$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5639E2F0799711EEB916293AC4F9AE02.roa File: 5639E2F0799711EEB916293AC4F9AE02.roa (raw, json) Hash identifier: qRgoQ7UpKOAl4CjWzMurBogn/zTfbaYL0KEESZbvW7g= Subject key identifier: EE:CF:D0:1C:33:21:67:F9:41:6D:C8:9C:58:E5:31:8F:ED:A4:59:FE Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4056 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5639E2F0799711EEB916293AC4F9AE02.roa Signing time: Thu 02 Nov 2023 15:48:59 +0000 ROA not before: Thu 02 Nov 2023 15:48:59 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 149137 IP address blocks: 103.15.222.0/23 maxlen: 23 103.117.198.0/23 maxlen: 24 103.131.84.0/23 maxlen: 24 103.205.60.0/23 maxlen: 24 103.209.34.0/23 maxlen: 24 103.238.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16470 (0x4056) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Nov 2 15:48:59 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6543c4eb-86fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:a0:58:81:1e:7b:7a:ca:80:f4:93:cb:e9: b6:5d:7e:45:07:d8:8f:1f:56:38:07:a2:24:a2:d6: 3c:d4:e7:49:68:9c:49:8b:b6:fa:8d:56:c7:c5:87: e2:fb:bc:8c:8c:b0:35:cb:67:47:91:9c:8b:fb:ec: 91:cf:4b:80:d8:d9:b0:d5:6d:37:de:d1:d5:0e:37: 06:49:73:a9:4e:20:53:56:24:b7:0e:07:cc:36:49: c5:d1:b2:35:5e:20:cd:6a:58:2d:ff:e2:dc:98:81: cd:b5:2a:fc:69:45:48:02:c1:c6:be:78:26:de:7b: 02:82:65:1d:d6:8e:47:f6:8b:00:8c:b6:5f:8e:65: 49:51:8e:fe:21:07:77:99:b4:6d:b1:38:08:b7:e1: ff:21:21:af:dc:58:5d:40:22:dd:83:97:b2:80:94: 94:68:a2:4c:4d:01:a3:fb:ad:67:33:2c:0d:92:63: 93:f1:ba:a6:ee:46:37:75:06:35:38:60:47:3c:57: e4:ef:a4:6d:f2:b7:d0:e5:25:53:69:8b:05:ff:e2: dd:5e:77:d4:60:2b:ae:ce:1a:1f:71:01:ae:ec:b7: e9:ef:53:b0:11:03:43:01:b0:78:5f:c7:2e:6c:34: db:6d:a5:17:82:3c:59:ac:e0:e8:6d:ac:2e:fd:4e: d4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CF:D0:1C:33:21:67:F9:41:6D:C8:9C:58:E5:31:8F:ED:A4:59:FE X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5639E2F0799711EEB916293AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.222.0/23 103.117.198.0/23 103.131.84.0/23 103.205.60.0/23 103.209.34.0/23 103.238.235.0/24 Signature Algorithm: sha256WithRSAEncryption 00:1d:93:df:b2:58:98:db:94:d5:c0:ea:32:d5:21:8b:9d:c7: 8e:6d:bb:5a:05:64:39:e5:76:4d:b8:b1:c2:c6:24:3f:dd:d5: cb:17:87:5d:83:f5:54:19:49:cf:b7:fb:6b:79:f0:e7:14:bc: 01:41:a1:81:df:de:ca:bb:8a:11:50:fb:49:18:d7:70:07:f9: 0e:4f:be:93:4c:c9:6d:88:65:39:78:8c:03:08:39:23:2f:79: 3c:f6:bb:cf:d3:06:22:ae:a6:36:a2:04:75:27:39:0a:e3:bf: b5:69:97:10:8b:b0:f9:d8:65:90:5a:65:7e:f7:03:e3:ed:a7: 42:06:eb:7c:bc:18:fb:8d:0f:23:58:0c:40:94:e0:45:52:b0: c0:ff:1d:85:33:dc:ab:00:6f:8c:62:8e:61:a5:df:a8:fa:df: 82:9f:16:28:ce:5c:52:01:d9:ad:5f:91:27:5d:00:b1:c8:26: 8a:7a:14:db:8e:88:7a:43:f1:86:d2:4e:36:af:ac:f4:b1:07: eb:25:3f:5e:1e:f5:1a:6f:14:b2:2e:78:e8:82:3b:27:47:84: 1a:22:44:c5:56:e6:dc:71:03:31:83:d5:3b:71:f6:ec:28:9f: 02:8d:f7:f1:10:54:68:c6:8b:3a:a9:2c:bf:d6:3a:2c:b9:74: ad:6b:60:7f -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICQFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMxMTAyMTU0ODU5WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQzYzRlYi04NmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs46gWIEee3rKgPSTy+m2XX5FB9iPH1Y4B6IkotY81OdJaJxJi7b6jVbHxYfi +7yMjLA1y2dHkZyL++yRz0uA2Nmw1W033tHVDjcGSXOpTiBTViS3DgfMNknF0bI1 XiDNalgt/+LcmIHNtSr8aUVIAsHGvngm3nsCgmUd1o5H9osAjLZfjmVJUY7+IQd3 mbRtsTgIt+H/ISGv3FhdQCLdg5eygJSUaKJMTQGj+61nMywNkmOT8bqm7kY3dQY1 OGBHPFfk76Rt8rfQ5SVTaYsF/+LdXnfUYCuuzhofcQGu7Lfp71OwEQNDAbB4X8cu bDTbbaUXgjxZrODobawu/U7UdQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFO7P0Bwz IWf5QW3InFjlMY/tpFn+MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNTYzOUUyRjA3 OTk3MTFFRUI5MTYyOTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAFnD94DBAFndcYDBAFng1QDBAFnzTwDBAFn0SIDBABn7usw DQYJKoZIhvcNAQELBQADggEBAAAdk9+yWJjblNXA6jLVIYudx45tu1oFZDnldk24 scLGJD/d1csXh12D9VQZSc+3+2t58OcUvAFBoYHf3sq7ihFQ+0kY13AH+Q5PvpNM yW2IZTl4jAMIOSMveTz2u8/TBiKupjaiBHUnOQrjv7VplxCLsPnYZZBaZX73A+Pt p0IG63y8GPuNDyNYDECU4EVSsMD/HYUz3KsAb4xijmGl36j634KfFijOXFIB2a1f kSddALHIJop6FNuOiHpD8YbSTjavrPSxB+slP14e9RpvFLIueOiCOydHhBoiRMVW 5txxAzGD1Ttx9uwonwKN9/EQVGjGizqpLL/WOiy5dK1rYH8= -----END CERTIFICATE-----Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org