$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/20127C7C120411EF91CB6459C4F9AE02.roa File: 20127C7C120411EF91CB6459C4F9AE02.roa (raw, json) Hash identifier: Ety52M3VhUmflokaKGVXl8Rn3jANdbM0ZYdQKUD8vgQ= Subject key identifier: 10:1B:BE:E7:18:28:97:8D:47:13:99:0A:B8:72:D5:E5:C0:29:72:C9 Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Certificate serial: FC Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/20127C7C120411EF91CB6459C4F9AE02.roa Signing time: Tue 14 May 2024 15:10:40 +0000 ROA not before: Tue 14 May 2024 15:10:40 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 9409 IP address blocks: 103.151.154.0/24 maxlen: 24 2401:3fa0:fd00::/40 maxlen: 48 2401:3fa0:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Validity Not Before: May 14 15:10:40 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=66437ef0-b1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:92:26:10:53:4a:ab:47:27:e6:77:b8:8e: e0:9f:26:64:e9:26:a7:5d:19:21:0c:29:31:ff:7b: 4c:06:da:11:0c:0a:43:65:fb:a3:54:4a:dc:f4:c7: c1:f7:42:0e:95:32:57:76:94:13:27:e4:de:49:f2: 07:31:2f:60:a1:95:38:5e:f3:2b:c9:29:58:5a:2d: 2c:f3:ad:e2:6f:15:30:1a:a9:1b:e0:0b:c6:99:20: 98:de:40:31:0b:71:76:e0:8f:79:08:77:14:14:85: 2d:58:bb:0f:20:16:0f:3b:17:6c:7e:18:fd:ce:46: ad:84:fe:ca:53:38:fb:30:45:20:dc:6c:00:db:29: 20:a0:cd:4c:80:b4:72:76:11:6f:6e:1d:64:9b:37: 18:a1:82:24:28:1f:c1:d7:24:5d:2a:e8:2a:14:6f: c0:b7:8a:b0:8c:58:32:41:5b:52:cf:c6:0b:a8:62: 31:6b:76:0b:5f:eb:5f:83:88:f7:a8:20:45:0b:c7: 5b:c9:2a:c3:3b:ca:f1:60:8d:0b:73:d3:2b:2a:3f: 60:da:7f:a2:57:97:4d:00:e7:c2:56:f3:dc:56:24: 08:f5:8b:36:40:b5:b1:7a:e9:0b:45:aa:2a:ff:75: 1a:65:05:82:52:81:5e:49:15:f9:ea:86:5a:6c:e2: a3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1B:BE:E7:18:28:97:8D:47:13:99:0A:B8:72:D5:E5:C0:29:72:C9 X509v3 Authority Key Identifier: keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/20127C7C120411EF91CB6459C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.154.0/24 IPv6: 2401:3fa0:fd00::/40 2401:3fa0:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 9b:55:79:d8:06:e4:98:04:ac:41:07:f2:f8:c9:c3:f3:99:79: 7f:d2:ea:42:12:8a:e2:17:52:51:bb:26:86:25:9b:e6:2b:05: 9e:0e:a3:ee:41:0d:2c:5e:ce:e4:32:ee:76:5a:be:50:73:c3: c6:5c:f8:61:f7:b6:3a:2a:2f:92:28:28:08:e6:43:9a:65:07: d7:4c:71:52:85:db:25:22:e8:9d:d5:dd:6e:f4:f9:f3:23:c9: c8:dc:f3:04:7a:84:65:80:e3:db:82:30:c0:3c:e5:99:76:d0: 8a:f7:5c:e2:ca:37:9e:55:98:50:26:c1:58:e1:3d:71:b7:48: d1:4b:49:37:97:9f:43:71:63:1d:0f:0b:ae:9e:98:be:13:4a: a2:72:9e:26:ae:f9:34:b3:07:7a:c5:f0:96:08:d3:1c:cc:cb: 8d:1d:bd:3a:73:ab:8a:5f:7b:91:a5:1e:fe:20:cc:5c:28:6c: f3:40:bc:4c:a9:b7:7f:3a:a8:2a:5e:ff:28:ad:f2:ab:39:47: 2c:26:2a:f6:e3:64:99:3f:3e:ce:62:38:42:6d:79:f7:86:2d: 95:b4:5a:56:66:fd:0a:8b:49:6b:dc:b8:82:4a:bb:92:9d:cb: a8:e4:64:38:76:4e:a7:33:40:fa:86:3c:b6:49:a5:ad:a0:15: ea:d6:52:80 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE QzM4QjM1Q0MwHhcNMjQwNTE0MTUxMDQwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQzN2VmMC1iMWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbCSJhBTSqtHJ+Z3uI7gnyZk6SanXRkhDCkx/3tMBtoRDApDZfujVErc9MfB 90IOlTJXdpQTJ+TeSfIHMS9goZU4XvMrySlYWi0s863ibxUwGqkb4AvGmSCY3kAx C3F24I95CHcUFIUtWLsPIBYPOxdsfhj9zkathP7KUzj7MEUg3GwA2ykgoM1MgLRy dhFvbh1kmzcYoYIkKB/B1yRdKugqFG/At4qwjFgyQVtSz8YLqGIxa3YLX+tfg4j3 qCBFC8dbySrDO8rxYI0Lc9MrKj9g2n+iV5dNAOfCVvPcViQI9Ys2QLWxeukLRaoq /3UaZQWCUoFeSRX56oZabOKjwQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFBAbvucY KJeNRxOZCrhy1eXAKXLJMB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTg3RkQvNTVFRDZBMTYxMEEwMTFFRTkzNDkzQzUyQzRGOUFFMDIvMjAxMjdDN0Mx MjA0MTFFRjkxQ0I2NDU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBABnl5owFgQCAAIwEAMGACQBP6D9AwYAJAE/oP8wDQYJKoZI hvcNAQELBQADggEBAJtVedgG5JgErEEH8vjJw/OZeX/S6kISiuIXUlG7JoYlm+Yr BZ4Oo+5BDSxezuQy7nZavlBzw8Zc+GH3tjoqL5IoKAjmQ5plB9dMcVKF2yUi6J3V 3W70+fMjycjc8wR6hGWA49uCMMA85Zl20Ir3XOLKN55VmFAmwVjhPXG3SNFLSTeX n0NxYx0PC66emL4TSqJyniau+TSzB3rF8JYI0xzMy40dvTpzq4pfe5GlHv4gzFwo bPNAvEypt386qCpe/yit8qs5RywmKvbjZJk/Ps5iOEJtefeGLZW0WlZm/QqLSWvc uIJKu5Kdy6jkZDh2TqczQPqGPLZJpa2gFerWUoA= -----END CERTIFICATE-----Generated at Fri May 31 10:01:36 2024 by rpki-client on console-ams.rpki-client.org