$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/D1A6B6D0738E11ED8283FF53C4F9AE02.roa File: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (raw, json) Hash identifier: w4J4xAuvdERMPvfOUQHJ8THCJMJLk8tx9s5ftfLsDas= Subject key identifier: 30:43:2F:7D:30:48:90:2A:A6:D3:99:7E:24:0D:36:4D:3B:2A:BF:91 Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Certificate serial: 0885 Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/D1A6B6D0738E11ED8283FF53C4F9AE02.roa Signing time: Thu 02 Nov 2023 21:28:46 +0000 ROA not before: Thu 02 Nov 2023 21:28:46 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 139922 IP address blocks: 103.156.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2181 (0x885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Validity Not Before: Nov 2 21:28:46 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6544148e-131b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:7b:d5:2b:f7:ce:e9:fb:cc:b3:e6:07:85: 97:1f:b0:51:62:60:16:ba:e3:49:53:2b:ec:e2:7a: ae:fe:e1:c8:01:71:32:74:ed:2c:2b:67:14:b8:e9: f1:ac:a9:6a:cd:d5:2d:c4:e3:2e:a6:e8:49:e1:72: 69:33:df:e4:9d:d6:6e:9e:cb:f0:bb:93:3d:5b:78: 44:86:f6:e0:62:f1:e7:4c:6d:32:c3:91:3a:57:07: c9:f4:17:c9:85:8b:4a:9e:c8:31:a6:1b:50:9a:ae: ec:81:bd:5e:fb:04:25:e8:88:a6:68:d8:b2:a0:ef: b2:21:bb:79:42:c6:11:3b:a7:ac:42:aa:2c:f0:cd: 88:ce:98:0e:a3:8e:48:1a:d0:d3:8f:32:b2:4c:e2: 52:e6:f8:d3:9f:a3:51:a3:af:01:f2:12:59:1b:03: d7:b8:e7:58:b4:a4:ef:82:fc:45:54:5e:ce:c0:dd: be:7f:6d:d1:64:a1:4a:77:cf:cf:68:2c:58:f0:28: 8d:e3:8a:2b:11:50:b5:c9:4b:a3:b9:1f:a8:30:3d: a8:0e:b1:b6:47:b7:c1:f0:f8:1f:e2:7b:2e:72:40: b6:17:32:15:44:fc:35:64:03:7b:02:ec:10:5d:21: 3a:ce:3e:2d:4f:0b:a8:48:84:da:86:c2:36:ff:97: a8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:43:2F:7D:30:48:90:2A:A6:D3:99:7E:24:0D:36:4D:3B:2A:BF:91 X509v3 Authority Key Identifier: keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/D1A6B6D0738E11ED8283FF53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.97.0/24 Signature Algorithm: sha256WithRSAEncryption ce:db:09:18:a6:c5:93:0c:19:ac:4b:20:01:91:ec:65:c1:ea: a8:eb:9a:cc:c8:07:e7:dc:a4:4c:8c:16:51:bd:6c:0f:ba:77: 8d:51:6f:21:86:e9:84:fc:fe:1f:86:6e:37:6d:16:fa:de:94: 67:29:a7:4a:03:95:7b:aa:72:c6:24:30:5b:0b:24:7f:05:20: e6:82:4d:6d:2e:c6:ae:09:7c:a1:d5:f4:b3:65:6c:3d:c4:7d: 11:4a:db:38:2b:17:c4:b3:fa:a2:31:a3:df:4a:7f:da:e1:c6: 1c:97:21:1b:1e:03:fb:c9:ca:81:75:ff:2f:17:3c:29:23:6e: dd:f6:49:5f:3a:3b:e8:01:13:43:65:18:1d:af:35:31:ce:f6: 73:6c:57:83:4c:a9:c8:98:ac:f3:ca:09:cb:af:2f:79:18:11: 51:6c:9d:54:1a:e5:83:d9:1b:d0:56:35:96:96:1a:71:52:d0: 93:eb:10:47:4f:30:3a:ab:4a:37:64:15:cd:70:0d:3d:f8:05: c4:59:f6:74:c2:1b:2f:8f:db:74:92:2d:00:bf:b2:5a:4c:d4: c5:7f:57:02:f4:9c:59:42:51:c5:67:61:dd:1f:a9:10:8e:71: 88:f6:56:48:ed:9d:a3:e2:e5:34:7b:fb:19:77:72:6f:38:82: 7f:78:3d:62 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0 RjdBQzQ2MzkwHhcNMjMxMTAyMjEyODQ2WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ0MTQ4ZS0xMzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5171Sv3zun7zLPmB4WXH7BRYmAWuuNJUyvs4nqu/uHIAXEydO0sK2cUuOnx rKlqzdUtxOMupuhJ4XJpM9/kndZunsvwu5M9W3hEhvbgYvHnTG0yw5E6VwfJ9BfJ hYtKnsgxphtQmq7sgb1e+wQl6IimaNiyoO+yIbt5QsYRO6esQqos8M2IzpgOo45I GtDTjzKyTOJS5vjTn6NRo68B8hJZGwPXuOdYtKTvgvxFVF7OwN2+f23RZKFKd8/P aCxY8CiN44orEVC1yUujuR+oMD2oDrG2R7fB8Pgf4nsuckC2FzIVRPw1ZAN7AuwQ XSE6zj4tTwuoSITahsI2/5eoSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDBDL30w SJAqptOZfiQNNk07Kr+RMB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5 MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjIxRUYvNkYyRkVCRDY4OTFGMTFFQTg5QjYyNzdDQzRGOUFFMDIvRDFBNkI2RDA3 MzhFMTFFRDgyODNGRjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnnGEwDQYJKoZIhvcNAQELBQADggEBAM7bCRimxZMMGaxL IAGR7GXB6qjrmszIB+fcpEyMFlG9bA+6d41RbyGG6YT8/h+GbjdtFvrelGcpp0oD lXuqcsYkMFsLJH8FIOaCTW0uxq4JfKHV9LNlbD3EfRFK2zgrF8Sz+qIxo99Kf9rh xhyXIRseA/vJyoF1/y8XPCkjbt32SV86O+gBE0NlGB2vNTHO9nNsV4NMqciYrPPK CcuvL3kYEVFsnVQa5YPZG9BWNZaWGnFS0JPrEEdPMDqrSjdkFc1wDT34BcRZ9nTC Gy+P23SSLQC/slpM1MV/VwL0nFlCUcVnYd0fqRCOcYj2VkjtnaPi5TR7+xl3cm84 gn94PWI= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org