$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133312e302f32342d3234203d3e203630353034.roa File: 3130332e3233382e3133312e302f32342d3234203d3e203630353034.roa (raw, json) Hash identifier: poRpmHvpMg6O51AMOa3VJhZ8OPWN17DPfWdGbVue4JM= Subject key identifier: 06:73:B4:D0:A0:23:30:BF:B9:94:CF:75:06:70:1E:41:AE:A8:E2:4C Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 4951E786D159D91C5E57C7728F478482414E7A4A Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133312e302f32342d3234203d3e203630353034.roa Signing time: Thu 11 Jan 2024 06:59:41 +0000 ROA not before: Thu 11 Jan 2024 06:54:41 +0000 ROA not after: Thu 09 Jan 2025 06:59:41 +0000 asID: 60504 IP address blocks: 103.238.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 23:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:51:e7:86:d1:59:d9:1c:5e:57:c7:72:8f:47:84:82:41:4e:7a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Jan 11 06:54:41 2024 GMT Not After : Jan 9 06:59:41 2025 GMT Subject: CN=0673B4D0A02330BFB994CF7506701E41AEA8E24C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fc:b1:a5:d6:e4:58:76:82:cd:46:87:3c:43: 65:47:7a:24:fb:da:64:9d:5b:35:4f:50:4f:dc:b8: 91:1a:19:68:c0:40:40:2b:86:f3:f0:ca:13:88:bc: 7e:bc:11:53:fa:45:54:36:d5:c0:bd:fa:7f:e0:b3: b6:a5:bb:ff:62:d5:94:22:41:67:bb:eb:7e:00:d8: e4:d3:97:9c:b2:40:69:40:eb:40:63:4d:0a:0f:d2: f8:cf:e4:3e:b2:e7:39:3c:3a:f9:4f:5e:c6:ee:f6: b9:87:05:db:09:9c:09:03:cb:95:8b:e7:d7:01:cc: 31:09:3c:13:d0:44:51:58:ae:f7:00:43:56:60:41: 92:60:68:a9:9e:03:17:7b:d5:e3:b7:a6:da:6e:cd: 8e:cd:b8:9c:c8:9b:8d:c3:92:9d:4e:e1:74:97:d5: 97:7e:46:1d:56:e4:2e:f2:d5:b6:07:d2:cb:87:94: ee:8c:9c:eb:51:44:e4:6c:03:3b:dd:96:03:7a:ce: c6:d2:1f:e1:57:e0:81:34:bf:d6:d1:a9:d8:8e:a9: 46:2a:4a:e1:57:81:9e:62:1e:ca:a4:a5:c8:0c:30: a5:6a:49:a2:e7:12:76:36:7d:6a:d3:67:c6:45:1c: 64:10:d9:4d:0c:89:16:f4:1d:85:bb:06:03:42:a0: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:73:B4:D0:A0:23:30:BF:B9:94:CF:75:06:70:1E:41:AE:A8:E2:4C X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133312e302f32342d3234203d3e203630353034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.131.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:87:b9:8b:9b:83:b7:d3:60:41:a7:31:62:6a:2d:10:6d:fc: 55:81:81:04:91:2e:54:1e:90:d6:d4:60:4d:a2:d1:70:23:8a: f7:f6:93:ba:ff:c1:7a:86:23:9c:d7:ce:d6:91:e4:dd:1b:04: da:e2:87:db:65:24:00:30:cc:93:75:2d:90:65:ff:6b:05:10: 5d:4b:76:4e:b8:99:21:7b:81:a0:6c:b4:9d:50:2b:a2:2c:48: ca:c6:b7:64:10:6d:81:b6:5d:14:18:e3:bd:e7:56:a9:2e:83: 13:69:f8:31:83:33:b8:52:67:18:9d:58:f0:ed:1b:84:cf:cd: 30:80:e4:d8:02:2f:c6:ed:c5:ce:34:0d:65:3e:17:45:b5:29: 8b:1e:ea:80:c7:38:9a:7e:ab:8f:82:c7:0c:a7:a7:b0:31:9b: c4:11:ee:8e:75:a6:d9:41:d4:85:be:ca:4e:1f:8a:eb:6f:7a: d1:6f:66:1b:fb:f5:4d:f5:82:73:1a:21:a6:2a:39:c3:98:c0: 2e:96:12:33:f4:d4:4a:53:f5:09:f2:44:69:5e:04:84:60:eb: cf:1d:60:90:00:36:51:f1:17:a8:0b:5c:0c:f9:89:b9:e5:94: ae:d6:0f:d7:1e:42:bf:80:85:29:91:9f:5f:8c:6f:46:4c:6b: 89:1a:5e:6e -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUSVHnhtFZ2RxeV8dyj0eEgkFOekowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI0MDExMTA2NTQ0MVoX DTI1MDEwOTA2NTk0MVowMzExMC8GA1UEAxMoMDY3M0I0RDBBMDIzMzBCRkI5OTRD Rjc1MDY3MDFFNDFBRUE4RTI0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOT8saXW5Fh2gs1GhzxDZUd6JPvaZJ1bNU9QT9y4kRoZaMBAQCuG8/DKE4i8 frwRU/pFVDbVwL36f+CztqW7/2LVlCJBZ7vrfgDY5NOXnLJAaUDrQGNNCg/S+M/k PrLnOTw6+U9exu72uYcF2wmcCQPLlYvn1wHMMQk8E9BEUViu9wBDVmBBkmBoqZ4D F3vV47em2m7Njs24nMibjcOSnU7hdJfVl35GHVbkLvLVtgfSy4eU7oyc61FE5GwD O92WA3rOxtIf4VfggTS/1tGp2I6pRipK4VeBnmIeyqSlyAwwpWpJoucSdjZ9atNn xkUcZBDZTQyJFvQdhbsGA0KgZvUCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBQGc7TQ oCMwv7mUz3UGcB5BrqjiTDAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MUE2 MTMxMDAwMC8wLzMxMzAzMzJlMzIzMzM4MmUzMTMzMzEyZTMwMmYzMjM0MmQzMjM0 MjAzZDNlMjAzNjMwMzUzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+6DMA0GCSqGSIb3DQEBCwUA A4IBAQB6h7mLm4O302BBpzFiai0QbfxVgYEEkS5UHpDW1GBNotFwI4r39pO6/8F6 hiOc187WkeTdGwTa4ofbZSQAMMyTdS2QZf9rBRBdS3ZOuJkhe4GgbLSdUCuiLEjK xrdkEG2Btl0UGOO951apLoMTafgxgzO4UmcYnVjw7RuEz80wgOTYAi/G7cXONA1l PhdFtSmLHuqAxziafquPgscMp6ewMZvEEe6OdabZQdSFvspOH4rrb3rRb2Yb+/VN 9YJzGiGmKjnDmMAulhIz9NRKU/UJ8kRpXgSEYOvPHWCQADZR8ReoC1wM+Ym55ZSu 1g/XHkK/gIUpkZ9fjG9GTGuJGl5u -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:26 2024 by rpki-client on console-ams.rpki-client.org