$ rpki-client -vvf rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/1D0E6A7027FC11EDB69DF17AC4F9AE02.roa File: 1D0E6A7027FC11EDB69DF17AC4F9AE02.roa (raw, json) Hash identifier: Do5eqn+JtnVyMoI51D6YIpBPAuypwDVxZx+TzrXg6UI= Subject key identifier: 45:04:07:FC:6A:4F:F3:9A:2A:9C:28:23:99:36:44:E4:3C:A9:E0:5C Certificate issuer: /CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Certificate serial: 0763 Authority key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/1D0E6A7027FC11EDB69DF17AC4F9AE02.roa Signing time: Mon 02 Oct 2023 21:39:10 +0000 ROA not before: Mon 02 Oct 2023 21:39:10 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 15412 IP address blocks: 103.5.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 21:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1891 (0x763) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Validity Not Before: Oct 2 21:39:10 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=651b387e-02de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a0:d3:7a:2c:64:40:4f:95:04:0a:5d:08:95: 09:32:c4:2a:2e:ea:4e:f6:e9:e2:1b:2e:c7:d4:1a: 23:31:72:95:4e:87:47:2d:e5:0b:40:39:6c:31:b4: 89:f6:12:97:60:c5:62:7d:6c:55:f9:74:e2:32:58: 10:05:c2:d7:32:40:3b:ab:1e:20:23:b3:ea:89:23: 61:5c:80:d1:b7:0c:84:1d:c5:f5:5b:d5:df:ee:c5: 94:3d:50:96:d2:ba:92:14:57:bb:52:5f:43:37:53: dd:39:93:e4:52:9a:7e:36:ea:7f:5d:35:3d:2e:9b: a7:09:b6:19:5f:36:4e:1a:56:e0:d5:88:c3:f4:95: 83:44:37:02:56:97:b8:dc:50:e5:c3:7e:e9:c7:8b: 05:5a:b4:b6:ad:df:51:c9:8b:60:1c:8b:56:a8:78: ef:ac:36:2c:1c:97:b7:e0:b3:ed:e5:31:2d:d9:b4: b7:41:e8:82:7e:98:ab:c5:d3:1c:06:40:8a:b3:77: 0c:4e:0e:ae:0c:59:54:18:00:bf:d4:1e:6b:70:0f: 8b:56:cf:fa:85:48:9a:30:77:50:53:36:4d:7c:f6: d1:b6:ec:16:50:df:12:67:d2:a7:a2:c6:2a:28:8b: 83:ba:17:57:f8:f5:fe:c8:ac:df:a7:97:f7:9f:84: fa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:04:07:FC:6A:4F:F3:9A:2A:9C:28:23:99:36:44:E4:3C:A9:E0:5C X509v3 Authority Key Identifier: keyid:BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/1D0E6A7027FC11EDB69DF17AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.160.0/22 Signature Algorithm: sha256WithRSAEncryption b9:bc:29:c2:db:77:d5:d5:3f:39:96:32:97:4f:86:22:7c:fe: 6f:7b:aa:1f:e8:65:d5:7c:74:e3:a8:8d:c7:18:cf:e6:6e:ce: 99:67:73:c8:e1:7a:61:69:d0:63:a1:5e:f2:2c:22:8c:bf:3f: 58:30:ad:62:a8:6b:2d:b6:84:6d:8b:60:cc:84:05:ba:c7:67: d4:e5:65:dc:19:2d:6f:06:9d:33:91:53:02:6e:a9:ea:dd:af: c3:27:49:17:98:c5:44:1c:f0:3c:dc:11:9e:b3:de:52:47:26: 21:27:a8:02:ae:18:a2:85:30:b8:79:f8:26:79:5c:cc:cb:c6: 1e:a4:0f:ad:3a:7a:8e:dd:73:8f:59:47:4d:67:6c:ed:1d:5e: cb:bb:ed:21:02:ac:cb:17:a7:32:0e:3b:4f:27:aa:59:f7:b6: 7a:bc:4a:4b:11:29:dd:b0:1d:38:3f:39:47:e1:0a:58:0f:33: f0:04:40:ca:cf:07:7e:9e:33:ec:dd:28:0c:93:8d:24:18:10: d7:c4:00:9c:e0:15:fc:23:bd:c9:1f:d5:7e:42:cb:be:2d:3c: 9b:18:1e:e8:13:f1:b7:e6:88:a4:19:78:39:49:9c:51:d5:38: ed:e5:89:68:76:fb:f5:73:df:78:d5:d7:2b:28:e6:9d:59:cd: b0:53:11:41 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzQzMxMTAvBgNVBAUTKEJENjA5NjYzRTM5NjMyRTJFN0I3NEZEQ0QzNzJBN0RD QzVGMDI5QTYwHhcNMjMxMDAyMjEzOTEwWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFiMzg3ZS0wMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8qDTeixkQE+VBApdCJUJMsQqLupO9uniGy7H1BojMXKVTodHLeULQDlsMbSJ 9hKXYMVifWxV+XTiMlgQBcLXMkA7qx4gI7PqiSNhXIDRtwyEHcX1W9Xf7sWUPVCW 0rqSFFe7Ul9DN1PdOZPkUpp+Nup/XTU9LpunCbYZXzZOGlbg1YjD9JWDRDcCVpe4 3FDlw37px4sFWrS2rd9RyYtgHItWqHjvrDYsHJe34LPt5TEt2bS3QeiCfpirxdMc BkCKs3cMTg6uDFlUGAC/1B5rcA+LVs/6hUiaMHdQUzZNfPbRtuwWUN8SZ9KnosYq KIuDuhdX+PX+yKzfp5f3n4T68QIDAQABo4IClTCCApEwHQYDVR0OBBYEFEUEB/xq T/OaKpwoI5k2ROQ8qeBcMB8GA1UdIwQYMBaAFL1glmPjljLi57dP3NNyp9zF8Cmm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDNDMy85OEQ4NTAwNkJD RTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011TG50MF9jMDNLbjNNWHdL YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXQ1dZLU9XTXVMbnQwX2MwM0tuM01Yd0thWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjAzQzMvOThEODUwMDZCQ0U0MTFFQUI4RDZEMzYyQzRGOUFFMDIvMUQwRTZBNzAy N0ZDMTFFREI2OURGMTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnBaAwDQYJKoZIhvcNAQELBQADggEBALm8KcLbd9XVPzmW MpdPhiJ8/m97qh/oZdV8dOOojccYz+Zuzplnc8jhemFp0GOhXvIsIoy/P1gwrWKo ay22hG2LYMyEBbrHZ9TlZdwZLW8GnTORUwJuqerdr8MnSReYxUQc8DzcEZ6z3lJH JiEnqAKuGKKFMLh5+CZ5XMzLxh6kD606eo7dc49ZR01nbO0dXsu77SECrMsXpzIO O08nqln3tnq8SksRKd2wHTg/OUfhClgPM/AEQMrPB36eM+zdKAyTjSQYENfEAJzg Ffwjvckf1X5Cy74tPJsYHugT8bfmiKQZeDlJnFHVOO3liWh2+/Vz33jV1yso5p1Z zbBTEUE= -----END CERTIFICATE-----Generated at Sun May 26 23:05:38 2024 by rpki-client on console-ams.rpki-client.org