$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/C2B5BE908CAF11EBBADF6F60C4F9AE02.roa File: C2B5BE908CAF11EBBADF6F60C4F9AE02.roa (raw, json) Hash identifier: C/81jIV8YO4+/1jy8YhOC6SC1nH71ReSQpKzFpw53eU= Subject key identifier: E6:4E:F4:42:46:22:9A:DE:63:26:E8:E9:AD:83:8A:42:D9:0A:54:64 Certificate issuer: /CN=A91E4519/serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B Certificate serial: 056B Authority key identifier: A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/C2B5BE908CAF11EBBADF6F60C4F9AE02.roa Signing time: Thu 21 Mar 2024 00:22:45 +0000 ROA not before: Thu 21 Mar 2024 00:22:45 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142011 IP address blocks: 203.89.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1387 (0x56b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4519/serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B Validity Not Before: Mar 21 00:22:45 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=65fb7dd5-deb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:55:bf:12:99:b9:23:57:b3:fb:6c:d2:fd:2a: 49:a5:59:58:20:31:ba:65:63:9a:0c:02:40:28:25: a3:b8:8d:00:f8:e6:b9:67:c9:64:2f:25:ef:ed:8d: c7:2d:ae:f1:58:90:7f:68:4f:40:a8:72:05:71:b8: 97:4f:ef:fc:19:b7:65:af:95:78:af:b2:94:d5:1c: 37:f0:d3:66:af:f6:08:88:d2:b5:24:25:0a:f1:d9: 80:57:2e:dd:57:0a:cd:8b:39:6f:ee:57:c2:67:24: f2:0f:7c:cd:0c:50:2e:49:36:4e:80:c9:58:b0:26: 0b:51:cc:36:ac:16:67:33:d8:58:ea:7f:34:b1:f4: 6e:b2:8a:20:78:d7:fe:47:ec:46:ff:69:ac:c7:cb: cb:71:92:fc:5f:75:49:5b:e5:c7:81:00:d2:17:f3: ec:7d:7f:83:58:c5:f5:83:8d:7f:41:6b:60:a2:ba: b8:8b:07:82:2e:c6:de:e0:b6:db:30:7e:44:52:86: c4:5c:2b:f5:79:2b:31:6a:18:ee:72:8c:8c:5f:97: 52:ba:6e:57:ea:ca:ce:ce:e3:07:6a:f0:bb:b7:07: 13:71:61:ba:db:53:fb:8d:74:14:02:e3:b6:cf:5f: 7e:ae:6c:c0:86:16:e8:bc:b6:44:b9:8e:d4:40:2a: 9c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4E:F4:42:46:22:9A:DE:63:26:E8:E9:AD:83:8A:42:D9:0A:54:64 X509v3 Authority Key Identifier: keyid:A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/C2B5BE908CAF11EBBADF6F60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.89.151.0/24 Signature Algorithm: sha256WithRSAEncryption 08:47:18:41:0d:54:ad:f7:97:c0:a1:f3:39:cc:ad:5f:d0:1c: 3f:96:66:c9:77:5d:9a:27:2c:11:f8:47:11:fc:c7:c0:bc:9b: db:88:18:eb:1a:ed:51:0f:82:64:41:17:07:f4:3c:c4:3f:f7: 7b:a2:dd:49:e6:35:25:7d:18:e9:2c:a4:e9:43:bf:bd:8e:1e: c1:58:87:a7:48:ac:8e:89:76:e6:fb:a6:dd:ab:74:81:10:a0: fc:fc:19:a6:e8:4d:2c:6c:f3:5b:6b:00:2a:d5:66:8a:dc:d8: db:25:3c:12:64:1c:7c:4c:6b:e3:cd:53:3a:89:bc:1b:5b:91: 82:00:de:1e:82:7a:50:f5:2e:0c:23:63:cf:10:c1:07:69:8b: 19:8b:c9:9a:d1:75:d7:f2:84:80:7c:f8:d0:f0:4e:9c:9b:de: 8e:48:64:eb:5f:04:51:46:62:c6:be:e0:d6:ea:1f:48:eb:88: 5b:46:ef:99:19:14:bb:6b:fd:e8:06:40:99:00:13:bd:65:25: 2a:e0:37:9a:ee:ff:7b:f7:dd:2a:b0:cb:38:90:25:77:a0:c4: 9c:88:62:e6:b6:15:d4:35:1b:90:a5:af:d9:3c:f1:eb:7a:c1: 9f:ba:21:1b:73:eb:df:79:df:c0:7f:bd:75:b4:f1:46:08:a3: c4:1e:0c:00 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ1MTkxMTAvBgNVBAUTKEE5QTc1NTU1RUQ3MDY3MkY3MUQ1MkY2NTkzQjkxQjQ0 MjBCQUE3MEIwHhcNMjQwMzIxMDAyMjQ1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWZiN2RkNS1kZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VW/Epm5I1ez+2zS/SpJpVlYIDG6ZWOaDAJAKCWjuI0A+Oa5Z8lkLyXv7Y3H La7xWJB/aE9AqHIFcbiXT+/8Gbdlr5V4r7KU1Rw38NNmr/YIiNK1JCUK8dmAVy7d VwrNizlv7lfCZyTyD3zNDFAuSTZOgMlYsCYLUcw2rBZnM9hY6n80sfRusoogeNf+ R+xG/2msx8vLcZL8X3VJW+XHgQDSF/PsfX+DWMX1g41/QWtgorq4iweCLsbe4Lbb MH5EUobEXCv1eSsxahjucoyMX5dSum5X6srOzuMHavC7twcTcWG621P7jXQUAuO2 z19+rmzAhhbovLZEuY7UQCqcFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOZO9EJG IpreYybo6a2DikLZClRkMB8GA1UdIwQYMBaAFKmnVVXtcGcvcdUvZZO5G0QguqcL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDUxOS8wNDI2NDkxRThD QUUxMUVCQUExQjFGNUVDNEY5QUUwMi9xYWRWVmUxd1p5OXgxUzlsazdrYlJDQzZw d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZFZWZTF3Wnk5eDFTOWxrN2tiUkNDNnB3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ1MTkvMDQyNjQ5MUU4Q0FFMTFFQkFBMUIxRjVFQzRGOUFFMDIvQzJCNUJFOTA4 Q0FGMTFFQkJBREY2RjYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLWZcwDQYJKoZIhvcNAQELBQADggEBAAhHGEENVK33l8Ch 8znMrV/QHD+WZsl3XZonLBH4RxH8x8C8m9uIGOsa7VEPgmRBFwf0PMQ/93ui3Unm NSV9GOkspOlDv72OHsFYh6dIrI6Jdub7pt2rdIEQoPz8GaboTSxs81trACrVZorc 2NslPBJkHHxMa+PNUzqJvBtbkYIA3h6CelD1LgwjY88QwQdpixmLyZrRddfyhIB8 +NDwTpyb3o5IZOtfBFFGYsa+4NbqH0jriFtG75kZFLtr/egGQJkAE71lJSrgN5ru /3v33SqwyziQJXegxJyIYua2FdQ1G5Clr9k88et6wZ+6IRtz699538B/vXW08UYI o8QeDAA= -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:32 2024 by rpki-client on console-ams.rpki-client.org