$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/5221650C5ADE11EFBE0B0841C4F9AE02.roa File: 5221650C5ADE11EFBE0B0841C4F9AE02.roa (raw, json) Hash identifier: JHAlsO4c21BzMuIuY3/wvgeixXnzMgWJvjLhenU5Qhs= Subject key identifier: 48:D3:BE:21:64:31:25:1D:95:2E:6D:D3:C3:AA:28:84:7D:EE:37:D9 Certificate issuer: /CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Certificate serial: 02 Authority key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/5221650C5ADE11EFBE0B0841C4F9AE02.roa Signing time: Thu 15 Aug 2024 08:13:58 +0000 ROA not before: Thu 15 Aug 2024 08:13:58 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 26658 IP address blocks: 103.197.216.0/22 maxlen: 22 220.158.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Validity Not Before: Aug 15 08:13:58 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66bdb8c6-4eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ba:52:4a:07:be:3e:dc:c8:a6:6b:e9:7c:2d: 7b:17:d4:2a:81:19:11:7a:b6:87:52:d4:fc:16:cf: 46:b8:fe:14:22:63:59:2b:e3:b0:ad:73:22:d5:c4: b6:3a:2d:4e:d9:ad:c1:48:8c:28:68:77:0d:0e:2b: 74:53:bc:2d:2f:43:b7:f0:0b:92:e5:47:14:fc:b8: a2:21:7b:96:d9:32:e3:fb:19:bc:03:1a:98:53:9e: 61:ec:7d:62:36:ba:05:e8:73:14:37:e3:a3:52:2d: 91:b0:10:e5:15:41:05:28:e1:6c:de:24:4e:51:2d: cb:aa:70:48:bc:d1:26:48:05:76:9d:9e:6d:dc:19: b6:76:c7:25:4b:c3:9b:06:9e:3a:78:bf:bb:0d:6c: 78:e2:eb:b7:9f:c9:a4:6d:c3:51:f5:90:48:b2:88: f3:84:a5:c3:ec:39:37:fc:e2:dd:4d:84:69:11:55: e4:a3:e4:72:f5:93:2d:5c:7c:32:61:34:ec:b6:16: f7:82:69:83:05:c3:1e:af:22:71:98:c6:c1:68:dc: 11:d5:e2:0a:b2:fd:67:32:95:9a:63:75:ca:c1:96: b0:4c:f7:ad:27:0d:f3:1f:e8:a1:28:e4:35:be:1f: e4:96:a7:97:ab:44:89:62:37:ad:cf:17:d5:d7:07: c7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D3:BE:21:64:31:25:1D:95:2E:6D:D3:C3:AA:28:84:7D:EE:37:D9 X509v3 Authority Key Identifier: keyid:81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/5221650C5ADE11EFBE0B0841C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.216.0/22 220.158.252.0/22 Signature Algorithm: sha256WithRSAEncryption be:e7:28:c5:09:3c:c7:f9:28:ce:62:8d:e9:04:5a:75:89:b4: 21:8c:32:84:97:34:76:02:93:00:1b:9e:39:ea:77:ae:1a:3c: 1d:19:00:25:fc:7e:7f:af:b4:29:73:cf:5d:ee:5a:05:5d:95: 13:9b:89:e8:3b:fc:b7:81:73:c1:eb:d4:f6:f1:eb:6b:f6:45: 66:2a:2f:41:99:43:ec:58:8b:4d:ce:f6:ca:7b:78:8c:dc:ae: 2f:d8:88:03:44:01:24:92:57:2b:41:1a:19:51:15:05:b4:7c: eb:57:79:4d:64:80:76:03:be:22:16:80:00:ec:0c:73:37:7f: ee:af:d2:5b:0c:cf:94:41:bf:64:cd:41:3e:2c:6c:4a:6f:72: de:a3:d3:34:ce:7e:af:6a:13:cf:d0:85:be:39:8e:fc:72:9c: 09:6d:5f:07:32:e7:9b:ad:47:4c:9a:b5:ef:77:6d:c9:80:80: ca:f4:c1:0a:a8:f9:aa:81:e2:3a:68:43:c5:52:07:20:7f:df: ee:81:3d:a4:3b:1e:8c:a7:54:dc:40:a3:16:17:6a:8a:49:4c: 6e:3d:3a:53:8b:6b:97:eb:a1:e8:b5:ec:7e:de:51:3a:8f:66: d3:2a:5b:d4:71:b5:14:aa:35:ac:79:08:b2:a5:f5:96:fa:15: d4:52:96:be -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REMzMjExMC8GA1UEBRMoODE5OTQ5M0FEMjY1QUQyREM3MzM5NkY2QkEwQjZFRDZD QzQxRTEwQjAeFw0yNDA4MTUwODEzNThaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmRiOGM2LTRlZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3ulJKB74+3Mima+l8LXsX1CqBGRF6todS1PwWz0a4/hQiY1kr47CtcyLVxLY6 LU7ZrcFIjChodw0OK3RTvC0vQ7fwC5LlRxT8uKIhe5bZMuP7GbwDGphTnmHsfWI2 ugXocxQ346NSLZGwEOUVQQUo4WzeJE5RLcuqcEi80SZIBXadnm3cGbZ2xyVLw5sG njp4v7sNbHji67efyaRtw1H1kEiyiPOEpcPsOTf84t1NhGkRVeSj5HL1ky1cfDJh NOy2FveCaYMFwx6vInGYxsFo3BHV4gqy/WcylZpjdcrBlrBM960nDfMf6KEo5DW+ H+SWp5erRIliN63PF9XXB8fxAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUSNO+IWQx JR2VLm3Tw6oohH3uN9kwHwYDVR0jBBgwFoAUgZlJOtJlrS3HM5b2ugtu1sxB4Qsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQzMyLzBGMDkyODU0NUFE RTExRUZBNUM5QTI0MEM0RjlBRTAyL2dabEpPdEpsclMzSE01YjJ1Z3R1MXN4QjRR cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1psSk90SmxyUzNITTViMnVndHUxc3hCNFFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REMzMi8wRjA5Mjg1NDVBREUxMUVGQTVDOUEyNDBDNEY5QUUwMi81MjIxNjUwQzVB REUxMUVGQkUwQjA4NDFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmfF2AMEAtye/DANBgkqhkiG9w0BAQsFAAOCAQEAvucoxQk8 x/kozmKN6QRadYm0IYwyhJc0dgKTABueOep3rho8HRkAJfx+f6+0KXPPXe5aBV2V E5uJ6Dv8t4FzwevU9vHra/ZFZiovQZlD7FiLTc72ynt4jNyuL9iIA0QBJJJXK0Ea GVEVBbR861d5TWSAdgO+IhaAAOwMczd/7q/SWwzPlEG/ZM1BPixsSm9y3qPTNM5+ r2oTz9CFvjmO/HKcCW1fBzLnm61HTJq173dtyYCAyvTBCqj5qoHiOmhDxVIHIH/f 7oE9pDsejKdU3ECjFhdqiklMbj06U4trl+uh6LXsft5ROo9m0ypb1HG1FKo1rHkI sqX1lvoV1FKWvg== -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:54 2024 by rpki-client on console-ams.rpki-client.org