$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/F959A9A0F11011EB8E63FC73C4F9AE02.roa File: F959A9A0F11011EB8E63FC73C4F9AE02.roa (raw, json) Hash identifier: lgyUxKxQwD/USXERFmZ/C5l2ud571oJQXSeGgzVlXQk= Subject key identifier: C7:9D:8F:53:60:44:34:21:34:FE:54:E4:C2:A2:B0:48:08:41:E5:5A Certificate issuer: /CN=A91AEA8C/serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Certificate serial: 1BDC Authority key identifier: 87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/F959A9A0F11011EB8E63FC73C4F9AE02.roa Signing time: Wed 30 Aug 2023 08:38:41 +0000 ROA not before: Wed 30 Aug 2023 08:38:41 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 133384 IP address blocks: 45.125.4.0/22 maxlen: 22 45.125.4.0/24 maxlen: 24 45.125.5.0/24 maxlen: 24 45.125.6.0/24 maxlen: 24 45.125.7.0/24 maxlen: 24 103.25.240.0/22 maxlen: 22 103.25.240.0/24 maxlen: 24 103.25.241.0/24 maxlen: 24 103.25.242.0/24 maxlen: 24 103.25.243.0/24 maxlen: 24 103.231.92.0/22 maxlen: 22 103.231.92.0/24 maxlen: 24 103.231.93.0/24 maxlen: 24 103.231.94.0/24 maxlen: 24 103.231.95.0/24 maxlen: 24 2001:df0:9200::/48 maxlen: 48 2407:6ec0::/32 maxlen: 32 2407:6ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7132 (0x1bdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEA8C/serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Validity Not Before: Aug 30 08:38:41 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64ef0011-be31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:39:76:0e:63:13:7d:42:5b:04:85:15:ac: 49:98:94:ee:dd:cc:e9:0b:bf:d0:a8:f5:23:e4:ba: 10:78:a5:28:4d:86:45:48:7b:73:ac:21:99:9f:fa: 8b:87:f8:fa:0b:4f:c4:96:2d:08:fd:d1:a9:07:bd: 54:ef:ae:36:4a:06:7c:04:2e:c3:3d:cf:f0:70:58: 76:e1:0d:3e:99:27:fb:13:10:4f:e8:37:26:7d:a7: 44:f9:90:44:fb:59:94:f0:62:45:ed:97:d9:5d:0d: 12:d1:65:eb:4e:99:43:cf:78:a1:71:25:1a:9c:97: 15:00:1f:d5:1e:f4:4b:40:56:20:32:8a:9c:c9:be: 42:c4:5d:b6:93:bd:79:9f:80:cb:79:0b:66:77:e7: 5a:a0:80:cb:a0:06:a5:3e:c0:1b:c4:63:71:0a:48: b0:49:16:50:19:ac:2e:22:e7:05:eb:83:c3:c8:36: 9e:95:bd:84:93:66:2c:58:0e:15:c6:b5:e3:63:0c: 93:7d:35:3e:ef:3c:0a:14:31:44:a7:4e:c9:bb:b0: e1:ab:2f:71:db:0b:5f:d5:18:f3:d0:cc:9c:8d:17: fe:88:ff:ba:08:5e:e0:ba:66:17:b8:2f:9f:9b:2e: bc:f5:b9:c7:eb:35:6f:3b:de:4e:08:ab:be:de:93: 46:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9D:8F:53:60:44:34:21:34:FE:54:E4:C2:A2:B0:48:08:41:E5:5A X509v3 Authority Key Identifier: keyid:87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/F959A9A0F11011EB8E63FC73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.125.4.0/22 103.25.240.0/22 103.231.92.0/22 IPv6: 2001:df0:9200::/48 