$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/41F5CF98345911EFB9E92739C4F9AE02.roa File: 41F5CF98345911EFB9E92739C4F9AE02.roa (raw, json) Hash identifier: HWKoHZe7CLuc4iJ8hAxu/nwRzoDNyvIr4mOVi37eN7M= Subject key identifier: CE:4E:CB:65:F3:49:FD:2F:3C:7F:8D:52:03:ED:51:9A:33:99:17:4A Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: 04 Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/41F5CF98345911EFB9E92739C4F9AE02.roa Signing time: Thu 27 Jun 2024 07:56:06 +0000 ROA not before: Thu 27 Jun 2024 07:56:06 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 140065 IP address blocks: 103.147.223.0/24 maxlen: 24 103.164.2.0/24 maxlen: 24 203.12.249.0/24 maxlen: 24 203.17.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Jun 27 07:56:06 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=667d1b15-f7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:86:65:2a:c3:44:c1:86:09:11:8e:93:4c: 2b:46:ba:ab:ab:26:5a:1d:fb:03:88:0e:a0:32:e2: 95:b3:fa:b8:70:52:ef:68:90:dc:e3:35:3e:92:3b: bb:69:bc:20:1d:78:fc:59:e4:d1:97:05:ca:67:19: 14:83:1a:04:6b:87:8f:90:65:10:e2:8b:ff:fc:b6: bc:5b:37:ac:ed:3c:7a:61:95:91:7c:59:a6:26:c8: a7:96:c7:3d:a2:a4:c9:31:63:04:8f:e8:da:a8:21: 76:03:bd:93:d3:9b:bb:19:d3:74:58:ae:00:2b:f9: e5:c6:bb:b1:4d:dd:9b:69:d2:e4:ec:aa:c6:eb:54: 7a:c2:6b:34:fc:a4:33:2a:d4:e6:d6:5e:05:19:2d: 08:c6:c3:d8:9b:3e:4b:90:aa:ac:25:7d:6f:cd:31: f8:cd:83:33:28:46:da:07:8a:ad:f5:27:27:ba:32: 7c:ce:9b:2e:f6:01:d5:a6:a1:64:ef:1c:82:60:f2: 08:db:fe:be:53:8d:fa:7d:3b:a0:08:bc:e2:7a:23: 76:66:98:1e:f3:cb:91:0a:5e:4c:88:1f:c7:37:ed: 08:86:87:85:ea:be:10:1d:26:e1:fd:cc:07:34:b4: f4:83:de:2b:ba:85:74:4e:bb:31:a3:dd:db:b0:7f: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4E:CB:65:F3:49:FD:2F:3C:7F:8D:52:03:ED:51:9A:33:99:17:4A X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/41F5CF98345911EFB9E92739C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.223.0/24 103.164.2.0/24 203.12.249.0/24 203.17.240.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:41:e5:c8:fd:3e:e0:6d:33:fc:80:e4:b6:4c:d8:20:a5:46: bf:09:3e:6f:e2:ed:f2:13:98:e2:0d:62:a1:f3:00:35:94:41: 04:0b:24:75:16:d0:59:51:c7:90:55:f4:b3:7d:12:bd:e9:f8: ef:ab:ea:6c:25:cb:7b:7c:f1:50:50:74:6d:f6:ba:14:0c:f5: 64:57:a2:c1:25:d1:76:53:ea:3e:bd:55:14:b7:39:17:7e:eb: 21:da:31:85:a8:65:46:90:8b:10:fa:b5:0c:9f:16:0b:66:09: bf:fb:5b:44:c8:71:33:4b:fa:99:72:25:cb:22:7d:a1:39:a7: 9e:1f:2c:b7:9f:08:b0:d3:6d:9c:f1:a5:80:09:c8:9c:38:77: ad:a0:ee:da:5e:3b:34:f8:7a:50:d8:db:51:0f:b1:54:62:d4: 2e:a2:f9:a2:5c:33:34:81:8c:0f:b2:20:fe:dd:28:4a:ad:8d: 51:9e:a6:36:02:83:11:5f:94:55:ed:1a:77:05:1f:92:d8:67: eb:c3:3b:db:52:ba:75:de:77:43:b8:c0:16:d8:e1:3b:fb:c8: f8:a8:42:0d:aa:22:50:98:6e:fe:52:ae:de:c9:ca:7c:cd:2e: 0c:6a:c1:80:4e:d7:02:90:9d:ef:d3:c3:33:9b:3b:7f:40:e5: fe:d3:2f:6d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0M3NjExMC8GA1UEBRMoNUYwMjI0OEM5QzVDOTRGMTUzQzU5RjU2NzcyQzVGREE3 RjhENzFFNzAeFw0yNDA2MjcwNzU2MDZaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2N2QxYjE1LWY3YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0c4ZlKsNEwYYJEY6TTCtGuqurJlod+wOIDqAy4pWz+rhwUu9okNzjNT6SO7tp vCAdePxZ5NGXBcpnGRSDGgRrh4+QZRDii//8trxbN6ztPHphlZF8WaYmyKeWxz2i pMkxYwSP6NqoIXYDvZPTm7sZ03RYrgAr+eXGu7FN3Ztp0uTsqsbrVHrCazT8pDMq 1ObWXgUZLQjGw9ibPkuQqqwlfW/NMfjNgzMoRtoHiq31Jye6MnzOmy72AdWmoWTv HIJg8gjb/r5Tjfp9O6AIvOJ6I3ZmmB7zy5EKXkyIH8c37QiGh4XqvhAdJuH9zAc0 tPSD3iu6hXROuzGj3duwfx2NAgMBAAGjggKnMIICozAdBgNVHQ4EFgQUzk7LZfNJ /S88f41SA+1RmjOZF0owHwYDVR0jBBgwFoAUXwIkjJxclPFTxZ9Wdyxf2n+Ncecw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzQzc2L0I0OTkyRDUyMzQ1 ODExRUZCNDJGOUQzN0M0RjlBRTAyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNl Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHdJa2pKeGNsUEZUeFo5V2R5eGYybi1OY2VjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi80MUY1Q0Y5ODM0 NTkxMUVGQjlFOTI3MzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAxBggrBgEFBQcBBwEB/wQi MCAwHgQCAAEwGAMEAGeT3wMEAGekAgMEAMsM+QMEAssR8DANBgkqhkiG9w0BAQsF AAOCAQEATkHlyP0+4G0z/IDktkzYIKVGvwk+b+Lt8hOY4g1iofMANZRBBAskdRbQ WVHHkFX0s30Sven476vqbCXLe3zxUFB0bfa6FAz1ZFeiwSXRdlPqPr1VFLc5F37r IdoxhahlRpCLEPq1DJ8WC2YJv/tbRMhxM0v6mXIlyyJ9oTmnnh8st58IsNNtnPGl gAnInDh3raDu2l47NPh6UNjbUQ+xVGLULqL5olwzNIGMD7Ig/t0oSq2NUZ6mNgKD EV+UVe0adwUfkthn68M721K6dd53Q7jAFtjhO/vI+KhCDaoiUJhu/lKu3snKfM0u DGrBgE7XApCd79PDM5s7f0Dl/tMvbQ== -----END CERTIFICATE-----Generated at Tue Sep 17 08:12:30 2024 by rpki-client on console-ams.rpki-client.org