$ rpki-client -vvf rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/2F5ED8E43E1711EA9A272644C4F9AE02.roa File: 2F5ED8E43E1711EA9A272644C4F9AE02.roa (raw, json) Hash identifier: 8TkP51bPQiYG0f/gk3ESB3Y/8JPz2qQFAu/a0sU3YmM= Subject key identifier: 99:6B:6F:23:02:12:BB:52:42:D8:BC:5F:4A:6B:E8:44:BA:AC:3D:E1 Certificate issuer: /CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA Certificate serial: 09D5 Authority key identifier: 3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/2F5ED8E43E1711EA9A272644C4F9AE02.roa Signing time: Fri 04 Aug 2023 19:57:32 +0000 ROA not before: Fri 04 Aug 2023 19:57:32 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 58890 IP address blocks: 103.116.180.0/23 maxlen: 24 103.116.182.0/23 maxlen: 24 2402:fec0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2517 (0x9d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA Validity Not Before: Aug 4 19:57:32 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cd582c-37c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d9:64:89:f8:78:bd:08:61:f4:ce:01:b2:2c: 6a:ed:03:b7:82:84:4c:df:6c:c0:67:27:1e:9b:11: 41:78:2a:a9:dd:ad:dc:a9:61:f9:3a:01:a1:2b:23: 78:bb:85:16:7e:a7:7c:29:b2:c5:d6:95:86:34:59: 1f:11:60:b0:4b:49:29:75:82:4d:7a:cc:5a:da:e7: 5c:fe:b0:5d:e6:72:ee:8f:b4:77:9e:03:77:27:d9: 51:29:ee:51:0d:1c:01:5c:a4:5f:1a:1f:d3:c7:d9: 4d:91:5e:65:81:aa:e5:f6:04:3b:fe:f0:92:49:58: ae:60:fc:bf:f0:12:6a:da:a8:c0:cc:18:41:b9:89: 29:f3:37:e0:71:08:73:d7:e2:2f:60:2c:22:09:1d: 98:02:3f:7b:d3:b7:af:06:65:4c:8e:3a:c3:1a:bd: 53:27:1f:5a:92:51:c2:d1:4e:46:37:d6:31:23:7d: 72:2c:35:b6:ea:b5:19:d4:98:6c:ae:39:ba:df:95: d6:bf:ef:49:dd:7e:89:f8:be:ce:47:64:16:75:c0: 4c:3c:d7:c5:ed:a9:41:b2:8f:71:be:14:38:a9:fa: 5d:bf:f9:8b:5e:03:55:db:82:24:11:95:b4:6c:a5: 6f:5f:e7:4c:04:3c:f4:e3:7d:fa:16:39:9e:f5:d7: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6B:6F:23:02:12:BB:52:42:D8:BC:5F:4A:6B:E8:44:BA:AC:3D:E1 X509v3 Authority Key Identifier: keyid:3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/2F5ED8E43E1711EA9A272644C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.180.0/22 IPv6: 2402:fec0::/32 Signature Algorithm: sha256WithRSAEncryption b3:91:44:9c:d7:b7:02:4b:39:ad:34:83:03:ff:e6:da:ad:5c: e1:ab:52:7d:cf:2b:b7:56:55:7e:b2:60:f2:ea:ec:d3:f1:d2: 2d:9b:4a:5f:7c:2f:53:58:71:6d:a5:84:a0:81:bd:f5:c4:02: 3a:e9:55:b7:d0:cb:90:97:89:99:2b:e7:c7:1b:f2:ac:fb:e1: d7:a4:3b:15:66:5a:08:e5:ea:37:c6:ac:d6:cd:64:04:f5:3c: 94:a1:cd:c3:6b:f7:60:35:ed:45:4d:3b:96:3d:59:e2:ae:02: 12:08:f4:09:84:d6:e8:36:36:c1:d4:09:14:ec:48:6a:1f:92: 39:60:e3:f3:86:f1:36:d5:d3:b8:0e:22:dd:6a:ee:00:03:9b: 19:77:ba:76:82:82:95:03:84:9b:c9:1e:bd:14:eb:f3:e0:a7: 41:cf:92:db:72:ae:6c:2d:31:14:53:f3:7c:53:2c:8d:c2:04: c8:a1:63:f6:98:46:5c:62:fb:89:21:6b:b4:7b:cc:26:6a:df: bf:d5:5f:99:e1:7f:06:a4:b9:85:27:5e:92:1a:58:92:64:9f: 5f:0f:55:e6:79:72:2d:b1:28:8d:4f:f4:7e:6f:56:59:f3:a7: 18:7b:1c:a1:50:56:09:ba:14:61:59:77:d0:7f:19:11:01:44: 3d:f7:b3:9d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE3MUMxMTAvBgNVBAUTKDNGQjZGNkQwNjY1ODM4NkMyMzdCOEQxNDBEQUQxNUIy ODM4QkI1Q0EwHhcNMjMwODA0MTk1NzMyWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNkNTgyYy0zN2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Nlkifh4vQhh9M4Bsixq7QO3goRM32zAZycemxFBeCqp3a3cqWH5OgGhKyN4 u4UWfqd8KbLF1pWGNFkfEWCwS0kpdYJNesxa2udc/rBd5nLuj7R3ngN3J9lRKe5R DRwBXKRfGh/Tx9lNkV5lgarl9gQ7/vCSSViuYPy/8BJq2qjAzBhBuYkp8zfgcQhz 1+IvYCwiCR2YAj9707evBmVMjjrDGr1TJx9aklHC0U5GN9YxI31yLDW26rUZ1Jhs rjm635XWv+9J3X6J+L7OR2QWdcBMPNfF7alBso9xvhQ4qfpdv/mLXgNV24IkEZW0 bKVvX+dMBDz04336Fjme9dco6QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJlrbyMC ErtSQti8X0pr6ES6rD3hMB8GA1UdIwQYMBaAFD+29tBmWDhsI3uNFA2tFbKDi7XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTcxQy9FN0VGMDgzNjNF MTUxMUVBQjM3MUE1NDFDNEY5QUUwMi9QN2IyMEdaWU9Hd2plNDBVRGEwVnNvT0x0 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3YjIwR1pZT0d3amU0MFVEYTBWc29PTHRjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjE3MUMvRTdFRjA4MzYzRTE1MTFFQUIzNzFBNTQxQzRGOUFFMDIvMkY1RUQ4RTQz RTE3MTFFQTlBMjcyNjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJndLQwDQQCAAIwBwMFACQC/sAwDQYJKoZIhvcNAQELBQAD ggEBALORRJzXtwJLOa00gwP/5tqtXOGrUn3PK7dWVX6yYPLq7NPx0i2bSl98L1NY cW2lhKCBvfXEAjrpVbfQy5CXiZkr58cb8qz74dekOxVmWgjl6jfGrNbNZAT1PJSh zcNr92A17UVNO5Y9WeKuAhII9AmE1ug2NsHUCRTsSGofkjlg4/OG8TbV07gOIt1q 7gADmxl3unaCgpUDhJvJHr0U6/Pgp0HPkttyrmwtMRRT83xTLI3CBMihY/aYRlxi +4kha7R7zCZq37/VX5nhfwakuYUnXpIaWJJkn18PVeZ5ci2xKI1P9H5vVlnzpxh7 HKFQVgm6FGFZd9B/GREBRD33s50= -----END CERTIFICATE-----Generated at Thu May 16 22:34:51 2024 by rpki-client on console-ams.rpki-client.org