$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/31521640C6CB11ECB185E43EC4F9AE02.roa File: 31521640C6CB11ECB185E43EC4F9AE02.roa (raw, json) Hash identifier: YkXY2G5nfceribQOD7X+MmmAaaINrn8ptZy+JVJffag= Subject key identifier: 4B:D3:04:A4:F6:95:5E:00:4C:84:58:93:E0:BD:13:BD:38:0D:06:11 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 0221 Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/31521640C6CB11ECB185E43EC4F9AE02.roa Signing time: Wed 29 Nov 2023 03:34:08 +0000 ROA not before: Wed 29 Nov 2023 03:34:08 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 132742 IP address blocks: 43.241.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Nov 29 03:34:08 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6566b130-53ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:f4:53:0a:34:11:84:08:85:9b:56:f6:e5: b8:c7:cc:50:dd:fa:ad:44:3d:d8:6b:26:47:72:b1: 0a:a3:f0:6a:fb:1a:30:d9:0f:72:1e:d3:23:80:f8: 8a:08:45:2a:b5:8a:ad:64:b2:80:38:7a:96:f7:3e: 94:ec:5f:f1:fb:b0:c7:61:82:9c:cd:74:c5:56:94: 9a:40:23:d4:38:d8:78:7c:cc:5a:5a:3f:3c:89:af: 06:a6:39:bf:2f:74:cc:58:0d:d3:ea:2a:bc:6a:07: d7:83:d6:73:91:9b:6c:2b:2c:0f:20:76:85:44:c9: dd:ef:74:a6:f0:05:10:a8:13:f9:70:03:ae:02:33: 1c:f6:8f:96:22:22:74:a4:f2:bb:c8:40:f5:f4:44: 80:0c:5a:2f:70:7e:c7:a0:2f:32:0e:7a:a0:0f:4b: b7:f3:3c:5a:c5:61:02:4d:60:30:b9:52:29:f0:e4: 45:c9:d3:6f:ee:37:d8:4a:1a:ff:3c:60:86:01:f7: 79:96:5b:b2:29:93:23:60:60:c0:ed:14:ca:92:16: a9:0f:4c:1d:41:df:b3:a1:67:89:54:75:8d:0e:72: 87:0c:b5:37:f1:e8:7f:15:c9:a5:54:9d:6c:94:9e: c9:71:60:e0:ae:7c:97:35:48:b5:ff:84:ae:e8:af: ef:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D3:04:A4:F6:95:5E:00:4C:84:58:93:E0:BD:13:BD:38:0D:06:11 X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/31521640C6CB11ECB185E43EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.241.252.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:1b:15:01:fc:f5:4f:76:a1:35:eb:ed:3a:92:f1:56:8f:36: 06:29:a3:20:41:b7:fb:59:a3:6c:59:61:75:4e:ba:0f:d2:95: c3:e4:a1:d4:0d:36:ae:c2:b3:1b:9c:7f:c3:12:3a:c7:69:fe: 43:c1:51:c6:d4:f2:cf:93:76:06:52:ea:d4:ff:3c:7a:63:ed: 46:12:10:16:dc:7e:b0:96:dc:4f:57:c9:71:1a:e2:00:bf:ab: a3:62:bf:3e:81:b7:6f:d6:04:46:b4:0a:f4:c8:5b:eb:8b:33: 49:df:91:21:b7:d8:6a:6d:da:0a:4b:03:30:5e:46:1e:db:26: b6:5d:ae:fb:d3:20:e2:96:4a:4c:a3:ae:2f:1b:22:cd:24:1a: fd:ee:63:a2:4b:2d:78:01:d7:3f:d2:57:de:01:c6:a5:5a:59: a4:4b:52:dc:16:d8:ab:86:31:85:20:39:8c:5b:24:a6:be:d4: 6a:76:4c:0f:3e:4d:95:20:93:88:ad:1e:74:45:a8:a0:b7:cb: e2:87:46:0e:e1:c4:6f:a5:12:2e:b7:3f:17:bb:d9:ec:19:7d: b9:4d:1c:b9:ca:f1:c0:4f:61:cf:74:1d:be:4c:e2:08:8e:62: ae:fc:a0:ad:57:f8:0a:30:12:3d:03:03:a7:fc:2a:b1:8a:e2: bb:b8:5f:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjMxMTI5MDMzNDA4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY2YjEzMC01M2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArR/0Uwo0EYQIhZtW9uW4x8xQ3fqtRD3YayZHcrEKo/Bq+xow2Q9yHtMjgPiK CEUqtYqtZLKAOHqW9z6U7F/x+7DHYYKczXTFVpSaQCPUONh4fMxaWj88ia8Gpjm/ L3TMWA3T6iq8agfXg9ZzkZtsKywPIHaFRMnd73Sm8AUQqBP5cAOuAjMc9o+WIiJ0 pPK7yED19ESADFovcH7HoC8yDnqgD0u38zxaxWECTWAwuVIp8ORFydNv7jfYShr/ PGCGAfd5lluyKZMjYGDA7RTKkhapD0wdQd+zoWeJVHWNDnKHDLU38eh/FcmlVJ1s lJ7JcWDgrnyXNUi1/4Su6K/vbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEvTBKT2 lV4ATIRYk+C9E704DQYRMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE0NDYvMkExRkY1NkVDNTM1MTFFQzhFNUEwMzEzQzRGOUFFMDIvMzE1MjE2NDBD NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr8fwwDQYJKoZIhvcNAQELBQADggEBADsbFQH89U92oTXr 7TqS8VaPNgYpoyBBt/tZo2xZYXVOug/SlcPkodQNNq7Csxucf8MSOsdp/kPBUcbU 8s+TdgZS6tT/PHpj7UYSEBbcfrCW3E9XyXEa4gC/q6Nivz6Bt2/WBEa0CvTIW+uL M0nfkSG32Gpt2gpLAzBeRh7bJrZdrvvTIOKWSkyjri8bIs0kGv3uY6JLLXgB1z/S V94BxqVaWaRLUtwW2KuGMYUgOYxbJKa+1Gp2TA8+TZUgk4itHnRFqKC3y+KHRg7h xG+lEi63Pxe72ewZfblNHLnK8cBPYc90Hb5M4giOYq78oK1X+AowEj0DA6f8KrGK 4ru4XxY= -----END CERTIFICATE-----Generated at Mon May 27 04:53:45 2024 by rpki-client on console-fra.rpki-client.org