$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/91056478AF6A11EE93DDE73AC4F9AE02.roa File: 91056478AF6A11EE93DDE73AC4F9AE02.roa (raw, json) Hash identifier: W5uM4QWl7/kjuoUsTk27Qd3J9/dVP6EbOqHpeD+YgC4= Subject key identifier: 76:32:38:31:9A:AB:3A:56:B7:2F:C5:3E:94:0F:59:23:C2:C6:83:B1 Certificate issuer: /CN=A91FBA0C/serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E Certificate serial: 04 Authority key identifier: CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/91056478AF6A11EE93DDE73AC4F9AE02.roa Signing time: Wed 10 Jan 2024 03:44:33 +0000 ROA not before: Wed 10 Jan 2024 03:44:33 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 151806 IP address blocks: 103.218.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBA0C/serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E Validity Not Before: Jan 10 03:44:33 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=659e12a1-beed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:75:0f:25:e2:57:c0:60:94:7f:a9:08:33: 52:3b:2a:ee:48:ad:11:51:fa:93:5a:58:d6:7c:47: d5:1f:d2:4c:f8:21:3f:42:fc:55:eb:9d:1c:50:ca: e5:6e:a7:e0:df:b1:17:b2:ac:9b:4b:93:51:3c:4d: 7f:ff:1e:23:c4:21:32:fa:7b:3b:13:0f:8b:08:24: 1a:1a:00:6b:30:aa:cf:d2:91:d1:a9:14:a3:7c:30: e9:40:9d:f8:5f:27:ac:d1:1e:4b:28:d6:f3:36:43: 61:4a:39:ab:b9:c3:68:5c:5e:bc:a2:de:d5:5f:88: 33:e0:f7:c1:6e:a7:2f:38:96:71:fa:e3:0c:c2:99: 5c:fb:e3:99:ce:8d:1c:16:78:c0:b6:b2:e5:f5:b3: 8b:9d:0c:4b:f0:21:4a:40:ac:2e:59:e5:99:da:ac: a7:3b:aa:98:a9:d9:ad:22:bc:ca:ef:41:30:10:91: 2b:0e:07:4c:67:c3:30:8c:23:74:f0:2d:13:0a:31: cf:af:d9:dc:88:55:54:8d:7d:36:b8:d6:16:56:3b: 52:22:81:04:7e:46:0b:de:58:82:a0:b0:4a:81:7a: f2:a8:fb:77:a0:b7:08:34:bd:70:9b:32:c5:df:83: 0f:f8:5c:09:73:c3:90:27:85:18:2e:80:f2:3b:7c: de:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:32:38:31:9A:AB:3A:56:B7:2F:C5:3E:94:0F:59:23:C2:C6:83:B1 X509v3 Authority Key Identifier: keyid:CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/91056478AF6A11EE93DDE73AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.218.138.0/23 Signature Algorithm: sha256WithRSAEncryption 96:b1:b7:2b:56:ce:de:98:87:a6:28:22:a5:f7:7b:81:bc:84: 63:74:71:ba:1e:b3:79:80:46:57:e9:88:7b:70:4d:a5:f7:ad: 81:43:e9:a9:8f:1d:f8:55:e2:c8:80:6e:de:f8:36:60:52:c6: 16:97:0f:53:59:11:ce:95:15:97:2d:54:35:22:39:ec:90:a5: 8f:eb:6e:dc:b7:8d:df:f5:58:5a:f6:13:58:5b:17:65:70:af: c8:5b:1c:f4:f7:d0:6f:34:a0:b1:24:e3:bc:4a:fa:05:14:ad: 14:16:e7:14:55:98:48:98:1b:d7:8d:3f:4a:5a:2f:65:b1:a5: 40:28:12:b5:98:f5:a8:ce:84:49:ae:36:3c:c7:4c:3a:7e:f1: 8c:7d:34:77:5e:10:21:b1:65:4c:e3:82:33:63:68:7f:ba:81: 5f:f4:22:fa:32:ee:c3:ee:c7:26:fd:c1:36:a8:df:09:bf:43: 80:38:38:63:03:6c:7a:0a:10:a0:eb:32:44:29:93:d8:72:8b: 97:9b:44:df:a1:8b:d3:f0:5e:1f:46:d6:f0:81:02:ae:2c:78: 4d:29:f8:68:de:33:90:fc:2e:62:95:76:eb:eb:69:aa:15:9c: 51:d8:20:10:59:a6:4a:52:ad:b5:93:ad:a7:c7:3e:3d:ac:34: 2f:21:50:26 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkEwQzExMC8GA1UEBRMoQ0Q1Q0Q1OTA5MTNFNEY4OUFGM0QxQ0E2RTI5RkFCM0Mw NjdEMjE0RTAeFw0yNDAxMTAwMzQ0MzNaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1OWUxMmExLWJlZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiPXUPJeJXwGCUf6kIM1I7Ku5IrRFR+pNaWNZ8R9Uf0kz4IT9C/FXrnRxQyuVu p+DfsReyrJtLk1E8TX//HiPEITL6ezsTD4sIJBoaAGswqs/SkdGpFKN8MOlAnfhf J6zRHkso1vM2Q2FKOau5w2hcXryi3tVfiDPg98Fupy84lnH64wzCmVz745nOjRwW eMC2suX1s4udDEvwIUpArC5Z5ZnarKc7qpip2a0ivMrvQTAQkSsOB0xnwzCMI3Tw LRMKMc+v2dyIVVSNfTa41hZWO1IigQR+RgveWIKgsEqBevKo+3egtwg0vXCbMsXf gw/4XAlzw5AnhRgugPI7fN5TAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUdjI4MZqr Ola3L8U+lA9ZI8LGg7EwHwYDVR0jBBgwFoAUzVzVkJE+T4mvPRym4p+rPAZ9IU4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCQTBDLzQxNTMxQjBDQUVD RDExRUU4NkYxQjI0OUM0RjlBRTAyL3pWelZrSkUtVDRtdlBSeW00cC1yUEFaOUlV NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelZ6VmtKRS1UNG12UFJ5bTRwLXJQQVo5SVU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkEwQy80MTUzMUIwQ0FFQ0QxMUVFODZGMUIyNDlDNEY5QUUwMi85MTA1NjQ3OEFG NkExMUVFOTNEREU3M0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWfaijANBgkqhkiG9w0BAQsFAAOCAQEAlrG3K1bO3piHpigi pfd7gbyEY3Rxuh6zeYBGV+mIe3BNpfetgUPpqY8d+FXiyIBu3vg2YFLGFpcPU1kR zpUVly1UNSI57JClj+tu3LeN3/VYWvYTWFsXZXCvyFsc9PfQbzSgsSTjvEr6BRSt FBbnFFWYSJgb140/SlovZbGlQCgStZj1qM6ESa42PMdMOn7xjH00d14QIbFlTOOC M2Nof7qBX/Qi+jLuw+7HJv3BNqjfCb9DgDg4YwNsegoQoOsyRCmT2HKLl5tE36GL 0/BeH0bW8IECrix4TSn4aN4zkPwuYpV26+tpqhWcUdggEFmmSlKttZOtp8c+Paw0 LyFQJg== -----END CERTIFICATE-----Generated at Fri May 31 10:02:48 2024 by rpki-client on console-ams.rpki-client.org