$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51753C88351911EDA9A3C95CC4F9AE02.roa File: 51753C88351911EDA9A3C95CC4F9AE02.roa (raw, json) Hash identifier: 9/rtRXbTVgqAnS1vlKo9PKgc5t5FCbh4z93xvgtKRrE= Subject key identifier: 86:2E:7A:5D:EF:A6:38:E2:3C:AC:5A:DD:48:EC:0B:24:BC:0D:54:12 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3F09 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51753C88351911EDA9A3C95CC4F9AE02.roa Signing time: Tue 12 Sep 2023 02:43:42 +0000 ROA not before: Tue 12 Sep 2023 02:43:42 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 45541 IP address blocks: 203.201.56.0/24 maxlen: 24 203.201.57.0/24 maxlen: 24 203.201.58.0/24 maxlen: 24 203.201.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16137 (0x3f09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:43:42 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffd05e-0000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3b:15:ac:81:f0:fb:2a:1d:cd:bf:57:f6:58: af:89:c9:cc:74:14:50:1d:9d:d2:a2:05:50:49:65: 57:58:7c:48:13:9f:90:4a:aa:d6:d0:30:5b:3f:72: c1:90:db:21:7a:83:81:59:09:28:ba:27:3b:0c:37: 1a:a1:bc:fd:b7:64:9a:35:ff:76:27:41:17:a3:34: 02:7e:6a:09:01:aa:97:31:fc:a7:ca:5d:23:ce:0f: 6d:c1:32:a5:20:96:21:c1:67:d4:dc:4e:85:aa:3a: 75:db:1d:e0:b1:b0:27:df:14:08:c4:ea:16:37:fb: 5e:6a:7b:97:0f:31:e7:3b:20:fd:16:a3:22:10:e1: 4e:23:a1:02:93:c3:8d:85:5e:eb:bb:ee:31:86:4c: cd:b3:ec:3a:5e:76:4f:59:35:40:2c:52:49:7e:65: 2c:3b:f6:a7:68:f9:03:73:22:b0:a0:5c:fa:74:06: 88:25:0c:98:ec:c3:88:2f:45:57:5f:a7:31:a1:b7: 42:ba:30:0e:00:00:4b:3f:da:64:b2:00:19:31:43: cf:0f:88:a1:a0:ba:05:77:ff:8e:ac:54:96:e0:c9: 84:bd:38:64:60:2e:37:b5:b5:87:74:85:1c:9b:3c: 4d:58:8d:31:29:16:d3:5e:da:d6:fc:9b:d2:3e:20: e4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2E:7A:5D:EF:A6:38:E2:3C:AC:5A:DD:48:EC:0B:24:BC:0D:54:12 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51753C88351911EDA9A3C95CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.201.56.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:c1:10:27:25:a2:20:1b:39:50:ed:f3:7e:ee:a1:8a:8e:95: d7:9c:53:e8:25:38:49:d0:73:c6:56:26:d5:e4:88:56:09:eb: 87:0a:44:01:d6:ea:5e:7a:db:59:7d:52:1f:e0:95:8b:5d:20: 8f:75:1b:15:14:11:ab:e6:11:a7:d0:35:86:a4:cd:96:bb:77: ee:ea:dc:61:97:1a:e1:e1:5f:b5:55:16:d9:90:4f:91:81:f2: bc:c0:5d:2d:f1:16:57:cc:db:e6:46:31:f6:10:82:55:31:ae: 37:f1:6c:6b:8a:9e:56:b0:a1:b5:dd:01:49:b0:63:68:c8:25: 75:39:53:9b:c2:6a:ca:1d:84:5d:0f:fa:41:73:7b:40:a5:dd: 44:53:85:53:d1:d0:b9:39:55:1d:64:7d:5b:17:f0:46:27:7a: 37:c9:84:47:2c:68:0f:8a:10:5f:cc:69:4d:cb:3d:e6:3d:41: e2:56:ed:9f:74:71:6b:80:db:bd:62:8f:95:5b:1b:1f:1a:85: 52:ca:8d:ad:4c:05:e0:ad:c1:bd:cf:00:58:24:8f:ac:f9:22: 27:79:3c:33:e0:83:88:35:e4:33:ac:a6:86:36:30:06:80:c2: 1e:b4:f0:e8:cb:e2:42:02:6a:44:a6:21:b3:1c:56:79:eb:9d: 72:db:96:f8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICPwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0MzQyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmZDA1ZS0wMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8DsVrIHw+yodzb9X9livicnMdBRQHZ3SogVQSWVXWHxIE5+QSqrW0DBbP3LB kNsheoOBWQkouic7DDcaobz9t2SaNf92J0EXozQCfmoJAaqXMfynyl0jzg9twTKl IJYhwWfU3E6Fqjp12x3gsbAn3xQIxOoWN/teanuXDzHnOyD9FqMiEOFOI6ECk8ON hV7ru+4xhkzNs+w6XnZPWTVALFJJfmUsO/anaPkDcyKwoFz6dAaIJQyY7MOIL0VX X6cxobdCujAOAABLP9pksgAZMUPPD4ihoLoFd/+OrFSW4MmEvThkYC43tbWHdIUc mzxNWI0xKRbTXtrW/JvSPiDk2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIYuel3v pjjiPKxa3UjsCyS8DVQSMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNTE3NTNDODgz NTE5MTFFREE5QTNDOTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALLyTgwDQYJKoZIhvcNAQELBQADggEBAAzBECcloiAbOVDt 837uoYqOldecU+glOEnQc8ZWJtXkiFYJ64cKRAHW6l5621l9Uh/glYtdII91GxUU EavmEafQNYakzZa7d+7q3GGXGuHhX7VVFtmQT5GB8rzAXS3xFlfM2+ZGMfYQglUx rjfxbGuKnlawobXdAUmwY2jIJXU5U5vCasodhF0P+kFze0Cl3URThVPR0Lk5VR1k fVsX8EYnejfJhEcsaA+KEF/MaU3LPeY9QeJW7Z90cWuA271ij5VbGx8ahVLKja1M BeCtwb3PAFgkj6z5Iid5PDPgg4g15DOspoY2MAaAwh608OjL4kICakSmIbMcVnnr nXLblvg= -----END CERTIFICATE-----Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org