$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/4BF23558026D11EBB136622CC4F9AE02.roa File: 4BF23558026D11EBB136622CC4F9AE02.roa (raw, json) Hash identifier: dSSI9SuJi0kxWDguXGuvNHYcVsK2PtNwvDQAV3GyLYI= Subject key identifier: A2:87:3A:59:0E:F3:64:EA:F9:7C:A0:DF:C4:6D:94:29:AD:E8:9C:3C Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Certificate serial: 0EFA Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/4BF23558026D11EBB136622CC4F9AE02.roa Signing time: Thu 20 Jun 2024 18:08:55 +0000 ROA not before: Thu 20 Jun 2024 18:08:55 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 137443 IP address blocks: 103.113.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3834 (0xefa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Validity Not Before: Jun 20 18:08:55 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66747037-5827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c1:ec:93:15:ce:25:66:39:b6:bb:e1:3c:ce: cf:31:e1:73:c3:69:6b:45:ef:07:5b:06:42:81:27: c4:8f:cd:2e:10:9b:0a:cd:12:58:a3:62:f9:04:01: f1:01:4b:f0:f8:f8:db:dc:c1:6a:d0:84:e2:d3:3b: 17:d4:8d:03:06:58:f5:ba:a4:c0:ab:12:d3:b5:36: 47:aa:58:a4:eb:f6:28:46:7a:d9:da:4c:f7:0f:a1: c9:95:ff:7d:93:0e:ae:62:05:db:33:c5:54:82:33: 2b:e4:17:08:6e:4c:da:c4:18:ca:30:9e:8b:93:15: 76:96:d7:c6:c1:bc:ef:dd:e5:57:46:3a:71:36:a1: 0e:8e:e2:f4:77:01:2b:38:da:61:5a:2e:54:4a:3a: c1:60:26:b1:56:31:d9:c4:34:d4:f4:52:c6:04:14: aa:4b:cc:f9:b5:4a:1e:3a:b9:8c:05:f5:88:ff:6a: 24:17:6c:13:da:79:b3:5c:40:7d:6a:de:80:da:26: 0b:a5:2d:ff:f6:87:d0:5c:f7:3d:2f:97:52:b7:e3: 8b:c6:70:4c:48:cd:49:db:e5:8f:eb:57:44:2a:31: 42:98:84:b7:31:2a:05:13:e2:6e:c4:4a:d1:9f:61: 5b:65:1b:c9:df:5f:da:2d:1a:5a:34:33:8b:43:3c: 6a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:87:3A:59:0E:F3:64:EA:F9:7C:A0:DF:C4:6D:94:29:AD:E8:9C:3C X509v3 Authority Key Identifier: keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/4BF23558026D11EBB136622CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.92.0/22 Signature Algorithm: sha256WithRSAEncryption 53:05:f0:48:5e:05:64:d7:9a:2f:f0:ce:d6:a5:97:b6:93:58: 2f:02:a7:24:83:5a:72:38:a5:ae:03:42:8d:d8:ab:1d:44:9d: dd:b4:2b:f2:0c:66:56:72:2d:12:97:86:d0:28:b8:6f:98:2a: a3:75:40:03:03:e7:70:9b:ab:e3:78:e7:b3:40:79:e3:77:0c: 6e:75:50:06:7c:da:7a:18:be:aa:1a:bc:f6:59:72:78:3e:e6: 2d:ad:09:51:72:87:66:e6:bf:9e:c9:d4:3b:74:63:a2:dd:cd: d7:b0:51:43:99:5c:37:62:e5:33:cb:f7:fb:b3:b2:d4:e1:c6: 7d:f9:67:f6:a9:85:bc:04:8f:b2:6c:39:71:30:ec:fd:93:e0: 4f:e2:03:d5:bc:69:74:dc:78:f8:f5:e7:85:83:17:2f:26:d0: bc:00:0f:c0:ca:de:39:20:89:8f:19:b8:58:ea:98:8b:2a:02: 50:eb:b8:8e:05:50:59:fe:e5:bd:6f:a8:88:13:0b:af:79:b6: 9c:8b:77:93:49:a6:2e:34:b7:2c:13:c2:2f:da:d8:a8:5c:5d: 9e:ea:1c:07:43:48:c8:02:47:83:7c:99:f9:3c:5d:a5:3d:4b: ca:10:da:57:7e:0c:82:70:21:98:41:92:e8:38:83:2a:87:62: 05:66:44:99 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2 RkZBQzQ2NjEwHhcNMjQwNjIwMTgwODU1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc0NzAzNy01ODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cHskxXOJWY5trvhPM7PMeFzw2lrRe8HWwZCgSfEj80uEJsKzRJYo2L5BAHx AUvw+Pjb3MFq0ITi0zsX1I0DBlj1uqTAqxLTtTZHqlik6/YoRnrZ2kz3D6HJlf99 kw6uYgXbM8VUgjMr5BcIbkzaxBjKMJ6LkxV2ltfGwbzv3eVXRjpxNqEOjuL0dwEr ONphWi5USjrBYCaxVjHZxDTU9FLGBBSqS8z5tUoeOrmMBfWI/2okF2wT2nmzXEB9 at6A2iYLpS3/9ofQXPc9L5dSt+OLxnBMSM1J2+WP61dEKjFCmIS3MSoFE+JuxErR n2FbZRvJ31/aLRpaNDOLQzxqDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKKHOlkO 82Tq+Xyg38RtlCmt6Jw8MB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNGMDIvQ0NBQjU3NTA2M0YwMTFFOUE5QkNBMTQxQzRGOUFFMDIvNEJGMjM1NTgw MjZEMTFFQkIxMzY2MjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJncVwwDQYJKoZIhvcNAQELBQADggEBAFMF8EheBWTXmi/w ztall7aTWC8CpySDWnI4pa4DQo3Yqx1End20K/IMZlZyLRKXhtAouG+YKqN1QAMD 53Cbq+N457NAeeN3DG51UAZ82noYvqoavPZZcng+5i2tCVFyh2bmv57J1Dt0Y6Ld zdewUUOZXDdi5TPL9/uzstThxn35Z/aphbwEj7JsOXEw7P2T4E/iA9W8aXTcePj1 54WDFy8m0LwAD8DK3jkgiY8ZuFjqmIsqAlDruI4FUFn+5b1vqIgTC695tpyLd5NJ pi40tywTwi/a2KhcXZ7qHAdDSMgCR4N8mfk8XaU9S8oQ2ld+DIJwIZhBkug4gyqH YgVmRJk= -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:08 2024 by rpki-client on console-fra.rpki-client.org