$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FBC5568BDD611EA97CDF72CC4F9AE02.roa File: 5FBC5568BDD611EA97CDF72CC4F9AE02.roa (raw, json) Hash identifier: lvjZ/2d19/tj02CqPvYllHCe8qBhXMvgIplB2YX2EKA= Subject key identifier: F0:02:4B:E9:70:FF:22:E1:F2:A7:EE:40:EC:37:CD:7B:F0:CC:92:7C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C72 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FBC5568BDD611EA97CDF72CC4F9AE02.roa Signing time: Wed 10 May 2023 16:24:34 +0000 ROA not before: Wed 10 May 2023 16:24:34 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136359 IP address blocks: 103.91.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 11:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27762 (0x6c72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:24:34 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc542-df8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:a4:98:7b:d7:b9:01:fc:95:5e:b8:a0:de: 4d:4d:02:9c:1c:02:b4:9a:b2:a4:78:e8:06:cf:65: 4a:60:d0:58:63:da:65:27:f3:a4:68:6c:d6:fc:bb: ba:0f:13:d1:de:38:66:e3:82:1e:2e:0d:36:67:88: bd:0d:7a:ef:cc:83:50:b9:b6:9b:1a:f2:15:76:0a: 37:ec:e8:39:a3:5a:94:da:ae:16:c6:0b:1a:c5:76: 16:84:37:44:08:a6:8d:b1:ea:de:21:71:07:54:d5: aa:47:7b:97:ad:d5:3f:d0:a2:6a:51:33:ed:c6:d1: a2:3c:ec:5b:9a:f7:f5:f4:75:13:b3:12:1d:54:e7: 3e:59:0b:32:9d:08:a1:91:92:1a:0a:58:85:9d:54: db:df:3d:c9:3e:ee:f8:77:68:8f:9e:3b:55:7c:a2: 99:38:b2:32:f0:d1:8c:76:11:35:09:95:c8:fe:90: 9f:ce:70:43:2a:5d:d1:56:b3:be:56:ad:90:9d:9f: 22:a7:07:4f:17:85:1a:8f:a5:dc:65:cf:9d:9d:12: 36:12:21:2c:0a:d9:50:fc:a1:a3:39:5e:98:91:40: ce:13:99:fb:cc:fe:8d:58:da:6f:19:57:d7:a0:3f: 97:a6:5a:92:d2:6d:9b:1f:39:8b:67:2a:fb:7c:80: 4c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:02:4B:E9:70:FF:22:E1:F2:A7:EE:40:EC:37:CD:7B:F0:CC:92:7C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FBC5568BDD611EA97CDF72CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.68.0/22 Signature Algorithm: sha256WithRSAEncryption 75:f7:d8:f2:99:df:ff:83:47:16:fc:03:3d:99:7d:1a:54:23: 50:24:e1:15:e8:c3:ca:57:b2:b2:46:a8:64:79:7e:a3:4c:d2: 99:cf:50:ee:03:ee:d9:8e:92:38:9a:ba:8c:f8:62:d6:92:11: a9:02:a7:57:82:6d:7b:2f:d5:cf:56:c7:b2:be:86:54:b3:c1: 5b:bf:5c:bb:4f:bc:52:42:d5:14:8a:b0:d3:0f:4c:c4:70:fc: 9c:62:e8:03:8c:61:38:43:b4:85:ff:cc:77:e8:8f:b3:40:5e: 00:32:dc:9b:2d:5b:1f:33:84:35:59:a7:fe:63:c2:3b:9c:cf: 3d:ef:e5:43:af:d2:7f:ec:41:79:55:19:18:ea:ff:6f:d4:c2: ef:db:4e:e2:77:e1:19:29:8e:5e:c7:7f:0b:40:8a:0b:2c:84: 28:16:92:da:38:82:36:99:c5:cb:37:0a:35:65:5d:04:a7:3a: 31:2c:f5:b0:7f:5b:c6:32:b8:a3:8d:9b:55:d7:bd:34:21:5d: 23:35:02:e4:19:f8:52:f9:61:cc:88:d4:49:62:bb:7f:cc:72: 94:e4:60:75:f1:6e:4e:d5:84:b2:39:53:35:6a:c7:c1:7a:2f: b1:a0:4a:11:1b:43:71:9c:07:66:31:d0:20:9a:9b:f1:32:27: 3e:36:af:f8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNDM0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzU0Mi1kZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3ikmHvXuQH8lV64oN5NTQKcHAK0mrKkeOgGz2VKYNBYY9plJ/OkaGzW/Lu6 DxPR3jhm44IeLg02Z4i9DXrvzINQubabGvIVdgo37Og5o1qU2q4WxgsaxXYWhDdE CKaNsereIXEHVNWqR3uXrdU/0KJqUTPtxtGiPOxbmvf19HUTsxIdVOc+WQsynQih kZIaCliFnVTb3z3JPu74d2iPnjtVfKKZOLIy8NGMdhE1CZXI/pCfznBDKl3RVrO+ Vq2QnZ8ipwdPF4Uaj6XcZc+dnRI2EiEsCtlQ/KGjOV6YkUDOE5n7zP6NWNpvGVfX oD+XplqS0m2bHzmLZyr7fIBMBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPACS+lw /yLh8qfuQOw3zXvwzJJ8MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUZCQzU1NjhC REQ2MTFFQTk3Q0RGNzJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnW0QwDQYJKoZIhvcNAQELBQADggEBAHX32PKZ3/+DRxb8 Az2ZfRpUI1Ak4RXow8pXsrJGqGR5fqNM0pnPUO4D7tmOkjiauoz4YtaSEakCp1eC bXsv1c9Wx7K+hlSzwVu/XLtPvFJC1RSKsNMPTMRw/Jxi6AOMYThDtIX/zHfoj7NA XgAy3JstWx8zhDVZp/5jwjuczz3v5UOv0n/sQXlVGRjq/2/Uwu/bTuJ34Rkpjl7H fwtAigsshCgWkto4gjaZxcs3CjVlXQSnOjEs9bB/W8YyuKONm1XXvTQhXSM1AuQZ +FL5YcyI1Eliu3/McpTkYHXxbk7VhLI5UzVqx8F6L7GgShEbQ3GcB2Yx0CCam/Ey Jz42r/g= -----END CERTIFICATE-----Generated at Thu Apr 25 22:33:54 2024 by rpki-client on console-fra.rpki-client.org