$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/DFEA30745C3011EEB250DE0EC4F9AE02.roa File: DFEA30745C3011EEB250DE0EC4F9AE02.roa (raw, json) Hash identifier: cTSrLheCGGRQ/E8bldowJz9Xd3wsB7QLr/NetAYA5V8= Subject key identifier: 5E:01:F6:C7:5D:3A:B1:F2:E8:23:36:68:C5:3F:0C:35:58:6B:52:CB Certificate issuer: /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Certificate serial: 0744 Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/DFEA30745C3011EEB250DE0EC4F9AE02.roa Signing time: Tue 26 Sep 2023 05:55:04 +0000 ROA not before: Tue 26 Sep 2023 05:55:04 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 135580 IP address blocks: 45.255.252.0/22 maxlen: 24 103.65.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Validity Not Before: Sep 26 05:55:04 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=65127238-9d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:08:f0:01:bb:13:b8:14:49:87:11:92:b6:b6: 20:dc:57:68:83:3f:7c:76:32:87:9a:80:0f:19:94: 10:6f:8c:bf:cd:d4:3f:4c:f1:cc:c4:dd:7f:7c:59: 89:a0:33:c4:52:b9:53:f4:07:25:8d:e8:31:05:62: 84:8c:25:3e:8d:0b:b2:ad:23:0a:7c:fc:d1:a1:a0: b7:27:67:a8:c8:fb:a0:ce:24:ca:3c:4a:e5:17:19: c5:96:e0:81:0a:e7:d7:82:f6:41:0c:b6:51:8f:72: cd:c4:34:e8:de:8d:db:76:b3:22:5c:64:10:5b:19: 28:c3:ba:c8:bf:81:b9:e4:2e:bd:49:ce:00:fc:75: 54:17:12:73:18:9c:3f:f2:f1:74:87:9e:08:1f:b9: 9f:a0:af:f5:96:82:aa:b0:f0:c4:98:d7:06:bb:27: f1:22:54:93:9c:aa:ef:1b:78:5c:c2:31:84:53:f2: b5:a6:01:e6:19:4d:45:e4:5a:e8:20:f6:2e:6f:a3: 88:65:3c:e9:c2:54:57:87:d7:a8:3c:8e:4a:79:b9: 7a:cd:af:c9:09:0a:a0:7d:96:30:9e:84:9d:92:b1: ad:31:00:c3:0b:fa:9d:3d:91:db:09:b8:ad:b1:b2: e8:16:8b:44:9f:0f:00:c4:1f:86:41:83:9c:e9:ae: 94:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:01:F6:C7:5D:3A:B1:F2:E8:23:36:68:C5:3F:0C:35:58:6B:52:CB X509v3 Authority Key Identifier: keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/DFEA30745C3011EEB250DE0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.255.252.0/22 103.65.176.0/22 Signature Algorithm: sha256WithRSAEncryption 30:e0:4d:71:99:ef:e2:7c:05:fe:ae:56:19:bc:f4:15:b8:81: 72:e8:8b:b0:77:ff:0a:04:97:af:ac:ac:9e:80:69:7a:da:3f: 1e:9c:4e:8e:52:d3:fe:cb:e1:89:da:29:50:f5:b9:ef:8b:38: b2:53:34:de:21:44:7c:a2:8f:4e:8e:1c:4b:07:1f:ca:a4:bc: 92:1e:8c:6e:4a:90:fa:3d:f4:9c:84:c9:91:6a:10:27:21:80: 9d:f6:83:60:dd:4e:5a:7a:b0:b5:78:d4:c8:8e:7a:73:82:2d: 95:e4:1d:50:0e:54:8b:87:8f:12:f5:c7:dc:1d:0c:52:20:0d: 0f:ba:89:41:97:5a:77:76:ab:3c:9c:46:3b:4d:0e:2c:e6:71: 8b:34:7c:d0:23:ec:dd:c4:01:bb:92:a8:2a:b4:ee:05:54:84: 12:7b:2e:86:0d:9a:46:4b:45:9b:8e:58:dc:76:ec:33:22:84: 3c:01:f0:8e:29:0c:7d:57:49:b4:f2:85:5a:3d:e0:99:ae:e8: cc:a8:b4:ae:54:5e:95:ea:95:24:8a:bc:ea:cb:57:d1:10:29: db:0e:38:f5:1d:2b:3d:df:00:c4:84:27:e4:f6:2e:a9:52:b3: 00:40:19:ea:e5:b1:78:63:2b:9f:33:2f:68:5c:32:2f:9b:80: fb:f8:a7:bd -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQzIxMTAvBgNVBAUTKDNEMzg5MUE0NkNCQ0JBQjQ3NDc4REVBNDBEMjkwOEY2 N0NDRTNCMkEwHhcNMjMwOTI2MDU1NTA0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEyNzIzOC05ZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wjwAbsTuBRJhxGStrYg3Fdogz98djKHmoAPGZQQb4y/zdQ/TPHMxN1/fFmJ oDPEUrlT9AcljegxBWKEjCU+jQuyrSMKfPzRoaC3J2eoyPugziTKPErlFxnFluCB CufXgvZBDLZRj3LNxDTo3o3bdrMiXGQQWxkow7rIv4G55C69Sc4A/HVUFxJzGJw/ 8vF0h54IH7mfoK/1loKqsPDEmNcGuyfxIlSTnKrvG3hcwjGEU/K1pgHmGU1F5Fro IPYub6OIZTzpwlRXh9eoPI5Kebl6za/JCQqgfZYwnoSdkrGtMQDDC/qdPZHbCbit sbLoFotEnw8AxB+GQYOc6a6UKQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFF4B9sdd OrHy6CM2aMU/DDVYa1LLMB8GA1UdIwQYMBaAFD04kaRsvLq0dHjepA0pCPZ8zjsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVDMi8yRERERDI2Q0My QzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVyUjBlTjZrRFNrSTluek9P eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUaVJwR3k4dXJSMGVONmtEU2tJOW56T095by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQzIvMkREREQyNkNDMkMwMTFFQTkzRDU4NTdGQzRGOUFFMDIvREZFQTMwNzQ1 QzMwMTFFRUIyNTBERTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIt//wDBAJnQbAwDQYJKoZIhvcNAQELBQADggEBADDgTXGZ 7+J8Bf6uVhm89BW4gXLoi7B3/woEl6+srJ6AaXraPx6cTo5S0/7L4YnaKVD1ue+L OLJTNN4hRHyij06OHEsHH8qkvJIejG5KkPo99JyEyZFqECchgJ32g2DdTlp6sLV4 1MiOenOCLZXkHVAOVIuHjxL1x9wdDFIgDQ+6iUGXWnd2qzycRjtNDizmcYs0fNAj 7N3EAbuSqCq07gVUhBJ7LoYNmkZLRZuOWNx27DMihDwB8I4pDH1XSbTyhVo94Jmu 6MyotK5UXpXqlSSKvOrLV9EQKdsOOPUdKz3fAMSEJ+T2LqlSswBAGerlsXhjK58z L2hcMi+bgPv4p70= -----END CERTIFICATE-----Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org