$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/A9286C0E6D4411E7AF539270C4F9AE02.roa File: A9286C0E6D4411E7AF539270C4F9AE02.roa (raw, json) Hash identifier: CvwZ78Bx6JW2ZSeXfa9JVVvETeg0+qlUbSWAQnUGr1k= Subject key identifier: C5:D6:FE:2E:D0:77:AA:6B:29:9E:FA:F5:56:80:6C:BB:79:1F:17:84 Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Certificate serial: 199C Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/A9286C0E6D4411E7AF539270C4F9AE02.roa Signing time: Thu 04 Jul 2024 16:53:45 +0000 ROA not before: Thu 04 Jul 2024 16:53:45 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 15580 IP address blocks: 103.233.172.0/24 maxlen: 24 103.233.173.0/24 maxlen: 24 103.233.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6556 (0x199c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Validity Not Before: Jul 4 16:53:45 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6686d398-e51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8e:13:71:f4:12:39:73:c0:5d:03:04:3f:dd: 46:c3:2e:08:ae:13:7c:05:46:b1:dd:cf:c4:17:74: 7d:5f:f2:ed:79:77:f7:28:4e:fd:1f:5e:08:10:21: 0c:73:d3:cb:46:aa:3c:fc:88:82:73:6f:42:1c:df: 00:71:68:33:95:40:0e:a3:60:a8:4c:54:60:16:86: 22:0a:1a:18:21:12:8c:51:dd:dd:47:80:68:d1:9f: cd:d5:6f:31:38:af:66:b2:b4:7e:a3:62:3b:2f:de: f4:fb:59:b9:43:ed:6e:81:f8:ff:e0:9e:7e:6a:ca: f3:9b:87:14:4a:89:ee:6b:1d:d8:11:62:c7:e7:29: 9b:bd:de:f6:98:16:59:ad:c8:e0:a8:3d:a1:71:2e: 06:ab:53:d9:e6:a9:44:c0:2b:96:7f:b3:52:9d:fc: 50:6e:d2:22:ef:55:cb:d5:cf:71:2e:e9:ea:7e:b4: 55:e2:46:aa:2e:a0:9e:6b:58:0c:3f:3e:86:58:4a: eb:cb:5c:a1:54:3e:cb:98:ce:c4:38:12:b0:56:93: 67:8e:dc:cb:bd:b4:31:3a:a1:58:a9:fb:a9:d8:7d: 46:e3:44:a9:6c:ba:ae:e6:dc:41:38:60:fc:4c:e6: e8:d6:42:a9:f7:6d:19:30:e4:d2:96:41:90:06:79: dd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D6:FE:2E:D0:77:AA:6B:29:9E:FA:F5:56:80:6C:BB:79:1F:17:84 X509v3 Authority Key Identifier: keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/A9286C0E6D4411E7AF539270C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.233.172.0/22 Signature Algorithm: sha256WithRSAEncryption 98:35:55:bb:cf:9d:3f:fa:e0:3e:3e:ab:cf:1e:e6:50:11:c0: 98:32:56:71:02:84:2e:46:e3:bf:19:83:a1:a1:0a:eb:e3:18: 17:72:bc:8f:e8:1d:98:24:f5:77:08:11:a0:aa:55:fd:2c:bf: c2:88:65:10:ea:ee:6b:91:69:08:a9:e8:f8:cb:cc:7a:de:e7: 52:03:d1:ee:f3:9f:6a:77:9f:c7:70:ff:be:00:8f:f7:76:eb: 1f:70:49:d1:fa:e6:fa:df:b8:89:55:79:fe:f6:8f:9c:d7:52: 06:30:a3:c2:9e:ea:e9:a1:0a:38:a7:a1:f3:fd:81:c0:70:ad: 76:35:15:75:25:16:52:c3:33:56:b7:41:c8:40:81:50:b1:a7: f4:53:6b:76:0d:82:38:4d:28:18:c2:74:61:78:a4:9e:d0:c1: 7f:9c:bc:fe:58:79:a1:00:fd:1e:32:d2:16:c8:c1:5a:1c:71: e8:46:36:cd:c9:8a:b4:01:4c:b0:0e:13:4b:4d:b7:6f:43:b0: 7b:d7:d5:33:5c:a4:41:e3:c8:c2:1f:10:86:de:b2:d6:47:b2: 72:8b:4c:be:6e:64:4f:27:43:86:63:23:61:36:a4:3e:e0:1a: 9e:6f:01:4e:cf:e0:8e:f0:a4:fd:3f:29:59:c6:94:9e:70:53: 76:ae:bd:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw OTU4QUEzMkYwHhcNMjQwNzA0MTY1MzQ1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg2ZDM5OC1lNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxY4TcfQSOXPAXQMEP91Gwy4IrhN8BUax3c/EF3R9X/LteXf3KE79H14IECEM c9PLRqo8/IiCc29CHN8AcWgzlUAOo2CoTFRgFoYiChoYIRKMUd3dR4Bo0Z/N1W8x OK9msrR+o2I7L970+1m5Q+1ugfj/4J5+asrzm4cUSonuax3YEWLH5ymbvd72mBZZ rcjgqD2hcS4Gq1PZ5qlEwCuWf7NSnfxQbtIi71XL1c9xLunqfrRV4kaqLqCea1gM Pz6GWErry1yhVD7LmM7EOBKwVpNnjtzLvbQxOqFYqfup2H1G40SpbLqu5txBOGD8 TObo1kKp920ZMOTSlkGQBnndewIDAQABo4IClTCCApEwHQYDVR0OBBYEFMXW/i7Q d6prKZ769VaAbLt5HxeEMB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjUzQTUvMjU4MEE4RDY0QjY1MTFFN0I0NjlDMDdBQzRGOUFFMDIvQTkyODZDMEU2 RDQ0MTFFN0FGNTM5MjcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn6awwDQYJKoZIhvcNAQELBQADggEBAJg1VbvPnT/64D4+ q88e5lARwJgyVnEChC5G478Zg6GhCuvjGBdyvI/oHZgk9XcIEaCqVf0sv8KIZRDq 7muRaQip6PjLzHre51ID0e7zn2p3n8dw/74Aj/d26x9wSdH65vrfuIlVef72j5zX UgYwo8Ke6umhCjinofP9gcBwrXY1FXUlFlLDM1a3QchAgVCxp/RTa3YNgjhNKBjC dGF4pJ7QwX+cvP5YeaEA/R4y0hbIwVoccehGNs3JirQBTLAOE0tNt29DsHvX1TNc pEHjyMIfEIbestZHsnKLTL5uZE8nQ4ZjI2E2pD7gGp5vAU7P4I7wpP0/KVnGlJ5w U3auve8= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org