$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/CBA65F7C4AB411E887FB7E29C4F9AE02.roa File: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (raw, json) Hash identifier: q+1s6n0nvvvzY2lsXHxfSdzsEmNaz8tOfMeKBxpnQYI= Subject key identifier: 60:33:B2:FB:36:A5:3B:B6:98:6E:07:AA:C2:0B:3F:64:85:FC:7B:62 Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 1423 Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/CBA65F7C4AB411E887FB7E29C4F9AE02.roa Signing time: Fri 16 Feb 2024 17:35:18 +0000 ROA not before: Fri 16 Feb 2024 17:35:18 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 134790 IP address blocks: 103.109.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5155 (0x1423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Feb 16 17:35:18 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65cf9cd6-70ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:ac:45:95:37:3c:8e:ae:b5:80:bf:c4:6f: c8:33:74:70:cd:5d:d4:ab:43:c6:6b:7d:2e:cc:7a: 49:e6:ea:00:7b:3b:0d:db:a5:fc:3b:e2:50:73:63: 22:4e:a1:c3:12:1b:4f:4e:1b:c7:dd:f1:b0:00:0b: 90:01:33:c1:50:eb:96:50:07:8c:fd:2c:62:ef:c5: 95:4f:7d:08:b6:fa:d9:6f:ce:d7:38:0b:68:86:e5: 5e:f1:10:d9:ab:bc:6d:fc:00:6f:65:89:e2:10:a0: 01:a9:62:9d:08:6d:f5:64:71:52:2b:74:bf:3f:4f: b1:58:b3:01:5c:cb:17:36:49:a4:98:0c:74:dd:82: 85:bd:28:d2:45:67:ef:93:d0:48:ba:52:f5:c8:50: a6:51:71:6b:63:3d:71:42:89:94:16:14:77:49:a7: 7f:99:6b:fb:7a:5b:a3:cc:c2:2c:28:25:74:1c:d9: c4:97:33:5f:41:4f:9a:bb:d1:98:60:42:c2:08:91: 66:bb:27:c4:59:0b:fc:57:26:0d:d6:f6:5a:ae:24: e6:e1:c7:3f:22:5b:e6:14:ce:a2:bc:04:73:cb:d3: 69:0f:9b:de:be:9a:b7:b5:d8:76:20:d7:d6:bb:c6: c0:e1:5a:33:d7:6b:66:31:53:65:31:5e:c4:00:06: f9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:33:B2:FB:36:A5:3B:B6:98:6E:07:AA:C2:0B:3F:64:85:FC:7B:62 X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/CBA65F7C4AB411E887FB7E29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.52.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:4e:c6:95:e1:7d:79:d7:91:c5:3e:d1:1a:4d:d5:5d:c5:a7: d6:d0:f4:75:cf:3b:2a:21:25:04:79:42:bc:74:bc:d4:f5:42: f8:1b:09:6b:b2:7a:79:e7:d5:e5:c4:db:c9:b7:43:a9:85:43: 3e:9e:b3:55:5c:64:80:b1:64:31:f2:f3:65:f1:22:f4:b2:ec: 84:ae:08:1e:d6:30:8e:93:bc:33:d6:f0:44:d6:81:74:e1:94: 17:93:3e:74:62:8b:ba:7d:a9:d0:c8:87:84:cc:66:e8:b5:c4: 4f:4b:41:d2:88:98:ee:43:28:00:1d:d3:95:77:5e:a4:a7:e8: a6:52:c5:fb:09:f1:fc:5c:c3:fb:5b:c7:e6:d8:c3:40:87:e9: dc:3e:86:eb:7b:da:c3:f3:26:16:5b:31:58:11:b9:18:be:1c: 48:9d:44:02:68:64:a2:f7:4d:bc:a8:f0:0f:73:33:e8:4a:6e: 37:0d:4b:80:fb:1a:b8:9b:b1:b5:42:76:71:3c:0b:28:a7:aa: 51:b2:0e:fd:89:27:51:1c:a8:61:1e:9c:b2:50:0b:1a:21:bc: 74:75:ae:0d:e9:2a:30:ce:d6:8b:d4:8d:9e:74:ee:41:52:c9: 9f:2b:7a:e8:aa:1b:9a:32:3e:3a:0c:e0:8b:76:24:46:71:ea: 6d:80:83:bb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjQwMjE2MTczNTE4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWNmOWNkNi03MGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9esRZU3PI6utYC/xG/IM3RwzV3Uq0PGa30uzHpJ5uoAezsN26X8O+JQc2Mi TqHDEhtPThvH3fGwAAuQATPBUOuWUAeM/Sxi78WVT30ItvrZb87XOAtohuVe8RDZ q7xt/ABvZYniEKABqWKdCG31ZHFSK3S/P0+xWLMBXMsXNkmkmAx03YKFvSjSRWfv k9BIulL1yFCmUXFrYz1xQomUFhR3Sad/mWv7elujzMIsKCV0HNnElzNfQU+au9GY YELCCJFmuyfEWQv8VyYN1vZariTm4cc/IlvmFM6ivARzy9NpD5vevpq3tdh2INfW u8bA4Voz12tmMVNlMV7EAAb5MQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGAzsvs2 pTu2mG4HqsILP2SF/HtiMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzE3Q0IvQ0I3M0Y3ODY0QUIzMTFFOEFENEQxRTI4QzRGOUFFMDIvQ0JBNjVGN0M0 QUI0MTFFODg3RkI3RTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnbTQwDQYJKoZIhvcNAQELBQADggEBAB1OxpXhfXnXkcU+ 0RpN1V3Fp9bQ9HXPOyohJQR5Qrx0vNT1QvgbCWuyennn1eXE28m3Q6mFQz6es1Vc ZICxZDHy82XxIvSy7ISuCB7WMI6TvDPW8ETWgXThlBeTPnRii7p9qdDIh4TMZui1 xE9LQdKImO5DKAAd05V3XqSn6KZSxfsJ8fxcw/tbx+bYw0CH6dw+hut72sPzJhZb MVgRuRi+HEidRAJoZKL3Tbyo8A9zM+hKbjcNS4D7GribsbVCdnE8CyinqlGyDv2J J1EcqGEenLJQCxohvHR1rg3pKjDO1ovUjZ507kFSyZ8reuiqG5oyPjoM4It2JEZx 6m2Ag7s= -----END CERTIFICATE-----Generated at Sat May 18 18:12:31 2024 by rpki-client on console-fra.rpki-client.org