$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/AD20058AA15311EDB7EEA166C4F9AE02.roa File: AD20058AA15311EDB7EEA166C4F9AE02.roa (raw, json) Hash identifier: 0kjiBakfjScVJjewurb6gTRWeb7Z7CuEpqyiIX0oOgM= Subject key identifier: 45:31:F1:F2:3C:26:82:5F:CD:75:E9:47:1C:D4:B0:4F:F5:17:9F:05 Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 3473 Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/AD20058AA15311EDB7EEA166C4F9AE02.roa Signing time: Thu 04 Jan 2024 14:50:36 +0000 ROA not before: Thu 04 Jan 2024 14:50:36 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 146998 IP address blocks: 121.46.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 14:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13427 (0x3473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Jan 4 14:50:36 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6596c5bc-d387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:d6:e8:74:11:10:0c:a8:e4:d1:6c:05:8c:b9: 95:8e:47:91:1b:8c:51:77:86:24:19:15:dd:d1:c9: dc:e8:f9:06:dd:96:ec:38:4f:0b:b8:64:c9:72:57: 14:90:f3:78:28:ea:5f:bf:eb:ce:77:de:b3:9f:1f: 47:55:8e:de:20:f4:81:d2:5a:24:ff:1c:3c:40:32: 56:2b:78:71:e5:5b:70:18:19:21:f5:14:4a:9f:8a: 7e:6d:80:3c:f0:40:37:43:bb:87:37:d4:c0:bb:c8: 4d:f1:68:27:e1:5c:f4:c0:0f:5b:a1:02:43:0f:30: a1:9f:1a:6a:d9:97:70:64:82:85:40:b0:c2:5c:7e: 90:ea:1f:41:fa:45:1b:aa:61:57:2f:81:12:7c:e7: e6:9a:ac:6e:5e:bb:39:39:1c:a3:45:32:ea:13:29: 86:6f:ac:42:69:fa:ed:4c:65:8f:79:99:57:fd:30: 46:d7:e8:c8:c8:af:47:a0:07:34:f9:6f:59:54:dd: 73:fb:3d:ba:76:c2:fb:d9:a3:e4:5f:72:59:72:3b: b9:dc:29:bb:c2:49:cb:52:49:81:a7:19:1d:8e:97: 19:6e:9b:75:34:11:3b:97:5f:61:d6:63:aa:0d:09: a6:d6:58:86:16:72:71:81:e5:52:76:ce:78:7a:c7: f2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:31:F1:F2:3C:26:82:5F:CD:75:E9:47:1C:D4:B0:4F:F5:17:9F:05 X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/AD20058AA15311EDB7EEA166C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.46.65.0/24 Signature Algorithm: sha256WithRSAEncryption 22:81:18:0e:ad:c1:f5:89:d6:40:12:de:52:71:1e:b7:b4:4c: e0:be:8c:24:06:7b:da:41:05:40:44:79:e6:bd:b0:c8:cb:eb: 56:fb:63:b7:7a:04:e7:a8:fa:0a:e9:c9:dd:e6:de:fb:31:ea: 35:af:af:98:7e:c2:bf:10:d9:f5:60:b6:b2:0f:45:b6:a7:e1: 06:45:29:b6:84:dc:17:cf:74:6e:1a:a8:10:4e:d3:67:23:d4: b4:4f:ae:aa:e1:7e:3e:91:af:4a:d8:cf:1e:64:51:48:4a:e9: 58:12:ae:ec:93:4f:10:cd:22:98:2c:e0:39:80:b1:24:b2:cd: ef:00:99:d0:a5:aa:05:06:5d:21:f2:ce:d6:fa:3d:8b:aa:af: 7e:7c:33:d5:c2:da:db:7b:04:3f:40:12:e8:40:93:11:9a:38: b7:12:0c:45:ea:0d:ee:30:e1:1e:10:6c:e9:2a:30:12:15:03: 6b:b0:de:a6:ba:66:f3:9d:4e:05:fc:bc:ab:8a:bf:0b:e4:ba: da:8c:3e:ab:04:5b:3c:76:fb:6b:66:a2:90:d4:d6:83:24:05: 02:70:ba:c4:46:be:e4:cd:ed:71:85:b3:b7:28:7a:c7:b3:41: 57:14:3a:14:43:36:58:e1:0c:be:d6:36:2f:21:e8:54:4f:a3: b4:19:3d:f1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjQwMTA0MTQ1MDM2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk2YzViYy1kMzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+9bodBEQDKjk0WwFjLmVjkeRG4xRd4YkGRXd0cnc6PkG3ZbsOE8LuGTJclcU kPN4KOpfv+vOd96znx9HVY7eIPSB0lok/xw8QDJWK3hx5VtwGBkh9RRKn4p+bYA8 8EA3Q7uHN9TAu8hN8Wgn4Vz0wA9boQJDDzChnxpq2ZdwZIKFQLDCXH6Q6h9B+kUb qmFXL4ESfOfmmqxuXrs5ORyjRTLqEymGb6xCafrtTGWPeZlX/TBG1+jIyK9HoAc0 +W9ZVN1z+z26dsL72aPkX3JZcju53Cm7wknLUkmBpxkdjpcZbpt1NBE7l19h1mOq DQmm1liGFnJxgeVSds54esfy+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEUx8fI8 JoJfzXXpRxzUsE/1F58FMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvQUQyMDA1OEFB MTUzMTFFREI3RUVBMTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB5LkEwDQYJKoZIhvcNAQELBQADggEBACKBGA6twfWJ1kAS 3lJxHre0TOC+jCQGe9pBBUBEeea9sMjL61b7Y7d6BOeo+grpyd3m3vsx6jWvr5h+ wr8Q2fVgtrIPRban4QZFKbaE3BfPdG4aqBBO02cj1LRPrqrhfj6Rr0rYzx5kUUhK 6VgSruyTTxDNIpgs4DmAsSSyze8AmdClqgUGXSHyztb6PYuqr358M9XC2tt7BD9A EuhAkxGaOLcSDEXqDe4w4R4QbOkqMBIVA2uw3qa6ZvOdTgX8vKuKvwvkutqMPqsE Wzx2+2tmopDU1oMkBQJwusRGvuTN7XGFs7coesezQVcUOhRDNljhDL7WNi8h6FRP o7QZPfE= -----END CERTIFICATE-----Generated at Sun May 26 16:40:36 2024 by rpki-client on console-fra.rpki-client.org