$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/81E9653E5B8A11EB857A3F77C4F9AE02.roa File: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (raw, json) Hash identifier: Equ+gb4igBag3afpSMBof9/eapS/v4p0cLiI9qczpMs= Subject key identifier: 33:EA:72:66:A6:03:32:0C:C7:9A:0E:80:75:D3:F5:92:35:60:AC:B6 Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 059B Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/81E9653E5B8A11EB857A3F77C4F9AE02.roa Signing time: Sat 30 Sep 2023 22:59:58 +0000 ROA not before: Sat 30 Sep 2023 22:59:58 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 140220 IP address blocks: 103.192.152.0/22 maxlen: 24 103.196.80.0/22 maxlen: 24 202.182.80.0/20 maxlen: 24 2405:da40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: Sep 30 22:59:58 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6518a86e-b5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:40:1b:5a:5f:25:de:1f:ae:37:bd:6b:10:67: cd:b7:64:ac:45:60:e5:7e:68:95:c3:45:ff:a6:4d: cb:eb:cd:b5:c6:57:0f:ff:4a:cc:1f:cd:7b:11:97: 08:d1:cf:47:33:9e:9a:cf:fe:35:fa:ed:c1:f7:f9: 5a:83:a1:2d:a7:1f:56:e1:a2:d7:6e:99:91:3a:81: 2d:2e:6a:c4:c5:42:3f:6f:df:83:bd:08:15:43:27: 17:c6:ae:6c:1d:1d:36:9c:56:55:e5:77:c7:84:37: 28:e6:52:11:e5:d6:95:70:ae:32:95:47:bb:1f:ca: 25:a8:e1:13:f3:65:66:34:f7:2b:a2:b0:a5:f7:c2: ff:6b:ae:f0:a5:bb:08:4b:04:a6:25:a1:85:22:7e: 1e:b5:f9:5f:aa:ea:f1:54:86:bf:67:9d:10:37:39: e6:38:0c:32:67:eb:a5:8a:12:85:8a:8c:c3:1b:3f: 93:d0:33:4d:f7:cd:7a:98:64:e1:84:46:03:7a:e6: b3:b3:72:1e:e6:e0:00:22:cc:d7:f2:ec:2d:a6:8d: 7e:53:2d:ba:da:fe:cb:57:66:e5:df:e4:f4:4e:8d: 9b:e8:e4:2e:a0:2e:cf:02:97:22:43:94:41:4b:5f: 49:c4:69:b6:a9:49:1c:3b:65:d6:bc:48:51:3a:0e: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EA:72:66:A6:03:32:0C:C7:9A:0E:80:75:D3:F5:92:35:60:AC:B6 X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/81E9653E5B8A11EB857A3F77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.192.152.0/22 103.196.80.0/22 202.182.80.0/20 IPv6: 2405:da40::/32 Signature Algorithm: sha256WithRSAEncryption 5f:e7:aa:20:f2:21:69:ad:c4:8d:d6:18:4b:dc:d5:35:16:d0: c6:56:e4:dd:41:61:45:bb:14:8c:d1:c1:9f:ff:19:0a:c2:a6: db:59:97:1b:bb:4e:d5:85:55:6c:e4:68:47:f0:32:bd:5c:bc: fe:76:c7:9e:0d:42:72:56:22:a2:e7:b4:a7:17:c7:c9:e0:3a: 98:05:b1:e2:de:58:35:39:82:bb:34:9e:f4:94:76:95:a2:b6: d5:0d:46:2c:66:e7:ad:d9:97:7d:ae:3a:32:47:a4:0f:56:19: 2c:d1:06:22:ba:f9:e1:28:c5:36:06:86:cc:64:70:d4:f7:eb: 00:05:18:e1:4a:1f:80:2a:33:79:42:c3:6f:e7:2e:32:df:45: ac:2e:e6:d0:82:c1:44:2c:f9:91:20:12:db:f0:dc:3a:50:6b: e3:4f:49:3e:cb:d4:2a:2b:b3:1f:a5:39:12:36:a0:f3:0e:00: 83:b6:78:18:a1:d8:86:03:15:b8:da:9f:8c:1b:2e:5c:84:65: 7f:29:1a:23:ac:f8:3d:3c:0a:02:3f:4c:b0:f6:5c:07:68:bc: 6b:f8:b3:98:11:80:e4:c3:cc:2a:3a:cc:15:c6:cf:2c:58:3e: 0f:b3:a6:16:0d:f9:79:1a:46:47:60:94:cb:95:4c:e9:4d:1e: 0e:9b:18:a9 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjMwOTMwMjI1OTU4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE4YTg2ZS1iNWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUAbWl8l3h+uN71rEGfNt2SsRWDlfmiVw0X/pk3L6821xlcP/0rMH817EZcI 0c9HM56az/41+u3B9/lag6Etpx9W4aLXbpmROoEtLmrExUI/b9+DvQgVQycXxq5s HR02nFZV5XfHhDco5lIR5daVcK4ylUe7H8olqOET82VmNPcrorCl98L/a67wpbsI SwSmJaGFIn4etflfqurxVIa/Z50QNznmOAwyZ+ulihKFiozDGz+T0DNN9816mGTh hEYDeuazs3Ie5uAAIszX8uwtpo1+Uy262v7LV2bl3+T0To2b6OQuoC7PApciQ5RB S19JxGm2qUkcO2XWvEhROg5SyQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDPqcmam AzIMx5oOgHXT9ZI1YKy2MB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUQ2NDMvRUZCRTZFQjI1Qjg4MTFFQkJENUYzMDc2QzRGOUFFMDIvODFFOTY1M0U1 QjhBMTFFQjg1N0EzRjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnwJgDBAJnxFADBATKtlAwDQQCAAIwBwMFACQF2kAwDQYJ KoZIhvcNAQELBQADggEBAF/nqiDyIWmtxI3WGEvc1TUW0MZW5N1BYUW7FIzRwZ// GQrCpttZlxu7TtWFVWzkaEfwMr1cvP52x54NQnJWIqLntKcXx8ngOpgFseLeWDU5 grs0nvSUdpWittUNRixm563Zl32uOjJHpA9WGSzRBiK6+eEoxTYGhsxkcNT36wAF GOFKH4AqM3lCw2/nLjLfRawu5tCCwUQs+ZEgEtvw3DpQa+NPST7L1Corsx+lORI2 oPMOAIO2eBih2IYDFbjan4wbLlyEZX8pGiOs+D08CgI/TLD2XAdovGv4s5gRgOTD zCo6zBXGzyxYPg+zphYN+XkaRkdglMuVTOlNHg6bGKk= -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:45 2024 by rpki-client on console-fra.rpki-client.org