$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/721A8022799411EE87154A17C4F9AE02.roa File: 721A8022799411EE87154A17C4F9AE02.roa (raw, json) Hash identifier: VdbbqLKwYdELfL5zfnwmDtlxXO2jg1jZQoLTmhag4U8= Subject key identifier: 16:7C:F8:C3:68:48:9E:23:81:D4:F5:23:C4:88:C0:AE:50:0F:5F:8C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 404C Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/721A8022799411EE87154A17C4F9AE02.roa Signing time: Thu 02 Nov 2023 15:29:01 +0000 ROA not before: Thu 02 Nov 2023 15:29:01 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 150890 IP address blocks: 103.71.106.0/23 maxlen: 24 2401:3320::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16460 (0x404c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Nov 2 15:29:01 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6543c03d-2013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:d7:3a:87:7e:9a:22:77:30:17:df:50:3f: 1f:a5:d5:12:11:da:e5:f8:6a:ad:d9:c0:17:82:95: bd:67:ed:59:f4:bb:43:f6:14:fe:c7:3f:ed:f0:93: a4:fe:fb:17:02:2b:d6:ff:ba:0e:c0:7d:02:1c:3a: 03:bb:bd:18:1c:05:84:cc:48:bf:a3:35:7c:b8:f6: fb:53:37:4a:0e:7c:20:72:1b:74:51:cb:2b:8c:99: de:92:8a:6f:01:aa:50:f0:49:f1:cd:69:87:2a:49: bd:ef:86:4d:98:3b:01:b6:4d:04:b8:9d:50:7c:21: d2:36:d1:85:4e:89:67:7e:1e:f7:1c:0b:dd:f9:98: 15:bb:37:20:5b:ef:fb:50:1d:26:5e:78:30:82:bc: ca:ea:00:c3:65:01:cf:af:8c:8e:3e:c6:fe:66:9f: d0:50:54:cc:77:5d:24:91:29:f0:2c:98:9f:d6:59: 94:2e:c2:41:c7:72:36:56:ea:0c:31:29:56:62:45: 49:cf:98:ab:55:f4:d8:be:aa:89:72:f3:22:74:38: 60:ee:74:3d:9a:81:60:68:77:6d:54:2d:f8:16:89: 5b:22:39:f9:f6:d2:6b:c4:84:41:a6:16:c2:6f:d3: 7e:ad:72:4b:80:0b:42:d8:53:43:4b:77:e5:ce:63: 73:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7C:F8:C3:68:48:9E:23:81:D4:F5:23:C4:88:C0:AE:50:0F:5F:8C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/721A8022799411EE87154A17C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.71.106.0/23 IPv6: 2401:3320::/48 Signature Algorithm: sha256WithRSAEncryption 06:92:c9:a0:e9:4c:49:c6:be:83:71:9d:bb:6a:95:fb:c7:83: c2:fc:f7:4d:57:3b:0a:4b:a3:56:78:1d:40:ea:70:5e:43:6a: 00:48:ce:c4:b8:e5:25:9f:f9:5f:a6:31:21:24:37:96:f3:e4: d8:25:2b:f9:51:cd:07:64:80:5d:77:60:a2:cd:db:6b:e1:a7: c6:3e:e8:ae:31:5e:4c:c0:74:f3:89:9b:2c:14:ec:03:c8:d4: db:08:f7:d9:5c:4f:15:bd:87:7a:7f:f0:a0:2f:6d:7f:4a:69: dd:d7:e2:d0:84:76:8b:3b:a1:dc:6a:91:0f:14:3e:cb:ce:cb: d5:b5:7e:b2:b3:4b:d6:56:67:d2:8f:dd:b1:20:4d:ae:9f:6c: 39:ef:dc:0a:af:87:be:9a:8c:af:0b:8f:68:51:ab:08:27:0d: 48:f4:86:01:8c:30:88:ba:8d:33:6d:b9:4b:e2:85:32:bc:2c: ec:0c:58:c6:cf:89:b1:af:72:e6:df:6d:6a:37:c5:44:d7:e1: a6:9f:b8:0a:d3:fc:db:f8:a0:1b:45:60:3e:29:a0:f9:47:69: ba:11:2f:93:e3:0c:06:f3:ca:c4:dd:51:d0:f5:3a:4c:0e:87: 0e:73:35:ad:fc:fc:66:1f:50:a6:f1:83:7d:2c:be:a3:ab:49: 87:e5:75:ee -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICQEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMxMTAyMTUyOTAxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQzYzAzZC0yMDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKHXOod+miJ3MBffUD8fpdUSEdrl+Gqt2cAXgpW9Z+1Z9LtD9hT+xz/t8JOk /vsXAivW/7oOwH0CHDoDu70YHAWEzEi/ozV8uPb7UzdKDnwgcht0UcsrjJnekopv AapQ8EnxzWmHKkm974ZNmDsBtk0EuJ1QfCHSNtGFTolnfh73HAvd+ZgVuzcgW+/7 UB0mXngwgrzK6gDDZQHPr4yOPsb+Zp/QUFTMd10kkSnwLJif1lmULsJBx3I2VuoM MSlWYkVJz5irVfTYvqqJcvMidDhg7nQ9moFgaHdtVC34FolbIjn59tJrxIRBphbC b9N+rXJLgAtC2FNDS3flzmNzkQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBZ8+MNo SJ4jgdT1I8SIwK5QD1+MMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNzIxQTgwMjI3 OTk0MTFFRTg3MTU0QTE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnR2owDwQCAAIwCQMHACQBMyAAADANBgkqhkiG9w0BAQsF AAOCAQEABpLJoOlMSca+g3Gdu2qV+8eDwvz3TVc7CkujVngdQOpwXkNqAEjOxLjl JZ/5X6YxISQ3lvPk2CUr+VHNB2SAXXdgos3ba+Gnxj7orjFeTMB084mbLBTsA8jU 2wj32VxPFb2Hen/woC9tf0pp3dfi0IR2izuh3GqRDxQ+y87L1bV+srNL1lZn0o/d sSBNrp9sOe/cCq+HvpqMrwuPaFGrCCcNSPSGAYwwiLqNM225S+KFMrws7AxYxs+J sa9y5t9tajfFRNfhpp+4CtP82/igG0VgPimg+UdpuhEvk+MMBvPKxN1R0PU6TA6H DnM1rfz8Zh9QpvGDfSy+o6tJh+V17g== -----END CERTIFICATE-----Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org