$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/E4BB55347C4E11EBB889AF7EC4F9AE02.roa File: E4BB55347C4E11EBB889AF7EC4F9AE02.roa (raw, json) Hash identifier: WdopqEhvTQ3vKYnwSSQrxk36f/vPLbjR5paNeXudr14= Subject key identifier: 1D:C9:0D:6D:91:37:AA:AA:F2:46:A2:4D:89:C3:E9:B1:F7:C6:0A:4E Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Certificate serial: 0573 Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/E4BB55347C4E11EBB889AF7EC4F9AE02.roa Signing time: Tue 26 Dec 2023 17:45:07 +0000 ROA not before: Tue 26 Dec 2023 17:45:07 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 134781 IP address blocks: 103.124.236.0/22 maxlen: 24 2405:16c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1395 (0x573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Validity Not Before: Dec 26 17:45:07 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=658b1123-aefb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:df:49:f1:d8:f5:98:b7:b9:da:87:63:eb:a7: 30:ff:bb:82:2a:86:b1:8f:c7:5c:d9:b0:32:90:1e: f6:b3:91:ff:74:a8:73:09:b0:39:3c:c7:22:d1:85: b6:2c:c0:0c:34:ab:14:ee:b2:57:10:b8:3a:54:95: f9:a0:16:4e:55:57:66:30:65:79:96:88:7a:a0:6e: 63:cf:be:63:f1:2d:3b:aa:6a:1f:ac:4f:6b:dc:ab: 20:f4:fb:43:89:3a:ac:60:cf:62:1d:b9:3c:e4:2a: fa:23:d3:6e:99:67:79:3d:da:78:40:a9:a8:22:82: fa:41:27:5f:55:0b:2f:8d:d8:33:79:15:e2:bb:36: cd:a8:68:48:28:37:01:90:81:b5:31:53:b6:cc:0c: e6:5b:7b:38:fa:4d:59:88:53:c8:09:50:cd:6d:35: b5:1d:23:f9:e0:b9:39:2b:86:b5:40:51:57:37:26: 7b:0a:a0:ec:85:60:13:2d:a7:d3:04:a6:4b:ed:55: f3:ce:70:e5:19:1e:89:2c:af:c3:80:ed:0c:4f:42: b9:d7:a6:cb:5a:dc:54:c4:3a:0f:4c:17:93:e6:af: 21:3a:2c:fd:00:65:88:09:63:4a:77:fe:37:77:cf: 6e:85:af:34:f4:b5:5e:be:a0:a0:53:82:36:80:f3: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C9:0D:6D:91:37:AA:AA:F2:46:A2:4D:89:C3:E9:B1:F7:C6:0A:4E X509v3 Authority Key Identifier: keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/E4BB55347C4E11EBB889AF7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.236.0/22 IPv6: 2405:16c0::/32 Signature Algorithm: sha256WithRSAEncryption 13:eb:fe:07:01:c8:71:48:4c:f9:a9:0a:d1:91:83:6b:e4:cc: cb:27:03:b6:6c:97:3f:1b:86:18:50:cc:57:4d:86:a5:f6:a3: ee:0b:44:ea:c5:79:0a:9c:26:ea:a5:76:6c:f0:32:50:ae:5d: e5:87:55:c1:8a:d1:69:2d:5b:95:0a:4a:8a:1b:38:fa:f9:3d: 86:ee:12:bd:53:c2:bf:41:f1:f1:b6:b6:67:0d:92:ac:b0:e7: 2e:5f:7b:61:95:6d:35:12:cf:34:ef:24:68:15:d5:0b:64:bb: 46:6f:aa:97:54:a1:f4:7e:f2:a7:34:02:06:b8:69:f6:db:00: 6c:82:fb:6f:78:56:2a:fc:b2:da:24:3c:b4:37:d2:e7:74:e7: 8a:be:55:dc:b3:09:0c:7e:65:c1:a0:09:95:88:b9:7f:43:68: bc:fc:09:39:f4:b6:7b:b2:5a:b9:cc:a5:df:df:6b:81:94:e4: 92:cd:66:dd:69:22:51:5f:19:bd:55:8b:84:5f:5f:65:20:18: 59:a6:6b:41:95:6a:bd:dc:b0:58:c6:b9:b5:f4:2d:8e:f1:56: 2d:39:b3:15:4d:fd:58:05:6d:a3:de:8b:08:12:3b:db:46:7a: 39:6b:64:2f:3c:2a:03:d0:05:04:1f:55:0d:2d:e7:cc:93:f9: 75:ba:ae:8c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVBOUYxMTAvBgNVBAUTKDk1MDI1NjI4RjE0MzQxMDQ2MTQ2QUMyMEJBMzI0NjE0 NDYxQTlDQzMwHhcNMjMxMjI2MTc0NTA3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NThiMTEyMy1hZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1t9J8dj1mLe52odj66cw/7uCKoaxj8dc2bAykB72s5H/dKhzCbA5PMci0YW2 LMAMNKsU7rJXELg6VJX5oBZOVVdmMGV5loh6oG5jz75j8S07qmofrE9r3Ksg9PtD iTqsYM9iHbk85Cr6I9NumWd5Pdp4QKmoIoL6QSdfVQsvjdgzeRXiuzbNqGhIKDcB kIG1MVO2zAzmW3s4+k1ZiFPICVDNbTW1HSP54Lk5K4a1QFFXNyZ7CqDshWATLafT BKZL7VXzznDlGR6JLK/DgO0MT0K516bLWtxUxDoPTBeT5q8hOiz9AGWICWNKd/43 d89uha809LVevqCgU4I2gPOX5QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFB3JDW2R N6qq8kaiTYnD6bH3xgpOMB8GA1UdIwQYMBaAFJUCVijxQ0EEYUasILoyRhRGGpzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUE5Ri82NzM2RjMzNEUz M0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFRUmhScXdndWpKR0ZFWWFu TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRSldLUEZEUVFSaFJxd2d1akpHRkVZYW5NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTVBOUYvNjczNkYzMzRFMzNBMTFFODg2MTE3NzgwQzRGOUFFMDIvRTRCQjU1MzQ3 QzRFMTFFQkI4ODlBRjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfOwwDQQCAAIwBwMFACQFFsAwDQYJKoZIhvcNAQELBQAD ggEBABPr/gcByHFITPmpCtGRg2vkzMsnA7Zslz8bhhhQzFdNhqX2o+4LROrFeQqc JuqldmzwMlCuXeWHVcGK0WktW5UKSoobOPr5PYbuEr1Twr9B8fG2tmcNkqyw5y5f e2GVbTUSzzTvJGgV1Qtku0ZvqpdUofR+8qc0Aga4afbbAGyC+294Vir8stokPLQ3 0ud054q+VdyzCQx+ZcGgCZWIuX9DaLz8CTn0tnuyWrnMpd/fa4GU5JLNZt1pIlFf Gb1Vi4RfX2UgGFmma0GVar3csFjGubX0LY7xVi05sxVN/VgFbaPeiwgSO9tGejlr ZC88KgPQBQQfVQ0t58yT+XW6row= -----END CERTIFICATE-----Generated at Sat May 18 19:15:26 2024 by rpki-client on console-ams.rpki-client.org