$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4BD764E8AA6511EC9A354C33C4F9AE02.roa File: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (raw, json) Hash identifier: Vo8+oE6vpaY359Pek1y45Y/W9ev1tKR6EYexkMzIlW4= Subject key identifier: AB:28:1C:6E:DA:75:B8:24:58:21:FC:74:A5:8E:62:F2:98:3C:06:92 Certificate issuer: /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Certificate serial: 01F7 Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4BD764E8AA6511EC9A354C33C4F9AE02.roa Signing time: Sat 13 May 2023 05:23:52 +0000 ROA not before: Sat 13 May 2023 05:23:52 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149649 IP address blocks: 103.184.94.0/23 maxlen: 23 103.184.94.0/24 maxlen: 24 103.184.95.0/24 maxlen: 24 2001:df0:8f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Validity Not Before: May 13 05:23:52 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645f1ee8-446d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:50:cf:3b:0d:25:3a:09:ae:2a:b8:8d:8d:92: 0e:15:97:1c:c9:93:79:3f:29:6f:1f:f8:ec:0d:7a: cc:e7:9e:9a:ed:59:16:8f:9f:56:5b:61:1d:ad:2a: b2:6e:be:ff:a4:c5:4f:cf:cc:4f:cb:55:db:72:11: c3:92:11:d2:67:35:ea:2d:dd:65:04:53:d2:bc:46: 49:47:da:05:d7:27:45:ef:a6:73:4d:26:66:e8:58: a9:2d:33:13:7d:f0:56:0e:4b:39:16:9b:ab:c8:38: d6:de:26:b9:fd:5c:24:46:e6:5e:f5:8c:37:4d:17: 95:e1:92:8c:94:a6:5b:f2:60:43:6e:42:ff:65:7a: 44:e0:4d:5d:6c:ec:60:f2:11:08:82:f7:3c:ff:32: d1:81:95:37:22:81:99:49:47:c7:8f:21:80:60:74: df:85:24:44:82:a1:3f:5b:5f:f0:fd:41:b9:d8:03: 05:9d:6e:f2:35:bb:a3:cf:a4:00:c9:c9:1e:c7:f3: 1b:3a:a3:7d:59:99:5a:b2:e1:d7:44:9e:97:81:53: 04:03:a5:72:14:45:35:f8:95:05:00:2a:66:81:61: 13:17:0e:f0:fc:a8:f2:a6:07:9a:ff:40:76:9c:01: ac:07:92:cd:7c:58:d1:9d:d5:54:c9:2f:04:11:29: e6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:28:1C:6E:DA:75:B8:24:58:21:FC:74:A5:8E:62:F2:98:3C:06:92 X509v3 Authority Key Identifier: keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4BD764E8AA6511EC9A354C33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.184.94.0/23 IPv6: 2001:df0:8f40::/48 Signature Algorithm: sha256WithRSAEncryption ad:a4:15:16:19:1f:78:d6:da:f8:f9:85:59:1d:ab:60:68:96: 2c:2e:46:e7:72:19:7b:40:e1:83:9b:52:9b:5f:15:25:5f:71: 14:97:36:cb:14:67:eb:f4:70:02:0d:82:e0:5e:ff:09:fd:7f: 02:b8:0a:cd:6e:9a:4b:1e:34:dc:cb:59:93:3b:9b:21:d4:92: 33:6f:6e:10:c1:40:6e:c5:64:6b:4e:8b:c0:ea:e6:4f:e9:cd: 23:9e:6d:0b:5c:9a:86:02:a1:d3:32:d9:10:2d:e8:f5:e0:61: 2d:a0:3d:43:d7:26:39:61:e9:ba:70:e6:7f:91:1a:ea:66:04: 20:d5:fb:1e:9e:78:86:4d:80:4b:f3:32:31:61:a2:61:3b:dc: 5c:23:83:b5:22:bf:a5:c0:0f:c2:96:54:e0:91:21:a6:48:6a: e8:12:19:29:42:67:14:e2:63:b1:21:42:4d:61:42:85:56:f3: ea:e0:64:36:fb:76:3d:ca:d0:2a:7e:67:09:2d:48:f4:7b:ff: f8:d8:51:54:89:a7:95:9a:da:c3:47:1b:fe:26:68:19:2f:69: 66:fb:c6:54:1d:fa:22:81:a2:90:9c:73:11:21:60:76:db:0e: ab:ed:b2:80:79:f6:ad:15:6c:5e:52:d2:d9:85:e5:c3:32:a6: cb:fa:26:ad -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMUMxMTAvBgNVBAUTKEUyRTA0M0E5MzJFQ0UwNDM5RTJBOEVGMURDNDA2NEQz MjE0QzI3RTYwHhcNMjMwNTEzMDUyMzUyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDVmMWVlOC00NDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21DPOw0lOgmuKriNjZIOFZccyZN5PylvH/jsDXrM556a7VkWj59WW2EdrSqy br7/pMVPz8xPy1XbchHDkhHSZzXqLd1lBFPSvEZJR9oF1ydF76ZzTSZm6FipLTMT ffBWDks5FpuryDjW3ia5/VwkRuZe9Yw3TReV4ZKMlKZb8mBDbkL/ZXpE4E1dbOxg 8hEIgvc8/zLRgZU3IoGZSUfHjyGAYHTfhSREgqE/W1/w/UG52AMFnW7yNbujz6QA yckex/MbOqN9WZlasuHXRJ6XgVMEA6VyFEU1+JUFACpmgWETFw7w/Kjypgea/0B2 nAGsB5LNfFjRndVUyS8EESnm0QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKsoHG7a dbgkWCH8dKWOYvKYPAaSMB8GA1UdIwQYMBaAFOLgQ6ky7OBDniqO8dxAZNMhTCfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxQy9GMDc0NzNBRUFB NjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRFT2VLbzd4M0VCazB5Rk1K LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1QkRxVExzNEVPZUtvN3gzRUJrMHlGTUotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFFMUMvRjA3NDczQUVBQTYyMTFFQ0I4RTExODMyQzRGOUFFMDIvNEJENzY0RThB QTY1MTFFQzlBMzU0QzMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnuF4wDwQCAAIwCQMHACABDfCPQDANBgkqhkiG9w0BAQsF AAOCAQEAraQVFhkfeNba+PmFWR2rYGiWLC5G53IZe0Dhg5tSm18VJV9xFJc2yxRn 6/RwAg2C4F7/Cf1/ArgKzW6aSx403MtZkzubIdSSM29uEMFAbsVka06LwOrmT+nN I55tC1yahgKh0zLZEC3o9eBhLaA9Q9cmOWHpunDmf5Ea6mYEINX7Hp54hk2AS/My MWGiYTvcXCODtSK/pcAPwpZU4JEhpkhq6BIZKUJnFOJjsSFCTWFChVbz6uBkNvt2 PcrQKn5nCS1I9Hv/+NhRVImnlZraw0cb/iZoGS9pZvvGVB36IoGikJxzESFgdtsO q+2ygHn2rRVsXlLS2YXlwzKmy/omrQ== -----END CERTIFICATE-----Generated at Sun May 19 04:20:43 2024 by rpki-client on console-ams.rpki-client.org