$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/28FC424AA93711EE91871F0AC4F9AE02.roa File: 28FC424AA93711EE91871F0AC4F9AE02.roa (raw, json) Hash identifier: 2X+WOgpHMrKXs0CiqTEW+0YLL/pb1sWO5U1YYZhG6bU= Subject key identifier: 51:76:9E:55:F2:25:3F:18:D9:F0:6C:FB:43:A7:BA:08:BF:DA:46:63 Certificate issuer: /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Certificate serial: 05 Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/28FC424AA93711EE91871F0AC4F9AE02.roa Signing time: Tue 02 Jan 2024 06:21:27 +0000 ROA not before: Tue 02 Jan 2024 06:21:27 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 151983 IP address blocks: 103.253.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Validity Not Before: Jan 2 06:21:27 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6593ab67-36e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1d:ae:cb:8e:cd:d3:b8:a4:44:f6:85:cf:2a: ab:5a:b1:ae:23:2b:d9:e6:7c:54:75:b5:ef:da:9f: 65:68:17:5e:81:95:bc:41:1b:79:30:60:d4:9f:7d: 1d:34:c9:f0:a3:48:39:f8:8e:24:16:79:b5:ad:59: 8d:e5:fb:f7:76:f7:95:c7:30:2e:1b:d0:48:ff:3d: 96:5e:93:b4:ef:6c:2b:be:d3:ca:e3:37:29:91:d7: f8:48:d7:cb:a5:fa:13:c5:df:70:79:8e:d0:a7:03: 52:0f:b0:86:d2:2a:11:50:d8:4f:bb:05:02:88:49: ec:dd:ae:da:a3:2d:11:77:6f:d9:7c:35:9d:3a:df: 00:bd:4e:1b:c3:e3:d0:e4:4b:db:41:99:07:b1:a0: 0f:74:c2:af:45:dd:41:84:fc:02:26:fe:fa:f0:99: b7:4b:25:ae:07:28:45:cd:6e:f6:a0:17:8a:27:d1: 44:87:ba:b5:e5:88:e4:3e:bb:e8:31:3b:df:18:7b: e5:91:e9:cf:8a:d1:04:37:b7:ca:62:c3:97:47:66: 87:cb:95:a8:3b:98:aa:91:0f:e1:3b:8f:c1:45:95: 97:ec:ac:67:02:3a:b4:53:06:b6:d4:91:d6:62:56: e1:a2:9e:ab:e7:ef:22:ec:0f:4c:ee:03:6a:40:e8: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:76:9E:55:F2:25:3F:18:D9:F0:6C:FB:43:A7:BA:08:BF:DA:46:63 X509v3 Authority Key Identifier: keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/28FC424AA93711EE91871F0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.253.18.0/23 Signature Algorithm: sha256WithRSAEncryption 89:bb:ac:a8:b1:7a:a3:da:76:45:9d:64:a2:30:6f:27:3f:a5: 87:2a:f7:ed:06:48:0e:ef:1c:fa:1b:1d:35:e0:4e:63:c2:13: db:a6:45:75:1c:ae:25:07:ad:aa:92:a3:76:23:1a:c2:ad:0f: 4b:9b:5d:ad:21:50:b2:cf:b3:4f:32:f3:b9:e1:4b:18:9c:26: 8a:2e:6e:c4:c7:89:b0:94:3f:59:6d:9b:19:42:4e:1e:b8:c2: 68:a3:cf:97:eb:61:c9:74:c8:e9:f4:60:62:d0:8f:81:e6:94: c9:30:58:d0:e9:a7:56:11:7a:21:cf:af:33:69:ce:e5:5c:1e: 1b:0e:7f:3c:17:26:2d:65:d1:cd:33:23:ea:d1:57:46:43:1b: 9c:71:03:02:58:fc:c1:5a:db:37:0c:ff:cb:2b:a9:e7:0a:08: 0c:55:7a:94:51:fa:9c:1e:af:82:06:0a:cc:06:38:15:dd:26: 8a:10:e0:86:4e:1b:11:ac:53:2c:e8:41:fd:c6:7f:c1:60:bc: 73:4b:b3:48:c4:bd:d9:9c:c3:e0:db:34:c2:e4:c1:da:80:ce: 5c:02:29:8f:fd:f1:fa:b2:39:97:c3:68:db:c9:da:a0:5e:f9: b8:d4:fa:9c:0c:6b:75:7f:ee:8b:64:31:d9:71:d4:65:df:7e: 85:ad:98:10 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTFENDExMC8GA1UEBRMoMkMyQzVDOUE3ODVGMkVBNzM0MDc5QzE0MEUzQTQ3MTlC Mzg2RDM4MzAeFw0yNDAxMDIwNjIxMjdaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1OTNhYjY3LTM2ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDHa7Ljs3TuKRE9oXPKqtasa4jK9nmfFR1te/an2VoF16BlbxBG3kwYNSffR00 yfCjSDn4jiQWebWtWY3l+/d295XHMC4b0Ej/PZZek7TvbCu+08rjNymR1/hI18ul +hPF33B5jtCnA1IPsIbSKhFQ2E+7BQKISezdrtqjLRF3b9l8NZ063wC9ThvD49Dk S9tBmQexoA90wq9F3UGE/AIm/vrwmbdLJa4HKEXNbvagF4on0USHurXliOQ+u+gx O98Ye+WR6c+K0QQ3t8piw5dHZofLlag7mKqRD+E7j8FFlZfsrGcCOrRTBrbUkdZi VuGinqvn7yLsD0zuA2pA6PafAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUUXaeVfIl PxjZ8Gz7Q6e6CL/aRmMwHwYDVR0jBBgwFoAULCxcmnhfLqc0B5wUDjpHGbOG04Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBMUQ0LzU1NDVFMjFDQTkz NjExRUU4ODRBQjE1OUM0RjlBRTAyL0xDeGNtbmhmTHFjMEI1d1VEanBIR2JPRzA0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTEN4Y21uaGZMcWMwQjV3VURqcEhHYk9HMDRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFENC81NTQ1RTIxQ0E5MzYxMUVFODg0QUIxNTlDNEY5QUUwMi8yOEZDNDI0QUE5 MzcxMUVFOTE4NzFGMEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWf9EjANBgkqhkiG9w0BAQsFAAOCAQEAibusqLF6o9p2RZ1k ojBvJz+lhyr37QZIDu8c+hsdNeBOY8IT26ZFdRyuJQetqpKjdiMawq0PS5tdrSFQ ss+zTzLzueFLGJwmii5uxMeJsJQ/WW2bGUJOHrjCaKPPl+thyXTI6fRgYtCPgeaU yTBY0OmnVhF6Ic+vM2nO5VweGw5/PBcmLWXRzTMj6tFXRkMbnHEDAlj8wVrbNwz/ yyup5woIDFV6lFH6nB6vggYKzAY4Fd0mihDghk4bEaxTLOhB/cZ/wWC8c0uzSMS9 2ZzD4Ns0wuTB2oDOXAIpj/3x+rI5l8No28naoF75uNT6nAxrdX/ui2Qx2XHUZd9+ ha2YEA== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:31 2024 by rpki-client on console-ams.rpki-client.org