$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4BB6060A0FD11EC924D4461C4F9AE02.roa File: C4BB6060A0FD11EC924D4461C4F9AE02.roa (raw, json) Hash identifier: uzvE5rhTWBHsk4Uo7w1b5+0pXBAvNzTy/aCi1ckzQDY= Subject key identifier: F3:19:E7:4A:14:07:32:F1:CC:24:72:5A:E0:E5:CA:B8:8D:F9:9E:6C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3F24 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4BB6060A0FD11EC924D4461C4F9AE02.roa Signing time: Tue 12 Sep 2023 02:44:05 +0000 ROA not before: Tue 12 Sep 2023 02:44:05 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 56148 IP address blocks: 103.10.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16164 (0x3f24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:44:05 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffd075-45a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:53:88:47:df:88:e2:1d:c5:cf:a1:36:f8:44: 47:43:51:a2:50:55:16:e5:f9:b6:61:d0:ac:d4:53: 04:c7:16:8b:d8:b7:49:63:e2:e5:86:f1:b2:00:c9: 6e:30:eb:a7:cf:27:62:ba:66:fb:24:23:08:4b:f2: c4:12:19:ca:42:70:0d:f2:5a:8a:c5:ea:b3:8e:d7: 34:32:cc:58:f5:2d:85:95:d3:71:0a:bc:18:97:46: c5:2d:ea:40:ed:9c:1f:10:a5:20:4f:6c:a9:af:4f: 8f:fd:a8:67:59:2f:69:b1:69:09:40:90:5d:da:61: ff:17:d3:2a:17:33:03:f5:41:5f:c3:7d:b4:99:36: 57:e1:0f:ed:80:80:b1:bb:7d:90:56:04:c4:87:72: 1a:13:bb:5d:d0:0f:69:6c:8b:f8:36:5a:39:e7:a8: a1:de:a5:48:b2:d9:35:d1:cb:bd:55:f2:10:8d:9c: b8:26:f3:7d:6d:4b:1c:be:88:37:59:3d:09:07:d0: 4c:22:14:96:c2:a2:24:b8:d5:75:dc:7f:61:14:88: 2f:25:75:60:6f:5d:b7:91:a6:73:fc:67:b5:2a:04: b3:d7:15:0a:88:64:98:f4:5d:fb:c5:de:30:c0:2a: 1d:f3:b0:ae:9f:71:38:db:40:22:d0:0b:9a:6c:d5: 8c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:19:E7:4A:14:07:32:F1:CC:24:72:5A:E0:E5:CA:B8:8D:F9:9E:6C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4BB6060A0FD11EC924D4461C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.88.0/22 Signature Algorithm: sha256WithRSAEncryption b6:60:54:35:a7:c5:26:20:b2:4b:ba:03:57:7b:82:cc:9d:40: a8:9a:cb:1d:5e:3c:0f:24:65:1c:5f:42:81:26:f6:43:a5:fa: 53:9f:82:7a:8f:52:83:da:9e:c9:24:00:5e:23:b9:74:7d:32: 04:98:af:35:15:b0:d5:b2:80:2b:49:08:57:0d:dc:58:6e:32: f3:43:a7:01:9b:4f:f9:eb:d6:ca:b0:88:fb:33:c4:20:93:aa: 43:97:10:85:c9:87:49:79:5b:61:b0:e7:87:01:9e:fd:8f:ed: 8c:7d:e1:29:2a:c1:1a:22:08:75:3d:5c:b6:b8:48:e7:ab:90: a9:4c:c1:d6:ea:1e:a8:9b:bf:84:76:ba:ec:90:7d:c8:27:02: c7:d7:f2:49:b8:88:4b:d8:34:d9:82:6a:90:4a:b9:f2:95:c6: 39:cd:97:23:ed:02:e3:55:36:57:13:0e:96:06:43:8d:d7:3a: f7:07:7d:77:aa:83:51:68:7d:6f:7a:29:64:63:e5:12:cb:ff: bb:7b:49:5f:c1:84:14:11:97:c4:b3:9a:31:1e:21:bc:5a:f0: 0e:c1:95:5f:16:44:77:d7:2d:23:b1:13:bd:30:13:45:7a:3d: c7:67:ee:f8:a4:35:21:31:b0:2b:fd:5e:91:f0:69:20:c2:92: b7:e4:b7:fe -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICPyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0NDA1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmZDA3NS00NWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVOIR9+I4h3Fz6E2+ERHQ1GiUFUW5fm2YdCs1FMExxaL2LdJY+LlhvGyAMlu MOunzydiumb7JCMIS/LEEhnKQnAN8lqKxeqzjtc0MsxY9S2FldNxCrwYl0bFLepA 7ZwfEKUgT2ypr0+P/ahnWS9psWkJQJBd2mH/F9MqFzMD9UFfw320mTZX4Q/tgICx u32QVgTEh3IaE7td0A9pbIv4Nlo556ih3qVIstk10cu9VfIQjZy4JvN9bUscvog3 WT0JB9BMIhSWwqIkuNV13H9hFIgvJXVgb123kaZz/Ge1KgSz1xUKiGSY9F37xd4w wCod87Cun3E420Ai0AuabNWMCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPMZ50oU BzLxzCRyWuDlyriN+Z5sMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzRCQjYwNjBB MEZEMTFFQzkyNEQ0NDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnClgwDQYJKoZIhvcNAQELBQADggEBALZgVDWnxSYgsku6 A1d7gsydQKiayx1ePA8kZRxfQoEm9kOl+lOfgnqPUoPanskkAF4juXR9MgSYrzUV sNWygCtJCFcN3FhuMvNDpwGbT/nr1sqwiPszxCCTqkOXEIXJh0l5W2Gw54cBnv2P 7Yx94SkqwRoiCHU9XLa4SOerkKlMwdbqHqibv4R2uuyQfcgnAsfX8km4iEvYNNmC apBKufKVxjnNlyPtAuNVNlcTDpYGQ43XOvcHfXeqg1FofW96KWRj5RLL/7t7SV/B hBQRl8SzmjEeIbxa8A7BlV8WRHfXLSOxE70wE0V6Pcdn7vikNSExsCv9XpHwaSDC krfkt/4= -----END CERTIFICATE-----Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org