$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/BAE25202230011EEB5448B3FC4F9AE02.roa File: BAE25202230011EEB5448B3FC4F9AE02.roa (raw, json) Hash identifier: s53ijDXUIjWrcS+3ZZFFa5y0Fpk0vX6X2I7BWWydq80= Subject key identifier: B3:F0:D7:BD:93:80:B5:0B:B8:E4:F4:0B:31:1C:8B:40:E2:75:D9:45 Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Certificate serial: 068A Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/BAE25202230011EEB5448B3FC4F9AE02.roa Signing time: Wed 20 Sep 2023 21:59:56 +0000 ROA not before: Wed 20 Sep 2023 21:59:56 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 141767 IP address blocks: 103.156.26.0/23 maxlen: 23 103.156.26.0/24 maxlen: 24 103.156.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 21:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Validity Not Before: Sep 20 21:59:56 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=650b6b5c-32cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:55:07:f3:e3:14:ec:da:fa:2a:81:6b:c8:6e: 5c:b1:a4:9c:14:c4:dc:a6:e5:e6:47:c5:e2:88:13: 0b:90:a9:69:da:ca:84:0f:c0:d2:da:67:74:d2:5f: 2e:87:de:2c:4d:39:7a:68:fc:56:ac:fb:14:b0:54: 6c:fb:39:58:5a:21:6d:35:23:54:20:b6:a8:c4:55: 7a:3d:12:6c:d9:de:c0:c7:89:9a:bd:97:3d:0f:32: 9b:22:fb:a1:3f:0d:c2:ee:55:48:8f:d3:fc:ef:b5: d1:54:ad:39:42:42:82:a1:0f:3b:88:cb:73:30:a0: bf:bb:3f:7c:ce:21:d4:01:f0:84:91:a8:0a:a4:ca: bf:77:81:f8:03:e3:4d:17:f4:ec:b9:f3:37:7c:c7: 75:24:ca:14:a8:79:b6:1e:e5:75:e4:3e:99:0b:e9: 13:aa:bb:54:bd:1f:8b:11:78:7f:3a:13:f8:c0:16: 0a:87:4b:46:4d:9d:43:7a:63:23:2e:5d:a5:9b:b3: fb:ef:c1:bb:43:d5:0f:e1:a0:0e:07:d6:58:cc:bf: 09:c4:35:0b:37:b7:7e:04:bb:bb:a3:fb:f7:a8:48: b7:ad:f0:5c:b8:04:12:0d:13:0a:f8:bd:cc:46:db: 52:6e:77:c2:fb:e9:46:44:7d:47:81:0f:f3:d0:6c: 65:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F0:D7:BD:93:80:B5:0B:B8:E4:F4:0B:31:1C:8B:40:E2:75:D9:45 X509v3 Authority Key Identifier: keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/BAE25202230011EEB5448B3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.26.0/23 Signature Algorithm: sha256WithRSAEncryption 74:98:34:99:1b:e1:ea:9b:22:4b:f4:59:26:af:e9:37:05:d2: c0:80:02:db:cc:ff:23:da:6c:cf:f1:99:3c:27:e8:0a:26:0a: 95:d8:10:91:eb:c7:80:81:35:19:9f:d6:f0:3e:7b:11:68:08: 2b:f7:0b:83:05:9e:2b:ba:ed:a7:80:ee:26:09:d8:41:ff:a4: e2:d2:be:9b:f0:18:9d:08:cc:fa:ac:b1:1f:c6:2f:2d:c4:75: c0:74:40:c2:db:30:57:9d:d6:a2:de:85:fb:30:8b:a7:ce:e9: ad:b6:55:19:3f:26:72:00:94:48:64:c6:94:5d:a1:9c:cb:fa: e0:f8:a5:28:61:e9:8a:4c:d1:78:83:4c:ec:25:20:10:85:46: bf:df:15:62:f3:0b:0b:f4:53:75:e8:ed:56:98:c7:f6:84:bb: 7a:3c:a6:7f:d7:fe:89:59:ef:98:21:b8:5d:d7:a7:fc:27:b4: 0c:08:b7:4e:40:a6:0e:4c:3a:ea:84:7c:76:5b:6c:40:86:45: 43:7d:8a:cb:bb:6e:21:68:03:7f:6b:38:c1:76:ef:69:e4:71: 48:38:37:1b:cd:a7:20:85:aa:46:44:cc:f0:ec:c7:a3:94:13: bf:8b:c2:81:84:d0:f7:03:34:37:f9:8d:23:6c:33:3a:52:f4: 14:84:94:77 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1RTkxMTAvBgNVBAUTKEJCNUFCQjU5RjMxN0FCN0NFOTU1NDFDQTVBQzUyRjIx N0ZFOTU5MzEwHhcNMjMwOTIwMjE1OTU2WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTBiNmI1Yy0zMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulUH8+MU7Nr6KoFryG5csaScFMTcpuXmR8XiiBMLkKlp2sqED8DS2md00l8u h94sTTl6aPxWrPsUsFRs+zlYWiFtNSNUILaoxFV6PRJs2d7Ax4mavZc9DzKbIvuh Pw3C7lVIj9P877XRVK05QkKCoQ87iMtzMKC/uz98ziHUAfCEkagKpMq/d4H4A+NN F/TsufM3fMd1JMoUqHm2HuV15D6ZC+kTqrtUvR+LEXh/OhP4wBYKh0tGTZ1DemMj Ll2lm7P778G7Q9UP4aAOB9ZYzL8JxDULN7d+BLu7o/v3qEi3rfBcuAQSDRMK+L3M RttSbnfC++lGRH1HgQ/z0GxlLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLPw172T gLULuOT0CzEci0DiddlFMB8GA1UdIwQYMBaAFLtau1nzF6t86VVBylrFLyF/6Vkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzVFOS9FNjk0RkM0QUZC RDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEzenBWVUhLV3NVdklYX3BX VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxcTdXZk1YcTN6cFZVSEtXc1V2SVhfcFdURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjc1RTkvRTY5NEZDNEFGQkQ3MTFFQUJGRUU1MjQ2QzRGOUFFMDIvQkFFMjUyMDIy MzAwMTFFRUI1NDQ4QjNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnBowDQYJKoZIhvcNAQELBQADggEBAHSYNJkb4eqbIkv0 WSav6TcF0sCAAtvM/yPabM/xmTwn6AomCpXYEJHrx4CBNRmf1vA+exFoCCv3C4MF niu67aeA7iYJ2EH/pOLSvpvwGJ0IzPqssR/GLy3EdcB0QMLbMFed1qLehfswi6fO 6a22VRk/JnIAlEhkxpRdoZzL+uD4pShh6YpM0XiDTOwlIBCFRr/fFWLzCwv0U3Xo 7VaYx/aEu3o8pn/X/olZ75ghuF3Xp/wntAwIt05Apg5MOuqEfHZbbECGRUN9isu7 biFoA39rOMF272nkcUg4NxvNpyCFqkZEzPDsx6OUE7+LwoGE0PcDNDf5jSNsMzpS 9BSElHc= -----END CERTIFICATE-----Generated at Sun May 26 23:22:28 2024 by rpki-client on console-fra.rpki-client.org