$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/D3001978D03B11ECA7C18D2DC4F9AE02.roa File: D3001978D03B11ECA7C18D2DC4F9AE02.roa (raw, json) Hash identifier: VhdbU5oeoE1P0kbQ3Dehjq8QrO/fgJ2Mi3no4eVdznQ= Subject key identifier: 65:4B:B4:00:FD:3B:07:6F:74:75:C9:9E:ED:50:28:23:93:0C:E2:73 Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 0418 Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/D3001978D03B11ECA7C18D2DC4F9AE02.roa Signing time: Fri 19 Apr 2024 02:14:06 +0000 ROA not before: Fri 19 Apr 2024 02:14:06 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 55722 IP address blocks: 203.98.224.0/19 maxlen: 20 203.98.224.0/23 maxlen: 23 203.98.248.0/21 maxlen: 21 2403:f600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1048 (0x418) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Validity Not Before: Apr 19 02:14:06 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6621d36d-14b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:33:3b:86:8b:ab:81:a8:64:7d:e9:9f:9f:6f: d7:e7:f8:86:53:3e:1b:fd:68:23:b9:12:cf:2b:32: d1:63:c3:07:17:78:28:07:a7:9a:09:45:64:5e:e3: 37:bb:f7:cc:05:f7:89:03:be:90:be:b6:6f:9e:30: e6:24:73:91:b0:ed:77:da:2e:d5:5b:ba:ea:8e:71: e2:e4:b8:71:4b:2d:e1:88:7e:6e:52:09:06:81:b4: 82:e4:2d:84:34:d4:a3:28:18:28:86:45:bd:f2:38: 67:2a:75:cc:dd:ae:2d:55:42:90:b1:cc:9b:a4:d0: fb:86:d8:8a:67:81:79:7c:6c:14:03:47:c0:c2:24: 65:66:8e:6e:1c:58:7a:3f:38:30:26:60:ac:a8:a8: b8:8e:bf:9a:43:0d:2a:9f:ab:3f:f8:75:2e:c9:f4: ee:46:8d:88:8e:c5:34:52:bd:1e:cb:56:d8:00:50: 31:28:01:ce:90:8a:5e:21:67:22:27:72:80:e7:58: 41:5a:2e:94:ca:3e:f6:c4:3d:95:45:65:93:1c:a0: 54:ae:eb:de:03:8e:76:c6:70:af:36:66:1d:17:bf: e9:aa:e0:f4:17:39:8b:97:eb:72:fb:ef:c7:a2:ae: e8:cb:1c:ee:ec:2b:95:0e:0d:8b:99:75:30:f5:dc: 82:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4B:B4:00:FD:3B:07:6F:74:75:C9:9E:ED:50:28:23:93:0C:E2:73 X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/D3001978D03B11ECA7C18D2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.98.224.0/19 IPv6: 2403:f600::/32 Signature Algorithm: sha256WithRSAEncryption 88:92:87:9c:cd:9d:d1:6e:11:c1:03:40:b7:41:59:4f:c0:be: 1a:cc:a8:86:f0:04:09:71:91:bb:fc:0f:e6:5a:b4:98:ac:00: da:e7:db:04:9b:12:63:55:a6:76:27:36:2a:88:d2:1d:f9:ba: 23:4b:38:3e:3b:cc:a9:ed:88:28:22:d6:11:67:54:47:4d:6f: 5d:73:0e:3c:bc:13:78:ac:47:da:1e:86:72:34:c7:18:91:c2: d8:ad:1a:65:a4:14:ae:bf:c7:55:0b:20:42:df:e3:db:16:bf: 78:38:6a:8b:9c:d0:6e:4a:c0:b0:1b:a6:9e:b8:f5:ca:6b:a8: 67:ca:64:52:c1:1e:2d:c1:ee:63:f7:d7:69:49:2b:f4:38:01: ac:ba:fc:6f:08:2a:b4:0f:66:56:71:88:0d:e0:22:70:c3:be: 39:64:37:c7:b9:15:7d:d9:23:14:ce:92:08:5b:de:8f:bb:d6: b7:9d:23:f9:10:79:94:76:57:5c:b5:f5:2e:78:42:88:bd:b8: 8e:ab:1b:d3:f3:f7:75:b3:b2:f9:c6:a6:d7:25:bd:85:fb:6b: 5a:0c:90:e9:8f:4b:c6:d6:c9:08:5b:97:15:10:5f:76:08:0a: 43:95:cd:c4:6f:c9:d9:37:98:bc:b9:59:a8:ce:f2:39:be:ff: 90:a6:21:9c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjQwNDE5MDIxNDA2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjIxZDM2ZC0xNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jM7hourgahkfemfn2/X5/iGUz4b/WgjuRLPKzLRY8MHF3goB6eaCUVkXuM3 u/fMBfeJA76QvrZvnjDmJHORsO132i7VW7rqjnHi5LhxSy3hiH5uUgkGgbSC5C2E NNSjKBgohkW98jhnKnXM3a4tVUKQscybpND7htiKZ4F5fGwUA0fAwiRlZo5uHFh6 PzgwJmCsqKi4jr+aQw0qn6s/+HUuyfTuRo2IjsU0Ur0ey1bYAFAxKAHOkIpeIWci J3KA51hBWi6Uyj72xD2VRWWTHKBUruveA452xnCvNmYdF7/pquD0FzmLl+ty++/H oq7oyxzu7CuVDg2LmXUw9dyCpwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGVLtAD9 OwdvdHXJnu1QKCOTDOJzMB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0I3NjUvQTREREZBOTQxRjNCMTFFQ0I3REM0NTJGQzRGOUFFMDIvRDMwMDE5NzhE MDNCMTFFQ0E3QzE4RDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAXLYuAwDQQCAAIwBwMFACQD9gAwDQYJKoZIhvcNAQELBQAD ggEBAIiSh5zNndFuEcEDQLdBWU/AvhrMqIbwBAlxkbv8D+ZatJisANrn2wSbEmNV pnYnNiqI0h35uiNLOD47zKntiCgi1hFnVEdNb11zDjy8E3isR9oehnI0xxiRwtit GmWkFK6/x1ULIELf49sWv3g4aouc0G5KwLAbpp649cprqGfKZFLBHi3B7mP312lJ K/Q4Aay6/G8IKrQPZlZxiA3gInDDvjlkN8e5FX3ZIxTOkghb3o+71redI/kQeZR2 V1y19S54Qoi9uI6rG9Pz93WzsvnGptclvYX7a1oMkOmPS8bWyQhblxUQX3YICkOV zcRvydk3mLy5WajO8jm+/5CmIZw= -----END CERTIFICATE-----Generated at Sun May 19 02:39:37 2024 by rpki-client on console-fra.rpki-client.org