$ rpki-client -vvf rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/B6C2A27AF16A11E89550B621C4F9AE02.roa File: B6C2A27AF16A11E89550B621C4F9AE02.roa (raw, json) Hash identifier: Pei0cti7OSCFhgjRaYzV/VlBx4zhYdDoDzyP9hUTPDg= Subject key identifier: 0F:92:CA:62:B5:8E:0E:C4:DA:BD:BE:A7:3C:7D:24:AD:36:DF:40:83 Certificate issuer: /CN=A91371E4/serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9 Certificate serial: 10B3 Authority key identifier: 29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/B6C2A27AF16A11E89550B621C4F9AE02.roa Signing time: Fri 08 Dec 2023 17:45:23 +0000 ROA not before: Fri 08 Dec 2023 17:45:23 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 138148 IP address blocks: 103.198.68.0/24 maxlen: 24 103.198.69.0/24 maxlen: 24 103.198.70.0/24 maxlen: 24 103.198.71.0/24 maxlen: 24 2001:df6:b400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4275 (0x10b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91371E4/serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9 Validity Not Before: Dec 8 17:45:23 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65735632-3750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:df:52:21:ff:cb:99:96:8a:a5:73:b5:ec:94: 39:ca:d9:41:5e:71:8b:ed:38:28:ca:6b:61:c2:61: aa:34:70:e1:18:87:e0:35:ec:8f:40:5a:c7:f2:13: 31:43:e1:9e:b9:46:62:28:fc:1b:60:69:6d:20:04: 1d:57:c0:df:13:4e:b3:9d:f3:01:af:85:ae:4d:48: 48:20:cd:9b:87:b1:d2:59:3d:f8:e5:87:fe:e3:01: f1:91:9f:c6:b7:72:1f:24:3e:c4:18:79:17:20:09: d3:82:c2:72:6f:9b:25:f9:e9:be:ac:16:83:21:68: 57:63:e8:2f:4b:5f:e1:35:8e:9d:c8:56:15:ce:0e: 93:f1:62:2a:e1:02:f7:ab:02:cc:08:8e:b0:af:bf: e9:b2:c8:db:d2:5a:32:76:17:b1:c3:0f:55:5b:c4: f1:c2:26:2e:40:5b:0d:ee:eb:d7:d2:03:37:85:16: 4a:93:59:60:9a:6a:a5:98:69:00:85:8a:02:bd:67: 96:aa:1f:d8:f9:9c:05:06:fd:8c:93:b0:66:1b:68: 2b:93:05:bd:a5:c1:53:b8:dd:86:bb:f6:c2:4d:32: 1f:f8:32:7f:23:2e:1c:d1:55:3a:0f:fa:32:25:06: 54:57:58:bc:32:74:f9:4f:7e:1f:ec:9a:6c:39:95: d0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:92:CA:62:B5:8E:0E:C4:DA:BD:BE:A7:3C:7D:24:AD:36:DF:40:83 X509v3 Authority Key Identifier: keyid:29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/B6C2A27AF16A11E89550B621C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.198.68.0/22 IPv6: 2001:df6:b400::/48 Signature Algorithm: sha256WithRSAEncryption 3c:94:50:a3:45:05:08:b3:f2:00:2c:23:c8:94:fa:a5:67:1f: 10:24:2b:cd:88:5e:be:e1:9f:dd:03:f0:27:9c:4f:c0:58:8b: ff:1d:39:37:24:e0:e1:57:1a:fb:db:46:c6:d4:c3:fb:3e:7b: 6d:46:09:94:f9:3c:0c:f1:02:05:2a:c3:ba:c9:03:6f:17:46: 6b:de:b1:02:83:a0:f6:37:e0:f5:37:f0:12:03:2d:02:f4:bf: 6a:d7:ee:93:c0:9f:95:bd:51:ba:91:b0:15:4a:8a:c2:29:b6: b6:8c:9e:29:82:22:53:14:cb:81:af:50:06:c3:05:df:b0:46: 0e:37:0a:12:a7:09:be:1c:06:81:83:88:29:34:a0:30:39:9f: 3d:b3:4e:ed:59:48:b0:35:13:d4:e5:95:df:19:d1:e6:8b:01: 77:1d:db:66:0e:5a:31:8f:6c:8e:d6:73:14:a6:0d:43:78:03: b8:16:72:3f:e8:40:b4:c1:e3:bf:df:2a:a9:9f:3e:2f:39:fd: 27:be:b9:74:93:b1:55:cb:d0:33:08:f9:ac:9f:ed:ff:70:b9: ee:b9:68:30:b8:ff:28:73:7b:3e:7d:53:2c:47:b1:ba:7e:b8: c7:f0:8a:c8:d7:c7:5a:b6:62:81:63:19:45:1c:94:3a:38:3b: cf:a3:65:00 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICELMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcxRTQxMTAvBgNVBAUTKDI5QjlFNkFDMDE5Mjk4Q0NBMDk2REU4OTcxQTlEQzhG N0Q3OEUxRDkwHhcNMjMxMjA4MTc0NTIzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczNTYzMi0zNzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1N9SIf/LmZaKpXO17JQ5ytlBXnGL7TgoymthwmGqNHDhGIfgNeyPQFrH8hMx Q+GeuUZiKPwbYGltIAQdV8DfE06znfMBr4WuTUhIIM2bh7HSWT345Yf+4wHxkZ/G t3IfJD7EGHkXIAnTgsJyb5sl+em+rBaDIWhXY+gvS1/hNY6dyFYVzg6T8WIq4QL3 qwLMCI6wr7/pssjb0loydhexww9VW8TxwiYuQFsN7uvX0gM3hRZKk1lgmmqlmGkA hYoCvWeWqh/Y+ZwFBv2Mk7BmG2grkwW9pcFTuN2Gu/bCTTIf+DJ/Iy4c0VU6D/oy JQZUV1i8MnT5T34f7JpsOZXQWwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFA+SymK1 jg7E2r2+pzx9JK0230CDMB8GA1UdIwQYMBaAFCm55qwBkpjMoJbeiXGp3I99eOHZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzFFNC8zODI0N0E3MEYx NjkxMUU4QjNBNzlEMUVDNEY5QUUwMi9LYm5tckFHU21NeWdsdDZKY2FuY2ozMTQ0 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tibm1yQUdTbU15Z2x0NkpjYW5jajMxNDRkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzcxRTQvMzgyNDdBNzBGMTY5MTFFOEIzQTc5RDFFQzRGOUFFMDIvQjZDMkEyN0FG MTZBMTFFODk1NTBCNjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnxkQwDwQCAAIwCQMHACABDfa0ADANBgkqhkiG9w0BAQsF AAOCAQEAPJRQo0UFCLPyACwjyJT6pWcfECQrzYhevuGf3QPwJ5xPwFiL/x05NyTg 4Vca+9tGxtTD+z57bUYJlPk8DPECBSrDuskDbxdGa96xAoOg9jfg9TfwEgMtAvS/ atfuk8Cflb1RupGwFUqKwim2toyeKYIiUxTLga9QBsMF37BGDjcKEqcJvhwGgYOI KTSgMDmfPbNO7VlIsDUT1OWV3xnR5osBdx3bZg5aMY9sjtZzFKYNQ3gDuBZyP+hA tMHjv98qqZ8+Lzn9J765dJOxVcvQMwj5rJ/t/3C57rloMLj/KHN7Pn1TLEexun64 x/CKyNfHWrZigWMZRRyUOjg7z6NlAA== -----END CERTIFICATE-----Generated at Tue May 14 19:10:13 2024 by rpki-client on console-ams.rpki-client.org