$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/18D9E13C5CE611EC80EC7E76C4F9AE02.roa File: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (raw, json) Hash identifier: yItSFfthrvs4+kvxPXhcObukSW7A2Gjgx6MxObPc6GM= Subject key identifier: 49:91:F9:5A:DF:EA:2A:EB:68:9D:12:2F:24:2A:C8:53:A6:BC:B2:DE Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 05B6 Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/18D9E13C5CE611EC80EC7E76C4F9AE02.roa Signing time: Fri 15 Mar 2024 00:12:52 +0000 ROA not before: Fri 15 Mar 2024 00:12:52 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 138452 IP address blocks: 103.161.152.0/24 maxlen: 24 103.161.152.0/25 maxlen: 25 103.161.152.128/25 maxlen: 25 103.161.153.0/24 maxlen: 24 103.161.153.0/25 maxlen: 25 103.161.153.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: Mar 15 00:12:52 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65f39283-3298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:e7:62:09:43:6c:74:44:ad:d5:cd:33:6c: e1:10:94:a5:db:c3:fa:4a:c7:87:1c:a6:0c:a0:c2: 72:01:de:9b:04:32:65:81:0d:ef:e3:41:ae:e1:d1: 83:fe:4c:63:30:4f:4c:4a:2b:d9:fd:37:00:bd:fa: 1a:c5:5f:70:59:e0:89:73:1a:54:54:33:61:04:7b: 19:e6:f0:eb:23:aa:85:8d:99:03:21:f3:c2:df:a1: 8d:cd:fa:63:3c:ef:cf:9d:68:a9:59:9d:32:bc:2b: bf:26:31:91:ba:a0:0b:67:44:ec:d6:67:22:72:39: f5:53:ff:b8:0d:60:4b:32:a1:20:c1:44:7d:70:e5: a6:3a:eb:08:14:d4:ad:39:67:2e:46:98:40:ba:31: 55:18:34:48:f4:f0:18:61:22:44:4a:11:56:df:57: f4:46:e1:c9:ef:84:1b:76:31:7a:a5:19:20:d0:86: 89:5b:67:6a:f3:e3:f1:0c:e4:38:cc:6c:92:85:73: b2:60:89:a9:29:14:ca:3e:ec:ff:30:74:af:cb:5d: 4c:09:cb:e4:11:1e:46:80:a8:53:f1:28:d1:17:1f: 0f:7a:dd:e9:2b:6e:07:57:aa:05:7b:7f:c8:b4:6b: ec:41:a1:00:24:d6:05:45:66:8f:c7:51:52:ac:3e: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:91:F9:5A:DF:EA:2A:EB:68:9D:12:2F:24:2A:C8:53:A6:BC:B2:DE X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/18D9E13C5CE611EC80EC7E76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.152.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:b2:28:89:ea:8a:1a:4a:23:79:92:4c:be:bb:cf:e6:9a:52: 3a:06:26:c9:d3:d3:6c:2b:96:d7:3a:58:c7:99:af:f7:17:fc: 51:fd:17:3d:18:7f:fb:4f:2d:86:85:72:66:2b:19:2f:83:f8: 76:5b:5c:66:85:f8:11:4b:a8:72:2f:58:7b:eb:26:db:18:82: 60:a8:f2:20:7f:ca:65:b8:c1:db:48:ec:46:df:3f:a2:c5:40: 4e:35:38:70:89:42:48:d9:37:83:71:93:81:fe:e2:57:8d:20: 94:5d:f7:50:1e:1f:c2:66:c2:62:47:48:53:ff:72:7e:f8:d3: c3:1e:8e:1f:f0:1e:fd:95:19:47:31:4a:60:cd:3e:26:bf:98: c2:08:80:c3:7b:6f:62:97:59:5d:f4:6d:13:1e:06:93:7a:1f: 24:45:d5:5b:0a:58:24:41:d0:e5:3d:2a:be:57:12:75:ab:98: bd:fc:5f:79:e5:28:92:7e:d3:06:26:3a:14:a4:c7:02:1a:f0: 61:43:f5:38:c2:74:1b:07:f2:cc:db:d0:4e:c1:7c:62:11:bf: 1e:f1:fd:62:45:41:ac:44:19:93:af:43:c6:58:16:38:74:ac: 18:fc:fa:0a:ec:3b:29:f3:49:30:62:b5:b5:24:09:46:60:81: 2d:f7:59:91 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjQwMzE1MDAxMjUyWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWYzOTI4My0zMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOLnYglDbHRErdXNM2zhEJSl28P6SseHHKYMoMJyAd6bBDJlgQ3v40Gu4dGD /kxjME9MSivZ/TcAvfoaxV9wWeCJcxpUVDNhBHsZ5vDrI6qFjZkDIfPC36GNzfpj PO/PnWipWZ0yvCu/JjGRuqALZ0Ts1mcicjn1U/+4DWBLMqEgwUR9cOWmOusIFNSt OWcuRphAujFVGDRI9PAYYSJEShFW31f0RuHJ74QbdjF6pRkg0IaJW2dq8+PxDOQ4 zGyShXOyYImpKRTKPuz/MHSvy11MCcvkER5GgKhT8SjRFx8Pet3pK24HV6oFe3/I tGvsQaEAJNYFRWaPx1FSrD6nKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEmR+Vrf 6irraJ0SLyQqyFOmvLLeMB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzc1RDgvNTFDOUY2QUU3MDVGMTFFQjk5N0JCQjE2QzRGOUFFMDIvMThEOUUxM0M1 Q0U2MTFFQzgwRUM3RTc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnoZgwDQYJKoZIhvcNAQELBQADggEBACqyKInqihpKI3mS TL67z+aaUjoGJsnT02wrltc6WMeZr/cX/FH9Fz0Yf/tPLYaFcmYrGS+D+HZbXGaF +BFLqHIvWHvrJtsYgmCo8iB/ymW4wdtI7EbfP6LFQE41OHCJQkjZN4Nxk4H+4leN IJRd91AeH8JmwmJHSFP/cn7408Mejh/wHv2VGUcxSmDNPia/mMIIgMN7b2KXWV30 bRMeBpN6HyRF1VsKWCRB0OU9Kr5XEnWrmL38X3nlKJJ+0wYmOhSkxwIa8GFD9TjC dBsH8szb0E7BfGIRvx7x/WJFQaxEGZOvQ8ZYFjh0rBj8+grsOynzSTBitbUkCUZg gS33WZE= -----END CERTIFICATE-----Generated at Fri May 17 01:02:50 2024 by rpki-client on console-ams.rpki-client.org