$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/666595E890A911EDA8F5FF52C4F9AE02.roa File: 666595E890A911EDA8F5FF52C4F9AE02.roa (raw, json) Hash identifier: 0hhYQv1Dx0IGJd7nJvn9S2TIbOnrfwA1D6BasQDOlWU= Subject key identifier: 85:6D:61:9D:9D:A9:DF:E9:BA:6D:A3:04:FB:5D:BC:04:F6:57:F9:3C Certificate issuer: /CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Certificate serial: 0676 Authority key identifier: EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/666595E890A911EDA8F5FF52C4F9AE02.roa Signing time: Wed 24 Apr 2024 23:32:32 +0000 ROA not before: Wed 24 Apr 2024 23:32:32 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 140324 IP address blocks: 103.149.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 23:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Validity Not Before: Apr 24 23:32:32 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66299690-cd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:28:f4:bc:f7:1a:6f:73:53:68:c8:db:bc: db:a9:5e:df:1b:81:2c:55:52:7a:b5:95:c0:f0:18: 62:7f:0d:db:2d:39:ff:9c:36:e7:25:37:e1:8c:f6: b7:db:a0:b4:4c:3e:7c:c1:bc:be:bd:f6:4b:ba:76: 22:dd:80:9a:cf:c9:e3:1d:21:56:28:b5:ba:d1:6b: 07:4a:d9:da:fa:21:9d:3a:17:57:01:6a:d6:ea:07: f5:8f:93:55:e2:57:ff:4c:4a:03:df:55:66:21:11: aa:52:ee:31:0b:94:35:ee:ed:56:21:bf:c6:3e:a2: c8:11:25:39:72:5e:64:8d:87:4f:e0:98:14:1a:4f: f3:c7:17:f9:a3:84:ce:e5:47:e7:71:2d:f8:24:f6: d5:b8:ca:97:a1:70:99:c3:c2:50:ff:c4:48:43:27: a3:b6:df:92:7f:e1:ce:58:d3:55:42:e3:cd:3d:73: e9:9b:c1:39:8b:18:3b:9c:2c:a3:d2:d9:a2:71:1f: 44:60:33:0b:e8:68:6a:e2:6b:59:96:41:91:27:7b: f7:75:9b:f2:fd:a4:d9:f4:76:63:94:ff:dc:3a:11: 3f:fc:9b:2f:26:c2:b0:4c:59:f7:9c:01:53:da:83: 79:6c:c5:56:d7:86:26:47:f0:42:a8:8d:ed:ac:13: ef:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6D:61:9D:9D:A9:DF:E9:BA:6D:A3:04:FB:5D:BC:04:F6:57:F9:3C X509v3 Authority Key Identifier: keyid:EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/666595E890A911EDA8F5FF52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.204.0/23 Signature Algorithm: sha256WithRSAEncryption ab:a5:5c:4c:ae:9c:9a:be:1a:43:c8:5e:92:42:54:42:d1:f8: 6e:27:df:1a:30:7e:99:b8:09:52:17:16:57:a8:e4:1a:21:8e: 14:6c:f0:5a:a7:74:8f:e8:89:12:4f:e7:27:e4:8a:2f:2c:7b: e5:3f:4a:f6:9b:6d:7c:01:fe:b8:8e:96:a7:2e:d6:45:9c:fb: 5c:12:4c:4d:27:56:c4:05:ba:85:53:49:b3:44:8a:6b:64:2b: 76:0c:2b:64:3f:a8:a3:84:d3:43:34:0a:d7:cf:a9:06:8c:82: 69:6c:a6:d9:3d:56:8b:4a:16:2b:01:20:35:8f:6b:25:ee:9b: 76:74:60:b7:01:a5:b9:3d:7b:44:7c:4c:26:1a:7f:d8:e9:03: 4b:68:b1:1a:73:e0:51:2a:85:65:64:67:58:0e:f3:83:58:01: bd:4e:94:3a:ec:08:4b:86:c7:4f:81:54:7b:9a:0a:0b:d6:d3: 01:a9:ab:f9:12:64:96:61:81:3d:cf:ef:91:5e:f6:f6:e9:03: ee:8d:36:7a:b1:56:21:99:ad:44:0d:db:15:5d:1c:1b:1c:5a: 0e:ee:da:59:21:c5:12:21:b6:39:63:de:a4:09:99:da:d6:ef: 3b:80:21:1e:eb:78:74:3f:53:46:1e:c6:48:71:7e:af:31:9c: cd:e8:1d:af -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGRDcxMTAvBgNVBAUTKEVGQTZCMTA3RUYxOTRBNERENjdCMjhENTU1ODAxMTc1 Q0NGNzE0NDUwHhcNMjQwNDI0MjMzMjMyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjI5OTY5MC1jZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz8o9Lz3Gm9zU2jI27zbqV7fG4EsVVJ6tZXA8Bhifw3bLTn/nDbnJTfhjPa3 26C0TD58wby+vfZLunYi3YCaz8njHSFWKLW60WsHStna+iGdOhdXAWrW6gf1j5NV 4lf/TEoD31VmIRGqUu4xC5Q17u1WIb/GPqLIESU5cl5kjYdP4JgUGk/zxxf5o4TO 5UfncS34JPbVuMqXoXCZw8JQ/8RIQyejtt+Sf+HOWNNVQuPNPXPpm8E5ixg7nCyj 0tmicR9EYDML6Ghq4mtZlkGRJ3v3dZvy/aTZ9HZjlP/cOhE//JsvJsKwTFn3nAFT 2oN5bMVW14YmR/BCqI3trBPv6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIVtYZ2d qd/pum2jBPtdvAT2V/k8MB8GA1UdIwQYMBaAFO+msQfvGUpN1nso1VWAEXXM9xRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZENy83QjQwOUNBMDJG QTkxMUVCQjkwQkJBODRDNEY5QUUwMi83NmF4Qi04WlNrM1dleWpWVllBUmRjejNG RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc2YXhCLThaU2szV2V5alZWWUFSZGN6M0ZFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGRDcvN0I0MDlDQTAyRkE5MTFFQkI5MEJCQTg0QzRGOUFFMDIvNjY2NTk1RTg5 MEE5MTFFREE4RjVGRjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlcwwDQYJKoZIhvcNAQELBQADggEBAKulXEyunJq+GkPI XpJCVELR+G4n3xowfpm4CVIXFleo5BohjhRs8FqndI/oiRJP5yfkii8se+U/Svab bXwB/riOlqcu1kWc+1wSTE0nVsQFuoVTSbNEimtkK3YMK2Q/qKOE00M0CtfPqQaM gmlsptk9VotKFisBIDWPayXum3Z0YLcBpbk9e0R8TCYaf9jpA0tosRpz4FEqhWVk Z1gO84NYAb1OlDrsCEuGx0+BVHuaCgvW0wGpq/kSZJZhgT3P75Fe9vbpA+6NNnqx ViGZrUQN2xVdHBscWg7u2lkhxRIhtjlj3qQJmdrW7zuAIR7reHQ/U0Yexkhxfq8x nM3oHa8= -----END CERTIFICATE-----Generated at Mon May 27 00:32:52 2024 by rpki-client on console-fra.rpki-client.org