$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1E7F6B9603C211EEB2272068C4F9AE02.roa File: 1E7F6B9603C211EEB2272068C4F9AE02.roa (raw, json) Hash identifier: /NkHsi+HD36xg3F3z+E/an+GAt3cjkWAYoYG1NwlCDQ= Subject key identifier: 49:98:47:34:8B:78:69:0D:19:3B:B9:B3:1E:74:73:9F:AB:1E:3E:4A Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Certificate serial: 66 Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1E7F6B9603C211EEB2272068C4F9AE02.roa Signing time: Wed 29 Nov 2023 06:17:26 +0000 ROA not before: Wed 29 Nov 2023 06:17:26 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 137420 IP address blocks: 103.197.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Validity Not Before: Nov 29 06:17:26 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6566d776-bc4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:cf:83:05:b6:79:f6:54:87:9d:13:e7:d1: 6d:d9:1f:90:5d:db:19:b5:e8:7c:ab:09:d5:e1:c3: 8b:e2:00:11:3c:39:f9:28:78:c0:d6:80:02:eb:f7: 7e:25:32:1e:8a:64:e5:cb:0c:a8:bc:0a:78:76:c7: 9e:58:4c:9b:67:0e:65:d1:08:88:6d:db:23:fe:e0: a2:15:59:fa:aa:c4:5e:01:62:18:e5:c5:bd:da:6c: 3b:69:a9:94:c8:9b:47:b4:fe:2c:da:a6:e2:ec:e9: 6b:9e:2e:47:ca:a0:63:ff:dc:01:b2:ae:a7:44:7a: 96:21:06:a7:28:52:34:fb:3a:41:c6:f2:42:74:b2: 05:e1:2d:ef:9f:a2:4b:4a:b5:97:d5:17:26:62:37: 3c:15:42:90:02:a8:99:fa:de:0e:64:26:d8:95:d4: 39:ef:1f:5c:73:94:0b:88:21:8c:84:3a:bf:05:65: 17:8a:d3:e7:5b:41:6d:80:30:3f:d0:0e:e5:bd:08: e5:ed:fc:7e:d9:81:c0:4f:47:b0:2e:9b:cf:e4:e4: 39:2f:d6:cb:6d:58:0b:0e:0c:fd:f0:72:bc:3b:1f: ec:60:37:91:d0:27:bf:3b:88:dc:36:bf:6b:e0:21: 70:a5:ba:d0:e9:85:35:bb:f9:ea:ff:e6:55:b2:70: 5c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:98:47:34:8B:78:69:0D:19:3B:B9:B3:1E:74:73:9F:AB:1E:3E:4A X509v3 Authority Key Identifier: keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1E7F6B9603C211EEB2272068C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.202.0/23 Signature Algorithm: sha256WithRSAEncryption b6:a9:25:b0:58:59:01:45:af:84:3d:c8:a4:50:a9:c7:75:01: b8:48:c4:94:ba:69:45:3f:06:bd:35:d3:d7:7b:7d:66:8d:ee: 27:80:94:46:e5:a5:ba:3c:20:39:e8:ee:8a:2f:e6:4b:28:9d: 57:a3:a3:d4:85:67:a5:99:11:d5:9a:f3:38:62:02:bd:73:43: b5:50:e9:9a:c0:6c:4c:a6:3c:50:b6:10:22:b0:ba:ce:6b:77: cf:87:d3:92:f5:ff:3f:3d:81:1d:5a:2f:86:26:c9:2d:18:e3: c5:be:46:6b:9e:47:2b:f2:34:28:ec:de:df:45:13:4e:0b:a1: ee:87:60:52:8e:50:43:9c:1e:8c:bf:73:40:6e:40:b5:3a:6f: b3:53:64:0c:36:3d:2e:dd:95:ff:0a:c7:9e:6d:9e:0f:ce:c1: 0d:a9:43:58:af:78:bb:2b:3c:c6:12:da:65:48:cd:64:44:ce: d1:dc:ae:68:81:ba:5c:98:21:2c:96:aa:3c:5b:9d:5a:da:9d: f5:93:95:45:01:7a:3f:ef:28:1f:b2:69:38:da:b3:28:f1:e0: 81:9b:af:f4:d8:93:a6:85:23:df:43:74:be:d2:9a:c2:14:ff: 57:3e:63:0d:f3:d4:a0:a5:6c:6d:33:74:fb:c3:c2:bd:c7:2a: 7b:2e:8d:2c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTZBMTExMC8GA1UEBRMoQ0REN0NDNTk5NEUzNDA0RTZDMjNBRTk0MkE1OTIxOEI1 N0M1QzEzMTAeFw0yMzExMjkwNjE3MjZaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NjZkNzc2LWJjNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4Ts+DBbZ59lSHnRPn0W3ZH5Bd2xm16HyrCdXhw4viABE8OfkoeMDWgALr934l Mh6KZOXLDKi8Cnh2x55YTJtnDmXRCIht2yP+4KIVWfqqxF4BYhjlxb3abDtpqZTI m0e0/izapuLs6WueLkfKoGP/3AGyrqdEepYhBqcoUjT7OkHG8kJ0sgXhLe+foktK tZfVFyZiNzwVQpACqJn63g5kJtiV1DnvH1xzlAuIIYyEOr8FZReK0+dbQW2AMD/Q DuW9COXt/H7ZgcBPR7Aum8/k5Dkv1sttWAsODP3wcrw7H+xgN5HQJ787iNw2v2vg IXClutDphTW7+er/5lWycFyxAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUSZhHNIt4 aQ0ZO7mzHnRzn6sePkowHwYDVR0jBBgwFoAUzdfMWZTjQE5sI66UKlkhi1fFwTEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNkExLzMxNUI3RTA4RkY3 QjExRURBNjJERjEwRUM0RjlBRTAyL3pkZk1XWlRqUUU1c0k2NlVLbGtoaTFmRndU RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemRmTVdaVGpRRTVzSTY2VUtsa2hpMWZGd1RFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZBMS8zMTVCN0UwOEZGN0IxMUVEQTYyREYxMEVDNEY5QUUwMi8xRTdGNkI5NjAz QzIxMUVFQjIyNzIwNjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWfFyjANBgkqhkiG9w0BAQsFAAOCAQEAtqklsFhZAUWvhD3I pFCpx3UBuEjElLppRT8GvTXT13t9Zo3uJ4CURuWlujwgOejuii/mSyidV6Oj1IVn pZkR1ZrzOGICvXNDtVDpmsBsTKY8ULYQIrC6zmt3z4fTkvX/Pz2BHVovhibJLRjj xb5Ga55HK/I0KOze30UTTguh7odgUo5QQ5wejL9zQG5AtTpvs1NkDDY9Lt2V/wrH nm2eD87BDalDWK94uys8xhLaZUjNZETO0dyuaIG6XJghLJaqPFudWtqd9ZOVRQF6 P+8oH7JpONqzKPHggZuv9NiTpoUj30N0vtKawhT/Vz5jDfPUoKVsbTN0+8PCvccq ey6NLA== -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:38 2024 by rpki-client on console-fra.rpki-client.org