2407:6ec0::/32 Signature Algorithm: sha256WithRSAEncryption 99:33:ed:52:95:53:56:30:91:02:ba:d5:32:68:b6:1f:a4:9c: 95:56:06:e1:39:f8:a9:a7:2f:56:e0:95:38:75:6e:4b:f8:1a: 9d:cb:09:ba:dc:ad:94:13:7d:48:a2:0d:41:2a:9e:e4:f6:3b: 73:18:57:04:b4:b7:b5:61:d9:2c:02:e1:a8:56:41:de:4b:91: 76:47:31:14:62:d4:6e:fa:cb:2b:d5:d9:6a:9b:4a:b1:6f:39: 1e:97:f8:a7:40:8f:0d:0c:ab:ef:70:63:fe:35:4d:4a:e7:27: 42:53:7f:cf:0f:19:59:b1:a9:c0:b2:57:e4:04:22:b5:76:80: 46:c4:39:98:0a:d4:5f:22:45:95:4f:85:74:27:26:52:1a:dd: 7f:0f:e3:5c:c2:db:3a:88:7e:ca:34:b0:33:4a:b6:4e:3d:82: 75:4a:3f:55:e0:d8:c6:b4:82:a6:79:d5:86:b3:2f:bb:47:6b: a3:f6:36:45:71:41:ad:42:5c:2c:c4:49:64:d4:5f:df:ac:60: 71:cc:8c:39:45:32:d0:0f:41:f5:41:9b:ac:30:5e:6f:b3:3b: 01:15:c1:24:74:8b:e7:ee:58:f5:c3:5a:04:07:5a:3f:7d:2f: f7:88:33:21:87:99:3b:c1:50:68:d7:0c:3e:13:41:4c:dc:09: fa:c6:0b:3f -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICG9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBOEMxMTAvBgNVBAUTKDg3MEI5Q0QyRTQxREFCMDVCRDU1MjdDOTE1MEU5NDg5 NTk3MTY2OTYwHhcNMjMwODMwMDgzODQxWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGVmMDAxMS1iZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5E5dg5jE31CWwSFFaxJmJTu3czpC7/QqPUj5LoQeKUoTYZFSHtzrCGZn/qL h/j6C0/Eli0I/dGpB71U7642SgZ8BC7DPc/wcFh24Q0+mSf7ExBP6DcmfadE+ZBE +1mU8GJF7ZfZXQ0S0WXrTplDz3ihcSUanJcVAB/VHvRLQFYgMoqcyb5CxF22k715 n4DLeQtmd+daoIDLoAalPsAbxGNxCkiwSRZQGawuIucF64PDyDaelb2Ek2YsWA4V xrXjYwyTfTU+7zwKFDFEp07Ju7Dhqy9x2wtf1Rjz0MycjRf+iP+6CF7gumYXuC+f my689bnH6zVvO95OCKu+3pNGEwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFMedj1Ng RDQhNP5U5MKisEgIQeVaMB8GA1UdIwQYMBaAFIcLnNLkHasFvVUnyRUOlIlZcWaW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUE4Qy9GMjdCOUNERUJC ODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3VzlWU2ZKRlE2VWlWbHha cFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h3dWMwdVFkcXdXOVZTZkpGUTZVaVZseFpwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUVBOEMvRjI3QjlDREVCQjg2MTFFNjhGRjUwQzU3QzRGOUFFMDIvRjk1OUE5QTBG MTEwMTFFQjhFNjNGQzczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMBgEAgABMBIDBAItfQQDBAJnGfADBAJn51wwFgQCAAIwEAMHACABDfCSAAMF ACQHbsAwDQYJKoZIhvcNAQELBQADggEBAJkz7VKVU1YwkQK61TJoth+knJVWBuE5 +KmnL1bglTh1bkv4Gp3LCbrcrZQTfUiiDUEqnuT2O3MYVwS0t7Vh2SwC4ahWQd5L kXZHMRRi1G76yyvV2WqbSrFvOR6X+KdAjw0Mq+9wY/41TUrnJ0JTf88PGVmxqcCy V+QEIrV2gEbEOZgK1F8iRZVPhXQnJlIa3X8P41zC2zqIfso0sDNKtk49gnVKP1Xg 2Ma0gqZ51YazL7tHa6P2NkVxQa1CXCzESWTUX9+sYHHMjDlFMtAPQfVBm6wwXm+z OwEVwSR0i+fuWPXDWgQHWj99L/eIMyGHmTvBUGjXDD4TQUzcCfrGCz8= -----END CERTIFICATE-----Generated at Sat May 18 16:57:54 2024 by rpki-client on console-fra.rpki-client.org