$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/5153E9DAC0B911ED99A12312C4F9AE02.roa File: 5153E9DAC0B911ED99A12312C4F9AE02.roa (raw, json) Hash identifier: ref6zHJyO6Cb4soVAk7m/BReA9OEgBC4EsrwecqSoCo= Subject key identifier: 8E:A0:2E:64:52:D9:C2:11:52:10:21:A3:D3:74:AC:6E:EE:EB:BE:34 Certificate issuer: /CN=A91DEC3C/serialNumber=147A0E048711B62506B09F088A05992A3A31020A Certificate serial: 69 Authority key identifier: 14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/5153E9DAC0B911ED99A12312C4F9AE02.roa Signing time: Wed 27 Sep 2023 04:44:36 +0000 ROA not before: Wed 27 Sep 2023 04:44:36 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 135335 IP address blocks: 103.154.46.0/23 maxlen: 23 103.154.46.0/24 maxlen: 24 103.154.47.0/24 maxlen: 24 2001:df4:6780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC3C/serialNumber=147A0E048711B62506B09F088A05992A3A31020A Validity Not Before: Sep 27 04:44:36 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6513b334-a7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9b:33:3a:d8:95:91:8c:d1:df:0c:05:1b:11: 5b:07:54:ef:4d:fd:92:4c:aa:0c:9a:c7:03:15:e3: 52:9a:7a:2e:ff:77:77:5b:89:ca:45:d5:c4:ce:d0: 72:3a:12:ac:5a:4d:2f:59:94:7b:e1:c4:d6:de:93: 8f:ad:3c:b6:87:d9:ca:0e:58:99:69:f6:b4:f5:c5: 43:62:01:41:8d:91:ba:7e:09:e8:43:2d:05:27:0a: c5:df:ef:8d:ba:68:57:a9:4e:2a:31:da:1a:48:1b: cc:31:6b:8f:f6:44:fd:32:4a:4d:c5:c1:83:f2:77: 32:eb:e9:e4:1f:37:9e:82:8a:e2:82:6c:bd:78:4f: 4e:e2:cc:19:00:20:74:d4:57:e3:71:af:9d:e7:d4: c0:72:2f:16:cb:0c:a4:5d:18:b4:6b:0e:46:97:c1: 42:3c:e0:5f:f9:ea:02:ed:43:58:63:93:dc:df:7e: bb:e5:84:c9:15:c3:da:a4:11:7d:86:4b:15:e4:1e: af:86:eb:bd:ac:54:45:88:7c:17:04:cc:7e:0f:3c: ec:24:06:3f:13:df:1f:c3:bb:2b:b2:07:ae:7b:e4: e0:35:e1:a3:bd:d4:5d:ca:f2:3c:f5:b0:9d:60:53: 6f:72:6d:7e:10:b5:11:0c:58:4a:a9:85:43:18:ad: ca:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A0:2E:64:52:D9:C2:11:52:10:21:A3:D3:74:AC:6E:EE:EB:BE:34 X509v3 Authority Key Identifier: keyid:14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/5153E9DAC0B911ED99A12312C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.46.0/23 IPv6: 2001:df4:6780::/48 Signature Algorithm: sha256WithRSAEncryption 8f:fe:6f:b2:26:03:68:0d:b4:e2:b8:23:f9:b5:54:cc:3d:13: 8f:d4:c3:74:d4:ed:6c:be:2f:e1:cd:35:61:5a:22:8d:7f:bf: