$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/D6702FB2C51411E7A0AC1A77C4F9AE02.roa File: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (raw, json) Hash identifier: cB5K4RAWWm6jyN967X4ARrcjpdGZ4aQCuC+1ziDpDCo= Subject key identifier: 5F:8B:0C:DB:1E:E5:35:15:98:09:D0:30:BE:E9:E4:3F:3E:DD:27:0E Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 1FA3 Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/D6702FB2C51411E7A0AC1A77C4F9AE02.roa Signing time: Sun 31 Mar 2024 16:53:45 +0000 ROA not before: Sun 31 Mar 2024 16:53:45 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 131310 IP address blocks: 103.246.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8099 (0x1fa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Mar 31 16:53:45 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66099519-6cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:a8:5d:d6:55:bb:2f:93:3c:fe:18:ea:ac: 40:3b:b5:08:73:fb:5b:a8:2d:fe:60:72:66:7d:7d: 6b:80:da:59:b7:7a:61:32:b0:c4:cc:68:bf:80:ad: 2e:b9:4e:f8:60:14:7e:48:e3:ce:ec:e7:f1:cd:5c: 8b:5c:fe:a7:71:06:cc:56:e4:4f:6c:7e:67:97:fd: f3:6e:4c:a0:89:5b:5f:46:24:1e:96:33:e7:44:d9: 90:a7:4d:84:73:18:b1:eb:4e:db:5a:59:c3:b8:50: 4e:35:84:58:7b:a4:20:b0:8b:b7:47:ec:27:2b:cd: ca:9a:65:48:df:37:64:10:f4:87:be:4e:af:29:62: a3:e8:08:22:81:9f:86:fe:79:5c:49:2a:ca:8c:1e: 83:35:1e:c1:35:1d:9f:11:30:ca:60:89:6b:19:e4: 06:20:b1:6b:c7:51:03:9f:f7:35:77:be:2d:89:bf: 21:8d:01:cf:60:0d:43:bc:eb:3e:9d:74:6f:95:d3: 7b:d8:28:28:43:53:ea:1b:03:e6:78:5a:fe:de:05: 8c:c1:9c:ce:50:2e:c4:fd:48:96:d3:ec:a2:ce:da: c5:08:a4:2f:c7:55:a9:99:a2:c4:b0:18:46:fc:1f: 00:30:b2:bc:2b:ad:a4:68:24:5b:e7:76:06:8f:8d: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8B:0C:DB:1E:E5:35:15:98:09:D0:30:BE:E9:E4:3F:3E:DD:27:0E X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/D6702FB2C51411E7A0AC1A77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.246.217.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:28:c0:41:cc:aa:2c:d0:67:a5:a2:89:1f:20:45:2c:19:1b: af:7d:fe:aa:84:80:2d:c3:65:bd:2c:40:d1:44:95:ac:3e:6b: 29:89:d3:9f:98:fc:82:0d:44:4a:b8:27:52:4b:cf:60:01:9f: 6d:76:62:38:0f:b6:a9:6b:bd:6d:0d:ce:70:18:96:28:64:3c: 7c:74:c8:a4:fb:1c:78:57:32:10:c9:11:da:0d:c1:5b:02:62: eb:95:0d:ed:cd:6e:f5:ba:70:ba:3f:67:b0:6d:9c:57:28:23: d6:d9:b2:a6:62:41:82:f4:b0:f5:6a:ea:8c:bc:4b:51:39:a4: 5a:6b:cc:c6:f6:fe:87:8e:6b:d2:9b:09:10:6f:b2:88:f0:7b: 2a:60:8a:10:4d:b1:65:ed:4b:03:d2:e9:42:b9:38:cb:7a:1a: 03:8a:94:8f:82:7c:70:f6:84:e0:a5:b1:6e:99:b5:99:bd:eb: 5e:f2:bd:e0:4b:6b:11:98:4d:3c:db:c2:aa:e1:da:7e:65:79: f0:e7:64:77:0a:1d:e8:3a:11:a3:c6:61:27:e9:06:d2:aa:0c: 71:ab:e1:c1:7c:b5:36:94:7c:e3:4d:8e:56:c1:64:ee:b6:d7: 98:db:ed:86:ba:34:57:cb:39:86:4a:ca:94:2b:8e:22:45:dd: ba:f3:f8:7b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICH6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjQwMzMxMTY1MzQ1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjA5OTUxOS02Y2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlC+oXdZVuy+TPP4Y6qxAO7UIc/tbqC3+YHJmfX1rgNpZt3phMrDEzGi/gK0u uU74YBR+SOPO7OfxzVyLXP6ncQbMVuRPbH5nl/3zbkygiVtfRiQeljPnRNmQp02E cxix607bWlnDuFBONYRYe6QgsIu3R+wnK83KmmVI3zdkEPSHvk6vKWKj6AgigZ+G /nlcSSrKjB6DNR7BNR2fETDKYIlrGeQGILFrx1EDn/c1d74tib8hjQHPYA1DvOs+ nXRvldN72CgoQ1PqGwPmeFr+3gWMwZzOUC7E/UiW0+yiztrFCKQvx1WpmaLEsBhG /B8AMLK8K62kaCRb53YGj43MrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF+LDNse 5TUVmAnQML7p5D8+3ScOMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjcyNEIvMUJDNzFBNjIxNjg5MTFFNjhFRUZEOTdCQzRGOUFFMDIvRDY3MDJGQjJD NTE0MTFFN0EwQUMxQTc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn9tkwDQYJKoZIhvcNAQELBQADggEBADsowEHMqizQZ6Wi iR8gRSwZG699/qqEgC3DZb0sQNFElaw+aymJ05+Y/IINREq4J1JLz2ABn212YjgP tqlrvW0NznAYlihkPHx0yKT7HHhXMhDJEdoNwVsCYuuVDe3NbvW6cLo/Z7BtnFco I9bZsqZiQYL0sPVq6oy8S1E5pFprzMb2/oeOa9KbCRBvsojweypgihBNsWXtSwPS 6UK5OMt6GgOKlI+CfHD2hOClsW6ZtZm9617yveBLaxGYTTzbwqrh2n5lefDnZHcK Heg6EaPGYSfpBtKqDHGr4cF8tTaUfONNjlbBZO6215jb7Ya6NFfLOYZKypQrjiJF 3brz+Hs= -----END CERTIFICATE-----Generated at Fri May 31 20:34:20 2024 by rpki-client on console-ams.rpki-client.org