$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/14D6A2A0EE3A11ED9BD27558C4F9AE02.roa File: 14D6A2A0EE3A11ED9BD27558C4F9AE02.roa (raw, json) Hash identifier: cRW6xls82aNu9r4zlZg3aNPT8AuOMYQ8YEx35nnpvAs= Subject key identifier: 6F:CF:4A:1A:CD:08:63:14:99:46:E3:86:7B:24:D6:50:75:F2:7A:AF Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Certificate serial: 0625 Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/14D6A2A0EE3A11ED9BD27558C4F9AE02.roa Signing time: Thu 11 Apr 2024 00:02:22 +0000 ROA not before: Thu 11 Apr 2024 00:02:22 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 134505 IP address blocks: 103.161.104.0/23 maxlen: 23 103.161.104.0/24 maxlen: 24 103.161.105.0/24 maxlen: 24 2400:fbe0::/32 maxlen: 32 2400:fbe0:1::/48 maxlen: 48 2400:fbe0:2::/48 maxlen: 48 2400:fbe0:3::/48 maxlen: 48 2400:fbe0:4::/48 maxlen: 48 2400:fbe0:5::/48 maxlen: 48 2400:fbe0:6::/48 maxlen: 48 2400:fbe0:7::/48 maxlen: 48 2400:fbe0:8::/48 maxlen: 48 2400:fbe0:9::/48 maxlen: 48 2400:fbe0:10::/48 maxlen: 48 2400:fbe0:4000::/48 maxlen: 48 2400:fbe0:4001::/48 maxlen: 48 2400:fbe0:4002::/48 maxlen: 48 2400:fbe0:4003::/48 maxlen: 48 2400:fbe0:4004::/48 maxlen: 48 2400:fbe0:4005::/48 maxlen: 48 2400:fbe0:4006::/48 maxlen: 48 2400:fbe0:4007::/48 maxlen: 48 2400:fbe0:4008::/48 maxlen: 48 2400:fbe0:4009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 23:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Validity Not Before: Apr 11 00:02:22 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=6617288e-d786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:04:91:a3:29:26:49:d9:13:0e:9b:36:b9: 67:b6:07:25:10:f1:df:56:45:81:70:3a:97:15:85: 2a:4b:31:d6:ff:2b:01:88:7e:f6:16:1f:d0:78:6c: c0:c9:2f:bc:41:7e:a6:10:44:68:4e:52:9a:7c:59: 28:b2:fd:d5:07:24:07:c8:1a:c2:f4:72:a1:ae:d5: b0:a7:d8:18:ee:ca:87:a5:90:88:e2:96:32:f6:55: b3:28:b8:f6:ff:a8:f4:1c:7a:0f:98:cf:fb:25:69: eb:81:3a:94:2f:b7:d7:b8:c7:4f:5b:76:6c:42:9b: 74:3b:60:b8:d7:a0:dc:2d:4c:e4:52:bf:fc:77:78: d2:3e:28:4a:3d:48:dc:68:c6:09:cb:7a:90:67:53: 7a:26:a3:f6:f4:8e:57:71:12:c9:b7:66:13:d5:84: e6:75:45:c0:1a:b2:e3:ad:bf:88:5e:d9:85:6b:0b: 0e:ff:8c:90:17:94:6a:c7:3c:26:3c:fc:22:9a:50: cc:04:97:77:e3:49:f4:a6:bf:59:e6:95:4a:62:9b: 2a:fc:e8:6e:8e:c5:1a:bd:b4:62:28:a7:e4:78:da: 61:05:58:fb:5c:dc:36:23:87:9e:7d:d6:b0:e9:1b: 74:ac:5b:04:3b:45:0c:c5:ad:a0:20:99:16:36:ea: 7c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CF:4A:1A:CD:08:63:14:99:46:E3:86:7B:24:D6:50:75:F2:7A:AF X509v3 Authority Key Identifier: keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/14D6A2A0EE3A11ED9BD27558C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.104.0/23 