$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/4B9F1AA6354F11EC8531C34DC4F9AE02.roa File: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (raw, json) Hash identifier: 8D/20Uwr6gsdj74w8re/Pl0pD6S5jZ4kXrR8EA86scs= Subject key identifier: 08:E4:AC:4B:25:3F:8E:24:22:AE:0D:77:B0:5A:78:00:DB:01:87:F1 Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Certificate serial: 03BE Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/4B9F1AA6354F11EC8531C34DC4F9AE02.roa Signing time: Thu 07 Mar 2024 02:04:26 +0000 ROA not before: Thu 07 Mar 2024 02:04:26 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 24265 IP address blocks: 202.58.4.0/22 maxlen: 22 202.58.5.0/24 maxlen: 24 203.190.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 958 (0x3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Validity Not Before: Mar 7 02:04:26 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65e920aa-079c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2a:05:5b:31:db:c1:c1:16:97:ca:e3:e0:1d: bb:da:29:6c:18:0f:5f:3b:d8:a0:76:e0:da:41:00: c8:d8:06:9a:23:4a:2e:eb:66:1e:1c:e5:05:bb:1f: fe:0b:c1:85:b2:7c:28:83:0c:2e:87:6e:f1:d5:c5: 7f:09:e9:9c:89:95:d9:e7:21:4c:03:9d:12:54:88: 14:ed:a5:57:0c:9b:2f:b0:2b:1d:1c:b6:5c:15:22: d6:cc:a4:77:fb:4f:0e:80:cf:04:f7:d7:28:80:b3: 4d:58:32:ef:ed:d9:7e:73:0c:74:59:b3:04:c6:8e: ec:37:91:a2:1e:96:af:64:85:86:36:f9:76:b0:5d: 98:1e:2a:ac:89:22:1a:ee:40:ff:e4:46:48:90:cf: d1:6b:e8:aa:2d:7d:14:1a:2a:89:b9:13:29:07:2d: 3b:d0:64:b6:8d:4d:dd:ed:32:32:1f:d6:bd:3a:08: 08:cd:a0:2c:7f:9c:de:d2:58:6f:df:44:eb:54:6d: 53:d5:87:c1:86:82:1a:cb:f0:35:a2:70:87:30:ca: 4e:d0:77:50:d0:5c:84:9b:51:c7:a0:f7:e6:4d:26: 04:1e:fa:aa:47:c3:d5:b1:ae:75:97:b1:49:c7:f2: b0:83:38:15:d7:87:83:25:27:77:2f:c7:c3:14:63: 8f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E4:AC:4B:25:3F:8E:24:22:AE:0D:77:B0:5A:78:00:DB:01:87:F1 X509v3 Authority Key Identifier: keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/4B9F1AA6354F11EC8531C34DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.58.4.0/22 203.190.28.0/22 Signature Algorithm: sha256WithRSAEncryption 82:a2:8f:2c:10:4b:a0:70:01:b8:25:6d:29:ad:23:00:0d:03: 1a:8b:bb:29:0a:b6:c6:ef:ca:e3:60:1e:aa:15:90:8a:07:9b: 20:6d:8b:0b:bd:01:16:35:2f:80:11:8e:6c:40:16:fc:53:af: ca:11:f3:2c:b3:c5:2d:74:b0:26:3a:77:02:98:a4:20:a8:db: bc:da:a7:f0:81:29:53:92:b7:a5:e6:7d:c5:9d:bb:b9:34:56: c7:b0:7d:eb:05:a6:b4:53:23:99:11:da:f9:35:f5:75:c3:ea: 3f:a0:8b:9c:e4:ce:5e:0e:93:28:a1:77:ee:32:18:88:f4:97: 49:0a:25:d0:aa:1e:22:95:a2:74:71:91:b7:35:99:7d:79:80: 75:e9:e9:1b:92:de:ae:a1:db:30:f4:4f:0b:d9:94:40:11:ad: cd:e6:69:cb:32:6e:6b:93:84:0a:3e:71:67:fa:49:80:28:51: ae:dc:a9:f4:2e:cc:d2:7c:99:62:3c:db:28:65:c7:71:2e:df: 25:34:c5:0f:a7:b4:89:33:c3:c6:9b:3d:b2:18:df:10:6b:0b: 05:50:fa:fd:c8:e7:48:a0:31:10:fd:a4:fe:ce:a4:11:a7:30: e1:9e:d4:7e:62:7e:90:69:95:52:f6:7e:8f:6e:e0:12:f5:9f: 8b:49:dd:dd -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBQkExMTAvBgNVBAUTKEU1OTkzMTU1QzQ0NDNBMkU1NkMwREUyMzMzQTQ0QjU2 Q0FENDkxOUMwHhcNMjQwMzA3MDIwNDI2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWU5MjBhYS0wNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SoFWzHbwcEWl8rj4B272ilsGA9fO9igduDaQQDI2AaaI0ou62YeHOUFux/+ C8GFsnwogwwuh27x1cV/CemciZXZ5yFMA50SVIgU7aVXDJsvsCsdHLZcFSLWzKR3 +08OgM8E99cogLNNWDLv7dl+cwx0WbMExo7sN5GiHpavZIWGNvl2sF2YHiqsiSIa 7kD/5EZIkM/Ra+iqLX0UGiqJuRMpBy070GS2jU3d7TIyH9a9OggIzaAsf5ze0lhv 30TrVG1T1YfBhoIay/A1onCHMMpO0HdQ0FyEm1HHoPfmTSYEHvqqR8PVsa51l7FJ x/KwgzgV14eDJSd3L8fDFGOPiwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAjkrEsl P44kIq4Nd7BaeADbAYfxMB8GA1UdIwQYMBaAFOWZMVXERDouVsDeIzOkS1bK1JGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0FCQS85ODVGMDkyMjM1 NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9pNVd3TjRqTTZSTFZzclVr WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaa3hWY1JFT2k1V3dONGpNNlJMVnNyVWtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzNBQkEvOTg1RjA5MjIzNTRCMTFFQ0I2MkRCRDQ4QzRGOUFFMDIvNEI5RjFBQTYz NTRGMTFFQzg1MzFDMzREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBALKOgQDBALLvhwwDQYJKoZIhvcNAQELBQADggEBAIKijywQ S6BwAbglbSmtIwANAxqLuykKtsbvyuNgHqoVkIoHmyBtiwu9ARY1L4ARjmxAFvxT r8oR8yyzxS10sCY6dwKYpCCo27zap/CBKVOSt6XmfcWdu7k0VsewfesFprRTI5kR 2vk19XXD6j+gi5zkzl4Okyihd+4yGIj0l0kKJdCqHiKVonRxkbc1mX15gHXp6RuS 3q6h2zD0TwvZlEARrc3macsybmuThAo+cWf6SYAoUa7cqfQuzNJ8mWI82yhlx3Eu 3yU0xQ+ntIkzw8abPbIY3xBrCwVQ+v3I50igMRD9pP7OpBGnMOGe1H5ifpBplVL2 fo9u4BL1n4tJ3d0= -----END CERTIFICATE-----Generated at Fri May 17 03:17:01 2024 by rpki-client on console-fra.rpki-client.org