$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FDEF8F3E9EE711EEB412E35FC4F9AE02.roa File: FDEF8F3E9EE711EEB412E35FC4F9AE02.roa (raw, json) Hash identifier: M8Xg6xbER2H5M3840KT4ODHCTQzvX/C0OlQQZM343PE= Subject key identifier: 8C:41:D6:E8:9D:5C:EB:DF:09:DA:A6:5D:AA:18:1F:2B:FB:C9:EF:0B Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 415C Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FDEF8F3E9EE711EEB412E35FC4F9AE02.roa Signing time: Wed 20 Dec 2023 03:29:33 +0000 ROA not before: Wed 20 Dec 2023 03:29:33 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 150883 IP address blocks: 103.69.82.0/23 maxlen: 24 2401:3120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16732 (0x415c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Dec 20 03:29:33 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65825f9d-ae3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:d3:b5:1b:51:d3:f5:2f:da:b9:c8:b8:70: d5:94:e0:7b:6f:7f:72:fb:a5:00:ef:88:d9:cf:41: 72:a9:7a:20:65:48:44:29:89:89:1e:0d:53:7d:84: 56:a8:06:2c:f5:6b:cd:ee:09:3a:cc:ab:f4:de:c6: 80:c6:f8:c6:44:cb:70:f1:a6:d3:6e:b8:51:5d:12: 02:52:cd:51:16:c0:97:aa:6f:4e:70:6b:1c:40:1e: 52:e3:28:06:ee:22:46:2f:8a:c8:18:db:54:5c:d0: 7d:68:48:d3:6d:d9:ad:f6:18:f4:c3:70:24:3e:f7: e1:c3:0c:1e:e9:40:17:3f:d7:38:16:74:db:56:07: 36:f1:5b:fe:0b:ac:a4:2c:af:73:b8:12:27:27:9e: 62:12:5d:1b:24:76:ba:69:7c:67:8c:42:ff:a4:04: c5:c0:01:0b:a7:cb:33:c4:ce:e8:63:91:02:86:6e: f8:1e:6b:2d:65:95:0c:69:38:9d:a1:08:7e:4b:f6: d8:96:ab:e9:76:9c:23:46:76:93:e7:9d:52:09:1b: d3:bc:5d:a1:00:95:e9:45:be:df:50:a9:1d:0a:47: 0e:91:1a:ab:93:f0:73:5d:89:af:89:71:ed:7e:7a: 73:b2:59:39:8d:c4:68:23:67:5d:6f:99:35:9c:b5: 6e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:41:D6:E8:9D:5C:EB:DF:09:DA:A6:5D:AA:18:1F:2B:FB:C9:EF:0B X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FDEF8F3E9EE711EEB412E35FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.69.82.0/23 IPv6: 2401:3120::/48 Signature Algorithm: sha256WithRSAEncryption 9e:78:48:de:fe:9b:4c:b7:f6:9e:d0:eb:23:31:a7:5e:c0:c5: 2a:e5:fe:e7:10:d7:22:fb:3f:4a:1a:28:58:3a:58:97:6d:c6: 44:77:57:c3:75:60:e4:53:25:0a:e6:bc:37:df:78:68:02:3e: 30:77:ef:d6:61:1e:7b:02:91:6c:30:c3:38:d1:a2:77:dd:93: d9:1c:83:63:4f:cb:9e:86:c5:88:69:a1:4e:6e:46:17:2d:ce: f6:3f:a4:21:cf:b8:e7:6f:18:a8:42:b1:a8:e5:8a:c1:7a:6e: 1a:2a:aa:b7:b6:de:e0:9a:66:87:8d:3d:52:96:47:7a:5d:9e: d1:a5:23:8e:e6:aa:a1:34:a2:aa:48:9f:0b:69:e1:6f:15:68: fc:6a:2c:77:e3:4b:76:ba:b3:e0:3a:4a:ab:22:df:69:02:85: de:1e:b7:2f:74:6d:41:ed:64:b3:c5:cc:a3:01:af:25:77:9e: 1d:11:2f:4c:32:82:dc:c0:2a:14:cf:51:fc:5e:cd:bf:26:5f: d6:66:9c:28:f1:19:58:08:97:d9:c1:33:70:2f:6b:a3:8a:22: e6:05:af:8d:e8:bb:45:76:86:14:05:71:ea:98:83:18:f9:93: ef:2e:0c:8c:cb:9c:da:87:01:90:d9:5e:34:34:12:97:c6:ed: 21:99:8a:e4 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICQVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMxMjIwMDMyOTMzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTgyNWY5ZC1hZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjbTtRtR0/Uv2rnIuHDVlOB7b39y+6UA74jZz0FyqXogZUhEKYmJHg1TfYRW qAYs9WvN7gk6zKv03saAxvjGRMtw8abTbrhRXRICUs1RFsCXqm9OcGscQB5S4ygG 7iJGL4rIGNtUXNB9aEjTbdmt9hj0w3AkPvfhwwwe6UAXP9c4FnTbVgc28Vv+C6yk LK9zuBInJ55iEl0bJHa6aXxnjEL/pATFwAELp8szxM7oY5EChm74HmstZZUMaTid oQh+S/bYlqvpdpwjRnaT551SCRvTvF2hAJXpRb7fUKkdCkcOkRqrk/BzXYmviXHt fnpzslk5jcRoI2ddb5k1nLVuXwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIxB1uid XOvfCdqmXaoYHyv7ye8LMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRkRFRjhGM0U5 RUU3MTFFRUI0MTJFMzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnRVIwDwQCAAIwCQMHACQBMSAAADANBgkqhkiG9w0BAQsF AAOCAQEAnnhI3v6bTLf2ntDrIzGnXsDFKuX+5xDXIvs/ShooWDpYl23GRHdXw3Vg 5FMlCua8N994aAI+MHfv1mEeewKRbDDDONGid92T2RyDY0/LnobFiGmhTm5GFy3O 9j+kIc+4528YqEKxqOWKwXpuGiqqt7be4Jpmh409UpZHel2e0aUjjuaqoTSiqkif C2nhbxVo/Gosd+NLdrqz4DpKqyLfaQKF3h63L3RtQe1ks8XMowGvJXeeHREvTDKC 3MAqFM9R/F7NvyZf1macKPEZWAiX2cEzcC9ro4oi5gWvjei7RXaGFAVx6piDGPmT 7y4MjMuc2ocBkNleNDQSl8btIZmK5A== -----END CERTIFICATE-----Generated at Fri May 31 15:08:34 2024 by rpki-client on console-fra.rpki-client.org