$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/1E8ADFD0C1F211EBA984726AC4F9AE02.roa File: 1E8ADFD0C1F211EBA984726AC4F9AE02.roa (raw, json) Hash identifier: CUsajeVLvPH3ZpK+1V7h6ODIDiML6sMTOfEXOZQhT4I= Subject key identifier: BE:AD:A8:D0:F6:46:CF:03:A6:2B:E8:3D:60:BC:DE:DF:03:3B:95:79 Certificate issuer: /CN=A91D51C1/serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050 Certificate serial: 0464 Authority key identifier: 97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/1E8ADFD0C1F211EBA984726AC4F9AE02.roa Signing time: Sat 01 Jul 2023 00:30:33 +0000 ROA not before: Sat 01 Jul 2023 00:30:33 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 0 IP address blocks: 43.243.22.0/23 maxlen: 23 103.26.68.0/23 maxlen: 23 103.26.70.0/24 maxlen: 24 103.26.71.0/24 maxlen: 24 202.12.243.0/24 maxlen: 24 2001:dea:0:10::/64 maxlen: 64 2001:dea:0:20::/64 maxlen: 64 2001:dea:0:30::/64 maxlen: 64 2001:dea:0:40::/64 maxlen: 64 2001:dea:0:50::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 00:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51C1/serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050 Validity Not Before: Jul 1 00:30:33 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=649f73a8-c7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:5d:95:03:58:ff:6f:a7:79:ed:82:01:c5: 6d:8f:3f:8f:09:f3:fd:c6:6b:55:d4:03:e2:7d:da: 2f:b5:d8:5c:a2:87:0f:f4:8c:5b:0c:02:dd:22:eb: 14:d7:a7:38:e1:b8:58:62:f7:81:fe:23:34:09:6c: f1:04:61:3d:ef:a9:a1:75:75:cc:6b:c5:81:31:07: c7:5d:5e:43:6e:44:da:ca:f3:ae:38:a9:18:ee:41: f7:aa:da:fc:9c:80:4f:a8:f4:e5:5a:1a:3d:ec:5a: 88:3e:43:3d:de:36:ba:f0:b0:af:32:b7:33:88:7c: ea:4d:6b:21:32:f8:a2:ba:22:d9:04:c5:12:4e:c5: 28:93:d4:9c:5a:c1:0a:8e:ac:95:76:8d:3c:5e:3d: c6:6d:45:12:d1:a9:f9:31:74:32:c6:a2:2c:44:fd: 89:6c:1c:24:3c:bc:7d:6a:c8:55:7e:65:ca:6e:c5: 23:3f:0c:4e:17:df:4c:f7:9b:1d:28:5e:53:d4:e3: 4b:17:84:f7:b0:1b:70:f8:91:d9:b8:0e:1b:b4:01: 07:35:55:f2:a7:54:5c:50:0b:6e:fa:da:70:8b:fc: cf:af:93:24:90:e9:4c:86:6a:bb:97:92:93:0b:13: 6b:73:ff:ab:5f:66:84:aa:3b:91:96:ea:ef:5a:17: 25:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AD:A8:D0:F6:46:CF:03:A6:2B:E8:3D:60:BC:DE:DF:03:3B:95:79 X509v3 Authority Key Identifier: keyid:97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/1E8ADFD0C1F211EBA984726AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.22.0/23 103.26.68.0/22 202.12.243.0/24 IPv6: 2001:dea:0:10::/64 2001:dea:0:20::/64 2001:dea:0:30::/64 2001:dea:0:40::/64 2001:dea:0:50::/64 Signature Algorithm: sha256WithRSAEncryption 