$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/4296CB72931111EDB92FFC5FC4F9AE02.roa File: 4296CB72931111EDB92FFC5FC4F9AE02.roa (raw, json) Hash identifier: mU/Ds1iM2xWWyc3/Ue3lgYmnlTA6PIlhf8u2WQEwCPU= Subject key identifier: 1C:17:F5:AD:B6:AF:9A:49:CC:77:87:3D:46:6C:59:58:53:AA:7B:AB Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0A11 Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/4296CB72931111EDB92FFC5FC4F9AE02.roa Signing time: Sat 02 Dec 2023 20:28:14 +0000 ROA not before: Sat 02 Dec 2023 20:28:14 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 9311 IP address blocks: 43.239.107.0/24 maxlen: 24 45.124.204.0/24 maxlen: 24 45.124.206.0/24 maxlen: 24 103.244.221.0/24 maxlen: 24 103.244.223.0/24 maxlen: 24 103.249.184.0/24 maxlen: 24 103.249.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2577 (0xa11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Dec 2 20:28:14 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=656b935d-8ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bc:1f:95:40:ea:3c:6c:a1:cb:59:6a:40:43: c7:a3:29:5d:2e:b3:02:38:e1:35:53:35:fa:f7:39: 3d:76:87:ca:ff:f9:f7:80:84:7c:a4:68:c0:59:34: 25:b3:a1:a6:0d:1f:3c:7f:c4:59:78:6b:aa:6c:00: ac:4a:c2:71:98:ac:f5:e0:e9:1c:1d:53:27:78:de: b1:a8:dd:41:6c:5f:97:a5:ba:bf:09:1c:53:50:04: c2:31:0b:1e:e5:6f:35:92:27:f9:eb:59:a1:05:ef: 94:e4:39:86:02:ed:1f:b5:1a:39:9a:fc:73:1a:6b: 65:c3:46:d9:d2:b3:a7:ad:a5:2f:78:6b:9a:d3:ab: 7e:93:7b:92:ae:3f:e7:e7:bf:ef:d4:d4:09:31:96: e5:87:ca:1f:d8:26:0b:06:4f:86:86:fe:82:3d:c3: d1:91:e9:9d:28:76:c1:2d:c7:7c:ac:31:85:af:19: 7a:c0:2a:1f:c7:17:9b:ad:53:66:b7:32:9d:86:89: e4:c1:07:87:56:da:98:87:da:b0:80:84:76:2c:cd: 82:3f:76:c5:5f:2d:88:5a:3d:83:f9:88:5f:39:ea: ab:b3:87:24:83:79:f7:53:c9:44:bd:66:7c:4c:55: 8e:dc:a1:3e:80:90:a6:ff:2e:5a:4c:89:c9:fe:f4: e6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:17:F5:AD:B6:AF:9A:49:CC:77:87:3D:46:6C:59:58:53:AA:7B:AB X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/4296CB72931111EDB92FFC5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.107.0/24 45.124.204.0/24 45.124.206.0/24 103.244.221.0/24 103.244.223.0/24 103.249.184.0/24 103.249.186.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:a0:b9:36:f2:84:6d:86:2f:6a:35:4b:6b:ed:03:af:42:88: 52:90:2c:c6:06:7d:53:89:f2:c7:5f:ea:9c:d0:63:fd:4a:86: 13:84:e7:b4:27:8b:95:59:0b:ba:51:78:a6:e4:c5:59:7e:9c: e7:8c:dd:18:39:9f:03:3e:65:7d:d1:d4:91:60:3c:68:01:bc: 87:4d:e1:30:79:77:38:4d:c5:3e:80:93:11:5e:b6:3c:54:40: e5:32:cf:a9:ff:be:7f:a0:bd:15:6c:4d:b0:80:67:21:95:8d: a6:62:33:39:94:64:cc:18:e5:d9:c7:8d:95:41:bb:98:bc:2c: 19:85:f9:80:38:2f:88:96:17:c0:5f:9b:67:f1:5b:3e:af:a5: 90:68:a3:22:b7:6e:e6:ed:2e:97:e3:82:2f:ed:35:76:1f:be: 0d:17:21:b6:31:a7:0f:18:ae:60:3d:8d:dd:5a:bc:b1:36:8b: 3b:95:63:ef:53:4e:33:d4:43:c1:4c:87:7f:c6:d7:6e:99:6e: 17:01:68:2a:e3:d3:6a:15:49:f6:e4:74:0c:49:e2:5c:13:c5: 37:5e:be:36:77:ec:77:64:5a:33:f3:7f:44:d9:36:ac:1f:55: a3:6d:99:6e:2e:bc:40:a5:50:22:ea:a9:51:5e:b2:c4:20:73: f1:62:7a:e7 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICChEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjMxMjAyMjAyODE0WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiOTM1ZC04YWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bwflUDqPGyhy1lqQEPHoyldLrMCOOE1UzX69zk9dofK//n3gIR8pGjAWTQl s6GmDR88f8RZeGuqbACsSsJxmKz14OkcHVMneN6xqN1BbF+Xpbq/CRxTUATCMQse 5W81kif561mhBe+U5DmGAu0ftRo5mvxzGmtlw0bZ0rOnraUveGua06t+k3uSrj/n 57/v1NQJMZblh8of2CYLBk+Ghv6CPcPRkemdKHbBLcd8rDGFrxl6wCofxxebrVNm tzKdhonkwQeHVtqYh9qwgIR2LM2CP3bFXy2IWj2D+YhfOeqrs4ckg3n3U8lEvWZ8 TFWO3KE+gJCm/y5aTInJ/vTmdQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFBwX9a22 r5pJzHeHPUZsWVhTqnurMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvNDI5NkNCNzI5 MzExMTFFREI5MkZGQzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMDAEAgABMCoDBAAr72sDBAAtfMwDBAAtfM4DBABn9N0DBABn9N8DBABn+bgD BABn+bowDQYJKoZIhvcNAQELBQADggEBAG+guTbyhG2GL2o1S2vtA69CiFKQLMYG fVOJ8sdf6pzQY/1KhhOE57Qni5VZC7pReKbkxVl+nOeM3Rg5nwM+ZX3R1JFgPGgB vIdN4TB5dzhNxT6AkxFetjxUQOUyz6n/vn+gvRVsTbCAZyGVjaZiMzmUZMwY5dnH jZVBu5i8LBmF+YA4L4iWF8Bfm2fxWz6vpZBooyK3bubtLpfjgi/tNXYfvg0XIbYx pw8YrmA9jd1avLE2izuVY+9TTjPUQ8FMh3/G126ZbhcBaCrj02oVSfbkdAxJ4lwT xTdevjZ37HdkWjPzf0TZNqwfVaNtmW4uvEClUCLqqVFessQgc/Fieuc= -----END CERTIFICATE-----Generated at Fri May 10 23:04:11 2024 by rpki-client on console-ams.rpki-client.org