$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/ED6AC2042F8F11EE895A9C2DC4F9AE02.roa File: ED6AC2042F8F11EE895A9C2DC4F9AE02.roa (raw, json) Hash identifier: u+VhGowYLIxVMjAVLBfnnCu45VHndlnwmBn/wCGYcRA= Subject key identifier: C5:E2:DB:27:1C:B4:87:61:AF:A6:3A:72:A9:D1:5C:D2:E5:47:9A:5D Certificate issuer: /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09 Certificate serial: 05D8 Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/ED6AC2042F8F11EE895A9C2DC4F9AE02.roa Signing time: Sun 09 Jun 2024 01:34:55 +0000 ROA not before: Sun 09 Jun 2024 01:34:55 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 55933 IP address blocks: 103.151.4.0/23 maxlen: 23 103.151.4.0/24 maxlen: 24 103.151.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1496 (0x5d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09 Validity Not Before: Jun 9 01:34:55 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=666506bf-afeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:c0:2a:ca:3d:33:bf:9b:64:e7:3d:5f:05: 48:84:b7:33:98:b8:f9:d6:e8:86:f6:9a:0e:fb:64: 2c:13:e2:02:f5:b7:17:db:18:10:e4:65:15:f2:9c: cb:4a:fc:49:34:0b:89:9e:51:67:5e:20:84:7d:98: 64:b3:23:96:a0:48:19:52:cf:31:36:c4:15:39:73: 33:0d:fe:b9:4b:b0:ab:88:a8:0b:0b:e3:b0:db:90: 08:5a:8a:c3:ea:0b:85:73:fb:36:4a:43:03:ae:bf: d0:37:b3:f8:72:f4:db:cc:74:0f:18:92:5a:6e:42: e5:6e:e7:93:7a:d2:d2:eb:6c:31:8f:44:ad:35:d0: 8b:1e:cf:41:7c:35:8b:c8:5c:30:5c:02:ef:f9:c1: ac:40:2d:11:29:68:6b:15:8f:47:0c:bb:38:53:6d: 08:a2:5c:63:e6:3a:b9:f1:d5:dd:b9:57:e7:2b:8e: c3:ac:32:ff:65:d3:1a:9d:db:80:c0:41:68:5d:78: b6:53:46:0b:9a:ef:b7:3c:ce:02:df:c1:39:8f:5e: de:13:df:60:e7:d8:4e:36:9a:f1:c8:16:be:f0:b0: 19:61:60:87:a0:7c:1c:b2:16:65:1b:76:09:90:3c: 42:fd:f8:77:b2:74:15:3d:42:b7:81:e1:02:ab:45: 76:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E2:DB:27:1C:B4:87:61:AF:A6:3A:72:A9:D1:5C:D2:E5:47:9A:5D X509v3 Authority Key Identifier: keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/ED6AC2042F8F11EE895A9C2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.4.0/23 Signature Algorithm: sha256WithRSAEncryption 10:85:8b:b6:35:09:1c:13:0e:e5:5b:2d:4c:a0:a4:5d:ab:7f: 5e:f2:40:ab:82:ce:9e:0f:c1:7c:43:b1:5f:c7:0c:0f:a0:24: 3b:22:ac:20:c7:1c:27:01:00:a8:02:e8:08:35:24:6b:da:7b: 58:0f:4e:fd:c6:b9:d2:aa:ec:6b:2d:d9:65:6c:f8:d7:ee:d1: e2:56:c8:d4:65:a2:09:7e:44:f9:97:58:f4:6e:a3:26:c4:bb: 6c:13:90:fb:23:1e:35:6c:58:35:3b:43:a2:b8:38:1a:91:1f: 2b:36:92:81:a1:24:bc:7c:fa:db:8b:b7:f6:64:19:ca:f4:51: 0f:71:ae:7d:50:42:f0:0e:c0:76:56:24:45:01:f4:7e:fd:d3: 90:5b:db:c7:ee:0d:3b:e4:60:88:e4:3e:cf:f8:27:4e:b9:fa: 21:0a:1d:0c:74:84:ea:4c:72:78:a6:89:ef:e0:93:da:26:a8: 69:e2:d9:65:e4:09:90:04:ee:4b:5e:f3:bc:39:b4:db:23:f8: 1e:5f:f2:c9:e3:4f:7f:4c:0c:f9:ca:43:eb:4b:f5:02:15:63: 9a:39:95:f8:d0:9a:89:de:09:d2:09:32:dd:88:ed:5f:6e:4a: eb:7e:f9:40:d9:41:82:a3:25:0a:95:48:8b:44:9c:18:02:b9: 06:c0:c7:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYzNTMxMTAvBgNVBAUTKEFBQUVDNzFDQTM0REVGMDhEODhFRTc3QkQ5MUMxNTcx NzVDQzNDMDkwHhcNMjQwNjA5MDEzNDU1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjY1MDZiZi1hZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNvAKso9M7+bZOc9XwVIhLczmLj51uiG9poO+2QsE+IC9bcX2xgQ5GUV8pzL SvxJNAuJnlFnXiCEfZhksyOWoEgZUs8xNsQVOXMzDf65S7CriKgLC+Ow25AIWorD 6guFc/s2SkMDrr/QN7P4cvTbzHQPGJJabkLlbueTetLS62wxj0StNdCLHs9BfDWL yFwwXALv+cGsQC0RKWhrFY9HDLs4U20Iolxj5jq58dXduVfnK47DrDL/ZdManduA wEFoXXi2U0YLmu+3PM4C38E5j17eE99g59hONprxyBa+8LAZYWCHoHwcshZlG3YJ kDxC/fh3snQVPUK3geECq0V2jwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMXi2ycc tIdhr6Y6cqnRXNLlR5pdMB8GA1UdIwQYMBaAFKquxxyjTe8I2I7ne9kcFXF1zDwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjM1My8zQkZERUQ2NDg2 QkExMUVCQkNDMzk4NzVDNEY5QUUwMi9xcTdISEtOTjd3allqdWQ3MlJ3VmNYWE1Q QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FxN0hIS05ON3dqWWp1ZDcyUndWY1hYTVBBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTYzNTMvM0JGREVENjQ4NkJBMTFFQkJDQzM5ODc1QzRGOUFFMDIvRUQ2QUMyMDQy RjhGMTFFRTg5NUE5QzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlwQwDQYJKoZIhvcNAQELBQADggEBABCFi7Y1CRwTDuVb LUygpF2rf17yQKuCzp4PwXxDsV/HDA+gJDsirCDHHCcBAKgC6Ag1JGvae1gPTv3G udKq7Gst2WVs+Nfu0eJWyNRlogl+RPmXWPRuoybEu2wTkPsjHjVsWDU7Q6K4OBqR Hys2koGhJLx8+tuLt/ZkGcr0UQ9xrn1QQvAOwHZWJEUB9H7905Bb28fuDTvkYIjk Ps/4J065+iEKHQx0hOpMcnimie/gk9omqGni2WXkCZAE7kte87w5tNsj+B5f8snj T39MDPnKQ+tL9QIVY5o5lfjQmoneCdIJMt2I7V9uSut++UDZQYKjJQqVSItEnBgC uQbAxxY= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:32 2024 by rpki-client on console-fra.rpki-client.org