$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/2C3F5F0C1CB711EAAA03506DC4F9AE02.roa File: 2C3F5F0C1CB711EAAA03506DC4F9AE02.roa (raw, json) Hash identifier: Nsyuz4pVBmCSLGABPSKpBQa3yU72+R4F7kivIeQsp5M= Subject key identifier: 50:BD:3A:8D:87:1C:82:AE:F6:BA:FF:24:C2:23:9A:74:A8:97:B1:A9 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0DBB Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/2C3F5F0C1CB711EAAA03506DC4F9AE02.roa Signing time: Thu 28 Dec 2023 18:56:44 +0000 ROA not before: Thu 28 Dec 2023 18:56:44 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 23930 IP address blocks: 125.252.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3515 (0xdbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Dec 28 18:56:44 2023 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=658dc4ec-6667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:cb:5a:f0:7a:8a:a9:de:23:72:64:3b:79: f9:59:b5:7d:a1:a2:44:aa:3b:60:ee:a8:2a:a0:3d: cc:74:f2:30:3b:b1:3e:3f:d2:f6:19:3b:cc:8c:b9: 2b:6e:3c:d2:ef:46:a3:07:cd:4d:94:ad:f5:28:c7: ee:f2:74:5d:fe:0c:05:53:c9:e4:ae:e6:df:63:38: 92:4e:9c:10:9a:78:0d:c8:81:cb:82:1f:94:f2:b9: d8:d8:7d:9d:e5:d1:08:94:b2:c0:d6:1f:16:36:0f: 7e:a9:96:33:ed:b2:59:75:fa:18:6f:53:47:fd:29: 38:09:aa:8d:14:5d:99:d0:03:28:9d:a7:81:c5:6b: f3:9f:4d:fa:70:81:9d:93:50:1e:c6:9d:3d:b3:7f: d3:a2:86:dc:0f:22:a2:a8:b7:46:69:f6:05:95:56: 6c:3c:0b:58:c2:ab:46:75:bc:b9:69:fa:1c:92:40: 35:64:1f:df:e3:4d:28:fd:d8:43:e6:91:0e:41:40: ac:f4:c2:55:06:1d:0b:77:27:b4:fa:1a:89:8a:43: 27:cc:fc:a9:86:37:05:dd:60:cb:10:e6:22:78:28: da:30:d3:0a:9d:0e:35:d2:1b:78:6e:53:e7:fd:14: ed:21:b3:cf:58:4e:3a:13:2e:36:d3:a5:52:db:23: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BD:3A:8D:87:1C:82:AE:F6:BA:FF:24:C2:23:9A:74:A8:97:B1:A9 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/2C3F5F0C1CB711EAAA03506DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.252.99.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:1f:91:ba:d2:a3:f8:74:a4:a5:6a:6b:47:dc:8f:e8:9b:02: 56:55:7f:f4:21:e5:c6:ca:f7:01:19:47:63:52:2a:30:9e:a5: 8b:67:72:22:3f:45:9b:27:a5:1c:16:42:7b:c2:52:d7:18:11: d6:fd:3a:e1:81:f5:b4:d3:61:9a:73:7f:90:99:1d:2b:5e:b5: 5c:0b:01:32:41:55:fb:29:dd:15:92:75:b4:f9:a0:bd:36:1a: f7:9e:04:cb:b5:70:40:dd:80:67:b3:6b:be:9a:9f:6b:07:64: 1d:ce:b9:d0:de:78:8b:e8:c7:1b:fa:50:71:9f:01:44:18:68: 8e:96:54:cf:40:34:da:ac:69:9c:e0:73:2b:bf:e3:3a:01:07: 44:3a:a3:02:6c:a0:ff:ab:88:56:0c:30:c3:43:36:1a:50:a2: 06:27:21:ba:ea:1b:40:42:09:de:91:f2:f9:96:24:34:af:e7: 55:d1:46:aa:c2:aa:71:55:85:ab:29:b9:13:b5:7c:fd:40:5e: d5:09:a0:ce:62:5f:ba:39:67:d3:6c:ad:7c:42:da:23:90:ab: 09:ab:93:a8:03:6b:6c:b0:36:50:44:36:94:4c:a7:b7:9b:9c: 87:7b:cb:df:90:36:e9:31:33:8f:c1:c8:3f:12:ca:20:b5:6e: 46:60:91:8c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjMxMjI4MTg1NjQ0WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkYzRlYy02NjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFzLWvB6iqneI3JkO3n5WbV9oaJEqjtg7qgqoD3MdPIwO7E+P9L2GTvMjLkr bjzS70ajB81NlK31KMfu8nRd/gwFU8nkrubfYziSTpwQmngNyIHLgh+U8rnY2H2d 5dEIlLLA1h8WNg9+qZYz7bJZdfoYb1NH/Sk4CaqNFF2Z0AMonaeBxWvzn036cIGd k1Aexp09s3/ToobcDyKiqLdGafYFlVZsPAtYwqtGdby5afockkA1ZB/f400o/dhD 5pEOQUCs9MJVBh0Ldye0+hqJikMnzPyphjcF3WDLEOYieCjaMNMKnQ410ht4blPn /RTtIbPPWE46Ey4206VS2yMIxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFC9Oo2H HIKu9rr/JMIjmnSol7GpMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvMkMzRjVGMEMx Q0I3MTFFQUFBMDM1MDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB9/GMwDQYJKoZIhvcNAQELBQADggEBAD0fkbrSo/h0pKVq a0fcj+ibAlZVf/Qh5cbK9wEZR2NSKjCepYtnciI/RZsnpRwWQnvCUtcYEdb9OuGB 9bTTYZpzf5CZHStetVwLATJBVfsp3RWSdbT5oL02GveeBMu1cEDdgGeza76an2sH ZB3OudDeeIvoxxv6UHGfAUQYaI6WVM9ANNqsaZzgcyu/4zoBB0Q6owJsoP+riFYM MMNDNhpQogYnIbrqG0BCCd6R8vmWJDSv51XRRqrCqnFVhaspuRO1fP1AXtUJoM5i X7o5Z9NsrXxC2iOQqwmrk6gDa2ywNlBENpRMp7ebnId7y9+QNukxM4/ByD8SyiC1 bkZgkYw= -----END CERTIFICATE-----Generated at Thu May 16 20:25:55 2024 by rpki-client on console-ams.rpki-client.org