$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/4FF0079CC6CB11ECB185E43EC4F9AE02.roa File: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (raw, json) Hash identifier: Ev0nDvkLlRNvzsvGeZZyQLqh4efVJk/u06lrQKwckCU= Subject key identifier: 64:A3:9E:2E:D1:87:6D:F9:A0:B3:DF:00:AB:F4:6D:DF:D3:56:CA:6C Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 0200 Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/4FF0079CC6CB11ECB185E43EC4F9AE02.roa Signing time: Mon 09 Oct 2023 02:55:00 +0000 ROA not before: Mon 09 Oct 2023 02:55:00 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 132742 IP address blocks: 43.249.76.0/22 maxlen: 24 103.40.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Oct 9 02:55:00 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65236b83-5956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:0a:e2:4a:8c:55:f6:2d:4d:dd:44:bd:86: 35:08:64:40:89:b8:24:e9:94:ef:3b:1f:70:b0:2e: 64:f1:84:f1:94:e0:b2:3b:d4:db:68:3b:d3:38:da: ce:70:01:ea:32:b2:e7:e1:0a:a1:ff:62:8d:18:c9: 3b:e5:90:73:79:89:89:da:6e:a3:c1:95:ef:83:09: 03:13:62:68:68:48:c3:65:bd:81:d3:cb:1d:bf:a3: 6d:ac:db:77:8d:b9:9f:9c:44:54:e7:36:26:32:d3: fa:95:a4:02:8c:32:8d:1f:02:8f:46:be:86:1a:3d: 19:49:38:94:8f:ce:37:46:41:04:76:58:e8:3e:d0: 98:4b:43:b6:67:cb:b4:14:aa:a5:2d:07:61:4c:d8: 22:b7:d8:c9:2a:06:a4:ff:7f:6d:66:2b:4d:46:ef: 7d:71:49:fa:df:a7:d1:7f:d7:1e:ef:ee:06:03:31: d5:29:8e:e2:b6:c9:0a:82:52:40:17:39:47:cc:1c: 8c:cd:b8:f9:b9:e6:c7:13:88:06:c8:e1:d0:ac:82: ef:b5:81:9c:96:77:f0:b1:e2:c3:10:82:8c:37:cf: c0:b1:9d:88:1e:1d:47:f3:43:7d:a7:0b:ad:4e:b7: 2e:7f:bb:8d:94:8b:4f:92:9c:22:8d:56:e1:1c:a5: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A3:9E:2E:D1:87:6D:F9:A0:B3:DF:00:AB:F4:6D:DF:D3:56:CA:6C X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/4FF0079CC6CB11ECB185E43EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.76.0/22 103.40.152.0/22 Signature Algorithm: sha256WithRSAEncryption 57:ca:b6:b9:c7:ca:5d:69:06:f9:6a:4f:ea:45:74:42:1a:04: 87:d1:85:26:56:8e:d5:44:40:a1:c2:61:de:81:a1:e3:f2:35: 28:99:88:1c:47:a6:81:6c:5c:d6:bf:96:be:dd:2b:2e:36:c5: c4:f6:d6:d7:e5:df:9b:7f:1a:dd:d3:be:0d:6b:fc:0e:28:44: 6f:f4:9b:2f:e6:97:6f:b8:bb:2a:d2:31:e2:7e:87:85:c2:c6: 71:ce:bf:4f:d8:26:d0:85:d9:f7:bb:a4:b6:09:35:89:5c:4e: cf:81:ef:ba:03:0c:d3:73:e3:3c:1c:a4:ed:dc:a0:4c:87:70: 27:89:55:cd:2b:6c:6f:b8:7e:9c:ad:41:df:c9:00:78:1f:69: 87:76:b4:81:97:1f:58:42:72:be:f2:8f:aa:29:60:df:36:3a: c2:03:9e:23:ef:c4:57:b4:56:4f:99:09:75:b4:eb:65:91:36: 22:ee:74:7e:ee:f8:eb:a9:11:25:36:6f:75:7a:86:9c:56:29: ab:ff:b3:26:bf:c8:3b:01:50:24:7e:35:ac:80:d3:13:40:6f: 30:de:b0:a1:fe:14:63:23:0e:f3:b7:10:b4:dd:44:ab:26:14: 8e:32:6a:5d:17:dd:4b:8d:5e:71:57:6a:49:4c:84:43:63:cb: 32:f4:b7:b2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjMxMDA5MDI1NTAwWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTIzNmI4My01OTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsEK4kqMVfYtTd1EvYY1CGRAibgk6ZTvOx9wsC5k8YTxlOCyO9TbaDvTONrO cAHqMrLn4Qqh/2KNGMk75ZBzeYmJ2m6jwZXvgwkDE2JoaEjDZb2B08sdv6NtrNt3 jbmfnERU5zYmMtP6laQCjDKNHwKPRr6GGj0ZSTiUj843RkEEdljoPtCYS0O2Z8u0 FKqlLQdhTNgit9jJKgak/39tZitNRu99cUn636fRf9ce7+4GAzHVKY7itskKglJA FzlHzByMzbj5uebHE4gGyOHQrILvtYGclnfwseLDEIKMN8/AsZ2IHh1H80N9pwut Trcuf7uNlItPkpwijVbhHKWduwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGSjni7R h235oLPfAKv0bd/TVspsMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdBNjkvOEFGM0Q1QjJDNjAzMTFFQzhCMEQ1RDNEQzRGOUFFMDIvNEZGMDA3OUND NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+UwDBAJnKJgwDQYJKoZIhvcNAQELBQADggEBAFfKtrnH yl1pBvlqT+pFdEIaBIfRhSZWjtVEQKHCYd6BoePyNSiZiBxHpoFsXNa/lr7dKy42 xcT21tfl35t/Gt3Tvg1r/A4oRG/0my/ml2+4uyrSMeJ+h4XCxnHOv0/YJtCF2fe7 pLYJNYlcTs+B77oDDNNz4zwcpO3coEyHcCeJVc0rbG+4fpytQd/JAHgfaYd2tIGX H1hCcr7yj6opYN82OsIDniPvxFe0Vk+ZCXW062WRNiLudH7u+OupESU2b3V6hpxW Kav/sya/yDsBUCR+NayA0xNAbzDesKH+FGMjDvO3ELTdRKsmFI4yal0X3UuNXnFX aklMhENjyzL0t7I= -----END CERTIFICATE-----Generated at Sat May 25 06:05:14 2024 by rpki-client on console-ams.rpki-client.org