$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa File: A99E5658488011EE8113A766C4F9AE02.roa (raw, json) Hash identifier: 8Dn//xxk+Kx/zIBBYcJin19jgdcY8gKSviqPRnpbGGQ= Subject key identifier: F0:D5:99:F8:9B:F1:DE:E3:9A:EA:33:02:02:4C:99:5B:EB:29:F9:C6 Certificate issuer: /CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1 Certificate serial: 13 Authority key identifier: F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa Signing time: Fri 29 Sep 2023 05:46:53 +0000 ROA not before: Fri 29 Sep 2023 05:46:53 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 141047 IP address blocks: 103.155.68.0/23 maxlen: 23 103.155.68.0/24 maxlen: 24 103.155.69.0/24 maxlen: 24 2406:6940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1 Validity Not Before: Sep 29 05:46:53 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651664cd-305c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:8c:cb:c9:98:bd:d3:63:43:70:63:1f:d0: 74:15:db:68:ab:b8:cd:a0:e8:36:15:7e:7b:14:9b: c2:21:b3:d2:19:7c:88:64:9d:e1:1f:90:12:70:13: ff:66:67:f7:c2:5d:6f:1b:fc:29:1e:56:15:c2:47: fe:ad:09:23:a1:1d:e1:3a:44:33:66:88:7c:04:92: 06:b4:b4:96:07:98:b0:4c:a9:ef:5b:4d:88:40:0b: b5:6b:e4:12:32:7f:73:74:dd:3c:54:2c:d4:fb:07: 42:2a:27:d9:ea:7a:3d:a9:e2:de:4e:23:32:96:a9: 33:11:e9:0c:83:5b:1b:4e:74:24:54:1e:97:24:e5: 85:07:32:09:7e:9b:99:28:42:49:de:bf:b0:f0:e6: e6:04:d3:98:00:d3:eb:07:4c:4a:34:99:6e:92:a0: c4:5b:dc:f7:20:84:20:fd:e6:92:55:2f:13:92:84: fa:b8:b3:7d:ff:36:10:bb:8b:d9:df:be:a6:0e:c9: 97:13:38:e5:c9:99:cb:8f:23:3e:1e:2d:96:4a:ee: 9e:9b:88:85:e4:65:29:c3:28:83:8f:bb:2a:25:24: 47:5a:0c:d1:aa:ba:7d:e8:b5:6a:9e:36:2a:77:79: ca:08:e9:f2:0f:70:91:f9:f3:1c:aa:8c:41:46:b3: 58:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D5:99:F8:9B:F1:DE:E3:9A:EA:33:02:02:4C:99:5B:EB:29:F9:C6 X509v3 Authority Key Identifier: keyid:F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.68.0/23 IPv6: 2406:6940::/32 Signature Algorithm: sha256WithRSAEncryption 85:2e:dc:60:2e:01:b3:d9:be:e3:6c:ae:f0:93:58:d4:ee:da: e7:13:49:32:2d:c9:57:6f:d9:e1:c8:fd:1a:b4:a6:65:df:f7: 5b:9e:0b:d0:8c:15:47:c7:ac:3d:2b:d6:a6:0b:30:a5:5a:7c: 3f:f0:ec:8e:f5:c5:61:0b:33:cb:0e:e1:85:d2:fd:85:a3:27: f6:48:ea:83:3f:1c:e9:eb:84:a7:42:0e:f1:5f:8b:18:e7:a3: e8:a5:5d:37:61:9b:20:25:32:52:30:3d:30:78:33:ff:f7:09: c3:68:52:eb:2b:eb:14:11:b3:b6:de:ea:13:5b:ab:80:7a:62: a6:4e:ab:da:45:7e:bb:5b:09:ba:f3:80:9c:58:e5:c2:d2:6e: b4:78:6b:e6:86:8d:7c:d7:d4:e5:fd:79:e0:80:fb:b1:ae:a5: 93:7c:e2:2d:2c:93:3e:75:e4:d5:9f:d5:e3:03:f6:39:d3:ea: 6c:27:12:74:37:ff:73:f8:a4:97:b3:d1:20:0a:b0:ab:aa:b9: e7:91:cd:3d:9c:10:2d:0f:b7:f1:56:5a:d5:31:9c:27:ca:3c: ea:7e:53:c2:fc:0e:e4:77:db:c9:70:ba:07:86:c9:5d:c5:25: f4:8c:c9:b7:36:4f:97:de:52:3d:8e:b9:bc:86:2d:62:3d:47: 72:f2:91:47 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzM2OTExMC8GA1UEBRMoRjkwRTIxMEZDRTdDNjdBMkYyQjMyREUxNEVFQjA1QTA0 QjBEMTBFMTAeFw0yMzA5MjkwNTQ2NTNaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MTY2NGNkLTMwNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4eIzLyZi902NDcGMf0HQV22iruM2g6DYVfnsUm8Ihs9IZfIhkneEfkBJwE/9m Z/fCXW8b/CkeVhXCR/6tCSOhHeE6RDNmiHwEkga0tJYHmLBMqe9bTYhAC7Vr5BIy f3N03TxULNT7B0IqJ9nqej2p4t5OIzKWqTMR6QyDWxtOdCRUHpck5YUHMgl+m5ko Qknev7Dw5uYE05gA0+sHTEo0mW6SoMRb3PcghCD95pJVLxOShPq4s33/NhC7i9nf vqYOyZcTOOXJmcuPIz4eLZZK7p6biIXkZSnDKIOPuyolJEdaDNGqun3otWqeNip3 ecoI6fIPcJH58xyqjEFGs1itAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU8NWZ+Jvx 3uOa6jMCAkyZW+sp+cYwHwYDVR0jBBgwFoAU+Q4hD858Z6Lysy3hTusFoEsNEOEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MzY5L0IxRDYxOTQyNDg3 RjExRUVBODBBMDI0Q0M0RjlBRTAyLy1RNGhEODU4WjZMeXN5M2hUdXNGb0VzTkVP RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLVE0aEQ4NThaNkx5c3kzaFR1c0ZvRXNORU9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzM2OS9CMUQ2MTk0MjQ4N0YxMUVFQTgwQTAyNENDNEY5QUUwMi9BOTlFNTY1ODQ4 ODAxMUVFODExM0E3NjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWebRDANBAIAAjAHAwUAJAZpQDANBgkqhkiG9w0BAQsFAAOC AQEAhS7cYC4Bs9m+42yu8JNY1O7a5xNJMi3JV2/Z4cj9GrSmZd/3W54L0IwVR8es PSvWpgswpVp8P/DsjvXFYQszyw7hhdL9haMn9kjqgz8c6euEp0IO8V+LGOej6KVd N2GbICUyUjA9MHgz//cJw2hS6yvrFBGztt7qE1urgHpipk6r2kV+u1sJuvOAnFjl wtJutHhr5oaNfNfU5f154ID7sa6lk3ziLSyTPnXk1Z/V4wP2OdPqbCcSdDf/c/ik l7PRIAqwq6q555HNPZwQLQ+38VZa1TGcJ8o86n5TwvwO5HfbyXC6B4bJXcUl9IzJ tzZPl95SPY65vIYtYj1HcvKRRw== -----END CERTIFICATE-----Generated at Fri Jun 7 08:57:13 2024 by rpki-client on console-fra.rpki-client.org