$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/4B31BDC4B76911ED8A503224C4F9AE02.roa File: 4B31BDC4B76911ED8A503224C4F9AE02.roa (raw, json) Hash identifier: sdPPzpmeuTxfNXX+Z4y10OZ5FdPq847kLyXykC/LAkQ= Subject key identifier: BD:62:6B:39:01:AD:13:8A:D6:C7:66:47:7D:1A:F4:5A:65:A6:30:73 Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 08D7 Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/4B31BDC4B76911ED8A503224C4F9AE02.roa Signing time: Sun 02 Jun 2024 22:28:34 +0000 ROA not before: Sun 02 Jun 2024 22:28:34 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 150001 IP address blocks: 103.151.60.0/24 maxlen: 24 2001:df3:ab80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 21:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2263 (0x8d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: Jun 2 22:28:34 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=665cf212-8db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:e0:4a:e6:8b:df:e3:44:38:d2:7c:0c:78: 75:cf:47:b5:06:39:3b:02:69:2b:5a:b0:03:f0:4c: f4:df:38:f9:03:e2:28:38:8d:b8:39:54:3e:68:ce: 08:e8:96:0e:2c:ff:24:d4:e3:3a:c6:24:5e:af:f3: 42:11:5d:5a:f4:98:58:f4:3f:d0:05:d2:42:38:54: d9:be:e2:cf:69:6c:2a:cc:7f:e8:04:01:d8:e6:e5: 75:df:1b:12:ad:36:67:4b:b5:2f:94:89:ef:5d:66: bb:a2:bc:ef:88:0c:ad:74:67:8a:24:eb:ac:cf:71: 88:9b:d0:b8:17:6e:fa:d2:a9:18:4e:9a:5f:5b:e2: c5:a1:94:9e:fa:fd:9a:30:d3:db:9e:70:07:9d:96: 74:ad:2c:32:a8:04:e2:81:f0:4a:d2:0c:13:e6:97: 51:9f:9d:4a:0c:a0:8d:ce:9a:98:23:53:5c:6d:3d: a1:9f:0f:4f:fb:ca:9c:7b:2b:19:2e:43:93:45:59: 03:cc:c2:8f:cf:8d:41:7d:30:dd:aa:b9:2d:a4:f0: dd:5d:e2:ad:32:f1:00:bc:fc:79:f0:b3:c5:d1:1d: d2:cc:65:1d:8b:0a:4e:be:a6:3c:eb:33:db:62:77: 29:32:6b:cc:95:77:02:92:9b:38:5a:26:cc:0a:92: 37:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:62:6B:39:01:AD:13:8A:D6:C7:66:47:7D:1A:F4:5A:65:A6:30:73 X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/4B31BDC4B76911ED8A503224C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.60.0/24 IPv6: 2001:df3:ab80::/48 Signature Algorithm: sha256WithRSAEncryption 9f:45:56:da:4c:39:56:a8:c9:86:e1:5a:2a:6a:e5:01:58:3c: a1:9b:c5:6a:17:59:16:44:6f:3e:02:02:c5:68:7f:94:b2:98: db:1d:ed:43:4a:bb:c2:cd:f5:19:69:3d:bc:fd:ac:3f:fa:41: 34:7b:01:2f:12:f6:6c:9e:a0:29:e0:ef:b5:8a:6b:2b:83:47: 48:a0:51:84:a5:5a:b0:9d:b8:89:46:19:12:0e:7c:9c:51:1c: d9:b8:40:b0:6b:53:5c:f9:9c:b6:7e:32:0b:a4:11:ab:e7:cd: db:60:e3:e3:0b:94:65:03:ca:ec:42:88:43:89:d7:6a:e0:e1: 97:76:20:1f:68:a7:8d:05:b6:ae:6c:71:b1:01:49:f2:34:23: 25:58:fc:56:ce:43:0f:4e:1b:ed:32:e5:53:0b:af:18:16:ac: a7:e7:1b:9c:b3:64:c4:07:63:3b:33:ab:d5:ca:fe:f0:f5:df: 8c:35:8b:dc:34:73:3c:c1:2d:f5:72:96:75:b0:41:aa:7e:50: 7a:b7:07:3f:51:e2:6c:bd:eb:3c:8d:3d:d0:0e:02:b8:89:c5: 10:c7:8c:8f:32:e3:99:e6:a7:61:53:c3:4a:b4:24:99:d5:6b: 9b:47:52:36:4e:79:80:f5:86:56:05:ed:63:30:86:c5:c4:86: f5:33:99:2a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjQwNjAyMjIyODM0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVjZjIxMi04ZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArubgSuaL3+NEONJ8DHh1z0e1Bjk7AmkrWrAD8Ez03zj5A+IoOI24OVQ+aM4I 6JYOLP8k1OM6xiRer/NCEV1a9JhY9D/QBdJCOFTZvuLPaWwqzH/oBAHY5uV13xsS rTZnS7UvlInvXWa7orzviAytdGeKJOusz3GIm9C4F2760qkYTppfW+LFoZSe+v2a MNPbnnAHnZZ0rSwyqATigfBK0gwT5pdRn51KDKCNzpqYI1NcbT2hnw9P+8qceysZ LkOTRVkDzMKPz41BfTDdqrktpPDdXeKtMvEAvPx58LPF0R3SzGUdiwpOvqY86zPb YncpMmvMlXcCkps4WibMCpI3qQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFL1iazkB rROK1sdmR30a9FplpjBzMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVDNzAvMjNBMEFDMDY5MTA3MTFFQUEzRTkzQTVCQzRGOUFFMDIvNEIzMUJEQzRC NzY5MTFFRDhBNTAzMjI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnlzwwDwQCAAIwCQMHACABDfOrgDANBgkqhkiG9w0BAQsF AAOCAQEAn0VW2kw5VqjJhuFaKmrlAVg8oZvFahdZFkRvPgICxWh/lLKY2x3tQ0q7 ws31GWk9vP2sP/pBNHsBLxL2bJ6gKeDvtYprK4NHSKBRhKVasJ24iUYZEg58nFEc 2bhAsGtTXPmctn4yC6QRq+fN22Dj4wuUZQPK7EKIQ4nXauDhl3YgH2injQW2rmxx sQFJ8jQjJVj8Vs5DD04b7TLlUwuvGBasp+cbnLNkxAdjOzOr1cr+8PXfjDWL3DRz PMEt9XKWdbBBqn5QercHP1HibL3rPI090A4CuInFEMeMjzLjmeanYVPDSrQkmdVr m0dSNk55gPWGVgXtYzCGxcSG9TOZKg== -----END CERTIFICATE-----Generated at Fri Jun 7 00:12:12 2024 by rpki-client on console-ams.rpki-client.org