$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/8409527078B011EE8D737723C4F9AE02.roa File: 8409527078B011EE8D737723C4F9AE02.roa (raw, json) Hash identifier: Ncl+a5PXfkQi0ceg2GixYDGu2kxajLWRY1PTSbthHtY= Subject key identifier: 9B:63:C0:38:EB:17:96:2E:D4:39:A8:DE:13:19:B1:32:09:83:40:44 Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Certificate serial: 01AC Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/8409527078B011EE8D737723C4F9AE02.roa Signing time: Wed 01 Nov 2023 12:16:42 +0000 ROA not before: Wed 01 Nov 2023 12:16:42 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 137443 IP address blocks: 103.189.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Validity Not Before: Nov 1 12:16:42 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=654241aa-4d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:f9:fc:2f:c5:3f:cf:9c:c1:d8:9f:3f:e9: 24:40:d3:f3:a4:c2:43:c8:8e:ca:df:60:06:76:2b: 77:3f:6d:94:19:3a:69:2b:e8:cf:ae:77:94:a0:67: 65:af:75:0a:c6:ee:c2:94:50:62:33:c1:1f:f7:a9: c2:fa:b6:be:ca:e5:c9:85:a9:ad:05:b3:07:aa:19: 7e:c4:11:30:08:e9:87:cf:b9:d4:53:dd:09:35:cc: 74:95:40:85:61:30:b2:db:de:75:18:73:49:a3:18: fc:b3:81:ae:7f:f4:02:ed:85:dd:5c:2a:fc:01:66: e6:7f:6d:d9:b8:83:19:63:c2:f1:a3:5a:00:bc:43: 47:f8:74:9c:52:d9:9d:25:d9:f8:83:de:0c:c0:cb: 27:32:a8:c8:72:25:e4:1d:8c:dc:26:b2:e4:34:e3: 66:c0:d1:a3:d6:b5:4d:8c:7f:9e:b4:ee:b6:30:5e: 1a:b8:4f:da:48:ed:c7:0a:78:63:c8:89:14:42:0a: ce:55:3a:da:4f:52:50:a4:dd:e5:b1:7e:64:3e:25: 7e:8c:21:8b:7d:5c:cc:41:b8:12:be:dd:1b:0b:c3: e2:22:58:9b:32:8a:8f:4c:12:b4:97:9b:54:25:c6: 1a:db:81:ad:a7:72:e8:f8:22:f3:11:e2:9a:d5:99: 16:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:63:C0:38:EB:17:96:2E:D4:39:A8:DE:13:19:B1:32:09:83:40:44 X509v3 Authority Key Identifier: keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/8409527078B011EE8D737723C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.140.0/23 Signature Algorithm: sha256WithRSAEncryption 58:1a:e6:f2:f2:53:ca:44:b2:43:ad:b7:e5:10:83:96:33:ef: da:97:fc:bb:99:98:50:27:bd:1f:a8:7d:ae:67:59:55:b4:49: 15:47:04:7b:30:43:05:3b:3f:c8:4d:b6:93:af:56:fa:9c:32: a4:9c:a2:a0:93:78:1a:4a:48:e4:fb:31:bc:c2:0a:d2:bf:f2: 8d:ca:45:6c:47:27:06:3f:01:bb:b9:d3:cd:98:0c:97:35:d6: a0:c7:e1:ff:7f:38:10:48:10:cc:2d:8a:13:c5:a5:d8:a7:e2: 07:61:47:72:8a:c8:70:86:c5:fd:cd:89:62:e4:b5:11:ae:d7: 4f:61:ee:38:78:c3:be:f5:ac:1e:b9:b7:26:86:9c:8f:78:77: dc:c1:d8:ce:9e:02:c7:da:24:4d:cf:05:d3:a2:37:d7:3f:9c: bc:6b:4d:7d:24:f2:23:dd:73:d1:88:ea:58:86:96:67:8d:51: 9d:8f:a4:3c:69:0c:ee:a9:91:d7:e5:d1:d5:3b:60:14:96:37: 09:96:02:e3:5a:5f:e7:59:2e:80:ea:ee:06:b6:ce:69:13:05: 43:49:88:11:aa:a0:f9:a3:b7:7b:b0:a7:e9:ef:ee:1c:94:3d: 57:fe:a8:2f:58:7a:66:2d:2f:c6:d7:9d:63:0d:e2:f3:85:60: f8:4c:b9:18 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEyRkIxMTAvBgNVBAUTKDU5MTE4REQ3NTNGMDUzMEVEQzJCOEMzQkUyNjNCRURC MENDRUJDMEUwHhcNMjMxMTAxMTIxNjQyWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQyNDFhYS00ZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUj5/C/FP8+cwdifP+kkQNPzpMJDyI7K32AGdit3P22UGTppK+jPrneUoGdl r3UKxu7ClFBiM8Ef96nC+ra+yuXJhamtBbMHqhl+xBEwCOmHz7nUU90JNcx0lUCF YTCy2951GHNJoxj8s4Guf/QC7YXdXCr8AWbmf23ZuIMZY8Lxo1oAvENH+HScUtmd Jdn4g94MwMsnMqjIciXkHYzcJrLkNONmwNGj1rVNjH+etO62MF4auE/aSO3HCnhj yIkUQgrOVTraT1JQpN3lsX5kPiV+jCGLfVzMQbgSvt0bC8PiIlibMoqPTBK0l5tU JcYa24Gtp3Lo+CLzEeKa1ZkWywIDAQABo4IClTCCApEwHQYDVR0OBBYEFJtjwDjr F5Yu1Dmo3hMZsTIJg0BEMB8GA1UdIwQYMBaAFFkRjddT8FMO3CuMO+JjvtsMzrwO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTJGQi9FMEQ2NDUxNEVE MUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3N2NLNHc3NG1PLTJ3ek92 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSR04xMVB3VXc3Y0s0dzc0bU8tMnd6T3ZBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjEyRkIvRTBENjQ1MTRFRDFEMTFFQ0I1RkYyQjI0QzRGOUFFMDIvODQwOTUyNzA3 OEIwMTFFRThENzM3NzIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvYwwDQYJKoZIhvcNAQELBQADggEBAFga5vLyU8pEskOt t+UQg5Yz79qX/LuZmFAnvR+ofa5nWVW0SRVHBHswQwU7P8hNtpOvVvqcMqScoqCT eBpKSOT7MbzCCtK/8o3KRWxHJwY/Abu5082YDJc11qDH4f9/OBBIEMwtihPFpdin 4gdhR3KKyHCGxf3NiWLktRGu109h7jh4w771rB65tyaGnI94d9zB2M6eAsfaJE3P BdOiN9c/nLxrTX0k8iPdc9GI6liGlmeNUZ2PpDxpDO6pkdfl0dU7YBSWNwmWAuNa X+dZLoDq7ga2zmkTBUNJiBGqoPmjt3uwp+nv7hyUPVf+qC9YemYtL8bXnWMN4vOF YPhMuRg= -----END CERTIFICATE-----Generated at Wed May 1 05:59:10 2024 by rpki-client on console-fra.rpki-client.org