$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/9412C93EDC6F11EABFEF2548C4F9AE02.roa File: 9412C93EDC6F11EABFEF2548C4F9AE02.roa (raw, json) Hash identifier: PmB16e5tnD3/IO2PrbsAz/bbTN7MoZTnyBsdpODDg0s= Subject key identifier: E0:8C:31:B1:BD:5F:4D:EE:FD:B5:5E:89:5C:5F:CF:FB:26:35:E0:62 Certificate issuer: /CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423 Certificate serial: 069F Authority key identifier: FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/9412C93EDC6F11EABFEF2548C4F9AE02.roa Signing time: Fri 02 Jun 2023 21:02:20 +0000 ROA not before: Fri 02 Jun 2023 21:02:20 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 135356 IP address blocks: 103.215.2.0/24 maxlen: 24 2404:ce80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423 Validity Not Before: Jun 2 21:02:20 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=647a58db-8908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0a:8a:a9:03:50:7b:af:f6:da:d9:4b:a1:25: 54:35:d1:03:44:cd:c9:f4:9a:1e:da:b3:22:39:27: 48:70:84:f9:6b:58:d5:2d:29:38:46:1f:f9:f6:ed: 3b:01:54:54:a6:fa:4d:93:b5:4c:15:61:36:5b:68: c6:ce:7f:b1:71:64:df:fa:b9:3f:7b:ad:d7:94:d5: f5:ea:45:86:3b:ce:9c:ac:ee:11:42:49:3f:b9:fc: 2c:ea:5c:65:13:88:b6:54:c0:da:1d:9a:b3:ee:17: 60:5d:2d:1e:e4:2a:7c:66:9b:52:40:67:34:ca:28: 13:21:9b:dc:84:54:4a:42:eb:5e:ec:82:f4:81:67: fb:02:44:dd:ba:43:58:f6:b1:58:03:5b:d7:37:7a: f6:16:6b:b7:5b:d9:87:c8:67:fd:67:56:9d:9b:c4: 11:d9:b0:8a:91:37:7c:60:41:5f:cc:72:20:1f:7a: 13:fa:42:a5:5d:70:68:ba:d9:c2:fd:8f:4e:4b:63: 49:81:c1:8c:ab:48:51:6c:33:d0:20:78:33:38:65: 46:c7:df:87:88:c7:96:0c:eb:5c:ef:d2:de:b0:e0: f3:8d:21:51:7a:a3:a8:f8:56:24:e0:02:7d:20:e4: b9:0a:00:60:e3:81:ff:bd:be:4e:fb:88:d1:82:f4: 57:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8C:31:B1:BD:5F:4D:EE:FD:B5:5E:89:5C:5F:CF:FB:26:35:E0:62 X509v3 Authority Key Identifier: keyid:FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/9412C93EDC6F11EABFEF2548C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.215.2.0/24 IPv6: 2404:ce80::/32 Signature Algorithm: sha256WithRSAEncryption 44:45:f6:7d:69:9d:b9:ab:43:30:9d:35:d6:b6:ea:6f:83:55: 6f:44:79:b6:61:9b:14:58:b2:fc:c0:67:0a:69:f6:1f:80:69: 06:f6:aa:ec:0d:b6:e5:1a:f9:f1:13:25:a9:7d:56:75:a8:4c: ca:dd:b7:c8:47:a9:aa:8f:f9:47:9d:a0:e5:9e:3f:e0:0e:61: 6f:bf:66:65:4d:c0:e2:cc:d3:01:bd:6a:87:33:7c:41:8e:c8: be:8d:59:9b:ec:e7:22:ae:a0:8f:fe:72:38:bc:89:e3:4b:6f: 46:d7:10:ce:66:af:40:7c:a0:f3:11:17:b9:58:37:5c:e0:02: 73:17:06:65:ab:bb:39:f4:b6:13:5d:c8:36:df:4d:25:96:a3: fa:32:ca:f5:90:3a:4e:89:1d:08:f9:6c:fc:6a:0c:64:a0:b2: 13:90:3f:d4:9b:b9:92:39:27:81:36:3c:72:db:51:74:7a:a5: cc:ee:23:3f:ec:41:8f:a3:cc:d4:a7:de:94:75:93:12:2d:7a: 44:61:6d:53:72:7f:ed:77:bd:7f:0d:21:0e:47:6f:60:a2:cb: c6:9c:32:0a:a3:8c:0b:20:e8:51:13:5c:22:e7:85:2d:75:0e: 00:61:3b:f3:59:34:d6:a1:70:a7:c5:bd:7c:6f:cb:c2:73:11: 5a:47:24:36 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKEZEMjVCQTk2MTEwMUI1Q0U2MDE0OTkzQ0U3NDg4RkRC NkYwOEE0MjMwHhcNMjMwNjAyMjEwMjIwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhNThkYi04OTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygqKqQNQe6/22tlLoSVUNdEDRM3J9Joe2rMiOSdIcIT5a1jVLSk4Rh/59u07 AVRUpvpNk7VMFWE2W2jGzn+xcWTf+rk/e63XlNX16kWGO86crO4RQkk/ufws6lxl E4i2VMDaHZqz7hdgXS0e5Cp8ZptSQGc0yigTIZvchFRKQute7IL0gWf7AkTdukNY 9rFYA1vXN3r2Fmu3W9mHyGf9Z1adm8QR2bCKkTd8YEFfzHIgH3oT+kKlXXBoutnC /Y9OS2NJgcGMq0hRbDPQIHgzOGVGx9+HiMeWDOtc79LesODzjSFReqOo+FYk4AJ9 IOS5CgBg44H/vb5O+4jRgvRXCQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOCMMbG9 X03u/bVeiVxfz/smNeBiMB8GA1UdIwQYMBaAFP0lupYRAbXOYBSZPOdIj9tvCKQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9fU1c2bGhFQnRjNWdGSms4NTBpUDIyOElw Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19TVzZsaEVCdGM1Z0ZKazg1MGlQMjI4SXBDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBDRjQvOUFFOUE5MTIxRkE1MTFFQUJFOUQxNTc1QzRGOUFFMDIvOTQxMkM5M0VE QzZGMTFFQUJGRUYyNTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABn1wIwDQQCAAIwBwMFACQEzoAwDQYJKoZIhvcNAQELBQAD ggEBAERF9n1pnbmrQzCdNda26m+DVW9EebZhmxRYsvzAZwpp9h+AaQb2quwNtuUa +fETJal9VnWoTMrdt8hHqaqP+UedoOWeP+AOYW+/ZmVNwOLM0wG9aoczfEGOyL6N WZvs5yKuoI/+cji8ieNLb0bXEM5mr0B8oPMRF7lYN1zgAnMXBmWruzn0thNdyDbf TSWWo/oyyvWQOk6JHQj5bPxqDGSgshOQP9SbuZI5J4E2PHLbUXR6pczuIz/sQY+j zNSn3pR1kxItekRhbVNyf+13vX8NIQ5Hb2Ciy8acMgqjjAsg6FETXCLnhS11DgBh O/NZNNahcKfFvXxvy8JzEVpHJDY= -----END CERTIFICATE-----Generated at Fri May 31 22:13:12 2024 by rpki-client on console-fra.rpki-client.org