$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/61574192E37A11EB8AF29A5BC4F9AE02.roa File: 61574192E37A11EB8AF29A5BC4F9AE02.roa (raw, json) Hash identifier: mOAjzTD688ThJmEPZ134eNBOUODYA5QmMjO6+tOsvzg= Subject key identifier: 4E:EB:85:11:EF:B6:C8:71:A5:9C:5A:4E:33:75:B4:A5:02:D3:D2:7E Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 130B Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/61574192E37A11EB8AF29A5BC4F9AE02.roa Signing time: Sat 30 Sep 2023 17:14:57 +0000 ROA not before: Sat 30 Sep 2023 17:14:57 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 58868 IP address blocks: 103.118.32.0/23 maxlen: 24 103.241.148.0/24 maxlen: 24 2403:14c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 17:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4875 (0x130b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Sep 30 17:14:57 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65185790-bf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:c6:9d:7c:c6:74:60:fb:1c:36:04:ec:4e: 20:a8:56:f6:1e:f3:3e:ab:7b:a3:7e:23:10:45:3e: 99:be:2c:ae:9b:00:3b:6a:cd:33:b6:6a:8c:ea:a8: 8c:a3:cf:75:58:35:c2:fa:22:9d:c1:df:31:d4:98: ce:c0:6e:e3:0a:6a:4c:01:78:a1:ee:a8:a3:d6:a8: 23:ac:48:27:6b:6c:d5:1e:bf:6a:e1:ba:98:b5:91: 88:35:da:d4:7d:3e:01:f2:fe:fe:c2:13:a0:b4:19: f2:6f:f3:24:fa:39:8e:79:34:7d:d1:88:0f:5b:cd: 97:e6:4d:a1:ac:7a:b1:9c:38:39:4e:dc:22:07:c3: 2c:e5:59:32:db:9f:1e:c9:8a:34:70:b2:fb:39:f7: f8:0f:eb:fb:4d:ae:34:67:01:9e:4c:f1:c0:3e:42: 38:61:8d:c0:49:f8:89:82:6c:df:0e:c7:f2:5b:18: c7:2b:23:81:0a:2b:93:a3:03:17:36:87:16:eb:f2: 9b:91:f4:75:b0:fe:d8:a0:fc:cb:e3:79:8e:db:88: 6e:bb:e7:d3:d2:8d:5f:75:05:99:15:ed:f6:0c:d5: 9f:20:07:92:2a:03:ba:f8:bb:bb:2e:6d:45:c6:63: 02:f0:b7:34:b9:6b:08:87:6e:86:93:d9:3d:7b:5a: 1b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EB:85:11:EF:B6:C8:71:A5:9C:5A:4E:33:75:B4:A5:02:D3:D2:7E X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/61574192E37A11EB8AF29A5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.32.0/23 103.241.148.0/24 IPv6: 2403:14c0::/32 Signature Algorithm: sha256WithRSAEncryption 90:9f:77:7e:89:d7:63:6f:3f:42:e8:2a:8e:ae:12:6f:e9:87: 0f:6f:18:e1:cf:00:18:61:59:58:3b:6d:26:27:c8:ee:f2:5f: 86:ad:95:16:f5:41:97:e0:07:36:b1:c7:fe:88:3e:fd:9d:5b: 47:3e:9d:81:db:a6:4a:d2:b7:5e:ad:b1:a5:f5:40:23:fe:25: 08:89:fc:be:b4:20:c4:e2:23:f3:2f:86:44:96:44:f7:b7:2a: b5:26:53:3b:55:55:37:91:47:8a:4c:fd:ad:09:2f:20:ff:78: 01:9d:63:39:7e:16:d0:84:9c:f0:1a:1e:cb:8b:8e:5a:8b:b2: 6e:e3:09:90:4b:84:77:0a:88:a9:46:b2:e1:6a:c2:97:23:60: f6:46:c2:89:59:80:75:31:f1:1f:17:52:36:ba:33:4a:c6:40: ef:a7:68:8a:b9:f7:4d:1d:d1:8c:be:3c:84:2f:43:50:7f:63: 97:75:36:07:b3:82:c4:9b:f3:5c:0b:a2:dc:55:1e:36:86:54: 14:aa:ed:c3:22:64:0c:4e:2a:10:07:b9:f1:b7:f2:3b:59:14: cc:76:3f:62:bb:f1:d3:a7:ac:7a:d2:79:68:0b:5f:7b:62:83: 10:5a:1a:40:04:3f:f2:ac:93:af:61:9c:95:2f:0f:f0:b3:44: b0:46:3e:04 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjMwOTMwMTcxNDU3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE4NTc5MC1iZjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1L7GnXzGdGD7HDYE7E4gqFb2HvM+q3ujfiMQRT6ZviyumwA7as0ztmqM6qiM o891WDXC+iKdwd8x1JjOwG7jCmpMAXih7qij1qgjrEgna2zVHr9q4bqYtZGINdrU fT4B8v7+whOgtBnyb/Mk+jmOeTR90YgPW82X5k2hrHqxnDg5TtwiB8Ms5Vky258e yYo0cLL7Off4D+v7Ta40ZwGeTPHAPkI4YY3ASfiJgmzfDsfyWxjHKyOBCiuTowMX NocW6/KbkfR1sP7YoPzL43mO24huu+fT0o1fdQWZFe32DNWfIAeSKgO6+Lu7Lm1F xmMC8Lc0uWsIh26Gk9k9e1ob3wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFE7rhRHv tshxpZxaTjN1tKUC09J+MB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjFGNEYvMEZEQjk3NEM3NEQ3MTFFOEJDODJENDJDQzRGOUFFMDIvNjE1NzQxOTJF MzdBMTFFQjhBRjI5QTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFndiADBABn8ZQwDQQCAAIwBwMFACQDFMAwDQYJKoZIhvcN AQELBQADggEBAJCfd36J12NvP0LoKo6uEm/phw9vGOHPABhhWVg7bSYnyO7yX4at lRb1QZfgBzaxx/6IPv2dW0c+nYHbpkrSt16tsaX1QCP+JQiJ/L60IMTiI/MvhkSW RPe3KrUmUztVVTeRR4pM/a0JLyD/eAGdYzl+FtCEnPAaHsuLjlqLsm7jCZBLhHcK iKlGsuFqwpcjYPZGwolZgHUx8R8XUja6M0rGQO+naIq5900d0Yy+PIQvQ1B/Y5d1 NgezgsSb81wLotxVHjaGVBSq7cMiZAxOKhAHufG38jtZFMx2P2K78dOnrHrSeWgL X3tigxBaGkAEP/Ksk69hnJUvD/CzRLBGPgQ= -----END CERTIFICATE-----Generated at Wed May 22 18:46:49 2024 by rpki-client on console-fra.rpki-client.org