$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/AD7A378C334411EB901EBB81C4F9AE02.roa File: AD7A378C334411EB901EBB81C4F9AE02.roa (raw, json) Hash identifier: S37wpIPSKlGYZDu3ywFrmoBX/a7GYNX3mN+QFGuswMg= Subject key identifier: A1:1D:BB:AE:AE:C2:42:A6:C1:CA:8B:EA:CD:E0:C5:53:DC:E9:03:26 Certificate issuer: /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Certificate serial: 061B Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/AD7A378C334411EB901EBB81C4F9AE02.roa Signing time: Tue 12 Dec 2023 23:31:40 +0000 ROA not before: Tue 12 Dec 2023 23:31:40 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 141413 IP address blocks: 103.158.176.0/24 maxlen: 24 2001:df5:5e80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 23:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1563 (0x61b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Validity Not Before: Dec 12 23:31:40 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6578ed5c-18c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:46:38:8e:58:4b:83:24:08:26:48:9a:50: d0:ae:a4:c8:19:fe:68:7a:14:75:64:8c:b8:dd:9f: 43:f9:db:6b:a1:11:4b:ab:00:4b:f2:5e:6a:f1:86: 2d:00:40:82:d8:2d:1b:6f:ce:20:f2:6d:97:37:09: c3:dc:fc:c2:a1:00:7c:25:a6:a7:e2:8b:84:7f:3d: 50:3c:a7:f1:b6:65:d5:1d:c8:db:ac:18:05:e4:b3: 40:fa:cd:4d:4a:39:6b:a8:95:9c:9d:80:d9:fa:20: c6:52:1e:28:26:47:68:b5:45:41:7b:ed:f1:70:43: ad:04:af:c0:51:41:a4:71:e8:5a:20:d1:38:05:a4: 86:28:14:bf:8d:06:20:cd:c8:35:48:f7:31:56:23: f8:c3:a5:f1:77:90:c0:6e:33:84:c3:65:05:4d:30: 39:0b:cd:6e:ee:b2:7c:8d:e1:99:13:b7:e1:76:d6: be:5c:f2:7f:46:30:8f:2f:74:85:54:34:5f:4d:65: c5:ea:9b:bd:56:ca:1c:b7:27:5d:1a:0b:9b:8b:79: e7:11:c9:83:b8:1f:a7:1b:9f:a9:db:b5:27:06:3c: 76:77:d7:ae:0d:30:ae:69:db:f6:68:1d:99:a8:3b: e2:f3:42:d2:7a:a1:ee:56:24:79:5d:0a:9b:45:c2: 58:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1D:BB:AE:AE:C2:42:A6:C1:CA:8B:EA:CD:E0:C5:53:DC:E9:03:26 X509v3 Authority Key Identifier: keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/AD7A378C334411EB901EBB81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.176.0/24 IPv6: 2001:df5:5e80::/48 Signature Algorithm: sha256WithRSAEncryption 2e:21:6c:c9:d7:f0:63:77:16:be:69:5e:ec:c1:03:d1:47:8e: 97:e0:62:7d:dc:85:a2:55:d6:92:a9:ab:10:ed:37:50:71:c1: cd:09:15:f0:73:76:49:f5:38:03:2e:5f:7e:1c:17:5c:b2:53: ca:e6:38:dc:25:b8:28:f2:85:a0:af:84:01:0d:86:ae:e4:ac: 51:cb:e3:85:b2:0c:60:85:d7:e0:f2:d2:13:8d:09:92:9b:90: ba:f0:01:36:5f:bf:37:dd:30:f1:ae:d1:dc:cc:ef:85:77:c5: 91:24:d4:b2:9e:c0:39:0a:15:51:2a:6d:ba:22:d1:c9:6e:ae: ba:5d:db:d3:cd:9b:df:ba:5a:cc:aa:e8:06:12:fa:c8:5c:e0: e4:4f:49:01:1d:b3:49:36:46:bd:f7:09:f0:92:1c:40:68:14: b3:02:ee:1e:2b:1c:8e:c1:b4:4b:b1:4e:84:80:8e:2c:2c:ff: 75:b7:42:53:75:9e:76:dc:02:09:03:12:fb:65:b1:7e:33:ca: 92:0a:ae:01:ee:2b:47:b4:f7:d2:50:cf:0d:ed:98:00:f4:93: d8:0b:75:fa:ae:1c:92:08:3e:a6:aa:bd:7d:48:35:05:05:98: 12:59:8f:06:f9:db:47:82:a4:b3:f8:07:3b:bc:c9:69:73:3d: 63:b1:5c:b2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEwNTMxMTAvBgNVBAUTKEY5MkE3NTBCNTI0Nzk0RDRGQkJGMjE4ODVCREFGNkQw NzhGMUU4ODEwHhcNMjMxMjEyMjMzMTQwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTc4ZWQ1Yy0xOGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaJGOI5YS4MkCCZImlDQrqTIGf5oehR1ZIy43Z9D+dtroRFLqwBL8l5q8YYt AECC2C0bb84g8m2XNwnD3PzCoQB8Jaan4ouEfz1QPKfxtmXVHcjbrBgF5LNA+s1N SjlrqJWcnYDZ+iDGUh4oJkdotUVBe+3xcEOtBK/AUUGkcehaINE4BaSGKBS/jQYg zcg1SPcxViP4w6Xxd5DAbjOEw2UFTTA5C81u7rJ8jeGZE7fhdta+XPJ/RjCPL3SF VDRfTWXF6pu9VsoctyddGgubi3nnEcmDuB+nG5+p27UnBjx2d9euDTCuadv2aB2Z qDvi80LSeqHuViR5XQqbRcJYbwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKEdu66u wkKmwcqL6s3gxVPc6QMmMB8GA1UdIwQYMBaAFPkqdQtSR5TU+78hiFva9tB48eiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My9BRkI2QkY3NjMz NDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxOVDd2eUdJVzlyMjBIang2 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcDFDMUpIbE5UN3Z5R0lXOXIyMEhqeDZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUEwNTMvQUZCNkJGNzYzMzQzMTFFQkI1MzY1RTgxQzRGOUFFMDIvQUQ3QTM3OEMz MzQ0MTFFQjkwMUVCQjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnnrAwDwQCAAIwCQMHACABDfVegDANBgkqhkiG9w0BAQsF AAOCAQEALiFsydfwY3cWvmle7MED0UeOl+BifdyFolXWkqmrEO03UHHBzQkV8HN2 SfU4Ay5ffhwXXLJTyuY43CW4KPKFoK+EAQ2GruSsUcvjhbIMYIXX4PLSE40JkpuQ uvABNl+/N90w8a7R3MzvhXfFkSTUsp7AOQoVUSptuiLRyW6uul3b082b37pazKro BhL6yFzg5E9JAR2zSTZGvfcJ8JIcQGgUswLuHiscjsG0S7FOhICOLCz/dbdCU3We dtwCCQMS+2WxfjPKkgquAe4rR7T30lDPDe2YAPST2At1+q4ckgg+pqq9fUg1BQWY ElmPBvnbR4Kks/gHO7zJaXM9Y7Fcsg== -----END CERTIFICATE-----Generated at Thu May 23 01:36:33 2024 by rpki-client on console-fra.rpki-client.org