$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/02F863F6C09211EC8950E57AC4F9AE02.roa File: 02F863F6C09211EC8950E57AC4F9AE02.roa (raw, json) Hash identifier: yarKsg2U8YvvYfEm7F0GcX7kW9C/La3i1X0o1SxeiQE= Subject key identifier: 0E:8C:79:7B:4F:87:B7:2F:C8:0B:57:BB:CB:88:6C:32:CD:5A:76:5D Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Certificate serial: 06C7 Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/02F863F6C09211EC8950E57AC4F9AE02.roa Signing time: Mon 04 Sep 2023 21:49:16 +0000 ROA not before: Mon 04 Sep 2023 21:49:16 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 141003 IP address blocks: 103.154.188.0/23 maxlen: 23 103.154.188.0/24 maxlen: 24 103.154.189.0/24 maxlen: 24 2001:df6:f680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 22:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1735 (0x6c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Validity Not Before: Sep 4 21:49:16 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64f650dc-e402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:22:66:4b:de:fb:a1:14:ee:46:2a:85:3d: fb:76:4e:2d:05:66:ff:b1:2a:58:ae:3e:da:ba:a8: 9d:ac:56:7b:d2:ca:a2:95:2a:9f:54:28:9c:ce:65: 88:2a:92:8f:76:71:93:34:1c:a0:02:d0:81:c4:f0: 61:aa:62:7e:d6:29:65:2e:2b:ba:e8:58:ef:d4:80: 0b:bb:56:77:7b:22:8a:c7:7b:81:db:8e:c6:4f:c1: 81:f8:6c:2e:75:cb:3b:cd:e1:57:e2:27:b9:56:ac: 9c:c5:99:5f:c0:aa:1b:fd:98:4f:0d:cf:35:89:cb: 14:1f:68:f0:95:ca:9b:cc:27:e5:b7:01:4e:f0:eb: ed:08:ff:b7:2b:9a:f7:e5:4c:8a:5f:f8:8f:4c:15: c2:6d:56:13:a8:04:ea:f1:71:e3:5c:94:59:13:14: 69:5f:b0:5b:44:ea:ad:87:c2:8b:e8:4b:a8:0b:dd: b4:be:3a:d9:08:92:07:fa:42:ae:3b:55:de:e7:0a: 85:a4:a6:66:27:ce:b3:7a:f5:23:5d:d4:37:4f:36: bf:75:9a:6c:db:bd:61:0b:e2:99:5c:60:11:20:c6: 08:50:91:1b:2a:fc:8a:1d:13:e1:66:f5:c8:0c:6e: a2:20:b7:10:45:d7:a0:04:51:d6:33:e1:fe:0e:7f: 69:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8C:79:7B:4F:87:B7:2F:C8:0B:57:BB:CB:88:6C:32:CD:5A:76:5D X509v3 Authority Key Identifier: keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/02F863F6C09211EC8950E57AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.188.0/23 IPv6: 2001:df6:f680::/48 Signature Algorithm: sha256WithRSAEncryption b0:56:c2:73:2e:3d:3c:89:f4:18:2c:f4:ff:9e:68:0f:f5:dd: 6e:89:64:18:4b:b9:f1:41:16:05:7d:26:d2:39:ef:96:dd:8c: be:30:81:2a:ac:28:14:2c:12:2a:f9:fe:4a:fe:27:71:5b:c7: e4:f3:cb:1e:80:60:1f:c0:64:47:04:8b:6e:61:d0:09:9a:d5: 0b:2b:c8:8f:7a:57:12:0f:3d:a3:99:22:12:6f:13:26:01:c2: 93:1e:19:07:d1:e7:a8:c2:84:e9:5e:1e:72:03:86:04:b9:74: 7b:03:6d:b7:57:31:b2:61:97:c3:07:3c:d7:08:2f:de:d3:7d: df:a7:fb:01:7e:cf:6e:24:31:3b:a5:2f:4b:b6:16:dc:3e:9b: 78:d9:1d:02:bb:66:86:cc:e7:e7:e8:85:9b:61:e3:83:bd:2b: e5:15:6a:fc:0a:e6:72:7b:79:06:1b:f1:af:e9:f1:bb:45:20: cf:79:88:a1:af:07:7c:ab:2e:1f:89:79:e5:07:4d:2c:30:49: ae:1e:99:e2:11:94:80:05:e6:03:64:be:b2:f6:08:e7:82:85: a1:b7:f9:9f:5b:db:c7:9e:1c:c6:01:11:d2:9b:6b:2e:1f:32: f7:6e:ed:d2:c7:8e:39:28:b7:b6:d6:83:b2:06:a6:78:92:43: 03:6c:16:7b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRBQTAxMTAvBgNVBAUTKDA0Q0Y1N0YyQTdGRkNBNzJDMDc0NjhBOEM2RDVGMjQ1 MTdGRjQ2QjkwHhcNMjMwOTA0MjE0OTE2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY2NTBkYy1lNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOkiZkve+6EU7kYqhT37dk4tBWb/sSpYrj7auqidrFZ70sqilSqfVCiczmWI KpKPdnGTNBygAtCBxPBhqmJ+1illLiu66Fjv1IALu1Z3eyKKx3uB247GT8GB+Gwu dcs7zeFX4ie5VqycxZlfwKob/ZhPDc81icsUH2jwlcqbzCfltwFO8OvtCP+3K5r3 5UyKX/iPTBXCbVYTqATq8XHjXJRZExRpX7BbROqth8KL6EuoC920vjrZCJIH+kKu O1Xe5wqFpKZmJ86zevUjXdQ3Tza/dZps271hC+KZXGARIMYIUJEbKvyKHRPhZvXI DG6iILcQRdegBFHWM+H+Dn9pIwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFA6MeXtP h7cvyAtXu8uIbDLNWnZdMB8GA1UdIwQYMBaAFATPV/Kn/8pywHRoqMbV8kUX/0a5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEFBMC8xMDQxRTVFQUUy QzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3luTEFkR2lveHRYeVJSZl9S cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JNOVg4cWZfeW5MQWRHaW94dFh5UlJmX1Jyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjRBQTAvMTA0MUU1RUFFMkMzMTFFQUI4MThEMTdGQzRGOUFFMDIvMDJGODYzRjZD MDkyMTFFQzg5NTBFNTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmrwwDwQCAAIwCQMHACABDfb2gDANBgkqhkiG9w0BAQsF AAOCAQEAsFbCcy49PIn0GCz0/55oD/XdbolkGEu58UEWBX0m0jnvlt2MvjCBKqwo FCwSKvn+Sv4ncVvH5PPLHoBgH8BkRwSLbmHQCZrVCyvIj3pXEg89o5kiEm8TJgHC kx4ZB9HnqMKE6V4ecgOGBLl0ewNtt1cxsmGXwwc81wgv3tN936f7AX7PbiQxO6Uv S7YW3D6beNkdArtmhszn5+iFm2Hjg70r5RVq/Armcnt5Bhvxr+nxu0Ugz3mIoa8H fKsuH4l55QdNLDBJrh6Z4hGUgAXmA2S+svYI54KFobf5n1vbx54cxgER0ptrLh8y 927t0seOOSi3ttaDsgameJJDA2wWew== -----END CERTIFICATE-----Generated at Wed May 29 00:29:09 2024 by rpki-client on console-fra.rpki-client.org