$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/6C89F05A2B8F11EE8BCDDC6CC4F9AE02.roa File: 6C89F05A2B8F11EE8BCDDC6CC4F9AE02.roa (raw, json) Hash identifier: K1RWcCLEGDrDNc6x1Bn06vdSsg9FOSkJcIRgTGwUnlg= Subject key identifier: 32:28:59:1C:C5:15:6E:50:E3:55:48:C3:B8:6B:33:CC:8F:D9:1D:F8 Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 11 Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/6C89F05A2B8F11EE8BCDDC6CC4F9AE02.roa Signing time: Mon 21 Aug 2023 08:55:28 +0000 ROA not before: Mon 21 Aug 2023 08:55:28 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 151489 IP address blocks: 103.233.176.0/24 maxlen: 24 103.233.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: Aug 21 08:55:28 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64e3267f-c593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:80:29:5e:51:a8:1d:9d:78:69:4d:ad:01:20: 9e:4b:2e:7f:4c:53:80:8f:37:d8:33:03:fe:5b:39: 22:1a:48:41:10:34:21:c9:e7:35:45:83:f2:2a:14: 8f:f9:c1:d9:fe:1a:4f:73:46:a2:47:8b:cc:3d:6a: c6:f2:42:17:65:cf:57:74:cc:a7:fc:47:0e:b4:c4: 92:3e:3d:4e:3b:45:d5:39:f1:97:e0:f7:2c:56:1c: 20:e3:54:1c:78:21:6a:ef:36:29:b9:d6:66:8f:c0: 37:7f:4c:11:2c:cd:66:89:81:ea:a7:43:02:de:1a: 55:c0:cf:5d:03:c9:24:ad:f3:f0:d3:ba:d7:33:4f: 35:17:84:e6:64:98:be:63:20:1b:f6:20:33:04:a5: 48:f5:a1:04:61:12:c3:b7:26:4f:3a:c9:8f:0a:56: 64:9d:85:73:d1:b0:81:98:a9:2d:a2:2f:23:b7:c2: 34:ac:f8:e8:96:f2:e5:7e:28:98:a0:34:1a:67:dc: b7:b8:bf:4a:c5:47:0d:80:f3:58:05:06:ed:08:61: 78:54:89:29:6d:c6:e4:ae:0a:09:1a:e5:ed:dd:a6: f5:86:b8:75:fa:a3:8d:ce:48:fc:e5:32:68:c7:8a: 04:23:a1:ef:dd:82:05:2f:81:05:9f:61:ae:7e:77: dc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:28:59:1C:C5:15:6E:50:E3:55:48:C3:B8:6B:33:CC:8F:D9:1D:F8 X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/6C89F05A2B8F11EE8BCDDC6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.233.176.0/23 Signature Algorithm: sha256WithRSAEncryption 65:9b:d2:fb:db:eb:cc:e5:d0:a3:62:ad:26:1b:97:e1:b1:f3: 0e:75:10:6c:df:25:1d:8d:65:53:00:e8:a3:29:1f:52:0d:5a: bd:5f:67:9c:2f:2a:c3:44:b1:fa:4d:0c:70:1a:45:0a:69:c3: db:44:99:7a:cb:b2:62:23:d9:db:48:04:72:35:ae:8c:d9:c8: 83:40:d2:2e:eb:d7:db:8d:48:da:89:b1:f0:14:f7:3e:8b:8b: 69:d5:7d:dd:a4:65:ac:46:f8:eb:74:95:c4:8d:ce:e6:4e:2c: 5e:36:88:1f:47:09:d6:25:37:de:24:5d:11:2b:8b:ac:0a:74: fc:3a:63:03:dd:23:b0:d2:b8:3d:33:88:e4:43:b9:d0:f5:87: 74:21:62:17:89:42:91:00:77:df:39:74:1f:9d:af:4c:08:fd: e5:e2:e4:27:cc:41:4e:81:3b:61:df:4f:8a:e2:4c:dd:3a:1d: fa:8f:f1:6f:fc:6d:83:cb:59:d5:c3:9b:55:55:c4:c3:dd:98: dc:33:5f:4a:16:c9:8f:61:d4:10:4e:73:98:b5:ce:a0:3d:6b: 12:8c:91:ca:7c:cb:bb:17:8c:c9:76:24:92:ef:da:39:30:2b: ed:61:45:4e:c8:17:b5:6c:7d:a4:94:8f:43:79:82:b0:b4:a3: e9:b4:44:34 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUM4NDExMC8GA1UEBRMoMkZFNkNDMEI5QTlEOTU1RTNFMkM1OUQ1RDlGOEVFOTE5 NzE4MDA2RjAeFw0yMzA4MjEwODU1MjhaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0ZTMyNjdmLWM1OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5gCleUagdnXhpTa0BIJ5LLn9MU4CPN9gzA/5bOSIaSEEQNCHJ5zVFg/IqFI/5 wdn+Gk9zRqJHi8w9asbyQhdlz1d0zKf8Rw60xJI+PU47RdU58Zfg9yxWHCDjVBx4 IWrvNim51maPwDd/TBEszWaJgeqnQwLeGlXAz10DySSt8/DTutczTzUXhOZkmL5j IBv2IDMEpUj1oQRhEsO3Jk86yY8KVmSdhXPRsIGYqS2iLyO3wjSs+OiW8uV+KJig NBpn3Le4v0rFRw2A81gFBu0IYXhUiSltxuSuCgka5e3dpvWGuHX6o43OSPzlMmjH igQjoe/dggUvgQWfYa5+d9w1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUMihZHMUV blDjVUjDuGszzI/ZHfgwHwYDVR0jBBgwFoAUL+bMC5qdlV4+LFnV2fjukZcYAG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQzg0L0RENUM5RUJDMkI4 NjExRUVBNjlGNEIxN0M0RjlBRTAyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTC1iTUM1cWRsVjQtTEZuVjJmanVrWmNZQUc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi82Qzg5RjA1QTJC OEYxMUVFOEJDRERDNkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWfpsDANBgkqhkiG9w0BAQsFAAOCAQEAZZvS+9vrzOXQo2Kt JhuX4bHzDnUQbN8lHY1lUwDooykfUg1avV9nnC8qw0Sx+k0McBpFCmnD20SZesuy YiPZ20gEcjWujNnIg0DSLuvX241I2omx8BT3PouLadV93aRlrEb463SVxI3O5k4s XjaIH0cJ1iU33iRdESuLrAp0/DpjA90jsNK4PTOI5EO50PWHdCFiF4lCkQB33zl0 H52vTAj95eLkJ8xBToE7Yd9PiuJM3Tod+o/xb/xtg8tZ1cObVVXEw92Y3DNfShbJ j2HUEE5zmLXOoD1rEoyRynzLuxeMyXYkku/aOTAr7WFFTsgXtWx9pJSPQ3mCsLSj 6bRENA== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:37 2024 by rpki-client on console-ams.rpki-client.org