cb:7b:97:b3:b1:b6:c9:54:50:22:a3:46:30:da:03:37:90:7b: ab:e7:f1:2c:a9:c8:b7:96:85:24:60:f5:b4:5b:82:61:26:06: 8b:67:c3:64:8f:ad:b6:ca:35:61:ce:88:1a:79:7e:ed:6a:48: 3a:1c:c3:13:29:2d:42:b5:75:16:56:e3:29:85:36:5a:23:c7: 9c:8c:81:b5:d3:05:18:fc:71:15:c8:cd:35:6f:f8:f8:5c:04: b5:c3:3c:04:00:84:ca:f6:6a:de:4a:d0:a2:de:9a:fa:40:e9: 5d:9b:26:f2:86:d4:06:5f:b4:50:4f:8f:95:ae:3d:35:5e:76: 94:df:68:d8:4c:d4:0f:f0:e1:38:7d:62:a7:7c:6b:be:f3:ed: c3:ce:1c:db:15:ee:a3:75:4e:5d:0c:61:b8:c1:3e:84:d1:8f: 18:45:7b:80:2d:8e:73:90:27:0e:fc:07:de:70:0b:ba:76:de: 9b:f1:ae:ea:60:6b:b2:f1:b1:b7:ca:3f:f0:a8:3e:75:d3:f9: ac:ac:5e:9a:8a:e7:52:c4:51:63:47:98:ca:16:c5:e7:ba:01: f3:c5:1d:21 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUMzQzExMC8GA1UEBRMoMTQ3QTBFMDQ4NzExQjYyNTA2QjA5RjA4OEEwNTk5MkEz QTMxMDIwQTAeFw0yMzA5MjcwNDQ0MzZaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MTNiMzM0LWE3ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVmzM62JWRjNHfDAUbEVsHVO9N/ZJMqgyaxwMV41Kaei7/d3dbicpF1cTO0HI6 EqxaTS9ZlHvhxNbek4+tPLaH2coOWJlp9rT1xUNiAUGNkbp+CehDLQUnCsXf7426 aFepTiox2hpIG8wxa4/2RP0ySk3FwYPydzLr6eQfN56CiuKCbL14T07izBkAIHTU V+Nxr53n1MByLxbLDKRdGLRrDkaXwUI84F/56gLtQ1hjk9zffrvlhMkVw9qkEX2G SxXkHq+G672sVEWIfBcEzH4PPOwkBj8T3x/DuyuyB6575OA14aO91F3K8jz1sJ1g U29ybX4QtREMWEqphUMYrcorAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUjqAuZFLZ whFSECGj03Ssbu7rvjQwHwYDVR0jBBgwFoAUFHoOBIcRtiUGsJ8IigWZKjoxAgow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQzNDL0Y2MzA4MDk0QzBC NDExRURBNzdGNzAwRUM0RjlBRTAyL0ZIb09CSWNSdGlVR3NKOElpZ1daS2pveEFn by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRkhvT0JJY1J0aVVHc0o4SWlnV1pLam94QWdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMzQy9GNjMwODA5NEMwQjQxMUVEQTc3RjcwMEVDNEY5QUUwMi81MTUzRTlEQUMw QjkxMUVEOTlBMTIzMTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWeaLjAPBAIAAjAJAwcAIAEN9GeAMA0GCSqGSIb3DQEBCwUA A4IBAQCP/m+yJgNoDbTiuCP5tVTMPROP1MN01O1svi/hzTVhWiKNf7/Le5ezsbbJ VFAio0Yw2gM3kHur5/Esqci3loUkYPW0W4JhJgaLZ8Nkj622yjVhzogaeX7takg6 HMMTKS1CtXUWVuMphTZaI8ecjIG10wUY/HEVyM01b/j4XAS1wzwEAITK9mreStCi 3pr6QOldmybyhtQGX7RQT4+Vrj01XnaU32jYTNQP8OE4fWKnfGu+8+3DzhzbFe6j dU5dDGG4wT6E0Y8YRXuALY5zkCcO/AfecAu6dt6b8a7qYGuy8bG3yj/wqD510/ms rF6aiudSxFFjR5jKFsXnugHzxR0h -----END CERTIFICATE-----Generated at Thu Jun 13 06:58:58 2024 by rpki-client on console-fra.rpki-client.org