$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/D60E488E25FE11ECA0EAA583C4F9AE02.roa File: D60E488E25FE11ECA0EAA583C4F9AE02.roa (raw, json) Hash identifier: zXTOKtrRdTWCAFFIj2KmV1PsJbIfM4Q4aTZLOKP6//A= Subject key identifier: 7E:28:CC:7B:7F:66:99:16:1F:66:75:50:20:29:C6:64:E3:AF:57:B0 Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E Certificate serial: 0695 Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/D60E488E25FE11ECA0EAA583C4F9AE02.roa Signing time: Tue 31 Oct 2023 22:51:01 +0000 ROA not before: Tue 31 Oct 2023 22:51:01 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 141217 IP address blocks: 103.156.176.0/23 maxlen: 23 103.156.176.0/24 maxlen: 24 103.156.177.0/24 maxlen: 24 2001:df4:f180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1685 (0x695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E Validity Not Before: Oct 31 22:51:01 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=654184d5-e23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:72:89:19:83:08:90:9d:b1:ec:4c:48:d8:ed: 77:ae:14:1f:29:a3:ce:9a:28:ce:a2:d7:2e:96:df: 45:27:f1:51:14:35:16:02:4d:ac:3a:5b:4a:f1:90: c3:c1:18:7d:fb:24:77:b6:66:b5:44:1e:de:d6:47: 7a:f5:8d:76:60:ac:30:c2:db:b7:12:b9:96:4e:3c: 15:48:57:bd:15:74:67:95:a0:26:54:7e:81:ca:9f: 48:ee:63:bc:5a:e5:41:39:ff:b0:03:e8:2a:64:26: 75:bf:cd:39:fd:45:54:30:81:a9:7b:12:5c:49:09: 8b:97:08:25:92:98:3d:e6:f4:bb:6c:ea:a0:eb:74: 22:e2:55:56:d6:b2:79:30:49:05:d1:61:dd:55:1b: b4:c8:29:57:14:af:6c:56:01:56:1e:d6:91:ea:cc: 30:e5:14:5e:27:f9:27:7c:8f:ad:7e:e3:89:f7:53: a7:62:07:b3:3c:56:4a:be:b4:9e:35:08:92:20:09: fd:e0:92:3c:4f:86:49:f3:fb:2a:8e:15:1c:d7:e8: 50:51:0d:ac:c3:06:81:9a:a9:dc:97:42:40:8d:00: 5b:34:69:f7:a6:84:84:d8:e2:a8:07:f6:9d:c1:4b: 41:68:d1:59:df:15:b8:97:e8:cc:84:3f:7a:c7:38: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:28:CC:7B:7F:66:99:16:1F:66:75:50:20:29:C6:64:E3:AF:57:B0 X509v3 Authority Key Identifier: keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/D60E488E25FE11ECA0EAA583C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.176.0/23 IPv6: 2001:df4:f180::/48 Signature Algorithm: sha256WithRSAEncryption 49:8d:1b:03:d1:f8:07:7d:bb:d3:a1:b8:f1:87:48:9b:47:b6: 2c:51:e1:b8:57:f2:87:a3:9f:dc:b7:a9:c0:c3:cf:f3:b7:5e: 4b:af:47:07:93:d2:4e:d8:e6:c9:bf:9e:09:aa:12:cb:82:ca: 1a:79:be:5d:0c:92:31:24:d9:1c:aa:44:f7:9d:ca:3e:61:b5: 30:5d:c7:e9:4c:d0:35:c0:61:9c:79:7b:d5:90:a7:23:53:f9: 5f:62:19:9a:2e:a7:a7:63:66:cd:80:9a:ad:24:30:f8:8d:bd: 0f:f9:09:52:16:3c:4c:74:a8:83:2b:29:ce:4a:ff:59:3c:81: b1:5b:fc:58:58:81:e2:7e:5c:40:81:e4:12:f4:33:d8:c3:26: 08:a0:46:17:93:dd:be:45:d4:42:9c:34:dc:09:31:6a:e0:9e: d4:91:53:e8:63:d3:bf:0b:31:96:3e:ba:b9:20:75:f0:b4:3b: dd:52:64:0d:8a:0f:f2:0f:f4:54:2c:7b:f5:34:fb:12:f9:a9: 75:90:20:4a:07:0d:9b:ff:84:8e:5e:a9:5a:8c:bd:ce:e1:63: 06:2f:f8:9a:a6:40:fb:42:59:a6:dd:b0:7e:69:8e:e0:e7:7c: 6e:3b:02:15:83:52:40:6c:ed:54:05:e3:d7:32:04:41:7e:ec: b6:be:1e:6f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5QzgxMTAvBgNVBAUTKEZFRUE2MTQzOUEzMDk4Qjg1Q0NCMTgzQjVBNDFBQTEy QUY0NUNBMUUwHhcNMjMxMDMxMjI1MTAxWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQxODRkNS1lMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XKJGYMIkJ2x7ExI2O13rhQfKaPOmijOotcult9FJ/FRFDUWAk2sOltK8ZDD wRh9+yR3tma1RB7e1kd69Y12YKwwwtu3ErmWTjwVSFe9FXRnlaAmVH6Byp9I7mO8 WuVBOf+wA+gqZCZ1v805/UVUMIGpexJcSQmLlwglkpg95vS7bOqg63Qi4lVW1rJ5 MEkF0WHdVRu0yClXFK9sVgFWHtaR6sww5RReJ/knfI+tfuOJ91OnYgezPFZKvrSe NQiSIAn94JI8T4ZJ8/sqjhUc1+hQUQ2swwaBmqncl0JAjQBbNGn3poSE2OKoB/ad wUtBaNFZ3xW4l+jMhD96xzg8TwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFH4ozHt/ ZpkWH2Z1UCApxmTjr1ewMB8GA1UdIwQYMBaAFP7qYUOaMJi4XMsYO1pBqhKvRcoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTlDOC9GNUE1RUVBQTAx NDExMUVCQTMzRjhFMTFDNEY5QUUwMi9fdXBoUTVvd21MaGN5eGc3V2tHcUVxOUZ5 aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191cGhRNW93bUxoY3l4ZzdXa0dxRXE5RnloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTE5QzgvRjVBNUVFQUEwMTQxMTFFQkEzM0Y4RTExQzRGOUFFMDIvRDYwRTQ4OEUy NUZFMTFFQ0EwRUFBNTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnLAwDwQCAAIwCQMHACABDfTxgDANBgkqhkiG9w0BAQsF AAOCAQEASY0bA9H4B32706G48YdIm0e2LFHhuFfyh6Of3LepwMPP87deS69HB5PS Ttjmyb+eCaoSy4LKGnm+XQySMSTZHKpE953KPmG1MF3H6UzQNcBhnHl71ZCnI1P5 X2IZmi6np2NmzYCarSQw+I29D/kJUhY8THSogyspzkr/WTyBsVv8WFiB4n5cQIHk EvQz2MMmCKBGF5PdvkXUQpw03AkxauCe1JFT6GPTvwsxlj66uSB18LQ73VJkDYoP 8g/0VCx79TT7EvmpdZAgSgcNm/+Ejl6pWoy9zuFjBi/4mqZA+0JZpt2wfmmO4Od8 bjsCFYNSQGztVAXj1zIEQX7str4ebw== -----END CERTIFICATE-----Generated at Sun May 19 00:30:19 2024 by rpki-client on console-ams.rpki-client.org