$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/95739D2EB35F11EE9F1AE83EC4F9AE02.roa File: 95739D2EB35F11EE9F1AE83EC4F9AE02.roa (raw, json) Hash identifier: 6zLGN36NBQQNLuIDmbtI228vtnkr7oIStcx8yaPuYEc= Subject key identifier: FF:29:AC:B7:F0:7F:17:45:AD:B3:C4:8D:BB:88:2F:B3:89:B0:BB:C6 Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Certificate serial: 05D1 Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/95739D2EB35F11EE9F1AE83EC4F9AE02.roa Signing time: Mon 15 Jan 2024 04:36:01 +0000 ROA not before: Mon 15 Jan 2024 04:36:01 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 21859 IP address blocks: 43.251.116.0/24 maxlen: 24 43.251.117.0/24 maxlen: 24 103.42.180.0/24 maxlen: 24 103.42.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1489 (0x5d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Validity Not Before: Jan 15 04:36:01 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65a4b630-33e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:36:e9:15:f0:28:06:d0:76:07:50:47:61:36: 8b:9f:e0:fa:f9:78:61:27:ca:f2:eb:f7:2e:d1:57: 14:ec:80:4e:71:b7:2d:9c:f7:75:b0:bd:d2:73:e5: 6c:02:49:5a:06:13:34:bc:cc:a7:33:c1:62:d6:6e: 0d:48:60:2c:02:71:19:50:8b:54:cf:73:59:83:a7: a3:7f:95:33:62:72:e8:00:64:5d:49:6b:b7:f9:ef: cd:75:d3:c9:69:77:ff:af:15:3a:62:f3:66:28:2b: 39:0b:74:b5:03:b6:56:0c:61:57:4c:f9:ba:ca:61: 57:f8:19:ff:0e:3a:e9:c2:0b:7a:40:bf:ae:b3:c1: 9f:ff:2f:10:b5:fa:5d:92:63:b1:47:06:25:8f:5d: 60:7e:a3:43:48:85:90:da:86:e1:e2:2d:ea:1d:a2: 65:4b:b7:2d:6f:39:7f:a0:b8:57:07:63:2d:81:5c: ba:ed:e8:4e:51:08:79:f4:59:85:f2:cf:89:15:53: 9a:a5:84:38:8f:43:d9:69:93:72:bb:5a:f1:1c:e8: 92:cf:c8:1b:ba:51:7c:fa:df:ba:a8:9a:b3:09:92: f4:dd:7e:fd:98:e5:c3:e6:7c:44:80:58:80:91:60: d7:6a:76:b8:55:61:dc:3f:9e:c0:ec:b2:9d:7b:99: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:29:AC:B7:F0:7F:17:45:AD:B3:C4:8D:BB:88:2F:B3:89:B0:BB:C6 X509v3 Authority Key Identifier: keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/95739D2EB35F11EE9F1AE83EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.116.0/23 103.42.180.0/23 Signature Algorithm: sha256WithRSAEncryption 03:5f:9f:9a:9a:f5:94:0a:ec:c6:22:70:37:3d:52:94:f8:96: 56:1c:73:74:1a:25:c4:1c:73:ed:55:af:15:35:90:b3:a8:d7: 54:21:73:1a:5e:d1:fb:49:f0:ab:a7:52:f4:cc:e4:28:e1:fd: 02:bb:f9:88:fd:b9:41:dc:f2:58:16:fd:cb:28:92:cf:82:a9: 8f:12:82:1f:5b:e2:4b:cf:c5:42:17:66:6f:82:b8:7e:95:20: ca:07:d8:0d:d6:ab:41:b9:bf:b2:15:2c:6d:eb:66:a9:4b:5d: 53:e6:71:f6:32:3c:a1:ec:29:69:54:6e:a7:14:96:ef:ff:01: 3b:a6:2f:21:1e:f6:74:3e:55:b5:21:56:9f:c0:27:a7:f4:71: c4:c4:94:7e:5d:4d:ab:48:9c:d1:67:42:f2:05:9b:42:4b:c7: 97:8e:52:a1:89:9a:a2:84:2c:04:26:66:88:e2:05:4c:b7:bc: 2c:1a:49:15:ef:7d:37:d7:5a:78:3e:f0:f6:ce:ac:f8:c6:dd: e0:39:57:e9:0d:c5:5a:4c:57:d7:c4:2a:69:95:9c:23:8d:45: 1c:0f:98:dc:c2:5a:d8:c9:0e:2c:d4:c0:9c:f1:ec:85:13:71: d9:18:13:43:fb:3e:78:28:6b:17:06:5f:54:aa:93:f2:94:1e: 2e:90:3a:c9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz MzJEQTQzQ0IwHhcNMjQwMTE1MDQzNjAxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWE0YjYzMC0zM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTbpFfAoBtB2B1BHYTaLn+D6+XhhJ8ry6/cu0VcU7IBOcbctnPd1sL3Sc+Vs AklaBhM0vMynM8Fi1m4NSGAsAnEZUItUz3NZg6ejf5UzYnLoAGRdSWu3+e/NddPJ aXf/rxU6YvNmKCs5C3S1A7ZWDGFXTPm6ymFX+Bn/Djrpwgt6QL+us8Gf/y8Qtfpd kmOxRwYlj11gfqNDSIWQ2obh4i3qHaJlS7ctbzl/oLhXB2MtgVy67ehOUQh59FmF 8s+JFVOapYQ4j0PZaZNyu1rxHOiSz8gbulF8+t+6qJqzCZL03X79mOXD5nxEgFiA kWDXana4VWHcP57A7LKde5kQ3wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP8prLfw fxdFrbPEjbuIL7OJsLvGMB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdDMDQvQTBEQjM1NTI1RkI0MTFFQkFCN0M2QTIzQzRGOUFFMDIvOTU3MzlEMkVC MzVGMTFFRTlGMUFFODNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEr+3QDBAFnKrQwDQYJKoZIhvcNAQELBQADggEBAANfn5qa 9ZQK7MYicDc9UpT4llYcc3QaJcQcc+1VrxU1kLOo11Qhcxpe0ftJ8KunUvTM5Cjh /QK7+Yj9uUHc8lgW/csoks+CqY8Sgh9b4kvPxUIXZm+CuH6VIMoH2A3Wq0G5v7IV LG3rZqlLXVPmcfYyPKHsKWlUbqcUlu//ATumLyEe9nQ+VbUhVp/AJ6f0ccTElH5d TatInNFnQvIFm0JLx5eOUqGJmqKELAQmZojiBUy3vCwaSRXvfTfXWng+8PbOrPjG 3eA5V+kNxVpMV9fEKmmVnCONRRwPmNzCWtjJDizUwJzx7IUTcdkYE0P7PngoaxcG X1Sqk/KUHi6QOsk= -----END CERTIFICATE-----Generated at Wed May 1 01:38:31 2024 by rpki-client on console-ams.rpki-client.org