$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/673DC29606B011EFA665703AC4F9AE02.roa File: 673DC29606B011EFA665703AC4F9AE02.roa (raw, json) Hash identifier: YxKLoyNGvSvfT0xAnWYwcM9ka4knxwtNruW725q0CuA= Subject key identifier: 46:28:86:03:14:85:FD:C1:23:01:D8:9A:74:3F:9E:C7:4B:D4:77:C0 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 33C0 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/673DC29606B011EFA665703AC4F9AE02.roa Signing time: Tue 30 Apr 2024 05:13:39 +0000 ROA not before: Tue 30 Apr 2024 05:13:39 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 17559 IP address blocks: 43.224.60.0/22 maxlen: 22 103.80.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13248 (0x33c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Apr 30 05:13:39 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=66307e03-2ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:67:83:3b:e2:5a:76:a1:3b:c4:b8:c5:71:2c: 2c:af:61:2a:64:cd:4d:ba:2a:6b:a9:9a:80:9b:32: f7:3f:1f:4f:b2:6a:8d:ea:cb:5c:db:8c:32:95:b5: a2:2b:f1:ae:2c:67:6b:1f:dc:86:4b:89:9f:5d:fa: 2d:66:71:db:bb:f2:a1:26:5b:17:12:4b:d4:e2:66: 1a:bb:b9:e5:aa:e9:52:6d:7c:56:04:62:45:5e:b0: 55:1c:70:8b:f8:79:ae:86:4a:25:08:df:c8:82:cb: aa:ac:46:de:3a:f3:03:11:6c:d8:e1:42:0e:52:be: bb:13:0b:52:8c:e5:a0:94:e0:46:8f:27:79:8a:bd: 98:74:63:83:b3:8f:db:39:dc:36:fb:c5:60:81:3c: 0c:a1:bf:3a:78:52:45:a8:7d:6d:e0:d2:87:47:98: a3:29:d1:ed:85:a3:7b:ee:b9:fa:08:6d:30:55:4a: e4:3e:41:fc:cd:cc:49:4e:09:2d:33:20:f3:2d:1f: 8b:53:c1:bf:bd:65:33:f1:63:e2:22:a8:19:a9:cb: 8f:2c:ce:1b:e2:73:fc:47:f8:5c:87:e7:cf:d4:ed: 0e:87:a2:1f:19:2f:d5:93:79:64:81:62:38:e2:b0: aa:fe:89:b4:a0:5d:93:c6:df:fd:ac:66:ae:fa:e0: 0e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:28:86:03:14:85:FD:C1:23:01:D8:9A:74:3F:9E:C7:4B:D4:77:C0 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/673DC29606B011EFA665703AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.60.0/22 103.80.40.0/22 Signature Algorithm: sha256WithRSAEncryption a5:54:c3:07:98:2d:c5:7a:0c:10:00:90:37:e2:0a:83:14:39: cb:4f:db:8a:72:96:76:f8:67:20:f4:25:22:7c:0d:8a:4f:aa: 24:b7:49:fe:97:45:f9:3c:42:ea:c7:9b:1e:b8:4d:31:b8:ef: ff:ad:64:5c:d6:49:59:82:2a:b8:18:b1:ed:ce:c7:f3:0b:93: cd:14:6c:1e:fc:42:2f:b8:b8:6f:7e:93:1d:05:fa:d8:d5:e4: 6e:2b:a8:c1:6b:9c:04:c9:8f:0a:24:51:69:7a:59:8f:6a:7c: 68:67:71:0c:4a:ba:b0:c2:00:94:d4:ec:4b:df:fe:c6:e1:84: 36:68:9c:38:1f:1a:1e:9c:e6:c2:02:89:db:7c:5c:57:dc:7c: 30:ed:ff:4a:2d:cc:15:c8:b1:16:93:06:e3:2a:17:e7:2a:8f: bd:b1:2c:8b:57:73:0f:07:ae:f0:f2:16:bf:10:d1:98:7e:98: 7e:4e:28:49:f8:00:8e:af:e4:0b:dc:32:a3:80:7c:da:69:13: c3:8b:05:e0:74:00:a1:52:f4:74:7e:70:d6:0d:84:92:2c:b0: 49:b9:07:48:0b:36:6a:4b:59:a9:ca:d8:8c:21:b4:eb:99:83: 00:c5:e2:40:2d:43:76:b4:2e:04:ce:1c:23:9a:90:0e:33:47: 59:8f:cc:52 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICM8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjQwNDMwMDUxMzM5WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMwN2UwMy0yZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlmeDO+JadqE7xLjFcSwsr2EqZM1NuiprqZqAmzL3Px9PsmqN6stc24wylbWi K/GuLGdrH9yGS4mfXfotZnHbu/KhJlsXEkvU4mYau7nlqulSbXxWBGJFXrBVHHCL +HmuhkolCN/IgsuqrEbeOvMDEWzY4UIOUr67EwtSjOWglOBGjyd5ir2YdGODs4/b Odw2+8VggTwMob86eFJFqH1t4NKHR5ijKdHthaN77rn6CG0wVUrkPkH8zcxJTgkt MyDzLR+LU8G/vWUz8WPiIqgZqcuPLM4b4nP8R/hch+fP1O0Oh6IfGS/Vk3lkgWI4 4rCq/om0oF2Txt/9rGau+uAOYQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEYohgMU hf3BIwHYmnQ/nsdL1HfAMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUQ4Q0IvMzI4RUQxNTQxRDhCMTFFMjkwNDlCQ0U1MDhCMDJDRDIvNjczREMyOTYw NkIwMTFFRkE2NjU3MDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr4DwDBAJnUCgwDQYJKoZIhvcNAQELBQADggEBAKVUwweY LcV6DBAAkDfiCoMUOctP24pylnb4ZyD0JSJ8DYpPqiS3Sf6XRfk8QurHmx64TTG4 7/+tZFzWSVmCKrgYse3Ox/MLk80UbB78Qi+4uG9+kx0F+tjV5G4rqMFrnATJjwok UWl6WY9qfGhncQxKurDCAJTU7Evf/sbhhDZonDgfGh6c5sICidt8XFfcfDDt/0ot zBXIsRaTBuMqF+cqj72xLItXcw8HrvDyFr8Q0Zh+mH5OKEn4AI6v5AvcMqOAfNpp E8OLBeB0AKFS9HR+cNYNhJIssEm5B0gLNmpLWanK2IwhtOuZgwDF4kAtQ3a0LgTO HCOakA4zR1mPzFI= -----END CERTIFICATE-----Generated at Thu May 16 16:14:59 2024 by rpki-client on console-fra.rpki-client.org