$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/190D1EDC32C411EB98F62F5FC4F9AE02.roa File: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (raw, json) Hash identifier: AP4fYyNrfah1AP8l/VpzoQ3VWxnS3AOViyzVl1GgzI0= Subject key identifier: BA:58:2D:B6:00:EC:4C:9B:78:48:61:95:76:F8:6B:9B:8E:EB:20:FA Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Certificate serial: 06CE Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/190D1EDC32C411EB98F62F5FC4F9AE02.roa Signing time: Mon 20 Nov 2023 22:50:26 +0000 ROA not before: Mon 20 Nov 2023 22:50:26 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 212705 IP address blocks: 103.157.110.0/23 maxlen: 24 2406:9dc0:70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Validity Not Before: Nov 20 22:50:26 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=655be2b2-00af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:38:b6:60:00:ab:3a:6f:52:5e:79:c1:ee:a9: 82:05:74:3f:75:a6:5b:ea:a3:d5:5d:2f:0a:f8:f3: a2:18:fb:39:6c:7b:a4:61:41:c5:6f:ae:26:e3:ae: 5f:53:3c:fa:27:c9:a7:7f:77:a4:94:29:0a:8b:4d: 85:44:b6:80:3d:34:d1:a3:21:0e:02:a8:0a:b7:21: e4:30:73:0f:ee:6f:9b:98:6b:d5:dd:86:b5:54:52: ae:66:82:2b:d0:6e:ca:06:fd:6b:17:db:b6:24:ed: b1:2c:56:2c:d6:80:87:10:e2:0b:f0:48:f9:f2:00: 2d:8b:de:44:d0:4a:4b:c0:c5:4a:d6:55:40:e5:a8: 57:3c:88:4b:b3:30:db:e5:89:c8:66:8e:ec:f7:99: cd:2c:90:4f:75:d0:8d:12:c5:6e:0d:6c:04:5c:4c: 93:b6:21:46:05:09:90:3a:42:c0:97:b4:2a:0c:54: d2:51:15:97:c9:6b:37:a8:f3:ee:ec:74:54:7b:85: 1f:91:66:e9:60:b2:ad:7b:6a:34:ac:92:ec:bb:e5: a5:42:71:c1:53:21:61:68:87:55:ff:16:f5:2d:1e: 51:6a:9e:0c:9d:4f:92:ce:f0:99:20:85:3b:73:96: b6:54:b0:52:c6:f0:2d:bb:a4:f7:4f:1e:a6:67:4a: 5f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:58:2D:B6:00:EC:4C:9B:78:48:61:95:76:F8:6B:9B:8E:EB:20:FA X509v3 Authority Key Identifier: keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/190D1EDC32C411EB98F62F5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.110.0/23 IPv6: 2406:9dc0:70::/44 Signature Algorithm: sha256WithRSAEncryption 95:5f:43:47:73:02:11:a4:4b:50:d0:9a:c6:42:4d:0c:1a:35: 8e:62:44:aa:5d:fc:a3:e3:97:12:c2:53:a7:2c:5b:fc:ab:e9: e7:1e:1d:a4:0a:e7:8c:e7:6c:39:45:75:32:b0:88:d9:29:aa: a8:8e:f6:b7:03:7a:fc:9d:e4:2f:7c:17:e6:e9:a9:4c:7c:da: d1:7d:25:a0:fb:28:69:d6:75:bd:53:06:56:4f:78:cc:20:d6: c6:ca:1a:eb:d6:a3:9b:5e:68:7b:e1:7e:9f:ba:fe:f1:d0:b6: 57:7f:46:37:b6:e4:02:5a:bc:16:9e:f7:b7:cb:98:87:53:e5: 16:54:1e:ab:36:c6:21:27:48:bd:a6:e4:3e:fa:c8:6f:92:0b: 31:c0:65:12:d3:aa:fd:62:13:43:7b:ba:5b:79:52:31:99:7a: 02:32:e0:1b:71:5d:47:42:08:ee:af:04:87:79:f9:e1:09:a4: b7:2f:31:3b:4b:39:5d:e5:a9:10:db:7f:2a:82:ea:9e:42:d5: f9:f5:3b:56:a5:3b:e1:31:53:da:d7:9d:07:c3:1a:23:1a:81: 8e:86:7c:52:df:d7:1e:93:c0:23:50:34:00:24:4b:24:54:de: 5b:b4:d0:83:9d:49:49:db:cf:d6:8b:5d:cf:88:67:45:22:c4: 9b:70:58:f8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3 NDRBQUY0ODAwHhcNMjMxMTIwMjI1MDI2WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTViZTJiMi0wMGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDi2YACrOm9SXnnB7qmCBXQ/daZb6qPVXS8K+POiGPs5bHukYUHFb64m465f Uzz6J8mnf3eklCkKi02FRLaAPTTRoyEOAqgKtyHkMHMP7m+bmGvV3Ya1VFKuZoIr 0G7KBv1rF9u2JO2xLFYs1oCHEOIL8Ej58gAti95E0EpLwMVK1lVA5ahXPIhLszDb 5YnIZo7s95nNLJBPddCNEsVuDWwEXEyTtiFGBQmQOkLAl7QqDFTSURWXyWs3qPPu 7HRUe4UfkWbpYLKte2o0rJLsu+WlQnHBUyFhaIdV/xb1LR5Rap4MnU+SzvCZIIU7 c5a2VLBSxvAtu6T3Tx6mZ0pfrwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLpYLbYA 7EybeEhhlXb4a5uO6yD6MB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYyNUYvMjJEOTFGNzIxMUNFMTFFQjhBRDA1QTJCQzRGOUFFMDIvMTkwRDFFREMz MkM0MTFFQjk4RjYyRjVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnW4wDwQCAAIwCQMHBCQGncAAcDANBgkqhkiG9w0BAQsF AAOCAQEAlV9DR3MCEaRLUNCaxkJNDBo1jmJEql38o+OXEsJTpyxb/Kvp5x4dpArn jOdsOUV1MrCI2SmqqI72twN6/J3kL3wX5umpTHza0X0loPsoadZ1vVMGVk94zCDW xsoa69ajm15oe+F+n7r+8dC2V39GN7bkAlq8Fp73t8uYh1PlFlQeqzbGISdIvabk PvrIb5ILMcBlEtOq/WITQ3u6W3lSMZl6AjLgG3FdR0II7q8Eh3n54Qmkty8xO0s5 XeWpENt/KoLqnkLV+fU7VqU74TFT2tedB8MaIxqBjoZ8Ut/XHpPAI1A0ACRLJFTe W7TQg51JSdvP1otdz4hnRSLEm3BY+A== -----END CERTIFICATE-----Generated at Tue May 7 01:58:27 2024 by rpki-client on console-fra.rpki-client.org