$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/46B27CC6B82A11E9843DEE0AC4F9AE02.roa File: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (raw, json) Hash identifier: R+8e60KMLF2Q7uDOrIo7+YUjKmBw84tN5qGB1wzHUSs= Subject key identifier: D8:66:EA:AA:06:FC:C8:70:40:B1:1A:4B:D9:59:34:CC:ED:0F:70:BE Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0C9E Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/46B27CC6B82A11E9843DEE0AC4F9AE02.roa Signing time: Thu 24 Aug 2023 18:35:55 +0000 ROA not before: Thu 24 Aug 2023 18:35:55 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 136968 IP address blocks: 103.5.241.0/24 maxlen: 24 2401:c7c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Aug 24 18:35:55 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64e7a30a-2ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e8:3b:fa:a3:58:09:c4:09:d3:6d:33:33:bf: 1a:63:88:b7:0c:70:2e:2b:97:72:dd:e5:3b:8a:58: 5e:85:ce:bc:a8:35:ca:2c:b0:eb:37:25:38:db:f3: 1b:b8:69:e3:71:43:56:bb:f1:40:ea:9e:3c:77:25: 2c:e7:72:68:05:b0:e2:36:1a:c4:3e:cb:ab:8f:72: 49:21:2a:33:91:ab:ec:81:0e:d5:ba:37:7f:2f:c9: 1e:da:fe:f6:26:c4:9e:f2:c8:2b:86:4c:ec:38:21: 84:12:3a:56:b7:79:f9:4d:a9:ce:c3:42:95:e5:7a: d2:a0:d4:bd:3c:75:2e:8c:b7:ac:4a:3a:eb:60:18: ec:b2:df:63:31:63:90:28:26:a3:97:67:04:f6:36: d4:c5:24:27:80:86:11:12:92:80:f6:37:69:c9:9c: b8:67:c4:24:aa:fa:42:53:10:5b:ab:d8:28:6c:5f: e0:f6:41:83:0d:2e:51:c5:b4:4e:8e:82:dc:c8:08: 09:d0:86:b5:80:55:6d:c5:90:a9:66:09:59:48:b8: 44:ba:44:21:29:f0:09:d5:68:4f:a4:76:18:ca:9c: 09:ea:63:fe:46:d2:8d:cc:c9:04:18:09:ed:b3:3e: 07:31:52:4a:a9:c9:e6:5f:71:67:3b:5b:c9:2e:f4: 1e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:66:EA:AA:06:FC:C8:70:40:B1:1A:4B:D9:59:34:CC:ED:0F:70:BE X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/46B27CC6B82A11E9843DEE0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.241.0/24 IPv6: 2401:c7c0:1::/48 Signature Algorithm: sha256WithRSAEncryption ae:27:2e:7c:6a:a6:ed:ad:f6:0e:54:25:a6:da:d5:05:fe:a5: ba:9e:2d:26:12:d3:a8:ba:8d:07:64:c3:a2:46:6f:4a:ad:0d: f7:27:01:d6:fa:55:14:ff:d3:1d:8b:f1:d5:e5:3c:98:89:b9: c4:1b:da:61:8f:77:7a:77:ed:d9:81:69:f3:51:31:6d:f7:fb: e5:43:e6:06:f0:8d:5d:9a:08:80:85:1d:86:74:31:78:ce:28: ee:dc:bc:73:b1:93:d6:28:4f:9d:6d:d2:20:07:9b:60:17:cf: a4:39:27:e4:16:94:05:07:36:26:b7:52:97:d7:e1:9a:23:40: fd:c6:49:fb:82:0d:8f:c3:eb:94:ef:21:ad:97:ea:e5:68:72: 91:a4:96:02:ce:79:35:0c:ef:c8:a4:23:fb:ad:c6:8e:02:61: 42:60:fb:f1:5c:51:50:d4:20:21:33:5a:cf:d1:38:88:2f:fd: e8:48:f5:0a:1e:a8:81:5a:26:6f:8b:b8:05:3e:d1:9d:ee:ab: e6:1d:9e:17:02:99:b5:8b:4c:14:ab:eb:94:e6:30:f6:87:c3: bc:ed:c6:43:73:75:2d:fc:58:37:0b:41:bf:75:da:2f:73:f7: 37:33:83:09:95:ff:d8:6c:9b:42:1b:0a:25:7e:4d:ec:b7:d8: 8b:96:b5:e7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjMwODI0MTgzNTU1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGU3YTMwYS0yYmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeg7+qNYCcQJ020zM78aY4i3DHAuK5dy3eU7ilhehc68qDXKLLDrNyU42/Mb uGnjcUNWu/FA6p48dyUs53JoBbDiNhrEPsurj3JJISozkavsgQ7Vujd/L8ke2v72 JsSe8sgrhkzsOCGEEjpWt3n5TanOw0KV5XrSoNS9PHUujLesSjrrYBjsst9jMWOQ KCajl2cE9jbUxSQngIYREpKA9jdpyZy4Z8QkqvpCUxBbq9gobF/g9kGDDS5RxbRO joLcyAgJ0Ia1gFVtxZCpZglZSLhEukQhKfAJ1WhPpHYYypwJ6mP+RtKNzMkEGAnt sz4HMVJKqcnmX3FnO1vJLvQeYQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNhm6qoG /MhwQLEaS9lZNMztD3C+MB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI1QjQvNzA5RjdBMjZCODI5MTFFOTkzNzM4QTA5QzRGOUFFMDIvNDZCMjdDQzZC ODJBMTFFOTg0M0RFRTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnBfEwDwQCAAIwCQMHACQBx8AAATANBgkqhkiG9w0BAQsF AAOCAQEAricufGqm7a32DlQlptrVBf6lup4tJhLTqLqNB2TDokZvSq0N9ycB1vpV FP/THYvx1eU8mIm5xBvaYY93enft2YFp81Exbff75UPmBvCNXZoIgIUdhnQxeM4o 7ty8c7GT1ihPnW3SIAebYBfPpDkn5BaUBQc2JrdSl9fhmiNA/cZJ+4INj8PrlO8h rZfq5WhykaSWAs55NQzvyKQj+63GjgJhQmD78VxRUNQgITNaz9E4iC/96Ej1Ch6o gVomb4u4BT7Rne6r5h2eFwKZtYtMFKvrlOYw9ofDvO3GQ3N1LfxYNwtBv3XaL3P3 NzODCZX/2GybQhsKJX5N7LfYi5a15w== -----END CERTIFICATE-----Generated at Thu May 16 19:49:58 2024 by rpki-client on console-fra.rpki-client.org