$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/FA6E4ECC755B11EAA7D9532EC4F9AE02.roa File: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (raw, json) Hash identifier: pVSiDxsUhJwrE6xbN2uDbGSIus/DmtvNhRjR701jL88= Subject key identifier: 04:53:C3:B5:3D:D3:64:3B:06:95:7A:4C:9A:42:B0:6F:89:E9:34:26 Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Certificate serial: 08A2 Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/FA6E4ECC755B11EAA7D9532EC4F9AE02.roa Signing time: Tue 04 Jul 2023 20:47:04 +0000 ROA not before: Tue 04 Jul 2023 20:47:04 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 18378 IP address blocks: 103.229.249.0/24 maxlen: 24 202.36.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2210 (0x8a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Validity Not Before: Jul 4 20:47:04 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64a48547-5182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:96:b7:87:50:87:16:2f:09:0f:44:04:d4: d2:f3:d2:9a:30:81:63:77:28:9d:68:71:d3:ce:ac: a3:a0:41:fd:a6:89:8d:7e:d8:81:b1:7b:ef:01:ed: d6:61:70:f7:43:d8:c2:9a:45:d2:11:f8:cd:19:87: 3d:aa:2b:05:d0:ce:21:76:bf:6c:3f:e7:43:19:57: 9a:2c:b4:97:11:10:6e:9e:fa:eb:8d:62:51:35:d0: 50:cc:36:08:8a:61:c4:9f:2c:51:fe:b4:28:19:f2: 9c:d9:a6:7a:12:20:b2:7a:a2:69:ce:f8:3b:dc:26: e3:a6:ce:2b:06:d8:09:87:a3:d1:51:4c:ea:ae:15: 5c:ae:be:e5:34:fc:df:04:a7:76:3d:7c:5c:85:f0: f1:66:2b:7a:58:e4:8f:fe:79:75:02:06:98:fd:f1: 8b:a4:09:68:57:3d:93:49:ea:1c:bf:f2:66:73:8d: ea:ae:58:d2:8a:a4:49:99:bb:fb:47:e6:b0:99:3e: a7:02:23:13:91:cb:be:35:66:ff:ad:79:51:89:4c: bb:62:a5:db:3a:a3:19:fd:aa:24:01:4c:b9:bd:5b: 0d:48:72:70:69:db:48:d7:a4:a2:67:76:db:f4:ad: ab:6c:ce:80:aa:3a:40:03:4e:c1:10:ed:32:14:d8: 86:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:53:C3:B5:3D:D3:64:3B:06:95:7A:4C:9A:42:B0:6F:89:E9:34:26 X509v3 Authority Key Identifier: keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/FA6E4ECC755B11EAA7D9532EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.249.0/24 202.36.29.0/24 Signature Algorithm: sha256WithRSAEncryption a8:03:15:79:50:0c:09:2f:03:18:cd:72:0c:b5:d6:2c:90:61: fb:37:fa:44:dd:be:e3:d7:ba:72:56:94:fb:4c:be:ce:77:ca: a7:e4:10:b4:ea:4b:4b:49:3e:83:5d:38:a7:61:fe:7f:9f:6a: 06:ce:62:3d:cc:de:fc:45:d5:19:67:fb:9b:24:dc:8a:96:ae: 15:e7:e6:95:1b:3c:6d:84:f0:e5:66:4b:a0:d3:27:ad:62:fd: 8c:28:ed:b9:bc:d2:2a:ed:6a:49:1a:25:33:4d:c9:04:2c:d4: 94:48:2a:2d:a6:a8:da:40:b6:92:ba:30:19:e2:98:2b:01:8f: 1a:23:49:f7:8c:5b:16:f6:af:21:60:a6:92:01:2f:8d:b5:e5: 8e:e3:71:ad:f8:5a:98:0c:5d:89:7c:46:62:7f:1f:81:e4:1f: ad:7f:78:df:27:5a:b5:f6:6c:c0:99:73:bf:d9:23:d5:88:d0: 7c:97:d4:68:8e:3a:77:f9:72:3d:cd:bd:92:e5:af:b6:9a:1a: b6:48:69:cf:88:71:11:7b:01:56:c1:1e:ec:5d:8a:df:5b:73: 70:d7:57:d7:2e:ff:d8:2b:6e:08:06:24:de:ce:0f:b3:21:3e: 82:d7:a6:73:a4:00:f3:d8:54:ea:04:fd:d8:b8:cf:d7:e0:21: 48:ce:2b:6f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB Qzk2Q0E0OTEwHhcNMjMwNzA0MjA0NzA0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE0ODU0Ny01MTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiaWt4dQhxYvCQ9EBNTS89KaMIFjdyidaHHTzqyjoEH9pomNftiBsXvvAe3W YXD3Q9jCmkXSEfjNGYc9qisF0M4hdr9sP+dDGVeaLLSXERBunvrrjWJRNdBQzDYI imHEnyxR/rQoGfKc2aZ6EiCyeqJpzvg73Cbjps4rBtgJh6PRUUzqrhVcrr7lNPzf BKd2PXxchfDxZit6WOSP/nl1AgaY/fGLpAloVz2TSeocv/Jmc43qrljSiqRJmbv7 R+awmT6nAiMTkcu+NWb/rXlRiUy7YqXbOqMZ/aokAUy5vVsNSHJwadtI16SiZ3bb 9K2rbM6AqjpAA07BEO0yFNiGhwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFARTw7U9 02Q7BpV6TJpCsG+J6TQmMB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1 NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTU0RTEvNEEwQ0I2Rjg3NTQzMTFFQUE3NTcxMTYwQzRGOUFFMDIvRkE2RTRFQ0M3 NTVCMTFFQUE3RDk1MzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABn5fkDBADKJB0wDQYJKoZIhvcNAQELBQADggEBAKgDFXlQ DAkvAxjNcgy11iyQYfs3+kTdvuPXunJWlPtMvs53yqfkELTqS0tJPoNdOKdh/n+f agbOYj3M3vxF1Rln+5sk3IqWrhXn5pUbPG2E8OVmS6DTJ61i/Ywo7bm80irtakka JTNNyQQs1JRIKi2mqNpAtpK6MBnimCsBjxojSfeMWxb2ryFgppIBL4215Y7jca34 WpgMXYl8RmJ/H4HkH61/eN8nWrX2bMCZc7/ZI9WI0HyX1GiOOnf5cj3NvZLlr7aa GrZIac+IcRF7AVbBHuxdit9bc3DXV9cu/9grbggGJN7OD7MhPoLXpnOkAPPYVOoE /di4z9fgIUjOK28= -----END CERTIFICATE-----Generated at Sat May 18 22:14:02 2024 by rpki-client on console-fra.rpki-client.org