$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/B23B879EE89C11ECA30FD20EC4F9AE02.roa File: B23B879EE89C11ECA30FD20EC4F9AE02.roa (raw, json) Hash identifier: g+zMllLE2VCl9M+OB2Fx9FsTbN85M1LU1pE2Ig0HpqA= Subject key identifier: 46:DA:2D:46:10:F2:29:5B:15:E2:12:BE:B8:2C:04:06:1D:5C:2A:C0 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 062A Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/B23B879EE89C11ECA30FD20EC4F9AE02.roa Signing time: Wed 01 May 2024 01:03:43 +0000 ROA not before: Wed 01 May 2024 01:03:43 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133788 IP address blocks: 103.42.208.0/22 maxlen: 22 103.42.208.0/23 maxlen: 23 103.42.209.0/24 maxlen: 24 103.42.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 00:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: May 1 01:03:43 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=663194ef-8ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:9a:57:f3:aa:a5:94:48:31:e9:cf:d0:36: 3f:72:fd:bf:10:ac:bf:69:7f:1e:05:49:35:5e:f7: 2c:08:41:dc:d4:8e:ed:f5:d3:7b:ac:f2:0d:87:63: 36:05:cc:bf:d1:c7:57:2e:0c:98:b8:87:c2:52:7a: 74:1c:99:ca:53:f6:54:d0:6d:ff:08:db:5d:f7:98: 2d:79:7d:8c:f3:fd:d0:96:53:c8:60:ca:65:ef:ab: 43:12:59:dc:d2:d1:81:17:02:b4:5d:6c:1d:28:f0: 2f:3b:b9:81:98:82:58:eb:ea:d1:90:97:f3:09:fa: a8:d7:2e:54:eb:57:77:ea:1a:f8:3f:52:5e:0c:93: 94:89:fa:c5:6c:8c:53:de:9c:fb:4f:12:8e:5b:c1: b2:91:16:0e:e6:33:46:2a:a1:5e:bc:01:a6:b0:bb: f8:fc:a8:96:e9:09:81:5b:28:9c:d8:83:91:a6:61: 79:7f:4c:ab:4d:cf:34:21:f4:df:37:81:09:b3:07: d3:7e:6d:5a:f6:8c:db:88:51:a3:c7:3b:d6:10:df: ef:04:a8:f7:e8:62:80:d8:4f:35:9d:fc:e0:5e:1f: 44:b8:5b:43:0c:94:99:c9:eb:bd:ee:56:bd:1b:37: 7d:d1:cf:08:db:b0:f6:25:21:ec:d1:49:36:18:b0: a8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DA:2D:46:10:F2:29:5B:15:E2:12:BE:B8:2C:04:06:1D:5C:2A:C0 X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/B23B879EE89C11ECA30FD20EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.208.0/22 Signature Algorithm: sha256WithRSAEncryption 79:ba:f9:7d:cb:a2:46:52:54:24:1b:3a:45:24:72:53:01:c5: 27:d0:73:4b:9e:bc:7e:da:87:a1:c0:18:0a:b0:8b:d8:56:e2: 21:25:d4:74:bd:cd:7e:e5:5c:b8:13:80:d1:7b:3b:48:53:92: 5b:54:e9:7f:ec:b9:18:30:7b:19:85:86:de:48:07:ed:dc:f2: db:fe:65:e2:b9:6b:a2:8c:e3:5e:5f:c9:aa:4c:2f:bc:19:fb: 78:3e:02:54:90:e5:31:36:6e:0d:3e:f2:6e:18:f5:ff:36:7e: f3:6f:8c:24:a8:f3:6d:d2:1e:42:d0:7d:4e:2c:40:b6:eb:76: ea:a8:06:cc:63:84:eb:cb:6b:69:4d:83:a2:ce:4b:0b:a7:2c: 09:d0:52:14:9e:9d:bb:f0:0e:47:8e:d2:cc:9a:96:6c:b2:b1: cc:17:00:b0:61:66:56:5b:90:44:ec:54:6a:ae:0f:23:d6:10: 1e:d5:91:4c:ce:46:a6:7c:c8:3e:db:f8:f4:41:7d:00:6b:3f: 35:0b:ec:c9:38:c7:ea:22:e6:d1:42:58:39:89:6a:1d:a1:5b: 3d:f6:b6:39:e1:0c:5a:29:a3:2f:0f:27:7a:98:21:67:fb:63: 0d:e9:97:ca:f6:0d:72:15:f3:2a:d7:f0:5c:11:da:64:10:ac: a3:95:32:5b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjQwNTAxMDEwMzQzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxOTRlZi04YWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXeaV/OqpZRIMenP0DY/cv2/EKy/aX8eBUk1XvcsCEHc1I7t9dN7rPINh2M2 Bcy/0cdXLgyYuIfCUnp0HJnKU/ZU0G3/CNtd95gteX2M8/3QllPIYMpl76tDElnc 0tGBFwK0XWwdKPAvO7mBmIJY6+rRkJfzCfqo1y5U61d36hr4P1JeDJOUifrFbIxT 3pz7TxKOW8GykRYO5jNGKqFevAGmsLv4/KiW6QmBWyic2IORpmF5f0yrTc80IfTf N4EJswfTfm1a9ozbiFGjxzvWEN/vBKj36GKA2E81nfzgXh9EuFtDDJSZyeu97la9 Gzd90c8I27D2JSHs0Uk2GLCodQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEbaLUYQ 8ilbFeISvrgsBAYdXCrAMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhBNDEvNTU0MTQwREU4N0JDMTFFQkIzQzA4MjcyQzRGOUFFMDIvQjIzQjg3OUVF ODlDMTFFQ0EzMEZEMjBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnKtAwDQYJKoZIhvcNAQELBQADggEBAHm6+X3LokZSVCQb OkUkclMBxSfQc0uevH7ah6HAGAqwi9hW4iEl1HS9zX7lXLgTgNF7O0hTkltU6X/s uRgwexmFht5IB+3c8tv+ZeK5a6KM415fyapML7wZ+3g+AlSQ5TE2bg0+8m4Y9f82 fvNvjCSo823SHkLQfU4sQLbrduqoBsxjhOvLa2lNg6LOSwunLAnQUhSenbvwDkeO 0syalmyyscwXALBhZlZbkETsVGquDyPWEB7VkUzORqZ8yD7b+PRBfQBrPzUL7Mk4 x+oi5tFCWDmJah2hWz32tjnhDFopoy8PJ3qYIWf7Yw3pl8r2DXIV8yrX8FwR2mQQ rKOVMls= -----END CERTIFICATE-----Generated at Tue May 21 01:47:06 2024 by rpki-client on console-fra.rpki-client.org