$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/DCB6CBAC7F6111EE871E1458C4F9AE02.roa File: DCB6CBAC7F6111EE871E1458C4F9AE02.roa (raw, json) Hash identifier: QskQcbNe8+dEHW1kWpOC4qbtbsKjRaWI8+eIj9XFZHs= Subject key identifier: 08:91:10:3A:A7:7A:5B:3F:0A:F9:73:0A:FA:64:FC:87:0A:B1:60:BD Certificate issuer: /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Certificate serial: 33AA Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/DCB6CBAC7F6111EE871E1458C4F9AE02.roa Signing time: Tue 21 Nov 2023 00:39:13 +0000 ROA not before: Tue 21 Nov 2023 00:39:13 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 151605 IP address blocks: 103.112.36.0/22 maxlen: 22 180.189.160.0/20 maxlen: 20 2405:1f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13226 (0x33aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Validity Not Before: Nov 21 00:39:13 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=655bfc31-4ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:bf:2b:22:26:a1:c6:3e:39:30:98:9d:8e: 6c:fc:f9:ca:06:97:f8:91:7e:1a:4f:e2:ff:60:68: e1:f7:1c:6b:76:2d:8f:64:ac:58:0a:b8:33:0b:60: f0:b7:50:7a:92:6f:f3:f3:57:8c:4d:fe:ec:3c:c3: 84:31:93:e5:3f:05:44:93:9e:c7:ff:b7:fd:60:5b: 5c:ba:c3:fe:88:82:ba:66:7e:b4:1c:21:0f:bf:84: 59:91:10:20:13:13:21:6f:78:70:75:8c:9a:63:5b: ae:f2:8d:59:be:be:fc:a5:bc:50:c0:de:9c:19:ab: 0d:c1:1a:6b:44:60:92:11:95:18:75:ef:92:2e:c0: 3e:82:e2:72:7e:d8:8c:2f:6f:5f:5f:0e:a9:72:41: 39:75:90:4c:da:4e:dd:aa:83:ef:3f:5f:f4:a8:8f: 5d:8f:31:47:ee:50:ec:24:ef:cb:74:22:11:f5:5c: f2:f2:b0:3d:5b:a2:1d:d6:54:14:c5:ea:74:dd:ec: 5f:e2:e7:ed:bd:0c:e1:e5:36:71:57:d5:af:fb:5e: 53:a2:b1:50:8c:2c:95:ce:84:2b:82:60:a1:a3:ac: b1:ad:54:e3:bf:0e:62:8b:d5:f0:1b:de:40:d7:53: b9:51:0c:51:85:0f:20:31:4e:f5:47:96:81:83:75: fd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:91:10:3A:A7:7A:5B:3F:0A:F9:73:0A:FA:64:FC:87:0A:B1:60:BD X509v3 Authority Key Identifier: keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/DCB6CBAC7F6111EE871E1458C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.36.0/22 180.189.160.0/20 IPv6: 2405:1f00::/32 Signature Algorithm: sha256WithRSAEncryption 79:23:62:23:c5:98:36:38:43:e6:f3:1d:c3:5b:70:b8:88:55: fb:07:34:f0:e1:0c:99:ec:72:ad:67:2f:4c:72:3e:8b:be:ad: cb:82:91:42:74:2e:0f:d3:98:be:f9:94:e2:1b:ce:22:09:7a: 8a:f4:50:f6:cd:16:ca:d4:3c:ed:68:9c:96:e2:44:ff:24:8d: 14:52:7b:b1:b2:0d:9d:bb:15:1d:c1:d1:12:b3:42:b3:25:e2: 9b:54:2b:74:e8:38:7c:77:0f:19:e0:98:2a:7b:31:97:59:95: 8c:79:f4:9a:5a:45:29:be:50:65:9d:38:34:ce:56:67:36:14: 96:c2:54:2b:06:84:3f:59:11:3c:0a:7c:14:40:06:57:10:ef: 93:9f:43:15:f5:ef:42:6e:a2:b3:12:8b:4b:79:a8:5a:f3:8c: fd:b5:e1:c9:a0:cd:9c:fd:24:81:8a:2b:7c:30:2a:e7:ea:ec: 63:02:c5:8f:f8:1a:0e:d5:31:87:5f:34:ef:96:3c:1d:68:5e: c8:23:03:24:92:69:b2:9e:ec:08:73:e5:41:7d:c1:31:91:ae: b6:4f:54:31:6a:cd:7d:ab:1c:3b:80:4d:33:8d:31:9a:ae:83: b7:0d:bc:0b:48:6f:fd:24:fe:86:78:72:42:bf:b9:84:75:26: 23:3a:a2:d4 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICM6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThEMjIxMTAvBgNVBAUTKEE2ODNGNjcyNEMwMkExM0YyRDM5Q0YyRjIxNTAwQkUw MDM4MERERTMwHhcNMjMxMTIxMDAzOTEzWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTViZmMzMS00YWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMG/KyImocY+OTCYnY5s/PnKBpf4kX4aT+L/YGjh9xxrdi2PZKxYCrgzC2Dw t1B6km/z81eMTf7sPMOEMZPlPwVEk57H/7f9YFtcusP+iIK6Zn60HCEPv4RZkRAg ExMhb3hwdYyaY1uu8o1Zvr78pbxQwN6cGasNwRprRGCSEZUYde+SLsA+guJyftiM L29fXw6pckE5dZBM2k7dqoPvP1/0qI9djzFH7lDsJO/LdCIR9Vzy8rA9W6Id1lQU xep03exf4uftvQzh5TZxV9Wv+15TorFQjCyVzoQrgmCho6yxrVTjvw5ii9XwG95A 11O5UQxRhQ8gMU71R5aBg3X9UwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAiREDqn els/CvlzCvpk/IcKsWC9MB8GA1UdIwQYMBaAFKaD9nJMAqE/LTnPLyFQC+ADgN3j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEQyMi8yNTI2OTc5ODFE OTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29UOHRPYzh2SVZBTDRBT0Ez ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvUDJja3dDb1Q4dE9jOHZJVkFMNEFPQTNlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThEMjIvMjUyNjk3OTgxRDkyMTFFMkI2MThDQUY0MDhCMDJDRDIvRENCNkNCQUM3 RjYxMTFFRTg3MUUxNDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJncCQDBAS0vaAwDQQCAAIwBwMFACQFHwAwDQYJKoZIhvcN AQELBQADggEBAHkjYiPFmDY4Q+bzHcNbcLiIVfsHNPDhDJnscq1nL0xyPou+rcuC kUJ0Lg/TmL75lOIbziIJeor0UPbNFsrUPO1onJbiRP8kjRRSe7GyDZ27FR3B0RKz QrMl4ptUK3ToOHx3DxngmCp7MZdZlYx59JpaRSm+UGWdODTOVmc2FJbCVCsGhD9Z ETwKfBRABlcQ75OfQxX170JuorMSi0t5qFrzjP214cmgzZz9JIGKK3wwKufq7GMC xY/4Gg7VMYdfNO+WPB1oXsgjAySSabKe7Ahz5UF9wTGRrrZPVDFqzX2rHDuATTON MZqug7cNvAtIb/0k/oZ4ckK/uYR1JiM6otQ= -----END CERTIFICATE-----Generated at Wed May 8 15:19:10 2024 by rpki-client on console-fra.rpki-client.org