$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/FD120CC2D94411EDA95E3613C4F9AE02.roa File: FD120CC2D94411EDA95E3613C4F9AE02.roa (raw, json) Hash identifier: 5HH7pTnlgjeixOKGFFz84lUPoqp0/yGKwdS97A1LqJc= Subject key identifier: 49:92:88:FC:7E:6F:18:D9:45:98:B7:46:93:40:D2:6B:BD:5F:24:6E Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0C09 Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/FD120CC2D94411EDA95E3613C4F9AE02.roa Signing time: Fri 02 Jun 2023 19:59:56 +0000 ROA not before: Fri 02 Jun 2023 19:59:56 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 138968 IP address blocks: 103.38.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3081 (0xc09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: Jun 2 19:59:56 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=647a4a3c-5c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:e6:b6:b6:e1:3f:66:b1:10:f7:bc:ad:6d: e3:ba:a6:9c:7b:82:4e:3b:65:91:e1:d7:e7:e3:99: db:68:aa:64:b9:44:5e:c1:e1:03:d5:94:8f:12:b6: 26:a4:44:a6:01:a3:19:f8:da:a7:59:90:91:d4:96: 65:93:31:44:aa:7d:af:e7:a8:09:9d:ae:4a:bc:d9: ae:d7:cf:f6:05:f0:e5:12:3e:26:b6:82:8b:06:e6: e0:aa:0a:00:0b:64:2e:61:b3:a8:c1:4c:94:6b:83: f5:1d:b9:3a:26:31:8e:8c:ba:34:56:b3:41:a9:f1: da:ac:92:0a:07:2b:e3:98:8c:89:46:e9:a9:b1:48: 3e:45:05:1b:48:f8:25:a2:85:9f:00:4e:7b:87:90: a7:83:2b:6f:2d:37:43:cc:b7:8b:55:c1:5f:ba:13: c1:59:c4:37:21:6c:12:94:70:6e:87:ad:dc:4d:6b: c4:75:b7:0b:eb:cf:ab:86:88:7e:ae:03:29:d1:c3: 6b:3b:63:76:38:8c:67:25:fb:95:78:ac:04:30:56: 4a:71:0a:81:49:e1:b3:50:7b:74:ce:e2:77:4c:94: 77:e3:03:4d:24:4b:c5:6d:ae:b9:16:51:0c:ad:b9: f0:18:55:3b:31:0f:e6:58:aa:0c:18:5b:42:61:d5: 8e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:92:88:FC:7E:6F:18:D9:45:98:B7:46:93:40:D2:6B:BD:5F:24:6E X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/FD120CC2D94411EDA95E3613C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.38.255.0/24 Signature Algorithm: sha256WithRSAEncryption 21:42:72:6f:7b:77:95:fc:b1:20:11:af:aa:59:65:ea:f1:d3: 5b:82:ae:8a:31:b0:d6:2f:79:ad:a5:09:8b:ae:9a:50:da:fa: 09:19:eb:0d:8d:8e:e2:b0:86:52:a4:eb:4a:80:5a:7d:64:2c: 3c:a4:81:21:01:d0:12:3d:26:2a:02:ef:7f:19:13:1a:f5:93: 1e:9e:d2:06:09:20:63:7c:ac:46:39:c5:10:50:ac:f1:7f:87: 37:bf:10:9e:27:65:95:fa:28:3f:5d:2f:4d:e1:c6:2a:f0:75: d8:5e:d8:f0:8e:ff:ac:d3:16:ca:76:36:ad:cc:33:1c:00:07: 54:10:e1:af:64:0c:14:b4:d0:75:53:87:98:17:0e:aa:44:81: 38:ba:b3:c9:73:24:f9:3c:e1:a1:3c:2b:b9:0a:0d:9a:f2:23: 55:96:2c:35:03:a9:ea:b5:92:e9:9e:89:eb:ce:39:2c:fe:7e: 56:49:73:72:f6:36:49:ed:c6:fd:27:95:e1:cf:5a:47:58:84: 9b:53:11:75:30:d8:2f:5c:2c:08:8a:f1:c9:4c:59:7a:98:38: fa:6e:d6:e7:84:ba:c2:eb:a8:b6:eb:7c:ac:0d:d5:bb:2d:58: a4:ff:bc:92:96:1e:14:1f:d4:18:10:f7:52:b4:4d:31:82:b8: ba:98:7e:25 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjMwNjAyMTk1OTU2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhNGEzYy01YzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwLmtrbhP2axEPe8rW3juqace4JOO2WR4dfn45nbaKpkuUReweED1ZSPErYm pESmAaMZ+NqnWZCR1JZlkzFEqn2v56gJna5KvNmu18/2BfDlEj4mtoKLBubgqgoA C2QuYbOowUyUa4P1Hbk6JjGOjLo0VrNBqfHarJIKByvjmIyJRumpsUg+RQUbSPgl ooWfAE57h5CngytvLTdDzLeLVcFfuhPBWcQ3IWwSlHBuh63cTWvEdbcL68+rhoh+ rgMp0cNrO2N2OIxnJfuVeKwEMFZKcQqBSeGzUHt0zuJ3TJR34wNNJEvFba65FlEM rbnwGFU7MQ/mWKoMGFtCYdWOGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEmSiPx+ bxjZRZi3RpNA0mu9XyRuMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY4RjYvMzdEMDNERjZDRTI4MTFFOUE2QjZDMTdCQzRGOUFFMDIvRkQxMjBDQzJE OTQ0MTFFREE5NUUzNjEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnJv8wDQYJKoZIhvcNAQELBQADggEBACFCcm97d5X8sSAR r6pZZerx01uCrooxsNYvea2lCYuumlDa+gkZ6w2NjuKwhlKk60qAWn1kLDykgSEB 0BI9JioC738ZExr1kx6e0gYJIGN8rEY5xRBQrPF/hze/EJ4nZZX6KD9dL03hxirw ddhe2PCO/6zTFsp2Nq3MMxwAB1QQ4a9kDBS00HVTh5gXDqpEgTi6s8lzJPk84aE8 K7kKDZryI1WWLDUDqeq1kumeievOOSz+flZJc3L2Nkntxv0nleHPWkdYhJtTEXUw 2C9cLAiK8clMWXqYOPpu1ueEusLrqLbrfKwN1bstWKT/vJKWHhQf1BgQ91K0TTGC uLqYfiU= -----END CERTIFICATE-----Generated at Fri May 10 20:45:22 2024 by rpki-client on console-ams.rpki-client.org