$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa File: C9763EB431D811EE89285A41C4F9AE02.roa (raw, json) Hash identifier: 3hWfnPWDZteLPvUiWv4KcsHXcnTfXj7FRU8ihBFKR7s= Subject key identifier: D7:E0:F8:C8:BB:4C:68:65:6B:8A:4E:E2:B6:6D:5E:73:DD:C2:5F:27 Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Certificate serial: 15 Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa Signing time: Tue 05 Sep 2023 05:35:47 +0000 ROA not before: Tue 05 Sep 2023 05:35:47 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 135404 IP address blocks: 103.154.22.0/23 maxlen: 23 2406:5140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Validity Not Before: Sep 5 05:35:47 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64f6be33-06cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8f:85:ef:d1:98:aa:12:ca:c7:f0:2a:12:b2: f5:c3:75:96:87:89:6e:5b:84:4b:1f:bd:4b:22:13: 14:79:cf:35:08:3f:0f:2a:3f:30:d3:36:a3:11:5d: 1c:d6:87:19:72:8b:3f:55:16:b6:e4:c3:29:e6:4c: 94:2d:c3:87:29:b0:9f:b5:f2:6b:71:69:23:b3:45: e9:6e:72:57:68:55:20:15:35:45:07:4c:48:a9:1c: de:eb:a5:ec:7f:92:29:1f:75:25:30:e9:ce:a9:dc: 6b:be:84:5f:7d:0d:a8:a2:33:cf:d3:26:b0:7b:41: e3:85:12:82:42:6f:22:de:19:35:b1:05:83:f3:23: e5:c7:2e:06:1c:16:3b:e3:f8:8b:d4:14:66:fe:6b: e3:c3:ca:5b:fc:79:1c:ec:72:4f:38:18:80:92:4e: 2e:28:d5:21:96:f1:21:60:02:00:ee:6c:11:d8:80: d8:86:ea:44:d8:b3:ae:f1:22:1e:1b:fb:82:ae:a7: 02:d4:76:b3:6f:4c:11:9e:f4:16:36:81:87:c3:c8: d0:4c:a8:df:62:14:84:6a:97:8d:cf:8c:f0:56:ed: d6:c5:95:7f:06:45:3b:49:89:62:61:74:d0:d2:a7: a7:8c:00:ae:b7:06:10:04:ce:b7:fb:62:57:47:00: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E0:F8:C8:BB:4C:68:65:6B:8A:4E:E2:B6:6D:5E:73:DD:C2:5F:27 X509v3 Authority Key Identifier: keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.22.0/23 IPv6: 2406:5140::/32 Signature Algorithm: sha256WithRSAEncryption 0b:92:31:24:5b:1e:f9:50:e4:dc:c5:27:b5:ef:aa:3c:26:45: 7c:1b:43:e9:c9:d5:13:89:c1:bf:11:ec:b8:79:90:1b:fb:d7: 1d:29:54:d0:07:4b:cc:a5:b0:9b:5c:be:14:ca:99:fd:30:73: e9:8d:45:30:4e:bd:93:4b:33:f7:91:b8:c0:6f:84:06:c9:69: 22:52:4f:58:a5:f1:1a:39:be:c5:bc:d7:bd:8f:13:4a:7e:4a: 1a:c2:d2:e9:c7:ae:5b:b2:46:f5:a2:3b:ea:09:7a:ae:c3:4a: c3:ac:cd:22:df:59:5b:45:49:a8:bd:a1:8c:a5:e8:d0:7a:5f: c1:2b:a1:f4:77:75:d8:fb:84:8d:40:61:e1:3b:d3:87:d7:e1: 4f:44:16:b0:5d:05:d5:01:35:df:ea:66:82:32:17:17:e1:56: 2d:43:24:e4:b1:d8:48:a0:ba:ed:ae:b0:06:b3:ee:c3:e2:ad: 05:4a:24:52:b5:58:69:06:d1:67:68:77:e9:21:92:6d:85:6d: e6:74:d8:7b:38:dd:9c:81:19:eb:49:4e:7c:ea:4c:c0:bf:32: 9e:22:7b:62:02:2f:a0:1d:7b:c0:02:75:79:76:6a:29:38:98: 38:8b:3b:e1:17:82:b3:9b:1d:f9:4a:36:02:8b:b1:17:c7:3e: 00:f3:4c:fc -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0IzQjExMC8GA1UEBRMoRkM4RDUxREE1MzUyMTIzRERBRTYzNzY1NjRGOEQ1Njgx REE0QjMxQzAeFw0yMzA5MDUwNTM1NDdaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0ZjZiZTMzLTA2Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqj4Xv0ZiqEsrH8CoSsvXDdZaHiW5bhEsfvUsiExR5zzUIPw8qPzDTNqMRXRzW hxlyiz9VFrbkwynmTJQtw4cpsJ+18mtxaSOzRelucldoVSAVNUUHTEipHN7rpex/ kikfdSUw6c6p3Gu+hF99DaiiM8/TJrB7QeOFEoJCbyLeGTWxBYPzI+XHLgYcFjvj +IvUFGb+a+PDylv8eRzsck84GICSTi4o1SGW8SFgAgDubBHYgNiG6kTYs67xIh4b +4KupwLUdrNvTBGe9BY2gYfDyNBMqN9iFIRql43PjPBW7dbFlX8GRTtJiWJhdNDS p6eMAK63BhAEzrf7YldHAB6TAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU1+D4yLtM aGVrik7itm1ec93CXycwHwYDVR0jBBgwFoAU/I1R2lNSEj3a5jdlZPjVaB2ksxww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQjNCLzg2MjlDNDMyMzFE ODExRUU4QkU5QzQ0MEM0RjlBRTAyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0kxUjJsTlNFajNhNWpkbFpQalZhQjJrc3h3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9DOTc2M0VCNDMx RDgxMUVFODkyODVBNDFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWeaFjANBAIAAjAHAwUAJAZRQDANBgkqhkiG9w0BAQsFAAOC AQEAC5IxJFse+VDk3MUnte+qPCZFfBtD6cnVE4nBvxHsuHmQG/vXHSlU0AdLzKWw m1y+FMqZ/TBz6Y1FME69k0sz95G4wG+EBslpIlJPWKXxGjm+xbzXvY8TSn5KGsLS 6ceuW7JG9aI76gl6rsNKw6zNIt9ZW0VJqL2hjKXo0HpfwSuh9Hd12PuEjUBh4TvT h9fhT0QWsF0F1QE13+pmgjIXF+FWLUMk5LHYSKC67a6wBrPuw+KtBUokUrVYaQbR Z2h36SGSbYVt5nTYezjdnIEZ60lOfOpMwL8yniJ7YgIvoB17wAJ1eXZqKTiYOIs7 4ReCs5sd+Uo2AouxF8c+APNM/A== -----END CERTIFICATE-----Generated at Fri Jun 7 09:41:12 2024 by rpki-client on console-ams.rpki-client.org