$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/1D07036632DA11EBA1A7F93BC4F9AE02.roa File: 1D07036632DA11EBA1A7F93BC4F9AE02.roa (raw, json) Hash identifier: 3v0WZSZ9WXyN0p5iCYS1oEpxr7FNjE1W1kGnGnmRkMo= Subject key identifier: DA:8E:83:A2:06:10:9E:DA:EC:9D:26:C8:75:74:4F:99:3A:4C:47:6B Certificate issuer: /CN=A91B3C87/serialNumber=96CD0A6970D685B0CCEA3424E0944E84050EB7EC Certificate serial: 0663 Authority key identifier: 96:CD:0A:69:70:D6:85:B0:CC:EA:34:24:E0:94:4E:84:05:0E:B7:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ls0KaXDWhbDM6jQk4JROhAUOt-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/1D07036632DA11EBA1A7F93BC4F9AE02.roa Signing time: Thu 04 Apr 2024 18:56:46 +0000 ROA not before: Thu 04 Apr 2024 18:56:46 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 63968 IP address blocks: 103.52.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/ls0KaXDWhbDM6jQk4JROhAUOt-w.crl rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/ls0KaXDWhbDM6jQk4JROhAUOt-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ls0KaXDWhbDM6jQk4JROhAUOt-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3C87/serialNumber=96CD0A6970D685B0CCEA3424E0944E84050EB7EC Validity Not Before: Apr 4 18:56:46 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660ef7ee-f37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:45:4e:d4:6e:eb:12:73:28:f1:fb:e9:a6:41: a9:02:1a:0e:85:31:3b:9d:12:3b:fa:20:32:fb:7e: ba:83:69:77:85:8c:79:8a:96:1c:c7:ee:9f:3f:a1: d9:fe:84:73:bf:eb:1c:32:12:63:b4:4f:78:8b:2c: eb:f5:ce:1a:da:d2:77:7d:5d:48:76:94:de:78:87: a3:83:33:c5:f1:3b:44:df:1c:d1:9f:63:09:15:76: 07:2c:a5:9b:b2:92:05:6b:1d:a3:8b:8b:4e:af:13: d4:21:0c:3a:14:8b:b8:33:a7:95:db:31:d2:bd:e6: 83:39:87:a0:5e:8e:58:cc:de:4e:d1:33:1f:0d:51: f2:6c:a2:06:e5:bc:ec:b4:9d:74:57:67:f1:51:0b: f2:45:46:72:6b:71:20:ef:26:7a:77:c6:41:91:92: 62:02:33:3b:98:c7:57:97:cc:c3:bd:d5:7d:e7:ac: 46:16:11:09:92:88:63:06:84:7d:e6:65:04:56:96: 47:36:6b:88:a3:9b:75:b6:97:d8:a5:bc:a8:4a:c5: bd:5e:f9:30:c9:46:b4:26:66:a6:c8:6e:10:f8:03: 30:b3:3f:31:ec:98:cd:c4:d1:86:31:e7:a4:35:18: 9b:de:00:32:06:e0:bc:3a:de:16:9c:d3:1f:6c:34: c3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8E:83:A2:06:10:9E:DA:EC:9D:26:C8:75:74:4F:99:3A:4C:47:6B X509v3 Authority Key Identifier: keyid:96:CD:0A:69:70:D6:85:B0:CC:EA:34:24:E0:94:4E:84:05:0E:B7:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/ls0KaXDWhbDM6jQk4JROhAUOt-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ls0KaXDWhbDM6jQk4JROhAUOt-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/1D07036632DA11EBA1A7F93BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.52.28.0/22 