$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/BDC0899A1FF511ECAE74F266C4F9AE02.roa File: BDC0899A1FF511ECAE74F266C4F9AE02.roa (raw, json) Hash identifier: 6vmE9a4gH3/S22b2JnxWGlQqqcG39EBY+P26VGbWB8w= Subject key identifier: 18:05:3D:AA:10:92:08:34:90:50:CD:7D:52:BD:54:47:98:AB:59:34 Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Certificate serial: 08DD Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/BDC0899A1FF511ECAE74F266C4F9AE02.roa Signing time: Mon 31 Jul 2023 20:57:43 +0000 ROA not before: Mon 31 Jul 2023 20:57:43 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 9268 IP address blocks: 43.247.64.0/22 maxlen: 22 103.26.172.0/22 maxlen: 24 2401:f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2269 (0x8dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Validity Not Before: Jul 31 20:57:43 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c82047-c505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:2d:77:f9:73:45:18:f0:79:23:9e:ef:57: 97:43:03:e7:d6:9d:7a:37:7b:df:d7:3a:6c:a9:07: 5e:54:14:66:62:57:90:e0:60:fd:17:6d:15:be:61: e9:c4:ce:2d:a2:1a:9c:47:a1:2e:4c:2f:4e:89:81: 10:1a:e2:98:48:c0:99:31:0b:c0:4e:54:17:3f:8a: 0a:ec:28:a2:7a:0c:dd:32:cc:1b:78:80:56:bc:ea: cf:d8:4f:04:f1:b4:a6:1a:be:01:3f:84:15:29:f3: 9c:85:91:27:76:27:d7:8f:c9:49:9f:f0:c2:d9:c6: 00:fc:36:62:1b:24:87:f2:fe:d5:ab:8b:e7:ac:ec: 69:56:62:ba:0f:ff:58:0d:7d:8c:95:21:95:67:92: d4:30:43:38:19:c5:53:7f:77:5f:ff:e5:e6:89:34: e0:bd:5c:af:a7:6f:d9:4a:a3:38:65:d5:49:80:1c: 48:ee:a7:60:31:1a:70:82:a2:a9:3a:b5:22:52:6a: f8:88:5e:19:a2:52:2a:56:e8:b4:4f:17:6a:4c:ab: 80:4d:ba:50:51:6f:ec:78:6b:ba:83:52:54:ac:06: d6:9e:8e:d1:74:b5:da:be:38:bf:bb:3a:cf:cb:6d: 9a:7c:99:d5:df:82:1a:f3:19:a8:8f:bd:ec:00:20: c5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:05:3D:AA:10:92:08:34:90:50:CD:7D:52:BD:54:47:98:AB:59:34 X509v3 Authority Key Identifier: keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/BDC0899A1FF511ECAE74F266C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.64.0/22 103.26.172.0/22 IPv6: 2401:f80::/32 Signature Algorithm: sha256WithRSAEncryption a1:98:1d:32:79:eb:5f:c0:23:98:3c:6b:5b:10:3a:0b:ad:06: b4:f9:0d:dc:a6:60:78:98:18:f9:38:3e:67:eb:b6:97:92:31: 99:2b:9f:18:42:88:06:75:57:49:7b:62:c8:84:1a:39:45:be: 54:52:c3:a4:7c:f7:65:58:c0:a2:ea:3a:d9:6a:82:ff:85:39: 64:f3:5f:94:f3:03:59:3a:a9:29:3d:90:ae:8e:38:10:2b:be: 27:12:a2:df:b6:01:84:02:db:3d:af:37:bf:29:4d:2e:ff:61: 49:73:fb:1a:c9:84:b5:06:1a:0f:24:45:ad:d1:51:c0:63:b3: cd:16:16:0a:82:52:fd:54:35:d1:29:3f:52:4d:bc:17:d4:64: 34:44:0c:90:06:87:3e:ee:ba:35:06:b6:aa:c8:c8:3b:a4:1b: 62:85:65:96:62:e8:5a:49:72:be:c0:4e:00:04:f1:b3:27:43: c7:b2:e5:a2:b1:12:4b:09:09:2c:8e:85:7c:92:e4:7f:a3:77: 07:aa:30:11:dd:01:55:8e:e7:9e:36:e0:c0:be:14:3a:78:06: f1:06:45:d4:d9:6d:59:86:8e:50:2b:3d:aa:30:36:1d:75:34: 6c:16:25:2c:2b:47:33:0d:20:69:99:8e:b1:d1:ed:77:25:5e: 97:55:9a:96 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1 NTFBQjk3RDEwHhcNMjMwNzMxMjA1NzQzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGM4MjA0Ny1jNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtM0td/lzRRjweSOe71eXQwPn1p16N3vf1zpsqQdeVBRmYleQ4GD9F20VvmHp xM4tohqcR6EuTC9OiYEQGuKYSMCZMQvATlQXP4oK7CiiegzdMswbeIBWvOrP2E8E 8bSmGr4BP4QVKfOchZEndifXj8lJn/DC2cYA/DZiGySH8v7Vq4vnrOxpVmK6D/9Y DX2MlSGVZ5LUMEM4GcVTf3df/+XmiTTgvVyvp2/ZSqM4ZdVJgBxI7qdgMRpwgqKp OrUiUmr4iF4ZolIqVui0TxdqTKuATbpQUW/seGu6g1JUrAbWno7RdLXavji/uzrP y22afJnV34Ia8xmoj73sACDF+QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBgFPaoQ kgg0kFDNfVK9VEeYq1k0MB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjJBNkYvQ0FERkYyRkU2RTM2MTFFQUExMEVGRjc2QzRGOUFFMDIvQkRDMDg5OUEx RkY1MTFFQ0FFNzRGMjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr90ADBAJnGqwwDQQCAAIwBwMFACQBD4AwDQYJKoZIhvcN AQELBQADggEBAKGYHTJ561/AI5g8a1sQOgutBrT5DdymYHiYGPk4PmfrtpeSMZkr nxhCiAZ1V0l7YsiEGjlFvlRSw6R892VYwKLqOtlqgv+FOWTzX5TzA1k6qSk9kK6O OBArvicSot+2AYQC2z2vN78pTS7/YUlz+xrJhLUGGg8kRa3RUcBjs80WFgqCUv1U NdEpP1JNvBfUZDREDJAGhz7uujUGtqrIyDukG2KFZZZi6FpJcr7ATgAE8bMnQ8ey 5aKxEksJCSyOhXyS5H+jdweqMBHdAVWO55424MC+FDp4BvEGRdTZbVmGjlArPaow Nh11NGwWJSwrRzMNIGmZjrHR7XclXpdVmpY= -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org