$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/5F0B20081CBF11EAA5FCAC86C4F9AE02.roa File: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (raw, json) Hash identifier: A0Wle0bhJAdQOvif+bzDwubbrA+KDjTDCFRXLiqYDos= Subject key identifier: 49:65:FC:00:2C:CA:F2:3B:9A:25:C1:F8:D9:A1:7F:A9:5D:1B:88:18 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 1FFF Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/5F0B20081CBF11EAA5FCAC86C4F9AE02.roa Signing time: Sat 06 Jan 2024 16:33:23 +0000 ROA not before: Sat 06 Jan 2024 16:33:23 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 133179 IP address blocks: 103.254.180.0/22 maxlen: 22 103.254.180.0/24 maxlen: 24 103.254.181.0/24 maxlen: 24 103.254.182.0/24 maxlen: 24 103.254.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 16:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8191 (0x1fff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: Jan 6 16:33:23 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=659980d3-bf6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:24:8e:4b:03:a2:e5:8d:c9:83:ac:f5:1a:a2: 89:ab:f6:53:ef:56:4e:92:22:a1:28:94:92:c2:06: c9:9e:d8:74:d8:f9:db:38:4a:74:65:c0:cf:13:4f: f5:c9:aa:5a:2c:38:ba:ed:5e:fd:df:44:5a:af:cb: 90:9e:dc:9e:9a:fa:36:ea:23:60:19:cd:c5:48:6d: c2:d1:f6:7a:9b:18:5d:0a:1e:85:99:dc:a9:38:09: a2:12:2c:35:38:a3:7a:8f:3e:2b:7a:c7:0d:ba:8c: 71:d5:ce:6f:9a:c4:2b:16:8a:2c:bd:f8:83:00:2e: 99:bf:d5:b5:82:aa:ef:b9:6f:2d:83:e1:b8:38:c7: 68:70:a7:08:96:70:94:d1:94:33:c7:8f:49:4a:c2: 09:54:d8:5a:c7:65:0a:23:cd:e6:84:cb:d2:56:22: 3d:28:06:62:02:62:33:47:72:39:5f:65:5e:54:a3: 2a:cb:12:44:ec:44:1e:55:2c:ed:ea:d5:ee:c2:66: d3:f9:b2:5b:68:4b:23:94:83:2f:c6:30:d6:6d:28: 26:60:a9:05:df:55:bc:06:d7:ac:ab:fc:fd:4f:51: 11:60:be:77:b6:60:57:dd:25:e5:43:2c:a4:ef:66: 82:9a:5d:00:fd:ab:3f:a0:b9:30:84:17:04:fd:f0: f6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:65:FC:00:2C:CA:F2:3B:9A:25:C1:F8:D9:A1:7F:A9:5D:1B:88:18 X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/5F0B20081CBF11EAA5FCAC86C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.254.180.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:fd:18:f5:cb:95:e5:d6:8f:fa:f7:66:07:e5:cf:6e:66:93: 0c:1e:da:82:25:58:72:30:20:d1:2e:b9:dc:71:92:04:51:1a: 44:4e:f7:77:cf:9b:88:2c:10:37:58:41:78:47:69:04:8b:fb: b8:ad:7c:9b:ac:2e:4f:ee:c0:e0:73:5c:1e:ad:99:7a:68:8b: c2:5b:7e:97:78:dd:f9:95:aa:5e:64:d0:a8:24:9d:2b:18:dd: b6:52:dd:d0:19:4f:6c:74:89:ad:ea:0c:38:c5:3f:e9:24:d0: 35:a5:54:88:9b:b5:97:f5:0e:79:25:c7:49:fd:74:ae:15:12: 34:52:dd:19:aa:2e:b1:f0:25:df:8c:8d:50:d6:fc:18:13:31: 4a:9b:4c:33:69:9f:eb:c3:66:f7:42:f1:7f:6c:1b:1c:af:ee: 38:a8:ff:61:54:37:44:af:7e:87:e6:d9:7e:77:da:2e:af:8f: d4:2b:f3:fb:1c:55:eb:43:71:7c:54:97:1c:2c:e0:e0:50:16: 0c:62:6a:2f:d5:06:04:73:d9:f2:b6:4d:64:9e:99:44:40:e2: 74:20:52:8d:0b:21:02:b2:24:7c:2f:a6:cd:a9:89:ca:08:0b: 7e:9d:fa:5b:22:76:59:36:ba:46:47:49:de:d9:38:1c:16:8b: f9:8d:8f:e6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICH/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjQwMTA2MTYzMzIzWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk5ODBkMy1iZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyySOSwOi5Y3Jg6z1GqKJq/ZT71ZOkiKhKJSSwgbJnth02PnbOEp0ZcDPE0/1 yapaLDi67V7930Rar8uQntyemvo26iNgGc3FSG3C0fZ6mxhdCh6FmdypOAmiEiw1 OKN6jz4rescNuoxx1c5vmsQrFoosvfiDAC6Zv9W1gqrvuW8tg+G4OMdocKcIlnCU 0ZQzx49JSsIJVNhax2UKI83mhMvSViI9KAZiAmIzR3I5X2VeVKMqyxJE7EQeVSzt 6tXuwmbT+bJbaEsjlIMvxjDWbSgmYKkF31W8Btesq/z9T1ERYL53tmBX3SXlQyyk 72aCml0A/as/oLkwhBcE/fD2lQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEll/AAs yvI7miXB+Nmhf6ldG4gYMB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZDNEUvMzQ0ODY1MkNGM0NCMTFFNUFFMzY2MDYyQzRGOUFFMDIvNUYwQjIwMDgx Q0JGMTFFQUE1RkNBQzg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn/rQwDQYJKoZIhvcNAQELBQADggEBAF79GPXLleXWj/r3 Zgflz25mkwwe2oIlWHIwINEuudxxkgRRGkRO93fPm4gsEDdYQXhHaQSL+7itfJus Lk/uwOBzXB6tmXpoi8Jbfpd43fmVql5k0KgknSsY3bZS3dAZT2x0ia3qDDjFP+kk 0DWlVIibtZf1Dnklx0n9dK4VEjRS3RmqLrHwJd+MjVDW/BgTMUqbTDNpn+vDZvdC 8X9sGxyv7jio/2FUN0Svfofm2X532i6vj9Qr8/scVetDcXxUlxws4OBQFgxiai/V BgRz2fK2TWSemURA4nQgUo0LIQKyJHwvps2picoIC36d+lsidlk2ukZHSd7ZOBwW i/mNj+Y= -----END CERTIFICATE-----Generated at Sun May 26 18:02:35 2024 by rpki-client on console-fra.rpki-client.org