$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa File: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (raw, json) Hash identifier: gipNYRzhnJVMA8RXxGedDi645XLAV/oXItIEnYNnW7w= Subject key identifier: CE:7A:DB:C0:E6:B8:1E:8E:63:E9:B5:D0:FC:A6:15:0F:3C:D8:8D:4E Certificate issuer: /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Certificate serial: 01B7 Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa Signing time: Fri 05 May 2023 05:45:17 +0000 ROA not before: Fri 05 May 2023 05:45:17 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 58507 IP address blocks: 103.186.28.0/23 maxlen: 24 2400:6ce0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Validity Not Before: May 5 05:45:17 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=645497ec-f63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dd:01:c3:93:ba:7d:cb:77:35:e7:d4:d1:67: cb:a1:7f:92:d4:bc:d6:5d:48:c2:aa:c8:df:17:2d: 70:68:25:46:5d:8e:da:5a:1f:e9:e9:fb:27:91:7c: 94:90:f0:75:d8:68:7c:b9:81:b9:a9:64:ed:a4:d8: 59:3f:9b:1e:94:e7:e3:bd:7e:bd:9c:10:f4:8c:ed: 4f:a6:1e:47:c7:74:0f:d6:3a:97:1c:05:82:69:ca: f2:f6:f7:dc:85:89:de:81:5e:f2:bf:8c:ff:4b:71: 79:64:c2:ad:53:6e:96:b1:88:e4:d9:44:3f:eb:0b: 20:48:e7:d5:da:b4:52:12:02:d4:52:96:e2:2b:73: f8:e2:a0:f1:4c:e0:8b:44:b1:0f:17:a6:4a:6a:0d: ed:c2:c7:d7:27:20:0d:6c:c4:5d:f7:f9:0b:94:0a: 0a:4c:ef:ea:c4:94:5b:4a:31:58:aa:b2:ad:c0:10: 25:e5:7f:36:da:ef:e4:aa:0f:42:b6:f9:98:1e:24: 73:d8:86:73:99:bc:9a:e9:0a:ca:62:8b:00:6c:2b: c5:4c:f6:92:fd:12:42:0d:ab:9c:d2:38:cd:f7:42: f9:0a:73:72:3d:6d:ac:27:b2:eb:71:65:e6:b8:6c: f7:68:e4:3c:99:1f:e9:bf:74:cb:1d:48:cb:f6:52: c5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7A:DB:C0:E6:B8:1E:8E:63:E9:B5:D0:FC:A6:15:0F:3C:D8:8D:4E X509v3 Authority Key Identifier: keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.28.0/23 IPv6: 2400:6ce0::/32 Signature Algorithm: sha256WithRSAEncryption b6:96:d8:79:db:f2:c7:fe:b0:42:9d:50:e5:c6:2f:3b:c3:57: c7:95:b0:e4:81:ab:d2:71:50:a1:71:52:ec:f2:90:56:55:b5: b0:e9:13:a4:f1:c0:3a:2b:65:7f:53:2d:22:62:9c:96:7d:ca: 15:73:47:66:c7:3a:64:7e:b5:30:b3:68:93:f3:53:10:ee:05: 88:58:91:94:2e:a0:fe:ff:f2:0f:25:09:05:d8:c9:c4:82:b6: 98:89:7d:b4:fd:77:39:ac:57:b3:8c:48:ec:c5:a4:a0:6a:f9: f0:e2:83:2d:52:94:93:a2:cc:4b:4e:89:77:be:27:87:39:ed: aa:72:b7:8e:c9:0c:2b:72:4d:6c:2a:6d:67:07:6b:0b:9d:80: b8:cc:69:65:de:d9:c2:17:e5:0f:e7:92:03:7c:5d:98:1a:99: d7:db:6c:3c:b1:6c:2f:49:e5:93:a4:1a:da:0e:d1:2d:9b:37: ae:0e:06:eb:5a:57:d1:ff:0f:76:cd:ca:e6:85:1c:e0:5f:b9: eb:90:02:65:f5:fb:3e:15:8e:27:93:ec:15:75:f2:7a:a4:b0: 5e:bd:a1:b2:8e:cb:b5:66:c1:64:2b:9d:15:9f:ad:1a:1c:1c: d6:42:80:4c:13:7d:96:6d:c4:64:0b:09:b6:43:93:8e:b3:eb: f4:f4:74:09 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4REYxMTAvBgNVBAUTKEYwNzBDMUU3NERBRDEyMjc0RThGNTc1REZFMEJCN0Mx NEVCREM5OTAwHhcNMjMwNTA1MDU0NTE3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDU0OTdlYy1mNjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzt0Bw5O6fct3NefU0WfLoX+S1LzWXUjCqsjfFy1waCVGXY7aWh/p6fsnkXyU kPB12Gh8uYG5qWTtpNhZP5selOfjvX69nBD0jO1Pph5Hx3QP1jqXHAWCacry9vfc hYnegV7yv4z/S3F5ZMKtU26WsYjk2UQ/6wsgSOfV2rRSEgLUUpbiK3P44qDxTOCL RLEPF6ZKag3twsfXJyANbMRd9/kLlAoKTO/qxJRbSjFYqrKtwBAl5X822u/kqg9C tvmYHiRz2IZzmbya6QrKYosAbCvFTPaS/RJCDauc0jjN90L5CnNyPW2sJ7LrcWXm uGz3aOQ8mR/pv3TLHUjL9lLFTwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFM5628Dm uB6OY+m10PymFQ882I1OMB8GA1UdIwQYMBaAFPBwwedNrRInTo9XXf4Lt8FOvcmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhERi9GMDJCNURCQ0Mx REQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVpZE9qMWRkX2d1M3dVNjl5 WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIREI1MDJ0RWlkT2oxZGRfZ3Uzd1U2OXlaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQ4REYvRjAyQjVEQkNDMUREMTFFQ0I5N0I5QzdGQzRGOUFFMDIvMDZBMkMzRTJD MUUyMTFFQzg2Qzc5Njg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnuhwwDQQCAAIwBwMFACQAbOAwDQYJKoZIhvcNAQELBQAD ggEBALaW2Hnb8sf+sEKdUOXGLzvDV8eVsOSBq9JxUKFxUuzykFZVtbDpE6TxwDor ZX9TLSJinJZ9yhVzR2bHOmR+tTCzaJPzUxDuBYhYkZQuoP7/8g8lCQXYycSCtpiJ fbT9dzmsV7OMSOzFpKBq+fDigy1SlJOizEtOiXe+J4c57apyt47JDCtyTWwqbWcH awudgLjMaWXe2cIX5Q/nkgN8XZgamdfbbDyxbC9J5ZOkGtoO0S2bN64OButaV9H/ D3bNyuaFHOBfueuQAmX1+z4VjieT7BV18nqksF69obKOy7VmwWQrnRWfrRocHNZC gEwTfZZtxGQLCbZDk46z6/T0dAk= -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org