$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B8BCF12A7A8C11ED8730C555C4F9AE02.roa File: B8BCF12A7A8C11ED8730C555C4F9AE02.roa (raw, json) Hash identifier: BaiLHMVkbnWHcUg0c9tozqg3+mI3iUTAUX0UKwZPIv4= Subject key identifier: CB:46:90:ED:F6:66:FC:47:6A:4A:BA:8C:A8:82:E2:2B:B5:E7:86:18 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3F36 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B8BCF12A7A8C11ED8730C555C4F9AE02.roa Signing time: Tue 12 Sep 2023 02:44:21 +0000 ROA not before: Tue 12 Sep 2023 02:44:21 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 63752 IP address blocks: 103.211.212.0/22 maxlen: 22 2001:df0:6480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16182 (0x3f36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:44:21 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffd085-b865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:8f:32:b4:e6:b5:7e:77:c6:ba:74:a1:df: 74:a6:d7:1e:33:f9:a3:d3:63:41:a2:6e:60:15:cd: 23:50:ea:1d:76:06:a2:7c:31:ad:f2:78:14:46:95: 0f:87:47:1c:f5:4c:67:59:d2:81:11:db:70:f6:af: 70:70:7d:b2:e9:58:49:e4:9c:05:54:15:1e:73:d9: d3:10:52:f4:12:9b:30:7b:fa:de:c1:e6:a8:30:49: 24:c5:63:30:7b:96:07:34:34:3a:b1:cb:fb:71:2f: 29:c6:a2:49:33:2e:02:d6:2a:bd:fc:74:39:bb:3b: a3:16:5a:16:74:4a:53:da:f2:9f:de:74:c0:47:d6: 36:ba:52:8a:d2:95:ed:bd:c5:f2:e4:f7:4e:d5:5a: a5:10:51:07:aa:3c:17:2a:da:46:92:16:14:f4:a5: fe:f0:7b:c9:d7:31:bb:e1:3c:40:8d:61:d5:63:1b: e5:ac:8d:d5:0d:3c:30:6a:d5:ed:6c:3c:54:17:95: 29:81:e7:ea:42:97:77:e7:91:60:94:d1:74:da:ab: 27:db:54:8d:03:be:9f:3a:c9:6c:ef:77:dd:bf:dd: 39:d8:24:b4:63:7b:f1:c3:00:b6:8e:a7:a4:6d:33: fa:69:51:ff:ce:8b:f7:f2:5b:88:82:6c:b5:0e:87: a6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:46:90:ED:F6:66:FC:47:6A:4A:BA:8C:A8:82:E2:2B:B5:E7:86:18 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B8BCF12A7A8C11ED8730C555C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.211.212.0/22 IPv6: 2001:df0:6480::/48 Signature Algorithm: sha256WithRSAEncryption 9d:a5:67:a3:da:cf:47:40:e6:d5:f5:7a:5f:31:82:a5:67:c2: fd:fc:64:f0:d2:1d:d3:e9:60:eb:36:d2:5b:4d:6e:15:77:8e: 31:cb:51:6b:2c:7d:6d:e5:2d:27:86:c4:2e:ba:8b:b0:cd:09: 4a:18:21:4f:52:12:0d:a9:e0:34:3c:66:cc:c8:b4:98:d4:1b: b0:85:db:65:a6:c0:1e:3a:e4:82:d9:3e:98:bd:5e:a0:75:5b: 31:4f:69:f8:3e:3b:21:49:af:2e:dc:64:91:c2:cf:28:03:be: b1:9a:f4:dc:02:52:d8:3c:1d:99:dc:14:f4:d9:c9:e2:2e:21: 40:bf:f5:bd:c1:4c:13:32:62:3f:48:91:61:b4:ec:8f:65:5d: 44:7a:49:84:39:fa:95:7c:03:13:ec:dc:cf:b4:2b:b3:3d:80: 3a:87:4e:89:ee:9c:c2:3b:87:dc:d4:aa:31:76:f4:7b:4b:dd: 02:6b:61:6c:b1:17:99:91:3f:f1:59:4f:87:3d:52:63:32:8f: ef:06:38:12:1d:43:e8:0f:9f:52:fe:31:49:61:06:a7:01:2a: 52:e5:82:fe:f5:ae:9f:d0:67:23:e1:ce:e5:1c:51:f6:af:1e: f5:33:5e:b1:53:cf:d6:46:72:17:30:73:e3:7b:97:00:6e:86: cd:4e:c7:95 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICPzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0NDIxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmZDA4NS1iODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OaPMrTmtX53xrp0od90ptceM/mj02NBom5gFc0jUOoddgaifDGt8ngURpUP h0cc9UxnWdKBEdtw9q9wcH2y6VhJ5JwFVBUec9nTEFL0Epswe/reweaoMEkkxWMw e5YHNDQ6scv7cS8pxqJJMy4C1iq9/HQ5uzujFloWdEpT2vKf3nTAR9Y2ulKK0pXt vcXy5PdO1VqlEFEHqjwXKtpGkhYU9KX+8HvJ1zG74TxAjWHVYxvlrI3VDTwwatXt bDxUF5UpgefqQpd355FglNF02qsn21SNA76fOsls73fdv9052CS0Y3vxwwC2jqek bTP6aVH/zov38luIgmy1Doem9wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMtGkO32 ZvxHakq6jKiC4iu154YYMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQjhCQ0YxMkE3 QThDMTFFRDg3MzBDNTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJn09QwDwQCAAIwCQMHACABDfBkgDANBgkqhkiG9w0BAQsF AAOCAQEAnaVno9rPR0Dm1fV6XzGCpWfC/fxk8NId0+lg6zbSW01uFXeOMctRayx9 beUtJ4bELrqLsM0JShghT1ISDangNDxmzMi0mNQbsIXbZabAHjrkgtk+mL1eoHVb MU9p+D47IUmvLtxkkcLPKAO+sZr03AJS2DwdmdwU9NnJ4i4hQL/1vcFMEzJiP0iR YbTsj2VdRHpJhDn6lXwDE+zcz7Qrsz2AOodOie6cwjuH3NSqMXb0e0vdAmthbLEX mZE/8VlPhz1SYzKP7wY4Eh1D6A+fUv4xSWEGpwEqUuWC/vWun9BnI+HO5RxR9q8e 9TNesVPP1kZyFzBz43uXAG6GzU7HlQ== -----END CERTIFICATE-----Generated at Fri May 31 16:41:41 2024 by rpki-client on console-ams.rpki-client.org