$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/5AD85A56F1C811ECBBC34549C4F9AE02.roa File: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (raw, json) Hash identifier: llPQK6RAm7smNmRGwi10ZC04JcuM8comzd+cTfPYGBM= Subject key identifier: C9:E1:48:0B:9F:59:83:82:80:15:EF:B2:7F:6E:42:08:FE:01:54:AD Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Certificate serial: 021C Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/5AD85A56F1C811ECBBC34549C4F9AE02.roa Signing time: Sat 29 Jun 2024 04:14:05 +0000 ROA not before: Sat 29 Jun 2024 04:14:05 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 14618 IP address blocks: 103.58.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF5C0 Validity Not Before: Jun 29 04:14:05 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667f8a0d-41b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:30:ef:32:64:52:1f:55:47:bd:15:bd:af:19: 94:87:16:f3:e2:53:34:e3:2d:ef:7e:25:d4:b8:1e: b4:e1:18:d0:97:4a:5a:6f:ac:81:d6:16:11:3d:9d: 51:fa:42:8d:17:77:49:3c:7b:65:fe:a9:f5:b5:65: 60:4c:1a:6f:22:3f:db:d6:b2:11:30:6c:48:fb:19: e4:86:a5:91:67:fd:03:c6:31:a3:23:6f:05:0a:f6: 38:83:c6:94:a2:d6:6f:47:ea:f5:a6:6b:06:58:98: a3:49:bb:15:d2:74:5d:1a:99:2d:70:8d:10:ed:af: 55:c8:f2:2d:25:83:3e:b5:28:b0:c6:24:96:96:d2: c8:d6:de:5e:26:d6:7f:3e:c2:f8:8f:5b:d7:7a:3a: 03:81:9f:d8:44:37:55:80:4e:c4:04:ae:88:96:a0: 43:85:74:c1:d7:5a:fe:12:7b:10:f7:9a:9d:54:b1: e0:de:0a:ba:1c:8e:1d:33:10:f1:67:20:67:a2:f4: 1c:24:c0:89:b2:49:f7:58:73:0c:c4:66:8a:cf:9b: 7a:c6:63:e8:80:53:97:c7:bd:e3:d9:04:cf:a8:e0: fc:46:2a:d7:05:db:5d:9c:5c:10:89:c4:4d:6d:d0: df:d5:2e:ba:5e:3e:a5:55:a7:d3:ea:bf:31:6d:24: 96:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E1:48:0B:9F:59:83:82:80:15:EF:B2:7F:6E:42:08:FE:01:54:AD X509v3 Authority Key Identifier: keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/5AD85A56F1C811ECBBC34549C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.58.192.0/24 Signature Algorithm: sha256WithRSAEncryption 58:5f:03:6c:b8:64:18:37:67:b5:e3:2e:a3:86:fc:86:45:63: 9b:45:de:9d:9b:e1:61:94:37:9e:89:b0:ce:f5:ab:76:bb:b2: c8:a7:25:b6:d7:56:05:b9:6f:44:36:06:19:e7:3e:8c:2d:fc: 49:3f:5b:fe:fe:c8:c6:ec:93:b7:50:87:c0:d5:24:00:df:1c: 7a:14:f4:48:7e:a8:b1:e1:76:b9:4a:21:ea:0d:f9:3d:48:5d: a4:20:06:11:59:cb:5f:b4:48:9e:7c:da:06:6a:ab:cc:32:d6: c6:be:98:0e:de:58:24:76:51:d8:89:b9:c2:09:5d:79:27:81: 88:6b:11:72:2e:43:92:09:12:46:99:51:c5:7b:e2:c1:13:05: 23:43:7e:a7:18:c1:35:7e:a8:48:8f:e9:f2:29:5a:33:54:91: d0:72:08:e6:f9:94:4e:31:e9:cf:c0:37:81:01:63:6d:dc:b6: 63:c7:99:82:0a:a0:a2:7a:f9:49:1f:b0:e9:c6:1b:f0:4c:56: 6a:91:c2:45:95:96:e9:32:8c:0c:f4:ef:21:07:67:b8:67:b4: a2:e9:ed:eb:be:61:01:7b:51:74:a2:73:1e:48:e2:cf:3b:8c: a2:bb:07:c9:44:c7:c1:06:ab:da:c9:09:26:c8:ad:b9:bf:93: 03:74:36:30 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY1QzAxMTAvBgNVBAUTKDg1NzkzNzcyNjFDQTI3OUYxQzJGRjJFQkM0NDI5NzQz N0RENkU2OTQwHhcNMjQwNjI5MDQxNDA1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdmOGEwZC00MWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljDvMmRSH1VHvRW9rxmUhxbz4lM04y3vfiXUuB604RjQl0pab6yB1hYRPZ1R +kKNF3dJPHtl/qn1tWVgTBpvIj/b1rIRMGxI+xnkhqWRZ/0DxjGjI28FCvY4g8aU otZvR+r1pmsGWJijSbsV0nRdGpktcI0Q7a9VyPItJYM+tSiwxiSWltLI1t5eJtZ/ PsL4j1vXejoDgZ/YRDdVgE7EBK6IlqBDhXTB11r+EnsQ95qdVLHg3gq6HI4dMxDx ZyBnovQcJMCJskn3WHMMxGaKz5t6xmPogFOXx73j2QTPqOD8RirXBdtdnFwQicRN bdDf1S66Xj6lVafT6r8xbSSWnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMnhSAuf WYOCgBXvsn9uQgj+AVStMB8GA1UdIwQYMBaAFIV5N3JhyiefHC/y68RCl0N91uaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMC9CQ0JENEZCNkYx QzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1OGNMX0xyeEVLWFEzM1c1 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYazNjbUhLSjU4Y0xfTHJ4RUtYUTMzVzVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkY1QzAvQkNCRDRGQjZGMUMyMTFFQ0ExNjNGRDQyQzRGOUFFMDIvNUFEODVBNTZG MUM4MTFFQ0JCQzM0NTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnOsAwDQYJKoZIhvcNAQELBQADggEBAFhfA2y4ZBg3Z7Xj LqOG/IZFY5tF3p2b4WGUN56JsM71q3a7ssinJbbXVgW5b0Q2BhnnPowt/Ek/W/7+ yMbsk7dQh8DVJADfHHoU9Eh+qLHhdrlKIeoN+T1IXaQgBhFZy1+0SJ582gZqq8wy 1sa+mA7eWCR2UdiJucIJXXkngYhrEXIuQ5IJEkaZUcV74sETBSNDfqcYwTV+qEiP 6fIpWjNUkdByCOb5lE4x6c/AN4EBY23ctmPHmYIKoKJ6+UkfsOnGG/BMVmqRwkWV lukyjAz07yEHZ7hntKLp7eu+YQF7UXSicx5I4s87jKK7B8lEx8EGq9rJCSbIrbm/ kwN0NjA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:41 2025 by rpki-client