$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/5AD85A56F1C811ECBBC34549C4F9AE02.roa File: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (raw, json) Hash identifier: YLG14t47Ek4xVZJtbmOObURmhi0zIeJ0pyaih23TzXs= Subject key identifier: 8E:C9:05:A7:5E:0F:40:0B:0D:AF:CC:B4:76:13:AC:06:B4:26:D0:67 Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Certificate serial: 0160 Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/5AD85A56F1C811ECBBC34549C4F9AE02.roa Signing time: Fri 07 Jul 2023 03:02:05 +0000 ROA not before: Fri 07 Jul 2023 03:02:05 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 14618 IP address blocks: 103.58.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 04:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Validity Not Before: Jul 7 03:02:05 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64a7802d-1d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:64:c0:1e:35:0c:82:01:54:dc:0a:c7:4d: 85:f8:ac:af:a4:36:40:85:e8:df:8c:ed:69:14:7b: 25:72:a9:07:c5:45:be:b5:df:bc:b8:69:de:ac:1c: 91:bd:08:df:93:0f:df:a5:f6:00:1a:cd:cc:4f:55: 90:03:a6:22:44:e9:19:a0:4c:ce:e7:c7:31:84:8a: ea:cd:64:fa:2f:24:ca:61:cd:52:c3:90:68:ed:99: 8a:c9:d3:47:93:11:54:7d:61:73:b3:e0:8d:78:44: c7:ab:58:b4:b9:38:c7:77:4a:81:28:78:ac:9b:5c: ce:97:f4:ab:7b:33:af:06:c4:ec:54:a6:f3:4e:da: b5:7e:52:7a:a5:51:e6:4e:11:e1:b2:f9:9a:7d:9f: fb:fd:d0:f8:2e:77:09:af:04:c2:08:82:e1:43:23: 0a:41:f4:54:a3:df:d2:c5:df:09:b7:7b:4b:33:31: f5:67:44:4d:7e:53:30:9a:1a:4a:6a:4d:95:47:b9: 7b:e5:b0:d3:7d:c1:86:7d:c8:80:82:48:94:a2:7f: 53:13:f5:2c:38:31:e6:22:cf:4e:52:0c:86:96:4f: 90:84:a4:78:d7:18:70:45:65:4c:eb:44:13:3b:c8: 12:c9:81:65:b0:ae:2f:03:96:02:ce:a1:d3:1f:f7: c3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C9:05:A7:5E:0F:40:0B:0D:AF:CC:B4:76:13:AC:06:B4:26:D0:67 X509v3 Authority Key Identifier: keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/5AD85A56F1C811ECBBC34549C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.58.192.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:f5:fb:dd:c4:94:b5:12:c3:e4:5a:c7:27:69:e2:7b:fd:1d: ae:99:21:e5:d4:94:10:a8:46:b4:d2:0f:a5:97:38:75:9a:6d: 38:c5:65:e8:b6:02:d1:06:0f:88:c4:68:5f:d0:ab:0a:6f:be: 54:48:8e:d3:88:42:bf:85:ca:ab:a4:70:dc:63:a0:fa:ca:3b: 3e:fc:92:7f:d7:d9:b9:cd:d2:f6:e2:2c:64:8c:36:da:4a:97: 8d:a0:01:68:b7:60:7a:13:a0:be:c9:7f:6c:74:6b:58:8a:ca: 82:f1:77:31:0e:4c:a9:db:20:6f:b5:59:21:79:1f:28:7c:17: 0f:db:56:45:e9:cd:cb:1a:4d:5c:bd:29:51:16:58:5a:03:4c: 7d:e9:55:88:e3:9b:35:3a:e3:92:30:74:a2:63:0e:18:6f:d2: b7:7f:33:b3:bb:8e:f1:90:98:36:aa:ec:fe:74:d8:bc:27:2b: a1:4c:e8:a7:27:92:c0:f7:97:70:b7:85:84:5e:b9:fc:e2:ea: ab:47:d8:d9:5e:7b:0b:5e:32:87:94:cb:7b:65:34:64:02:2d: 6e:e8:5d:f2:43:a0:7d:e0:53:f2:c0:e2:98:51:28:4d:fc:06: 8b:19:6d:ee:0f:22:dd:91:d2:2b:bd:54:c8:dc:7a:85:de:da: bc:24:e4:15 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY1QzAxMTAvBgNVBAUTKDg1NzkzNzcyNjFDQTI3OUYxQzJGRjJFQkM0NDI5NzQz N0RENkU2OTQwHhcNMjMwNzA3MDMwMjA1WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE3ODAyZC0xZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3pkwB41DIIBVNwKx02F+KyvpDZAhejfjO1pFHslcqkHxUW+td+8uGnerByR vQjfkw/fpfYAGs3MT1WQA6YiROkZoEzO58cxhIrqzWT6LyTKYc1Sw5Bo7ZmKydNH kxFUfWFzs+CNeETHq1i0uTjHd0qBKHism1zOl/SrezOvBsTsVKbzTtq1flJ6pVHm ThHhsvmafZ/7/dD4LncJrwTCCILhQyMKQfRUo9/Sxd8Jt3tLMzH1Z0RNflMwmhpK ak2VR7l75bDTfcGGfciAgkiUon9TE/UsODHmIs9OUgyGlk+QhKR41xhwRWVM60QT O8gSyYFlsK4vA5YCzqHTH/fDXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI7JBade D0ALDa/MtHYTrAa0JtBnMB8GA1UdIwQYMBaAFIV5N3JhyiefHC/y68RCl0N91uaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMC9CQ0JENEZCNkYx QzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1OGNMX0xyeEVLWFEzM1c1 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYazNjbUhLSjU4Y0xfTHJ4RUtYUTMzVzVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkY1QzAvQkNCRDRGQjZGMUMyMTFFQ0ExNjNGRDQyQzRGOUFFMDIvNUFEODVBNTZG MUM4MTFFQ0JCQzM0NTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnOsAwDQYJKoZIhvcNAQELBQADggEBAA/1+93ElLUSw+Ra xydp4nv9Ha6ZIeXUlBCoRrTSD6WXOHWabTjFZei2AtEGD4jEaF/QqwpvvlRIjtOI Qr+FyqukcNxjoPrKOz78kn/X2bnN0vbiLGSMNtpKl42gAWi3YHoToL7Jf2x0a1iK yoLxdzEOTKnbIG+1WSF5Hyh8Fw/bVkXpzcsaTVy9KVEWWFoDTH3pVYjjmzU645Iw dKJjDhhv0rd/M7O7jvGQmDaq7P502LwnK6FM6KcnksD3l3C3hYReufzi6qtH2Nle ewteMoeUy3tlNGQCLW7oXfJDoH3gU/LA4phRKE38BosZbe4PIt2R0iu9VMjceoXe 2rwk5BU= -----END CERTIFICATE-----Generated at Fri Apr 19 05:37:04 2024 by rpki-client on console-fra.rpki-client.org