$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/CA7A6F1A157C11E9BB547B7AC4F9AE02.roa File: CA7A6F1A157C11E9BB547B7AC4F9AE02.roa (raw, json) Hash identifier: s8QouP6yXPvwTL8mRL6l5s2tkMEdi2DlBm8vLodEmCA= Subject key identifier: CC:F8:31:0D:23:48:6F:27:62:21:39:E8:8B:12:37:9A:4C:ED:C6:28 Certificate issuer: /CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B Certificate serial: 100A Authority key identifier: C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/CA7A6F1A157C11E9BB547B7AC4F9AE02.roa Signing time: Wed 22 Nov 2023 18:05:49 +0000 ROA not before: Wed 22 Nov 2023 18:05:49 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 138359 IP address blocks: 103.130.153.0/24 maxlen: 24 103.143.219.0/24 maxlen: 24 2001:df6:e100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4106 (0x100a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B Validity Not Before: Nov 22 18:05:49 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=655e42fd-b24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:73:45:e2:fb:76:17:b0:b9:15:a6:2b:1a:fb: cf:21:aa:75:f3:98:55:10:58:06:b7:fc:3a:e2:ae: 03:7f:79:41:33:2e:a8:f1:41:5d:0a:f9:77:d8:4a: 22:8b:60:a4:88:81:1c:f9:c5:f0:dd:a0:d8:77:c4: 0a:76:c4:25:e9:9d:81:65:c3:db:71:87:e1:0e:8b: 96:9b:0e:b0:d9:92:07:1a:49:4b:8f:45:b8:64:0b: 48:8c:09:39:78:56:b6:56:64:ac:8b:89:0a:bc:72: 72:40:38:3a:cc:27:21:24:b8:0f:ae:89:28:a7:68: 6f:01:20:84:e2:45:e9:ce:14:ca:88:ee:d5:06:d2: d3:53:85:02:54:8e:81:51:f7:c0:ff:0b:17:9d:8e: 31:96:b9:42:55:c6:fb:96:e4:5d:3d:06:5c:21:34: 21:68:17:36:63:e7:42:75:4a:0f:16:47:06:e0:a0: e4:13:f2:b9:31:8f:4b:b9:3a:8d:aa:7d:b1:1e:46: 16:c6:46:16:53:d1:34:7d:1c:a4:44:a6:b1:88:de: 21:e2:71:21:34:33:b5:79:7a:21:ab:ac:59:3b:e9: 22:b2:4b:c8:8e:ae:cb:14:5f:7b:88:8b:e1:8c:bb: 90:70:d6:bf:84:52:e9:35:65:f3:e2:fa:a1:46:48: cf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F8:31:0D:23:48:6F:27:62:21:39:E8:8B:12:37:9A:4C:ED:C6:28 X509v3 Authority Key Identifier: keyid:C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/CA7A6F1A157C11E9BB547B7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.130.153.0/24 103.143.219.0/24 IPv6: 2001:df6:e100::/48 Signature Algorithm: sha256WithRSAEncryption 40:a1:96:3c:4a:ea:15:fc:04:80:bb:21:30:63:fb:ca:c0:14: f4:52:64:29:79:f3:e6:e1:c2:70:3a:25:c2:98:e9:da:95:d8: 15:94:5b:d4:26:ff:aa:81:fe:b8:a7:83:f1:02:d4:4b:56:12: 5f:33:8f:7f:fc:07:c1:cf:a0:b8:8f:fa:24:0e:65:e3:13:8f: 26:8f:6b:cf:02:f0:f9:b0:04:a6:46:10:ce:8c:1e:86:54:d2: 37:76:c6:09:1e:35:b0:59:f0:8e:15:6e:9c:78:51:6d:15:59: dd:ed:47:88:6f:be:2b:f0:ba:e1:fe:95:a7:6b:71:b2:95:6a: 11:05:8d:74:9f:43:50:28:c4:bb:ca:2a:8d:e4:79:92:b3:0d: 90:00:1b:c8:be:5a:6d:b1:bf:a3:92:aa:5d:0a:0c:68:9f:1e: 9f:c3:9d:01:14:9e:04:9e:f5:47:b2:f8:b8:36:da:60:8f:6b: 3d:80:0e:1d:a7:cb:f2:a5:54:72:f4:4f:e7:a7:04:b5:79:b1: c5:2e:9a:e0:8f:5b:10:cd:dd:a0:95:28:f6:a1:f8:3a:e9:9b: 65:7c:4f:af:eb:00:69:49:88:54:18:20:5d:b0:50:e9:48:5e: 98:9d:d8:c6:4d:87:8f:b0:7c:e7:12:bf:fa:3b:f3:22:80:51: a4:a9:1a:80 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICEAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCNjUxMTAvBgNVBAUTKEMwNTcxMTlDQTQ1REQzMTQyMTVDNjFFMDlCRjg3MUQ0 OEFCQjVGOUIwHhcNMjMxMTIyMTgwNTQ5WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTVlNDJmZC1iMjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nNF4vt2F7C5FaYrGvvPIap185hVEFgGt/w64q4Df3lBMy6o8UFdCvl32Eoi i2CkiIEc+cXw3aDYd8QKdsQl6Z2BZcPbcYfhDouWmw6w2ZIHGklLj0W4ZAtIjAk5 eFa2VmSsi4kKvHJyQDg6zCchJLgProkop2hvASCE4kXpzhTKiO7VBtLTU4UCVI6B UffA/wsXnY4xlrlCVcb7luRdPQZcITQhaBc2Y+dCdUoPFkcG4KDkE/K5MY9LuTqN qn2xHkYWxkYWU9E0fRykRKaxiN4h4nEhNDO1eXohq6xZO+kiskvIjq7LFF97iIvh jLuQcNa/hFLpNWXz4vqhRkjPCQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFMz4MQ0j SG8nYiE56IsSN5pM7cYoMB8GA1UdIwQYMBaAFMBXEZykXdMUIVxh4Jv4cdSKu1+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEI2NS9FNkU0MjJBNjE1 NjExMUU5OTM0QjFCMzZDNEY5QUUwMi93RmNSbktSZDB4UWhYR0hnbV9oeDFJcTdY NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dGY1JuS1JkMHhRaFhHSGdtX2h4MUlxN1g1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjBCNjUvRTZFNDIyQTYxNTYxMTFFOTkzNEIxQjM2QzRGOUFFMDIvQ0E3QTZGMUEx NTdDMTFFOUJCNTQ3QjdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABngpkDBABnj9swDwQCAAIwCQMHACABDfbhADANBgkqhkiG 9w0BAQsFAAOCAQEAQKGWPErqFfwEgLshMGP7ysAU9FJkKXnz5uHCcDolwpjp2pXY FZRb1Cb/qoH+uKeD8QLUS1YSXzOPf/wHwc+guI/6JA5l4xOPJo9rzwLw+bAEpkYQ zowehlTSN3bGCR41sFnwjhVunHhRbRVZ3e1HiG++K/C64f6Vp2txspVqEQWNdJ9D UCjEu8oqjeR5krMNkAAbyL5abbG/o5KqXQoMaJ8en8OdARSeBJ71R7L4uDbaYI9r PYAOHafL8qVUcvRP56cEtXmxxS6a4I9bEM3doJUo9qH4OumbZXxPr+sAaUmIVBgg XbBQ6UhemJ3Yxk2Hj7B85xK/+jvzIoBRpKkagA== -----END CERTIFICATE-----Generated at Thu May 16 20:25:50 2024 by rpki-client on console-ams.rpki-client.org