IPv6: 2400:fbe0::/32 Signature Algorithm: sha256WithRSAEncryption 0c:46:9b:60:ca:39:64:dc:c0:d3:d7:3f:12:4e:5a:52:73:3c: df:43:11:7d:2f:fb:c2:ef:61:60:d6:f3:74:ec:81:47:f5:b9: cb:cf:5f:c3:e3:bb:b2:8b:4b:ca:39:94:e6:9d:bd:03:60:cd: 72:d0:a7:de:3e:fc:6d:ca:b1:2f:3e:b2:cc:67:20:e6:e3:66: 46:b5:d4:af:b9:a4:e6:38:24:0c:75:47:25:14:74:ae:66:64: 18:a0:53:be:0e:3e:b1:80:86:3a:c5:fa:6e:21:9e:4e:df:5a: 1d:74:61:90:b7:ec:b8:b9:37:f8:11:87:9f:92:48:00:01:86: 3e:18:4a:55:02:fc:40:88:99:12:8d:11:53:1a:76:69:35:79: dc:8a:87:4f:f7:30:a6:6d:a5:46:45:c9:08:49:5b:69:44:ff: e7:2b:a4:46:01:8d:53:f6:70:19:8c:79:77:0d:18:88:5a:44: 7b:cb:bd:0d:ae:d6:94:3f:75:ce:fa:39:4c:76:be:05:7c:9e: e6:fe:34:46:4e:39:66:3a:bf:54:7c:13:45:42:c8:7e:9e:9f: da:32:18:1d:5f:32:ce:31:bd:cd:fa:54:aa:a2:6b:35:e3:c8: a0:03:21:c5:1e:6f:a7:8b:27:da:50:4d:a5:25:f4:2f:45:43: 78:72:b6:cd -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0RkUxMTAvBgNVBAUTKDA3Q0Y4MTcwNEFEODcwMjMxRTFFRDgzN0JDM0I4MDY3 NUEwMjdDNjkwHhcNMjQwNDExMDAwMjIyWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE3Mjg4ZS1kNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUwEkaMpJknZEw6bNrlntgclEPHfVkWBcDqXFYUqSzHW/ysBiH72Fh/QeGzA yS+8QX6mEERoTlKafFkosv3VByQHyBrC9HKhrtWwp9gY7sqHpZCI4pYy9lWzKLj2 /6j0HHoPmM/7JWnrgTqUL7fXuMdPW3ZsQpt0O2C416DcLUzkUr/8d3jSPihKPUjc aMYJy3qQZ1N6JqP29I5XcRLJt2YT1YTmdUXAGrLjrb+IXtmFawsO/4yQF5Rqxzwm PPwimlDMBJd340n0pr9Z5pVKYpsq/OhujsUavbRiKKfkeNphBVj7XNw2I4eefdaw 6Rt0rFsEO0UMxa2gIJkWNup8CwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFG/PShrN CGMUmUbjhnsk1lB18nqvMB8GA1UdIwQYMBaAFAfPgXBK2HAjHh7YN7w7gGdaAnxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTRGRS9GRUREQzBDMDUx MTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWNDTWVIdGczdkR1QVoxb0Nm R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4LUJjRXJZY0NNZUh0ZzN2RHVBWjFvQ2ZHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU0RkUvRkVEREMwQzA1MTEzMTFFQkFGMjhDQTBEQzRGOUFFMDIvMTRENkEyQTBF RTNBMTFFRDlCRDI3NTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnoWgwDQQCAAIwBwMFACQA++AwDQYJKoZIhvcNAQELBQAD ggEBAAxGm2DKOWTcwNPXPxJOWlJzPN9DEX0v+8LvYWDW83TsgUf1ucvPX8Pju7KL S8o5lOadvQNgzXLQp94+/G3KsS8+ssxnIObjZka11K+5pOY4JAx1RyUUdK5mZBig U74OPrGAhjrF+m4hnk7fWh10YZC37Li5N/gRh5+SSAABhj4YSlUC/ECImRKNEVMa dmk1edyKh0/3MKZtpUZFyQhJW2lE/+crpEYBjVP2cBmMeXcNGIhaRHvLvQ2u1pQ/ dc76OUx2vgV8nub+NEZOOWY6v1R8E0VCyH6en9oyGB1fMs4xvc36VKqiazXjyKAD IcUeb6eLJ9pQTaUl9C9FQ3hyts0= -----END CERTIFICATE-----Generated at Fri May 17 00:24:22 2024 by rpki-client on console-fra.rpki-client.org