jnXfSHlWHW/O+hO/ieoSAiqyekCOz3/mZevuImwOi1Q= Subject key identifier: F5:14:DE:46:BD:9F:04:7C:74:04:49:3E:AB:B6:D0:83:46:6B:82:21 Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: F4 Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/DE56B490143611EEAB1A5D73C4F9AE02.roa Signing time: Mon 05 Feb 2024 05:06:36 +0000 ROA not before: Mon 05 Feb 2024 05:06:36 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 134489 IP address blocks: 103.52.34.0/24 maxlen: 24 103.52.35.0/24 maxlen: 24 2001:df1:ac40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: Feb 5 05:06:36 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65c06cdc-def4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:66:82:53:61:d0:b5:d9:c4:96:e8:71:64:c3: 8d:b6:9b:e2:cc:49:db:03:a4:fd:3b:b8:85:9f:a2: f4:96:25:39:4d:a9:f1:55:a2:63:05:cc:19:e0:a5: 3e:1f:b5:8c:e3:74:4b:e7:f9:5f:2d:3d:88:93:a2: 42:76:36:07:eb:56:1e:bc:a4:01:87:d2:f6:02:63: 54:5e:f9:54:c0:d0:c1:68:23:f4:37:19:f8:85:c9: 7e:82:ac:46:91:cd:3c:4d:20:fa:53:83:fb:5a:ec: 90:51:a6:5d:ea:e1:b1:8d:55:cb:52:84:a6:01:99: 5f:5b:ff:04:86:dd:e5:01:13:7f:f3:7d:84:35:77: 6b:f2:46:93:37:31:b1:b0:32:27:05:52:66:4d:c1: aa:6c:4e:16:3e:ff:fd:9b:dc:9f:f7:d0:a3:2c:4b: 41:ca:39:b9:85:f1:78:c3:08:5f:46:5c:97:32:ed: cb:b3:b1:97:9b:df:9d:e6:6f:b7:7a:50:77:dd:7a: ed:29:92:60:e2:70:3d:8a:de:9f:40:4a:04:96:80: 6e:4b:86:f5:c2:14:7e:2d:8c:f0:1b:cc:ca:6c:5a: 22:1a:06:e7:18:f7:02:8b:94:82:1b:91:84:dd:76: 87:f9:f6:34:6c:8e:88:b9:48:cf:cc:85:9b:ca:d9: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:14:DE:46:BD:9F:04:7C:74:04:49:3E:AB:B6:D0:83:46:6B:82:21 X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/DE56B490143611EEAB1A5D73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.52.34.0/23 IPv6: 2001:df1:ac40::/48 Signature Algorithm: sha256WithRSAEncryption 1f:48:ba:e1:db:a5:c4:b9:d6:3e:00:2c:46:a6:1f:13:a2:71: fe:ac:5a:1d:f2:bb:a8:0e:9c:57:b7:ff:ee:46:59:ea:fb:5a: f0:2d:06:ba:27:c3:3f:fa:10:44:d9:cb:54:a4:3a:7f:0b:c4: 9b:da:bb:e0:40:1d:be:3d:f5:5c:01:8e:bc:19:8a:72:5b:ff: 6e:87:67:e9:7b:ce:f0:ea:45:74:82:9b:74:c9:e0:7a:ee:41: f9:a2:31:5a:74:16:0a:27:21:63:25:77:2e:5c:ee:2d:13:36: dc:dd:0c:2b:1b:0d:9e:af:99:57:05:17:c9:45:3d:51:64:a0: 1f:09:7f:22:ff:13:4d:8a:c1:bc:1f:5b:5a:a7:12:1f:1a:31: 0d:3a:8d:9b:6c:69:4d:22:68:e4:c2:cd:59:bb:80:50:4d:47: 34:61:7d:bc:a5:d7:46:f1:6d:87:0d:cf:f4:b2:6f:48:60:f6: a6:d4:a0:37:ea:d6:04:22:42:fc:9a:41:09:d2:8d:2b:ec:f4: 57:32:23:9e:f2:b5:e0:6c:c2:30:0d:4a:4f:94:2e:03:f8:bc: ee:cc:b3:26:ea:5b:bb:dc:89:d3:6f:cb:cf:f2:b8:70:99:a7: ae:14:2a:eb:ed:f6:77:b6:e4:6f:5b:87:5c:e7:3b:80:b6:93: 60:41:7e:e9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjQwMjA1MDUwNjM2WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWMwNmNkYy1kZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGaCU2HQtdnEluhxZMONtpvizEnbA6T9O7iFn6L0liU5TanxVaJjBcwZ4KU+ H7WM43RL5/lfLT2Ik6JCdjYH61YevKQBh9L2AmNUXvlUwNDBaCP0Nxn4hcl+gqxG kc08TSD6U4P7WuyQUaZd6uGxjVXLUoSmAZlfW/8Eht3lARN/832ENXdr8kaTNzGx sDInBVJmTcGqbE4WPv/9m9yf99CjLEtByjm5hfF4wwhfRlyXMu3Ls7GXm9+d5m+3 elB33XrtKZJg4nA9it6fQEoEloBuS4b1whR+LYzwG8zKbFoiGgbnGPcCi5SCG5GE 3XaH+fY0bI6IuUjPzIWbytmoqwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPUU3ka9 nwR8dARJPqu20INGa4IhMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA4NDgvNjREOEIxREU3N0U0MTFFRDk3RjU5MzREQzRGOUFFMDIvREU1NkI0OTAx NDM2MTFFRUFCMUE1RDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnNCIwDwQCAAIwCQMHACABDfGsQDANBgkqhkiG9w0BAQsF AAOCAQEAH0i64dulxLnWPgAsRqYfE6Jx/qxaHfK7qA6cV7f/7kZZ6vta8C0GuifD P/oQRNnLVKQ6fwvEm9q74EAdvj31XAGOvBmKclv/bodn6XvO8OpFdIKbdMngeu5B +aIxWnQWCichYyV3LlzuLRM23N0MKxsNnq+ZVwUXyUU9UWSgHwl/Iv8TTYrBvB9b WqcSHxoxDTqNm2xpTSJo5MLNWbuAUE1HNGF9vKXXRvFthw3P9LJvSGD2ptSgN+rW BCJC/JpBCdKNK+z0VzIjnvK14GzCMA1KT5QuA/i87syzJupbu9yJ02/Lz/K4cJmn rhQq6+32d7bkb1uHXOc7gLaTYEF+6Q== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org