$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/206DDC4A77AF11EB8E972C66C4F9AE02.roa File: 206DDC4A77AF11EB8E972C66C4F9AE02.roa (raw, json) Hash identifier: BUJL28WoiCfZKWbGeIJLwPyoVTA4y1TM9oPGHN4lNNY= Subject key identifier: 37:8D:5B:81:27:C4:C1:0D:B1:62:7E:74:A2:66:2F:32:9B:92:5F:32 Certificate issuer: /CN=A91AD544/serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932 Certificate serial: 059C Authority key identifier: 01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/206DDC4A77AF11EB8E972C66C4F9AE02.roa Signing time: Fri 01 Mar 2024 00:13:31 +0000 ROA not before: Fri 01 Mar 2024 00:13:31 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 131464 IP address blocks: 103.109.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 00:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD544/serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932 Validity Not Before: Mar 1 00:13:31 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65e11dab-e347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:32:54:2b:49:8a:b7:c2:b0:21:39:ab:25: cf:48:e3:2a:0c:e6:63:c0:cf:6d:6d:ae:e2:9d:29: dd:5a:af:77:96:01:6f:88:dd:6a:78:e8:79:db:38: 0c:79:ab:6d:95:83:21:8f:ee:fa:4d:ac:bb:6f:cb: 20:a5:42:21:ec:75:60:9d:d9:78:80:65:d8:00:bf: 63:b8:c1:33:7c:e2:c7:50:20:6f:76:ce:23:42:4d: d2:81:bb:70:13:f9:f9:9f:62:df:2d:20:4f:d7:18: f3:b1:3a:d8:07:20:c1:ee:6f:09:9f:e3:44:22:05: 26:f0:87:de:55:96:95:05:ed:e0:8e:cb:20:18:3e: 5a:3b:78:15:71:89:f4:2a:07:df:9c:ff:36:a8:e0: e9:f7:0e:94:dc:d0:51:f1:f5:ee:8b:b5:31:b4:ec: 1c:7d:b2:bd:2d:e2:5e:c7:97:fc:d6:85:59:18:82: bd:c2:21:9b:fd:c0:bc:a6:a0:e4:fc:28:64:15:2e: 7c:c4:c1:8f:34:b6:60:97:2e:83:f8:13:68:4e:4f: 50:9b:c9:c7:24:94:9f:be:e2:cc:4e:f0:69:7d:84: 30:33:70:24:5c:ac:ec:9e:aa:66:24:a2:e7:19:47: 2c:ef:4a:7b:b3:42:b8:2d:a6:04:d9:06:7c:24:76: 9c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8D:5B:81:27:C4:C1:0D:B1:62:7E:74:A2:66:2F:32:9B:92:5F:32 X509v3 Authority Key Identifier: keyid:01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/206DDC4A77AF11EB8E972C66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.96.0/22 Signature Algorithm: sha256WithRSAEncryption a8:e1:71:df:31:f3:4d:9d:09:e9:1f:c6:01:4d:ca:dd:0c:e4: 1f:ac:d9:ad:3b:a9:0e:7b:c6:e6:94:d7:af:d6:93:4a:b3:b1: a0:78:45:be:c7:c6:af:5f:fb:ed:29:15:1a:da:c2:02:ee:f5: 7c:da:88:19:77:3e:c6:ff:5c:74:0b:71:fd:d6:49:f6:12:14: b3:59:06:6c:0f:c1:e4:44:41:ed:b0:f1:c9:87:61:8e:bb:ca: 5e:c7:08:29:dd:1c:af:ae:09:06:2b:3d:43:b3:7f:46:8d:d1: bc:6f:6c:28:2b:43:6d:1f:ee:8b:74:a6:a2:c5:09:c0:f0:ef: 94:03:a1:0a:c2:ad:30:81:d2:93:5c:10:04:b4:54:4c:38:19: e4:cc:53:b4:3a:17:0d:a7:66:d7:13:6b:2b:28:e0:13:42:7d: 76:e9:7c:5e:56:d5:15:cc:e4:6d:6d:d5:81:1a:ff:bf:eb:c0: 06:b5:ef:bc:4a:0d:e6:ee:93:0e:52:d5:af:de:b8:d8:b7:32: 39:0c:c2:56:9c:9c:12:e3:5e:e1:80:bd:84:80:3a:70:5f:fc: ae:7d:f8:a7:75:82:5b:f4:33:b0:b6:a0:8d:f0:71:a6:6a:f4: 5e:fe:03:44:47:0d:be:12:fb:0f:67:6f:5d:a8:54:e3:a1:48: cb:7c:c7:06 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ1NDQxMTAvBgNVBAUTKDAxNjVBOURDQzAyQkMwRTg3Njg3RUUwNjcwNUMwRTZD OTkyREU5MzIwHhcNMjQwMzAxMDAxMzMxWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUxMWRhYi1lMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEQyVCtJirfCsCE5qyXPSOMqDOZjwM9tba7inSndWq93lgFviN1qeOh52zgM eattlYMhj+76Tay7b8sgpUIh7HVgndl4gGXYAL9juMEzfOLHUCBvds4jQk3Sgbtw E/n5n2LfLSBP1xjzsTrYByDB7m8Jn+NEIgUm8IfeVZaVBe3gjssgGD5aO3gVcYn0 KgffnP82qODp9w6U3NBR8fXui7UxtOwcfbK9LeJex5f81oVZGIK9wiGb/cC8pqDk /ChkFS58xMGPNLZgly6D+BNoTk9Qm8nHJJSfvuLMTvBpfYQwM3AkXKzsnqpmJKLn GUcs70p7s0K4LaYE2QZ8JHaczwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDeNW4En xMENsWJ+dKJmLzKbkl8yMB8GA1UdIwQYMBaAFAFlqdzAK8DodofuBnBcDmyZLeky MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDU0NC80NTlDODlFNDc1 RjIxMUVCQTNFRDM2NDdDNEY5QUUwMi9BV1dwM01BcndPaDJoLTRHY0Z3T2JKa3Q2 VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FXV3AzTUFyd09oMmgtNEdjRndPYkprdDZUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUQ1NDQvNDU5Qzg5RTQ3NUYyMTFFQkEzRUQzNjQ3QzRGOUFFMDIvMjA2RERDNEE3 N0FGMTFFQjhFOTcyQzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnbWAwDQYJKoZIhvcNAQELBQADggEBAKjhcd8x802dCekf xgFNyt0M5B+s2a07qQ57xuaU16/Wk0qzsaB4Rb7Hxq9f++0pFRrawgLu9XzaiBl3 Psb/XHQLcf3WSfYSFLNZBmwPweREQe2w8cmHYY67yl7HCCndHK+uCQYrPUOzf0aN 0bxvbCgrQ20f7ot0pqLFCcDw75QDoQrCrTCB0pNcEAS0VEw4GeTMU7Q6Fw2nZtcT ayso4BNCfXbpfF5W1RXM5G1t1YEa/7/rwAa177xKDebukw5S1a/euNi3MjkMwlac nBLjXuGAvYSAOnBf/K59+Kd1glv0M7C2oI3wcaZq9F7+A0RHDb4S+w9nb12oVOOh SMt8xwY= -----END CERTIFICATE-----Generated at Tue May 21 01:47:03 2024 by rpki-client on console-fra.rpki-client.org