$ rpki-client -vvf rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B5A31A8E660F11EB8A1DB351C4F9AE02.roa File: B5A31A8E660F11EB8A1DB351C4F9AE02.roa (raw, json) Hash identifier: nS6qqnYpI/sV3YzdKGalcu4VlQR/YPEAbReL/luE99Y= Subject key identifier: 3A:2F:1B:8A:4B:99:5A:83:D0:C6:CE:2A:5D:68:4D:8B:FE:96:D5:48 Certificate issuer: /CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D Certificate serial: 090B Authority key identifier: F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B5A31A8E660F11EB8A1DB351C4F9AE02.roa Signing time: Fri 02 Jun 2023 22:03:13 +0000 ROA not before: Fri 02 Jun 2023 22:03:13 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 1221 IP address blocks: 103.149.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2315 (0x90b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D Validity Not Before: Jun 2 22:03:13 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=647a6721-04b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1d:1c:21:ad:c3:48:e2:8b:f5:fa:2c:8b:97: af:86:3d:5b:98:87:81:48:b9:36:91:6f:c4:34:d2: 83:82:3e:81:9e:45:09:46:59:0e:f3:4d:89:b4:d2: d0:f9:fb:d9:21:ab:fc:9f:7b:8a:39:af:94:0c:81: b3:fc:19:3c:d5:6b:38:68:a6:ab:81:e0:07:2c:b5: da:5c:cb:8d:86:17:c4:16:b2:f5:81:53:17:5d:3d: db:99:29:8d:0e:95:02:83:6e:d1:1b:bc:01:27:b1: 58:c1:ff:f7:c0:26:2f:53:79:ea:d3:c6:dd:71:7c: 0d:13:50:7a:ec:23:74:ab:c2:9e:f2:c3:6d:13:75: ed:55:54:13:32:c0:e4:5e:e0:df:89:cb:2d:95:bc: df:75:ea:9a:10:78:fd:d1:d4:7c:ba:64:05:fb:9f: 8f:fc:9f:2b:29:be:57:22:b5:f2:f0:0e:a3:d7:07: db:06:0a:c7:21:dd:2a:5d:7c:c8:41:ba:88:67:8d: 00:7e:9c:88:6b:21:5b:88:ad:db:76:f1:cc:0f:f4: eb:57:04:2d:31:c3:0c:c2:ce:d4:f3:1c:8e:ad:a5: 6e:13:96:a3:95:20:c1:76:be:b5:bb:76:3b:39:d3: 04:18:a1:60:e4:69:c5:5f:c8:bc:a1:b3:a2:e0:12: 34:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2F:1B:8A:4B:99:5A:83:D0:C6:CE:2A:5D:68:4D:8B:FE:96:D5:48 X509v3 Authority Key Identifier: keyid:F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B5A31A8E660F11EB8A1DB351C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.43.0/24 Signature Algorithm: sha256WithRSAEncryption 74:ae:fb:74:db:91:2e:7e:a0:c4:03:99:89:a2:9e:fd:33:ff: 5e:55:46:77:9b:85:09:95:4f:d7:5f:af:09:2a:8f:ac:3e:c6: e8:3d:8a:ff:02:fa:db:17:cf:92:40:44:0c:70:55:57:40:de: 42:25:83:74:48:e8:1b:47:bd:c8:c0:95:fd:4b:11:9c:41:ab: 61:3c:fe:d8:bf:90:a0:3d:e1:95:cf:a0:78:46:7a:d1:cf:24: 41:79:ef:c1:d2:7f:d0:0c:6d:4c:cc:0b:77:82:d2:dd:d0:7e: 85:e9:1d:e5:c2:19:f4:ff:87:03:1c:5b:76:84:d0:a8:bb:9a: b5:d4:d9:cb:f5:e2:07:45:f0:a4:4e:33:dc:09:c9:23:03:cb: 9f:63:a5:47:86:73:bc:2c:b6:c0:6f:d0:bc:cd:6f:5c:61:58: 93:87:c4:24:e0:93:ba:a4:cb:52:ab:72:5c:93:56:9f:8f:82: 17:0c:ed:82:33:26:c5:30:b0:ca:0e:cd:fe:fa:db:54:48:be: a1:56:0b:00:dd:46:3d:6e:41:5b:2b:b6:84:9e:95:7c:6e:38: 6b:ed:5e:42:c0:c4:86:33:4c:f4:af:77:2e:85:16:bc:a1:6f: dc:0d:57:12:79:55:02:f3:4b:52:1e:12:08:53:7c:1c:ac:b5: 2c:52:01:d7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RjYxMTAvBgNVBAUTKEY2OEI4NjI2OEIzN0RFODEwQjk2OERCOEYzNTdGNzcz RTk4M0JGNkQwHhcNMjMwNjAyMjIwMzEzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhNjcyMS0wNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAph0cIa3DSOKL9fosi5evhj1bmIeBSLk2kW/ENNKDgj6BnkUJRlkO802JtNLQ +fvZIav8n3uKOa+UDIGz/Bk81Ws4aKargeAHLLXaXMuNhhfEFrL1gVMXXT3bmSmN DpUCg27RG7wBJ7FYwf/3wCYvU3nq08bdcXwNE1B67CN0q8Ke8sNtE3XtVVQTMsDk XuDficstlbzfdeqaEHj90dR8umQF+5+P/J8rKb5XIrXy8A6j1wfbBgrHId0qXXzI QbqIZ40AfpyIayFbiK3bdvHMD/TrVwQtMcMMws7U8xyOraVuE5ajlSDBdr61u3Y7 OdMEGKFg5GnFX8i8obOi4BI0SwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDovG4pL mVqD0MbOKl1oTYv+ltVIMB8GA1UdIwQYMBaAFPaLhiaLN96BC5aNuPNX93Ppg79t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVGNi9ENjlFQUFCMjVG NjQxMUVBOUNBQTNBNjRDNEY5QUUwMi85b3VHSm9zMzNvRUxsbzI0ODFmM2MtbUR2 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvdUdKb3MzM29FTGxvMjQ4MWYzYy1tRHYyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU1RjYvRDY5RUFBQjI1RjY0MTFFQTlDQUEzQTY0QzRGOUFFMDIvQjVBMzFBOEU2 NjBGMTFFQjhBMURCMzUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnlSswDQYJKoZIhvcNAQELBQADggEBAHSu+3TbkS5+oMQD mYminv0z/15VRnebhQmVT9dfrwkqj6w+xug9iv8C+tsXz5JARAxwVVdA3kIlg3RI 6BtHvcjAlf1LEZxBq2E8/ti/kKA94ZXPoHhGetHPJEF578HSf9AMbUzMC3eC0t3Q foXpHeXCGfT/hwMcW3aE0Ki7mrXU2cv14gdF8KROM9wJySMDy59jpUeGc7wstsBv 0LzNb1xhWJOHxCTgk7qky1KrclyTVp+PghcM7YIzJsUwsMoOzf7621RIvqFWCwDd Rj1uQVsrtoSelXxuOGvtXkLAxIYzTPSvdy6FFryhb9wNVxJ5VQLzS1IeEghTfBys tSxSAdc= -----END CERTIFICATE-----Generated at Sat May 18 21:24:22 2024 by rpki-client on console-fra.rpki-client.org