$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/68DA14E65BB211E9BF474F16C4F9AE02.roa File: 68DA14E65BB211E9BF474F16C4F9AE02.roa (raw, json) Hash identifier: m7Wy3YFoVjfJbST/TvC6OeEgaS0QkcmFqzNu4bjOVjA= Subject key identifier: BC:D1:52:03:F2:E4:FF:4B:E9:4D:80:F4:B9:B1:F3:D7:97:7B:E7:E0 Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D Certificate serial: 0EF1 Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/68DA14E65BB211E9BF474F16C4F9AE02.roa Signing time: Wed 08 May 2024 18:37:05 +0000 ROA not before: Wed 08 May 2024 18:37:05 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 1828 IP address blocks: 103.38.152.0/24 maxlen: 24 103.38.153.0/24 maxlen: 24 103.38.154.0/24 maxlen: 24 103.38.155.0/24 maxlen: 24 111.221.56.0/22 maxlen: 22 202.58.136.0/21 maxlen: 21 2401:5dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 18:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3825 (0xef1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D Validity Not Before: May 8 18:37:05 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=663bc651-df53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c8:6c:ab:05:d5:3b:e8:2f:e6:11:f7:8f:97: d3:05:73:9b:d5:db:f1:bc:20:d9:a6:a7:f6:00:e6: 17:d2:42:5b:d5:fb:fa:a1:d8:df:a2:d0:a4:1a:f3: e8:1b:f5:df:88:09:71:31:f5:11:78:b0:64:bd:47: 74:d3:31:5d:e5:98:b9:10:a5:cf:26:30:cd:17:5c: 1a:69:96:ef:80:8b:c5:13:5c:41:c1:3c:ef:78:f0: d1:b7:57:b3:2f:b9:15:ad:15:db:b0:9b:e3:04:ac: ad:8d:92:49:c0:cb:fd:58:0c:1d:55:c3:48:df:8e: 03:bb:23:11:c4:9e:d4:39:35:bc:52:73:85:55:b6: ed:fc:06:4b:59:e3:9e:e6:b4:96:f4:51:e3:67:2c: 7e:63:94:f1:93:9b:31:a0:e4:44:4f:a7:32:94:64: eb:83:65:43:f5:40:5f:26:38:86:4b:f4:a9:c5:9c: 63:21:c0:10:b8:b2:b1:23:d3:27:8e:4b:29:62:0b: c7:7c:3c:f4:1a:47:22:3a:77:77:7f:9f:af:79:f0: d4:12:4b:31:b6:c3:24:38:98:7f:b0:53:df:38:3d: 6d:33:56:f1:7b:88:ce:17:a2:ee:38:7f:ce:08:59: 46:e7:4d:50:cd:58:6f:2a:3e:57:eb:e2:88:bf:cd: 1b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D1:52:03:F2:E4:FF:4B:E9:4D:80:F4:B9:B1:F3:D7:97:7B:E7:E0 X509v3 Authority Key Identifier: keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/68DA14E65BB211E9BF474F16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.38.152.0/22 111.221.56.0/22 202.58.136.0/21 IPv6: 2401:5dc0::/32 Signature Algorithm: sha256WithRSAEncryption 26:49:c9:73:43:0b:2f:8c:9c:08:75:b7:8c:78:a0:05:82:43: b4:70:db:39:25:b9:b5:6d:a4:5f:c7:14:4b:cf:7c:fd:bf:81: 47:7e:ea:c2:ce:9c:8c:45:8c:7a:fc:eb:6a:16:51:d8:61:f9: 0d:5a:4b:75:e2:09:36:45:04:f5:10:02:e9:6e:5a:68:57:13: 48:72:d9:5b:c7:d4:af:67:ef:00:bb:db:ad:80:ec:dc:5c:dc: 02:c0:36:30:0a:e8:b9:b3:2f:4b:c8:8b:d8:bf:58:fc:08:d5: b0:66:f2:1a:e2:06:69:f1:30:a6:89:be:e2:08:96:60:53:56: ac:e7:62:c7:a4:c2:0a:95:ca:6a:07:57:67:e4:e3:00:43:c7: ef:44:13:21:31:29:ac:84:56:9e:45:71:da:37:68:22:f7:6a: ee:9b:f4:f1:12:06:8a:c4:9a:03:ca:cc:ca:de:b2:e6:62:ca: df:c0:3c:1f:93:00:cc:81:e4:d9:dd:0d:14:f8:b6:3c:f7:0d: 84:48:77:49:35:75:82:31:fc:e6:61:4d:a0:a0:78:79:4a:81: 18:c7:94:70:c6:0d:21:8c:52:4e:90:34:03:23:31:6e:76:69: 01:90:25:64:45:fa:4d:da:53:de:b1:3f:f7:82:06:e2:31:88: 0c:aa:02:c2 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICDvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy Q0Y3OTI5NEQwHhcNMjQwNTA4MTgzNzA1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjNiYzY1MS1kZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3shsqwXVO+gv5hH3j5fTBXOb1dvxvCDZpqf2AOYX0kJb1fv6odjfotCkGvPo G/XfiAlxMfUReLBkvUd00zFd5Zi5EKXPJjDNF1waaZbvgIvFE1xBwTzvePDRt1ez L7kVrRXbsJvjBKytjZJJwMv9WAwdVcNI344DuyMRxJ7UOTW8UnOFVbbt/AZLWeOe 5rSW9FHjZyx+Y5Txk5sxoORET6cylGTrg2VD9UBfJjiGS/SpxZxjIcAQuLKxI9Mn jkspYgvHfDz0GkciOnd3f5+vefDUEksxtsMkOJh/sFPfOD1tM1bxe4jOF6LuOH/O CFlG501QzVhvKj5X6+KIv80blwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFLzRUgPy 5P9L6U2A9Lmx89eXe+fgMB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFMTYvMTc0ODg1NTA1QkIxMTFFOThCMTAzQjEzQzRGOUFFMDIvNjhEQTE0RTY1 QkIyMTFFOUJGNDc0RjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnJpgDBAJv3TgDBAPKOogwDQQCAAIwBwMFACQBXcAwDQYJ KoZIhvcNAQELBQADggEBACZJyXNDCy+MnAh1t4x4oAWCQ7Rw2zklubVtpF/HFEvP fP2/gUd+6sLOnIxFjHr862oWUdhh+Q1aS3XiCTZFBPUQAuluWmhXE0hy2VvH1K9n 7wC7262A7Nxc3ALANjAK6LmzL0vIi9i/WPwI1bBm8hriBmnxMKaJvuIIlmBTVqzn YsekwgqVymoHV2fk4wBDx+9EEyExKayEVp5Fcdo3aCL3au6b9PESBorEmgPKzMre suZiyt/APB+TAMyB5NndDRT4tjz3DYRId0k1dYIx/OZhTaCgeHlKgRjHlHDGDSGM Uk6QNAMjMW52aQGQJWRF+k3aU96xP/eCBuIxiAyqAsI= -----END CERTIFICATE-----Generated at Sun Jun 2 19:20:00 2024 by rpki-client on console-fra.rpki-client.org