15:f5:15:a4:6e:14:71:29:5c:6a:e3:e3:4d:3f:01:2e:79:04: a9:9c:35:2f:3c:21:cc:dc:b9:60:a3:be:53:98:2e:ff:19:38: 36:99:c4:7a:1e:5b:6c:08:5e:52:8a:33:9f:fa:a4:c1:74:b2: 67:cc:35:5a:28:6d:df:78:92:df:34:22:8d:ba:a5:1c:e2:d4: 55:59:00:ba:57:9b:e1:3a:ad:90:41:e3:d2:cc:28:1d:9a:9f: a6:99:9b:ff:7d:6f:d4:92:d4:ee:0c:cb:27:77:ff:52:fd:4c: 2f:92:a8:0d:9f:f9:af:07:bf:12:35:3f:1a:a5:0a:84:d6:3e: 30:29:93:28:76:d0:7d:84:87:bc:38:a2:68:48:09:98:e1:0d: 6c:6a:a1:29:cd:98:4c:29:73:9c:88:dd:95:a7:68:d6:d5:42: d4:35:b8:64:5e:ee:29:13:4b:e3:62:43:2a:7e:7d:13:10:96: e2:e4:c6:a6:b6:5a:fb:04:bb:ba:27:0f:92:d6:cf:39:62:a1: 3e:59:ef:32:cf:7e:c6:8d:0b:86:e6:2a:c1:eb:40:87:fa:81: e9:23:4a:05:90:94:c9:e8:0f:26:72:b9:92:f2:eb:26:ee:e4: 84:c5:5a:19:24:a3:63:67:37:5f:38:29:d7:1b:03:28:41:5c: 8b:4f:5d:b8 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQzExMTAvBgNVBAUTKDk3QkI1NEIzRDIzQzM3QzNERDNFMDE2OUNBOTc0RDI3 REJBOUYwNTAwHhcNMjMwNzAxMDAzMDMzWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDlmNzNhOC1jN2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEtdlQNY/2+nee2CAcVtjz+PCfP9xmtV1APifdovtdhcoocP9IxbDALdIusU 16c44bhYYveB/iM0CWzxBGE976mhdXXMa8WBMQfHXV5DbkTayvOuOKkY7kH3qtr8 nIBPqPTlWho97FqIPkM93ja68LCvMrcziHzqTWshMviiuiLZBMUSTsUok9ScWsEK jqyVdo08Xj3GbUUS0an5MXQyxqIsRP2JbBwkPLx9ashVfmXKbsUjPwxOF99M95sd KF5T1ONLF4T3sBtw+JHZuA4btAEHNVXyp1RcUAtu+tpwi/zPr5MkkOlMhmq7l5KT CxNrc/+rX2aEqjuRlurvWhclGwIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFL6tqND2 Rs8DpivoPWC83t8DO5V5MB8GA1UdIwQYMBaAFJe7VLPSPDfD3T4BacqXTSfbqfBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFDMS9EOTJFNjlBQUMx RUUxMUVCQkZENTdFMkFDNEY5QUUwMi9sN3RVczlJOE44UGRQZ0ZweXBkTko5dXA4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3dFVzOUk4TjhQZFBnRnB5cGROSjl1cDhGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUxQzEvRDkyRTY5QUFDMUVFMTFFQkJGRDU3RTJBQzRGOUFFMDIvMUU4QURGRDBD MUYyMTFFQkE5ODQ3MjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwagYIKwYBBQUHAQcBAf8E WzBZMBgEAgABMBIDBAEr8xYDBAJnGkQDBADKDPMwPQQCAAIwNwMJACABDeoAAAAQ AwkAIAEN6gAAACADCQAgAQ3qAAAAMAMJACABDeoAAABAAwkAIAEN6gAAAFAwDQYJ KoZIhvcNAQELBQADggEBABX1FaRuFHEpXGrj400/AS55BKmcNS88IczcuWCjvlOY Lv8ZODaZxHoeW2wIXlKKM5/6pMF0smfMNVoobd94kt80Io26pRzi1FVZALpXm+E6 rZBB49LMKB2an6aZm/99b9SS1O4Myyd3/1L9TC+SqA2f+a8HvxI1PxqlCoTWPjAp kyh20H2Eh7w4omhICZjhDWxqoSnNmEwpc5yI3ZWnaNbVQtQ1uGRe7ikTS+NiQyp+ fRMQluLkxqa2WvsEu7onD5LWzzlioT5Z7zLPfsaNC4bmKsHrQIf6gekjSgWQlMno DyZyuZLy6ybu5ITFWhkko2NnN184KdcbAyhBXItPXbg= -----END CERTIFICATE-----Generated at Thu Apr 25 02:05:27 2024 by rpki-client on console-fra.rpki-client.org