Signature Algorithm: sha256WithRSAEncryption c8:cf:45:2c:36:7b:79:c7:74:3c:67:5c:ff:12:2b:f6:85:f7: ff:cb:2e:59:37:07:25:ee:9b:f4:d6:c4:cf:7a:df:b8:18:9f: 14:77:fc:82:c3:83:a3:8c:31:3c:02:a0:ba:71:45:87:b3:7e: ea:fe:82:98:dd:35:72:48:84:53:43:ba:77:c8:98:89:80:e9: e9:e2:e0:8d:5f:8e:0b:66:79:76:c3:c3:68:be:cc:64:50:51: 75:10:b9:d1:ac:a4:c3:a0:55:3e:66:44:85:d6:24:c6:1e:48: fc:54:89:a0:44:1b:49:04:d9:48:7e:92:a8:8d:16:b2:78:a9: ad:81:77:c3:2f:b6:8e:75:56:03:b5:f5:b4:35:54:ff:ba:fb: 82:13:09:8b:37:c4:a2:6a:44:c2:26:6c:45:c7:81:a9:4b:67: b1:84:09:91:4c:ea:95:bf:99:47:a5:b1:35:4a:d5:d9:5f:e1: db:29:93:a0:31:f4:98:f9:fb:b2:1e:65:f8:0b:d6:96:63:3c: 48:6f:b5:41:0a:62:fb:08:ab:54:28:15:f5:dd:4b:70:7a:aa: 8f:e4:a9:71:30:d0:e7:ec:7f:6c:cd:85:40:b9:72:d3:2a:9d: 08:38:d8:57:e7:21:fd:c4:0a:52:ed:ab:97:8d:7c:b3:2a:ae: 2a:eb:69:8a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDODcxMTAvBgNVBAUTKDk2Q0QwQTY5NzBENjg1QjBDQ0VBMzQyNEUwOTQ0RTg0 MDUwRUI3RUMwHhcNMjQwNDA0MTg1NjQ2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBlZjdlZS1mMzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkVO1G7rEnMo8fvppkGpAhoOhTE7nRI7+iAy+366g2l3hYx5ipYcx+6fP6HZ /oRzv+scMhJjtE94iyzr9c4a2tJ3fV1IdpTeeIejgzPF8TtE3xzRn2MJFXYHLKWb spIFax2ji4tOrxPUIQw6FIu4M6eV2zHSveaDOYegXo5YzN5O0TMfDVHybKIG5bzs tJ10V2fxUQvyRUZya3Eg7yZ6d8ZBkZJiAjM7mMdXl8zDvdV956xGFhEJkohjBoR9 5mUEVpZHNmuIo5t1tpfYpbyoSsW9XvkwyUa0JmamyG4Q+AMwsz8x7JjNxNGGMeek NRib3gAyBuC8Ot4WnNMfbDTDPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNqOg6IG EJ7a7J0myHV0T5k6TEdrMB8GA1UdIwQYMBaAFJbNCmlw1oWwzOo0JOCUToQFDrfs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0M4Ny84QjdDN0U3NjU3 NTIxMUU5ODA4RUNGMUJDNEY5QUUwMi9sczBLYVhEV2hiRE02alFrNEpST2hBVU90 LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xzMEthWERXaGJETTZqUWs0SlJPaEFVT3Qtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNDODcvOEI3QzdFNzY1NzUyMTFFOTgwOEVDRjFCQzRGOUFFMDIvMUQwNzAzNjYz MkRBMTFFQkExQTdGOTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnNBwwDQYJKoZIhvcNAQELBQADggEBAMjPRSw2e3nHdDxn XP8SK/aF9//LLlk3ByXum/TWxM9637gYnxR3/ILDg6OMMTwCoLpxRYezfur+gpjd NXJIhFNDunfImImA6eni4I1fjgtmeXbDw2i+zGRQUXUQudGspMOgVT5mRIXWJMYe SPxUiaBEG0kE2Uh+kqiNFrJ4qa2Bd8Mvto51VgO19bQ1VP+6+4ITCYs3xKJqRMIm bEXHgalLZ7GECZFM6pW/mUelsTVK1dlf4dspk6Ax9Jj5+7IeZfgL1pZjPEhvtUEK YvsIq1QoFfXdS3B6qo/kqXEw0Ofsf2zNhUC5ctMqnQg42FfnIf3EClLtq5eNfLMq rirraYo= -----END CERTIFICATE-----Generated at Fri May 31 19:47:52 2024 by rpki-client on console-fra.rpki-client.org