$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/F41E4608AD1511EE8FBA3458C4F9AE02.roa File: F41E4608AD1511EE8FBA3458C4F9AE02.roa (raw, json) Hash identifier: JrnLIqhM/bGGcDkqC/T47KoXDIHvgSVzcSDGWO1VDNg= Subject key identifier: FF:93:FE:20:3A:2C:1D:A7:31:EE:F0:56:96:47:81:6D:C6:4C:A5:86 Certificate issuer: /CN=A91FF94F/serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Certificate serial: 04 Authority key identifier: 2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/F41E4608AD1511EE8FBA3458C4F9AE02.roa Signing time: Sun 07 Jan 2024 04:34:10 +0000 ROA not before: Sun 07 Jan 2024 04:34:09 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 139620 IP address blocks: 103.142.144.0/23 maxlen: 24 2001:df1:4780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF94F/serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Validity Not Before: Jan 7 04:34:09 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=659a29c1-7b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:87:2d:12:21:c9:d1:dc:99:98:65:2a:bd:ff: 86:d5:c6:23:df:73:02:2b:01:45:45:47:6f:d5:95: 8f:ad:fc:8f:07:59:7e:b4:36:11:ea:c7:46:14:77: a6:ba:4b:19:29:0d:7b:45:b7:97:1f:70:45:e4:bd: ef:f7:70:e9:64:10:61:13:e5:eb:1f:01:34:f1:27: 2b:19:bd:5f:5b:72:de:01:d7:8f:cb:cb:69:16:bd: a0:58:1f:4b:76:81:ae:23:f7:6e:ee:a6:c3:15:9e: 8d:24:28:f8:b5:67:4e:ac:6d:f5:38:b9:44:92:61: a4:1d:f0:0a:be:c2:b8:59:30:59:22:45:fd:22:70: 73:87:ae:14:33:62:f9:df:ff:81:88:1b:51:c3:03: 00:e1:d8:1f:2d:f6:80:19:fb:34:49:9e:13:01:d7: 6a:f0:86:6b:55:e3:bd:59:e4:95:85:1a:fc:87:2c: de:e3:b4:e3:c0:98:e5:50:53:b9:a5:1a:c8:2b:19: 64:64:34:93:d7:ce:d8:3a:51:74:14:9a:9d:af:04: 0d:3a:1f:09:17:e8:71:4b:99:2c:a1:10:f3:89:d2: 02:c9:f8:ae:38:03:c6:a6:72:c9:76:65:57:50:dd: 19:70:7d:9d:9b:91:ed:d5:8d:c5:84:59:fa:50:f1: 04:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:93:FE:20:3A:2C:1D:A7:31:EE:F0:56:96:47:81:6D:C6:4C:A5:86 X509v3 Authority Key Identifier: keyid:2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/F41E4608AD1511EE8FBA3458C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.144.0/23 IPv6: 2001:df1:4780::/48 Signature Algorithm: sha256WithRSAEncryption 6e:c4:9a:d8:0f:19:1b:ff:50:84:6a:8a:76:3c:0b:b0:96:44: 67:f6:3c:c9:46:6e:b1:ab:b2:d1:a5:35:96:ec:6d:d9:2f:ad: 1e:ac:bb:b7:c2:56:cc:d5:ef:08:34:6c:9c:70:cb:f6:27:58: d3:34:2b:19:44:8c:35:93:21:31:2a:07:3e:da:83:56:82:51: ea:40:8d:13:fd:0e:8e:27:a8:e9:15:15:20:fc:3b:98:fb:16: f3:bf:21:3b:d1:23:d2:38:3b:e0:d2:0e:02:07:97:b2:a3:51: a7:90:bc:19:33:ea:14:76:8d:1f:2d:47:3d:8b:d5:12:d7:f5: 45:85:f7:69:18:92:f1:bc:09:34:25:d8:46:97:89:f9:c7:06: c2:4a:d6:20:74:08:cf:a9:f6:53:15:a5:83:b2:02:11:3a:c0: c8:ba:ce:01:b3:07:e1:36:06:7c:0c:b7:d2:0c:60:7c:8f:7d: af:62:c7:a6:ce:dc:09:e1:d3:c4:09:fc:ce:68:40:a2:ea:6f: 63:e4:1d:d6:2a:a5:1c:0a:f0:07:62:87:13:8c:88:28:2a:c4: 66:60:ad:7a:fe:07:06:21:60:00:7a:08:6b:72:87:98:87:4e: 4b:c7:5a:ae:c6:7e:be:5d:c2:11:cf:32:6c:d3:d5:84:00:36: 16:7d:2d:17 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Rjk0RjExMC8GA1UEBRMoMkVBNjI4QUI1NUQxODE3NDNFRjI5MEVGODI0OTk4MEQ2 Mjk5QUZBMjAeFw0yNDAxMDcwNDM0MDlaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1OWEyOWMxLTdiNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8hy0SIcnR3JmYZSq9/4bVxiPfcwIrAUVFR2/VlY+t/I8HWX60NhHqx0YUd6a6 SxkpDXtFt5cfcEXkve/3cOlkEGET5esfATTxJysZvV9bct4B14/Ly2kWvaBYH0t2 ga4j927upsMVno0kKPi1Z06sbfU4uUSSYaQd8Aq+wrhZMFkiRf0icHOHrhQzYvnf /4GIG1HDAwDh2B8t9oAZ+zRJnhMB12rwhmtV471Z5JWFGvyHLN7jtOPAmOVQU7ml GsgrGWRkNJPXztg6UXQUmp2vBA06HwkX6HFLmSyhEPOJ0gLJ+K44A8amcsl2ZVdQ 3RlwfZ2bke3VjcWEWfpQ8QTlAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU/5P+IDos Hacx7vBWlkeBbcZMpYYwHwYDVR0jBBgwFoAULqYoq1XRgXQ+8pDvgkmYDWKZr6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGOTRGL0QzNDhGMkQwQUQx NDExRUVCMEI4MTEzOUM0RjlBRTAyL0xxWW9xMVhSZ1hRLThwRHZna21ZRFdLWnI2 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTHFZb3ExWFJnWFEtOHBEdmdrbVlEV0tacjZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjk0Ri9EMzQ4RjJEMEFEMTQxMUVFQjBCODExMzlDNEY5QUUwMi9GNDFFNDYwOEFE MTUxMUVFOEZCQTM0NThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWeOkDAPBAIAAjAJAwcAIAEN8UeAMA0GCSqGSIb3DQEBCwUA A4IBAQBuxJrYDxkb/1CEaop2PAuwlkRn9jzJRm6xq7LRpTWW7G3ZL60erLu3wlbM 1e8INGyccMv2J1jTNCsZRIw1kyExKgc+2oNWglHqQI0T/Q6OJ6jpFRUg/DuY+xbz vyE70SPSODvg0g4CB5eyo1GnkLwZM+oUdo0fLUc9i9US1/VFhfdpGJLxvAk0JdhG l4n5xwbCStYgdAjPqfZTFaWDsgIROsDIus4BswfhNgZ8DLfSDGB8j32vYsemztwJ 4dPECfzOaECi6m9j5B3WKqUcCvAHYocTjIgoKsRmYK16/gcGIWAAeghrcoeYh05L x1quxn6+XcIRzzJs09WEADYWfS0X -----END CERTIFICATE-----Generated at Fri Jun 7 09:41:12 2024 by rpki-client on console-ams.rpki-client.org