$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa File: C981BB3CF36A11E983B1D764C4F9AE02.roa (raw, json) Hash identifier: 4xngxbC/FSr9DfqmMKAmH874AAFjb0QwcfQhbhi5WXI= Subject key identifier: 25:2D:3F:F4:2B:D7:13:C8:67:C0:E0:45:B4:7C:43:93:79:8A:F5:75 Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Certificate serial: 0BD7 Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa Signing time: Tue 02 Apr 2024 19:27:56 +0000 ROA not before: Tue 02 Apr 2024 19:27:56 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 63526 IP address blocks: 103.112.52.0/22 maxlen: 22 103.112.52.0/23 maxlen: 23 103.112.52.0/24 maxlen: 24 103.112.53.0/24 maxlen: 24 103.112.54.0/23 maxlen: 23 103.112.54.0/24 maxlen: 24 103.112.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Validity Not Before: Apr 2 19:27:56 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660c5c3b-b36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:64:90:09:1a:29:95:b0:2d:9f:5e:83:7c:f1: c6:98:95:47:fb:7a:70:a6:7f:8a:0a:f8:8a:7b:78: 69:9b:13:05:08:68:27:6f:ac:70:f5:a7:ce:7f:8a: ea:2f:bd:65:62:5c:cb:e7:80:1f:22:df:e2:d1:82: b2:79:f0:03:ae:92:83:2f:34:25:f1:b7:3a:88:70: 34:d5:0c:57:55:28:60:38:5b:65:65:23:a5:21:e1: 85:54:2d:8e:bd:e5:06:e2:7c:6d:a7:96:f1:ce:a5: 16:2a:65:4c:96:24:60:01:d0:5d:3e:14:91:ec:73: 9e:9a:21:e3:13:b8:da:ad:4c:51:0a:43:c2:cd:c8: 04:d8:02:49:93:26:f5:cf:ee:47:28:d6:d6:77:bf: 0a:cf:2a:1b:1d:ea:84:27:58:73:e7:06:10:7c:ef: c4:75:a1:1b:7d:f0:22:08:83:48:4b:4e:ad:1a:d2: 3e:73:0f:fa:17:c3:ce:18:e4:bd:11:b7:2a:53:76: 66:b2:c4:dd:9b:b3:36:6b:51:4e:69:ef:9b:b3:75: c2:82:8c:28:69:52:fe:db:d1:85:6b:1e:81:45:f9: 4d:99:3a:ee:d8:a1:3c:1a:5b:06:d0:6a:d0:ce:2c: d2:4c:68:2b:34:5d:20:0e:e9:fd:a1:bf:53:c5:f2: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2D:3F:F4:2B:D7:13:C8:67:C0:E0:45:B4:7C:43:93:79:8A:F5:75 X509v3 Authority Key Identifier: keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.52.0/22 Signature Algorithm: sha256WithRSAEncryption 51:c3:26:60:f6:da:bb:73:20:a7:4a:8c:7e:26:d1:ee:e2:d7: cd:11:37:9c:44:08:7f:f5:56:57:60:f2:0d:94:62:1a:80:91: a5:eb:6a:db:1b:aa:79:16:a4:25:10:4d:79:a6:32:af:e2:dd: d8:42:b6:a0:0c:b9:3f:4b:29:4e:6c:00:21:38:5b:09:bd:b0: 76:e3:a4:4f:4e:70:d9:f8:5b:7d:c2:96:10:d8:b7:e3:da:28: be:8f:66:fe:07:12:97:10:e3:61:8c:e5:f3:d6:ce:ce:ae:e7: fd:f8:f9:0f:86:ba:99:c1:94:75:74:5e:ef:ab:be:97:0c:c1: c5:d3:cc:13:cd:44:cc:66:3b:1d:fa:a5:5f:9e:a7:56:7b:25: 74:9c:e8:b6:ea:8d:eb:dd:cf:a8:ae:df:d3:c5:b0:d9:c7:66: a9:b9:b1:c9:b9:f6:ef:b5:2a:99:7f:70:0b:6e:f8:3c:9e:72: 52:51:bb:e3:48:a2:77:b9:f8:0e:7a:40:3a:0e:8d:a2:0f:4d: 6b:5a:47:88:af:e3:76:03:4a:6b:24:76:bb:55:33:17:a7:48: d4:83:e4:6e:34:9d:e5:2e:10:c8:d3:df:dc:35:c8:70:14:24: c1:f7:88:c9:78:8e:21:e4:ec:4c:c5:22:2a:86:1d:44:c1:41: 61:0d:ac:1b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDczRjgxMTAvBgNVBAUTKDBCRjJCNTk0NEMzQTJDQ0FCNkMxRDEyQkMzNkE1QUYz QzJEQ0Y3N0YwHhcNMjQwNDAyMTkyNzU2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjNWMzYi1iMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumSQCRoplbAtn16DfPHGmJVH+3pwpn+KCviKe3hpmxMFCGgnb6xw9afOf4rq L71lYlzL54AfIt/i0YKyefADrpKDLzQl8bc6iHA01QxXVShgOFtlZSOlIeGFVC2O veUG4nxtp5bxzqUWKmVMliRgAdBdPhSR7HOemiHjE7jarUxRCkPCzcgE2AJJkyb1 z+5HKNbWd78KzyobHeqEJ1hz5wYQfO/EdaEbffAiCINIS06tGtI+cw/6F8POGOS9 EbcqU3ZmssTdm7M2a1FOae+bs3XCgowoaVL+29GFax6BRflNmTru2KE8GlsG0GrQ zizSTGgrNF0gDun9ob9TxfKo5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFCUtP/Qr 1xPIZ8DgRbR8Q5N5ivV1MB8GA1UdIwQYMBaAFAvytZRMOizKtsHRK8NqWvPC3Pd/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzNGOC80QjQ1NkM4OEYz NjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxNcTJ3ZEVydzJwYTg4TGM5 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NfSzFsRXc2TE1xMndkRXJ3MnBhODhMYzkzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDczRjgvNEI0NTZDODhGMzY5MTFFOTlDNjdBMDYxQzRGOUFFMDIvQzk4MUJCM0NG MzZBMTFFOTgzQjFENzY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJncDQwDQYJKoZIhvcNAQELBQADggEBAFHDJmD22rtzIKdK jH4m0e7i180RN5xECH/1Vldg8g2UYhqAkaXratsbqnkWpCUQTXmmMq/i3dhCtqAM uT9LKU5sACE4Wwm9sHbjpE9OcNn4W33ClhDYt+PaKL6PZv4HEpcQ42GM5fPWzs6u 5/34+Q+GupnBlHV0Xu+rvpcMwcXTzBPNRMxmOx36pV+ep1Z7JXSc6Lbqjevdz6iu 39PFsNnHZqm5scm59u+1Kpl/cAtu+DyeclJRu+NIone5+A56QDoOjaIPTWtaR4iv 43YDSmskdrtVMxenSNSD5G40neUuEMjT39w1yHAUJMH3iMl4jiHk7EzFIiqGHUTB QWENrBs= -----END CERTIFICATE-----Generated at Wed May 8 20:35:50 2024 by rpki-client on console-ams.rpki-client.org