$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa File: FFCE072E2B8111EE9BDEC079C4F9AE02.roa (raw, json) Hash identifier: l0x9ZxLZ+VcEP7mmB9rjnRLrE7UKBdJ97hD2a6m3BiA= Subject key identifier: A0:B0:6E:2D:7D:4F:BD:5F:E5:2E:0D:F7:D6:36:B6:6F:C0:05:3E:25 Certificate issuer: /CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88 Certificate serial: CF Authority key identifier: 56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa Signing time: Mon 03 Jun 2024 07:47:09 +0000 ROA not before: Mon 03 Jun 2024 07:47:09 +0000 ROA not after: Tue 01 Oct 2024 00:00:00 +0000 asID: 151480 IP address blocks: 103.243.100.0/23 maxlen: 23 202.53.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88 Validity Not Before: Jun 3 07:47:09 2024 GMT Not After : Oct 1 00:00:00 2024 GMT Subject: CN=665d74fc-9f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8c:8a:71:db:8f:d7:13:5b:e2:fd:80:06:0a: d9:e6:22:9d:c3:7f:36:8d:46:b9:fe:48:b5:05:67: 33:05:e7:73:c9:6c:2c:f8:84:1e:8d:c5:02:e0:ab: 15:3a:28:8e:f8:4b:38:87:70:2d:89:32:d8:0d:f0: aa:6d:73:1b:59:8c:96:ff:77:52:4d:05:e7:76:10: 6d:93:9c:61:dd:9a:fd:4f:4a:f2:6c:6b:d9:25:69: 9f:07:fc:7a:0d:29:19:50:72:30:78:72:f7:6e:6e: 37:91:09:72:50:9d:24:e2:56:b5:0c:70:89:fc:d0: 82:86:e3:bc:ce:03:20:01:6d:6e:70:6d:64:f3:ad: 05:ef:c7:95:f3:33:a9:90:5c:0d:af:d7:3c:7c:21: 77:76:37:76:aa:47:a5:d4:ca:54:f9:41:0c:a8:72: a7:aa:3e:8d:c5:15:b9:a7:29:39:2c:b7:21:cf:dc: 4b:2a:f0:36:72:35:69:d5:9d:26:d8:c3:68:fd:ab: 66:60:87:7c:8e:23:58:c9:10:47:7b:12:fe:55:c9: 4d:b8:d1:2a:d6:53:da:d5:48:89:55:06:24:5d:00: b9:de:ae:e1:96:20:56:e3:8f:23:ad:1e:1b:55:e5: bb:ee:c8:e5:0b:f9:ff:26:2a:e5:63:cc:d9:17:4d: 60:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B0:6E:2D:7D:4F:BD:5F:E5:2E:0D:F7:D6:36:B6:6F:C0:05:3E:25 X509v3 Authority Key Identifier: keyid:56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.100.0/23 202.53.0.0/22 Signature Algorithm: sha256WithRSAEncryption b6:a9:03:02:a2:fd:14:19:f6:a7:86:08:5e:b4:be:73:ff:44: 4b:f3:9c:36:33:10:ed:47:ea:de:01:97:39:5e:09:be:a8:49: cf:7a:07:89:e6:46:90:ee:6c:85:5b:8f:93:da:c1:68:3b:0e: b4:d5:8e:e8:44:62:c7:6a:9f:aa:01:7d:6b:59:95:db:61:db: 10:55:7f:31:36:f1:17:fa:c7:b3:a3:1f:c9:8d:42:32:d0:7e: 7e:56:ec:4d:9f:67:7d:31:ea:cc:ff:8f:e2:bb:f4:fa:a8:73: 5a:38:58:ba:e4:39:b6:d6:21:ad:47:3d:9c:7a:fe:ab:fc:ab: 0a:c4:47:2e:ab:ca:26:0a:0a:cc:2a:b0:d3:4c:aa:50:e5:c1: 13:83:64:9b:8a:88:af:86:e8:9d:f1:6c:f4:e5:ae:77:dc:9e: 37:d8:4f:51:de:3a:c0:a3:f5:7d:1f:0d:c2:a8:c9:73:21:28: d4:4d:75:1a:0c:4e:64:58:fd:b9:3a:b4:4e:58:c5:ab:f1:82: e7:c2:18:27:fc:53:5f:28:d0:45:09:5a:64:2e:e0:5f:8b:0d: de:0d:54:ed:cb:d0:45:09:e4:20:96:84:36:ad:f9:cb:dd:b2: 8f:6a:cb:74:d6:16:13:22:90:fb:0c:4c:97:25:6a:a8:a1:8e: fc:aa:76:88 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NEMxMTAvBgNVBAUTKDU2NkE2RjM0NDQwQUM5Mjk1RUQ4QTAwMkQ1MDQ5RjU3 NENGMTZDODgwHhcNMjQwNjAzMDc0NzA5WhcNMjQxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVkNzRmYy05ZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34yKcduP1xNb4v2ABgrZ5iKdw382jUa5/ki1BWczBedzyWws+IQejcUC4KsV OiiO+Es4h3AtiTLYDfCqbXMbWYyW/3dSTQXndhBtk5xh3Zr9T0rybGvZJWmfB/x6 DSkZUHIweHL3bm43kQlyUJ0k4la1DHCJ/NCChuO8zgMgAW1ucG1k860F78eV8zOp kFwNr9c8fCF3djd2qkel1MpU+UEMqHKnqj6NxRW5pyk5LLchz9xLKvA2cjVp1Z0m 2MNo/atmYId8jiNYyRBHexL+VclNuNEq1lPa1UiJVQYkXQC53q7hliBW448jrR4b VeW77sjlC/n/JirlY8zZF01giQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKCwbi19 T71f5S4N99Y2tm/ABT4lMB8GA1UdIwQYMBaAFFZqbzRECskpXtigAtUEn1dM8WyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY0Qy9FMUE1NDYyNkY3 OTgxMUVEOTY3NzcxMjRDNEY5QUUwMi9WbXB2TkVRS3lTbGUyS0FDMVFTZlYwenhi SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZtcHZORVFLeVNsZTJLQUMxUVNmVjB6eGJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE2NEMvRTFBNTQ2MjZGNzk4MTFFRDk2Nzc3MTI0QzRGOUFFMDIvRkZDRTA3MkUy QjgxMTFFRTlCREVDMDc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFn82QDBALKNQAwDQYJKoZIhvcNAQELBQADggEBALapAwKi /RQZ9qeGCF60vnP/REvznDYzEO1H6t4BlzleCb6oSc96B4nmRpDubIVbj5PawWg7 DrTVjuhEYsdqn6oBfWtZldth2xBVfzE28Rf6x7OjH8mNQjLQfn5W7E2fZ30x6sz/ j+K79Pqoc1o4WLrkObbWIa1HPZx6/qv8qwrERy6ryiYKCswqsNNMqlDlwRODZJuK iK+G6J3xbPTlrnfcnjfYT1HeOsCj9X0fDcKoyXMhKNRNdRoMTmRY/bk6tE5Yxavx gufCGCf8U18o0EUJWmQu4F+LDd4NVO3L0EUJ5CCWhDat+cvdso9qy3TWFhMikPsM TJclaqihjvyqdog= -----END CERTIFICATE-----Generated at Fri Jun 7 08:57:16 2024 by rpki-client on console-fra.rpki-client.org