$ rpki-client -vvf rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/3B63078201E711EDB2C82D0FC4F9AE02.roa File: 3B63078201E711EDB2C82D0FC4F9AE02.roa (raw, json) Hash identifier: y8EP44IV/D41qne8yMUw/86AS6rUnWXM3ggUmLWSPKQ= Subject key identifier: 24:9A:20:4D:B6:09:B9:4C:53:68:F6:08:E9:4B:D9:B1:E0:51:22:79 Certificate issuer: /CN=A91546FB/serialNumber=DA5C8F2728408FEEF8256E20388DEB9601E5B510 Certificate serial: 011C Authority key identifier: DA:5C:8F:27:28:40:8F:EE:F8:25:6E:20:38:8D:EB:96:01:E5:B5:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lyPJyhAj-74JW4gOI3rlgHltRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/3B63078201E711EDB2C82D0FC4F9AE02.roa Signing time: Sat 13 May 2023 06:25:27 +0000 ROA not before: Sat 13 May 2023 06:25:26 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 59333 IP address blocks: 103.227.156.0/24 maxlen: 24 103.227.157.0/24 maxlen: 24 103.227.158.0/24 maxlen: 24 103.227.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/2lyPJyhAj-74JW4gOI3rlgHltRA.crl rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/2lyPJyhAj-74JW4gOI3rlgHltRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lyPJyhAj-74JW4gOI3rlgHltRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91546FB/serialNumber=DA5C8F2728408FEEF8256E20388DEB9601E5B510 Validity Not Before: May 13 06:25:26 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645f2d56-8187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e7:3b:1a:5d:29:85:c2:18:5e:24:35:09:b5: 3c:c2:8f:c4:5d:bf:06:ef:fa:5b:b2:ea:d3:d7:71: 90:0e:19:dc:9a:ee:be:89:7b:41:5e:4c:e9:77:50: ea:ba:41:54:03:b6:a6:a4:70:3f:c9:7d:4c:07:16: 06:da:d6:b6:a5:e8:a3:b8:ad:2b:20:2a:6f:d9:90: fb:00:81:94:bc:4d:99:30:f1:fd:2e:7b:2f:67:0e: 29:05:5f:33:1b:32:fc:08:50:3f:08:dd:fa:9d:76: 7f:3f:57:c3:8f:a6:b6:17:9e:76:5d:f6:ee:db:ba: 5d:21:ba:e8:ea:15:7b:2b:4c:ac:15:9a:f4:e3:4d: f9:6e:59:76:fe:79:31:d7:30:a6:89:89:2c:c4:6b: 7c:5a:00:3c:7d:8d:71:fb:de:e3:20:f9:18:3f:18: 4f:12:00:21:0a:9d:54:18:cc:a3:8d:d4:b1:69:39: e3:a4:e5:10:b1:ef:41:fa:aa:af:bb:a4:71:29:d1: 45:c0:05:95:f6:4a:6e:c3:a7:16:43:a2:2f:5b:2b: 11:52:91:ea:e5:1b:a5:ec:d7:01:4d:46:02:c2:3c: da:a6:95:eb:02:28:aa:1b:68:9e:d9:85:5b:77:92: b5:61:9d:04:b6:a8:87:e7:e8:c0:7f:55:67:f0:6d: 65:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9A:20:4D:B6:09:B9:4C:53:68:F6:08:E9:4B:D9:B1:E0:51:22:79 X509v3 Authority Key Identifier: keyid:DA:5C:8F:27:28:40:8F:EE:F8:25:6E:20:38:8D:EB:96:01:E5:B5:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/2lyPJyhAj-74JW4gOI3rlgHltRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lyPJyhAj-74JW4gOI3rlgHltRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/3B63078201E711EDB2C82D0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.227.156.0/22 