$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/ED6AC2042F8F11EE895A9C2DC4F9AE02.roa File: ED6AC2042F8F11EE895A9C2DC4F9AE02.roa (raw, json) Hash identifier: Q8vSc8ci65ZL1xKqq40dunmAQl8almh9leyOMvX2F70= Subject key identifier: 53:AB:F8:3D:FF:D9:40:CB:D5:AA:A4:3A:FC:E5:A4:7B:93:59:E5:99 Certificate issuer: /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09 Certificate serial: 0531 Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/ED6AC2042F8F11EE895A9C2DC4F9AE02.roa Signing time: Tue 01 Aug 2023 05:56:44 +0000 ROA not before: Tue 01 Aug 2023 05:56:44 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 55933 IP address blocks: 103.151.4.0/23 maxlen: 23 103.151.4.0/24 maxlen: 24 103.151.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09 Validity Not Before: Aug 1 05:56:44 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64c89e9b-58c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:98:c3:65:a1:ec:8c:3d:99:0a:7f:02:67: 16:9b:07:b7:d6:0f:26:a9:2c:3d:68:7d:67:67:0b: 26:03:86:31:a1:83:4d:ef:86:d2:b0:dc:c5:95:a7: 15:1b:b8:08:44:0d:bb:3e:be:31:31:df:26:af:a9: f4:f9:2a:7b:64:03:d7:04:3e:52:ef:9b:82:f7:9a: 35:a5:9b:17:53:3f:4a:a4:25:ca:01:0a:c9:0c:f4: ae:fa:28:23:79:5f:05:62:ce:1f:3e:d4:64:23:84: bf:6c:fe:d4:b9:8a:ae:09:c5:8b:cd:09:4f:c0:98: d6:51:f9:d0:be:4b:ad:b4:35:9c:86:75:1d:31:6e: 25:ad:cc:11:da:cc:9b:00:01:b5:84:91:0f:40:2b: 80:1e:c5:c2:cd:f5:86:33:f3:fd:6e:93:aa:da:98: 82:f1:81:4b:73:39:4f:27:9e:06:b5:f9:3f:2a:d4: cd:fd:71:5a:d5:6d:4d:87:da:c2:72:f7:95:2c:d7: ea:05:0f:20:d2:8f:f5:60:ad:3b:0c:dd:6b:e8:b0: 53:5d:2b:bb:5f:a6:cb:e3:a6:3a:e1:96:b3:4f:02: e1:36:67:25:2d:90:bc:80:f1:15:5c:15:35:e4:d3: 55:09:e7:40:75:ff:a9:d8:d3:9d:a7:7f:b9:fa:0f: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AB:F8:3D:FF:D9:40:CB:D5:AA:A4:3A:FC:E5:A4:7B:93:59:E5:99 X509v3 Authority Key Identifier: keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/ED6AC2042F8F11EE895A9C2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.4.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:69:2a:98:90:21:27:80:5e:cc:cf:1e:cf:fa:36:0a:1e:77: 20:5c:d2:c5:e3:0c:79:db:d3:a3:e3:d8:29:47:9e:08:5b:6e: 39:4d:a3:24:f2:8b:ec:6f:e8:72:93:b5:f4:83:e1:4f:f9:e0: 01:5e:92:b5:fb:ee:1f:db:26:b8:ec:6d:14:57:19:87:92:4f: 57:f1:80:69:33:2b:21:ae:f1:db:2a:e2:dd:80:97:c0:73:3e: 82:55:01:c4:3c:cd:04:1f:91:ab:2e:f5:57:46:d6:72:e3:ab: 6a:ac:6a:4e:71:3c:93:a1:4c:3e:ab:59:ed:af:43:86:86:80: 06:13:53:aa:e4:e9:94:e5:3b:60:89:6b:51:b8:96:37:e4:c1: ab:85:1e:9f:85:97:81:0e:d8:e6:79:5d:02:a9:bb:47:d6:53: a7:ea:3c:c5:bc:f9:fe:33:1b:f1:86:1f:85:32:d0:eb:e5:38: 59:b8:4f:ef:23:13:44:44:72:c0:bf:95:c7:b0:16:d2:45:7a: b6:33:df:e1:de:3e:c4:32:d8:56:cd:c7:c1:99:b0:0f:40:e8: 11:a2:c0:37:b1:76:a7:ca:9a:af:65:9c:0e:f6:54:20:1b:7b: ea:11:88:05:02:a7:35:19:72:a0:78:82:0f:15:0a:93:10:d7: 0a:6e:06:2a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYzNTMxMTAvBgNVBAUTKEFBQUVDNzFDQTM0REVGMDhEODhFRTc3QkQ5MUMxNTcx NzVDQzNDMDkwHhcNMjMwODAxMDU1NjQ0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGM4OWU5Yi01OGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGCYw2Wh7Iw9mQp/AmcWmwe31g8mqSw9aH1nZwsmA4YxoYNN74bSsNzFlacV G7gIRA27Pr4xMd8mr6n0+Sp7ZAPXBD5S75uC95o1pZsXUz9KpCXKAQrJDPSu+igj eV8FYs4fPtRkI4S/bP7UuYquCcWLzQlPwJjWUfnQvkuttDWchnUdMW4lrcwR2syb AAG1hJEPQCuAHsXCzfWGM/P9bpOq2piC8YFLczlPJ54Gtfk/KtTN/XFa1W1Nh9rC cveVLNfqBQ8g0o/1YK07DN1r6LBTXSu7X6bL46Y64ZazTwLhNmclLZC8gPEVXBU1 5NNVCedAdf+p2NOdp3+5+g/ofQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFOr+D3/ 2UDL1aqkOvzlpHuTWeWZMB8GA1UdIwQYMBaAFKquxxyjTe8I2I7ne9kcFXF1zDwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjM1My8zQkZERUQ2NDg2 QkExMUVCQkNDMzk4NzVDNEY5QUUwMi9xcTdISEtOTjd3allqdWQ3MlJ3VmNYWE1Q QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FxN0hIS05ON3dqWWp1ZDcyUndWY1hYTVBBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTYzNTMvM0JGREVENjQ4NkJBMTFFQkJDQzM5ODc1QzRGOUFFMDIvRUQ2QUMyMDQy RjhGMTFFRTg5NUE5QzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlwQwDQYJKoZIhvcNAQELBQADggEBAA9pKpiQISeAXszP Hs/6NgoedyBc0sXjDHnb06Pj2ClHnghbbjlNoyTyi+xv6HKTtfSD4U/54AFekrX7 7h/bJrjsbRRXGYeST1fxgGkzKyGu8dsq4t2Al8BzPoJVAcQ8zQQfkasu9VdG1nLj q2qsak5xPJOhTD6rWe2vQ4aGgAYTU6rk6ZTlO2CJa1G4ljfkwauFHp+Fl4EO2OZ5 XQKpu0fWU6fqPMW8+f4zG/GGH4Uy0OvlOFm4T+8jE0REcsC/lcewFtJFerYz3+He PsQy2FbNx8GZsA9A6BGiwDexdqfKmq9lnA72VCAbe+oRiAUCpzUZcqB4gg8VCpMQ 1wpuBio= -----END CERTIFICATE-----Generated at Sat Jun 1 02:55:17 2024 by rpki-client on console-fra.rpki-client.org