$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/1CA71D84493D11EAAB30C638C4F9AE02.roa File: 1CA71D84493D11EAAB30C638C4F9AE02.roa (raw, json) Hash identifier: 5pUcv+0LLLp1O/NzGX71FS1/aeQUGa83zSCV7bRjRQY= Subject key identifier: E5:E8:08:7C:81:83:52:81:6E:7D:B5:36:BE:32:2F:7F:AB:4C:A2:E4 Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Certificate serial: 133A Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/1CA71D84493D11EAAB30C638C4F9AE02.roa Signing time: Mon 22 Apr 2024 17:55:28 +0000 ROA not before: Mon 22 Apr 2024 17:55:28 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 64095 IP address blocks: 103.212.52.0/22 maxlen: 22 139.5.164.0/22 maxlen: 22 2404:9e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 17:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4922 (0x133a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Validity Not Before: Apr 22 17:55:28 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6626a490-78ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:84:df:83:f8:24:77:87:7f:b6:2b:63:cc:4c: d3:8e:6d:5a:27:d1:01:36:b4:e5:b0:70:1c:9d:f1: 3a:95:bf:0d:50:74:6f:68:30:6c:21:e1:bd:ce:dd: 06:b7:3a:ee:a5:fc:33:13:23:96:3b:a1:e3:b6:d9: 3f:8a:20:a1:0d:3b:9f:f0:da:24:47:ad:e5:5b:10: 49:42:94:b1:87:3c:0d:c5:13:ef:4f:b4:8b:f0:1d: b1:f1:9a:a6:ed:9f:3a:bd:de:90:83:d4:d4:af:1e: 7d:00:fd:23:d6:f3:c2:f6:50:8b:8e:a1:4d:47:33: 7e:e5:b7:a6:2a:fc:93:e4:b7:70:44:40:6a:62:d1: 90:3e:df:04:84:fe:ad:4d:fc:17:29:32:e5:68:e6: 4d:68:4e:34:bb:dd:79:67:62:3f:00:1e:bb:08:51: d1:c0:3e:63:13:84:cd:8e:08:7e:7f:1d:af:7b:1e: 0d:13:ba:7f:6a:54:e1:a0:83:93:55:6d:be:59:fc: 8a:43:88:41:15:2b:fb:66:c7:0d:55:25:44:be:46: e8:26:62:77:bd:b1:00:c8:c4:e4:77:57:37:52:6f: 62:aa:f1:45:2f:12:05:5f:68:99:22:ac:86:e2:fb: 05:60:d4:8f:62:66:b0:30:62:99:8a:75:a5:80:e4: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E8:08:7C:81:83:52:81:6E:7D:B5:36:BE:32:2F:7F:AB:4C:A2:E4 X509v3 Authority Key Identifier: keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/1CA71D84493D11EAAB30C638C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.52.0/22 139.5.164.0/22 IPv6: 2404:9e80::/32 Signature Algorithm: sha256WithRSAEncryption 44:a7:fa:07:2a:9a:8f:01:16:f7:4c:8a:a7:84:9a:34:1d:5e: ec:e7:56:fa:4d:37:5a:e5:f0:f1:f0:08:8a:88:0c:21:e3:1c: 18:40:a1:1c:47:b8:fa:ec:92:ad:eb:2e:0b:37:05:79:99:dd: ac:d5:8b:6e:b4:09:64:c5:b4:ca:fc:a9:f7:c4:ed:79:5c:81: 38:c3:de:7e:8b:8d:3e:93:3b:ba:6c:2a:74:f2:86:a2:eb:f4: 19:ef:9c:da:dd:ca:78:96:0b:6d:3c:18:9a:38:92:03:d9:fb: 9b:7d:cc:02:a4:58:fc:7f:3d:68:ad:14:79:14:21:ca:f6:d0: 3a:11:db:93:fe:21:ea:6b:12:ea:e8:02:3a:04:a6:af:50:3e: ca:61:85:72:00:0b:c6:53:7d:cc:9c:9b:9c:54:9e:10:8d:23: ed:43:d5:ed:20:db:4e:56:a0:c9:3d:5b:81:c4:7a:73:71:da: 8d:ce:27:a9:c5:bf:db:57:c3:a0:ed:04:fc:34:91:01:02:e9: 7f:61:89:45:4d:b2:bc:c7:bf:59:7a:e4:58:e8:59:22:f7:74: 05:2e:ed:47:13:03:c1:2b:d8:27:ab:47:15:0c:1c:61:01:35: 2e:28:01:d9:d2:cc:c1:7b:61:d0:40:34:e6:d4:25:91:67:48: f6:a8:56:71 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4 NjcwQzg5Q0IwHhcNMjQwNDIyMTc1NTI4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjI2YTQ5MC03OGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44Tfg/gkd4d/titjzEzTjm1aJ9EBNrTlsHAcnfE6lb8NUHRvaDBsIeG9zt0G tzrupfwzEyOWO6Hjttk/iiChDTuf8NokR63lWxBJQpSxhzwNxRPvT7SL8B2x8Zqm 7Z86vd6Qg9TUrx59AP0j1vPC9lCLjqFNRzN+5bemKvyT5LdwREBqYtGQPt8EhP6t TfwXKTLlaOZNaE40u915Z2I/AB67CFHRwD5jE4TNjgh+fx2vex4NE7p/alThoIOT VW2+WfyKQ4hBFSv7ZscNVSVEvkboJmJ3vbEAyMTkd1c3Um9iqvFFLxIFX2iZIqyG 4vsFYNSPYmawMGKZinWlgORcywIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOXoCHyB g1KBbn21Nr4yL3+rTKLkMB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjQyODYvQjIxQUEwOTQ3RjQ5MTFFODg4RDM1NjQyQzRGOUFFMDIvMUNBNzFEODQ0 OTNEMTFFQUFCMzBDNjM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn1DQDBAKLBaQwDQQCAAIwBwMFACQEnoAwDQYJKoZIhvcN AQELBQADggEBAESn+gcqmo8BFvdMiqeEmjQdXuznVvpNN1rl8PHwCIqIDCHjHBhA oRxHuPrskq3rLgs3BXmZ3azVi260CWTFtMr8qffE7XlcgTjD3n6LjT6TO7psKnTy hqLr9BnvnNrdyniWC208GJo4kgPZ+5t9zAKkWPx/PWitFHkUIcr20DoR25P+Iepr EuroAjoEpq9QPsphhXIAC8ZTfcycm5xUnhCNI+1D1e0g205WoMk9W4HEenNx2o3O J6nFv9tXw6DtBPw0kQEC6X9hiUVNsrzHv1l65FjoWSL3dAUu7UcTA8Er2CerRxUM HGEBNS4oAdnSzMF7YdBANObUJZFnSPaoVnE= -----END CERTIFICATE-----Generated at Thu May 16 18:26:08 2024 by rpki-client on console-fra.rpki-client.org