Signature Algorithm: sha256WithRSAEncryption 57:2b:14:71:10:40:f9:64:0b:dc:49:51:c3:b6:d8:ed:d4:35: 2e:72:bb:db:a1:98:a5:a3:cc:1f:f0:cc:e2:9c:c4:ab:e0:ad: 96:cd:bc:ae:ae:27:b9:9f:41:63:42:ff:c9:5a:72:06:aa:4a: 6e:63:61:c8:96:91:ef:3e:0a:8e:76:35:43:7e:20:fe:1f:08: 9d:73:ab:79:ba:6e:bf:ae:c0:b6:e6:7e:80:12:79:71:a2:fc: 67:9c:1a:b3:82:d4:59:dc:fc:2c:30:dd:e3:58:81:f6:be:1f: d1:ac:d2:5f:d1:3d:9a:be:97:f2:af:50:4c:cd:d9:51:d5:84: a1:fd:15:20:32:48:d1:56:2e:9b:92:e0:dc:60:33:4d:7e:65: 29:2c:a4:b7:87:71:35:91:5e:06:fb:c6:48:da:04:af:ad:72: dd:37:d2:61:d4:c0:df:81:c5:b9:3e:23:18:75:d8:99:f1:b1: 70:0d:a8:f5:2c:bc:6d:c8:bc:bf:81:ca:88:02:06:8c:e6:3f: 69:9f:57:1a:d7:84:7c:08:dc:b8:c8:89:47:6f:f3:4e:98:71: ac:c8:39:ae:59:90:a1:13:b1:ee:3d:7d:26:8a:fd:83:06:a0: 78:83:92:a3:bd:dc:60:66:a3:39:1e:62:d9:d1:df:25:51:c5: e5:35:3e:60 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2RkIxMTAvBgNVBAUTKERBNUM4RjI3Mjg0MDhGRUVGODI1NkUyMDM4OERFQjk2 MDFFNUI1MTAwHhcNMjMwNTEzMDYyNTI2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDVmMmQ1Ni04MTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOc7Gl0phcIYXiQ1CbU8wo/EXb8G7/pbsurT13GQDhncmu6+iXtBXkzpd1Dq ukFUA7ampHA/yX1MBxYG2ta2peijuK0rICpv2ZD7AIGUvE2ZMPH9LnsvZw4pBV8z GzL8CFA/CN36nXZ/P1fDj6a2F552Xfbu27pdIbro6hV7K0ysFZr04035bll2/nkx 1zCmiYksxGt8WgA8fY1x+97jIPkYPxhPEgAhCp1UGMyjjdSxaTnjpOUQse9B+qqv u6RxKdFFwAWV9kpuw6cWQ6IvWysRUpHq5Rul7NcBTUYCwjzappXrAiiqG2ie2YVb d5K1YZ0EtqiH5+jAf1Vn8G1lJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCSaIE22 CblMU2j2COlL2bHgUSJ5MB8GA1UdIwQYMBaAFNpcjycoQI/u+CVuIDiN65YB5bUQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDZGQi8xRTVDOTM4QTAx RTUxMUVEQkE3QkE5MEVDNEY5QUUwMi8ybHlQSnloQWotNzRKVzRnT0kzcmxnSGx0 UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJseVBKeWhBai03NEpXNGdPSTNybGdIbHRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ2RkIvMUU1QzkzOEEwMUU1MTFFREJBN0JBOTBFQzRGOUFFMDIvM0I2MzA3ODIw MUU3MTFFREIyQzgyRDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn45wwDQYJKoZIhvcNAQELBQADggEBAFcrFHEQQPlkC9xJ UcO22O3UNS5yu9uhmKWjzB/wzOKcxKvgrZbNvK6uJ7mfQWNC/8lacgaqSm5jYciW ke8+Co52NUN+IP4fCJ1zq3m6br+uwLbmfoASeXGi/GecGrOC1Fnc/Cww3eNYgfa+ H9Gs0l/RPZq+l/KvUEzN2VHVhKH9FSAySNFWLpuS4NxgM01+ZSkspLeHcTWRXgb7 xkjaBK+tct030mHUwN+Bxbk+Ixh12JnxsXANqPUsvG3IvL+ByogCBozmP2mfVxrX hHwI3LjIiUdv806YcazIOa5ZkKETse49fSaK/YMGoHiDkqO93GBmozkeYtnR3yVR xeU1PmA= -----END CERTIFICATE-----Generated at Sat Jun 1 06:27:36 2024 by rpki-client on console-fra.rpki-client.org