$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/D2039A56AABC11EEA0370F2CC4F9AE02.roa File: D2039A56AABC11EEA0370F2CC4F9AE02.roa (raw, json) Hash identifier: VBL/pWjSZruqbOnj4eXPfqiKP7kfMTk1OKEQBDDqoHM= Subject key identifier: 1F:21:13:9C:92:AB:9E:42:0B:3C:5E:52:B0:07:E1:03:17:D3:99:0F Certificate issuer: /CN=A91CAFC4/serialNumber=6F13F551009F248A6D987436004E85795156927B Certificate serial: 07F4 Authority key identifier: 6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/D2039A56AABC11EEA0370F2CC4F9AE02.roa Signing time: Thu 04 Jan 2024 04:50:45 +0000 ROA not before: Thu 04 Jan 2024 04:50:45 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 55342 IP address blocks: 103.157.184.0/23 maxlen: 23 2406:2940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.crl rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 22:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAFC4/serialNumber=6F13F551009F248A6D987436004E85795156927B Validity Not Before: Jan 4 04:50:45 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65963925-9f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:07:ad:58:9b:13:26:39:a8:40:b6:d5:16:8b: 1c:51:09:30:78:80:9e:28:c9:55:82:ca:6b:2c:58: c3:a2:6e:d1:ab:0c:4b:2d:a0:51:11:8c:fb:7d:de: 07:09:be:ba:3a:42:d1:16:5f:f2:32:51:5f:6c:7b: b5:eb:1b:42:70:66:36:cc:e4:ec:c4:61:7b:ab:61: 28:6b:3d:17:28:1a:2d:06:25:fd:02:8d:e4:58:0d: 0d:42:d9:85:28:0d:ea:aa:0a:ea:f7:2f:7e:ee:f3: b5:63:e8:75:68:05:5b:c1:1b:5d:83:9d:4b:af:74: 68:6e:e1:44:8b:85:e6:ee:b3:8a:26:99:9b:d1:a6: 03:95:1b:c4:7b:19:9d:b3:7e:7c:0d:f6:d9:ee:1e: b0:6a:32:8e:a6:1a:8f:3a:14:f0:de:08:52:e5:d8: 91:ae:99:61:f0:28:66:c0:43:2e:94:46:d8:5b:96: 8f:fc:81:63:53:61:47:33:0d:60:4d:6e:26:77:5d: 76:e9:7f:b6:fe:f4:45:ae:cf:6c:9b:1c:bb:d2:88: 7f:53:9c:cf:9c:c1:7e:40:0f:a9:54:1a:7d:c9:cc: a2:32:c8:9d:ba:c2:d4:cb:96:5d:99:ea:9c:3a:b9: 92:24:69:ec:25:8d:94:e2:16:70:d5:86:7f:cc:b8: 28:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:21:13:9C:92:AB:9E:42:0B:3C:5E:52:B0:07:E1:03:17:D3:99:0F X509v3 Authority Key Identifier: keyid:6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/D2039A56AABC11EEA0370F2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.184.0/23 IPv6: 2406:2940::/32 Signature Algorithm: sha256WithRSAEncryption 16:2e:8f:cb:5f:ea:7e:e7:9a:ab:01:8c:e5:07:98:01:9e:19: f5:62:a7:4f:46:93:d5:f7:ed:2e:0d:ca:81:82:f2:da:12:20: 28:3a:93:cd:a7:9e:8b:60:72:7c:cd:65:e5:f7:36:30:c7:08: 1d:bc:dc:79:21:c7:77:0d:36:9f:f1:52:db:33:3a:03:89:5e: b4:78:f6:4d:6d:91:f8:23:70:4d:0c:00:3d:63:94:92:3e:88: c6:28:72:4f:48:55:53:e5:e4:15:ce:f9:87:ac:c9:d1:b6:74: db:c6:4b:f8:f3:a9:f0:d3:1f:70:81:50:16:b9:bd:fd:22:10: bf:fc:84:3e:fe:91:e1:53:18:36:58:2c:f9:92:bf:a5:5f:35: 88:00:97:80:9d:3a:78:73:30:e9:7b:22:68:24:af:03:5b:48: ed:0d:7f:15:d1:80:cc:96:b7:21:fb:a7:ad:83:c4:27:47:f0: c6:ae:f3:65:37:2d:a8:09:a8:b1:6e:de:46:57:82:d7:43:13: 2a:f9:e6:25:7c:80:b6:e7:a8:28:ed:05:69:91:52:5d:6b:47: 1b:50:2d:4c:8e:09:fc:a0:31:ec:b5:32:0a:78:da:50:cd:62: e1:99:c2:48:0e:c8:fb:f0:28:0d:49:68:5b:ea:b5:d4:3d:6d: 68:b3:33:f8 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FGQzQxMTAvBgNVBAUTKDZGMTNGNTUxMDA5RjI0OEE2RDk4NzQzNjAwNEU4NTc5 NTE1NjkyN0IwHhcNMjQwMTA0MDQ1MDQ1WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk2MzkyNS05ZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3getWJsTJjmoQLbVFoscUQkweICeKMlVgsprLFjDom7RqwxLLaBREYz7fd4H Cb66OkLRFl/yMlFfbHu16xtCcGY2zOTsxGF7q2Eoaz0XKBotBiX9Ao3kWA0NQtmF KA3qqgrq9y9+7vO1Y+h1aAVbwRtdg51Lr3RobuFEi4Xm7rOKJpmb0aYDlRvEexmd s358DfbZ7h6wajKOphqPOhTw3ghS5diRrplh8ChmwEMulEbYW5aP/IFjU2FHMw1g TW4md1126X+2/vRFrs9smxy70oh/U5zPnMF+QA+pVBp9ycyiMsidusLUy5Zdmeqc OrmSJGnsJY2U4hZw1YZ/zLgoAwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFB8hE5yS q55CCzxeUrAH4QMX05kPMB8GA1UdIwQYMBaAFG8T9VEAnySKbZh0NgBOhXlRVpJ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUZDNC9CQzYwNjJEQ0FG OEExMUVBODU0MkQ4NUZDNEY5QUUwMi9ieFAxVVFDZkpJcHRtSFEyQUU2RmVWRldr bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J4UDFVUUNmSklwdG1IUTJBRTZGZVZGV2tucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0FGQzQvQkM2MDYyRENBRjhBMTFFQTg1NDJEODVGQzRGOUFFMDIvRDIwMzlBNTZB QUJDMTFFRUEwMzcwRjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnnbgwDQQCAAIwBwMFACQGKUAwDQYJKoZIhvcNAQELBQAD ggEBABYuj8tf6n7nmqsBjOUHmAGeGfVip09Gk9X37S4NyoGC8toSICg6k82nnotg cnzNZeX3NjDHCB283Hkhx3cNNp/xUtszOgOJXrR49k1tkfgjcE0MAD1jlJI+iMYo ck9IVVPl5BXO+YesydG2dNvGS/jzqfDTH3CBUBa5vf0iEL/8hD7+keFTGDZYLPmS v6VfNYgAl4CdOnhzMOl7ImgkrwNbSO0NfxXRgMyWtyH7p62DxCdH8Mau82U3LagJ qLFu3kZXgtdDEyr55iV8gLbnqCjtBWmRUl1rRxtQLUyOCfygMey1Mgp42lDNYuGZ wkgOyPvwKA1JaFvqtdQ9bWizM/g= -----END CERTIFICATE-----Generated at Fri Jun 7 00:12:14 2024 by rpki-client on console-ams.rpki-client.org