$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/57422FE8E0D111EAA04F6C2DC4F9AE02.roa File: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (raw, json) Hash identifier: Rag1aXuB80ACmDGyM69D8d++hcvj12gly6XctNyZFFU= Subject key identifier: B7:DC:29:03:E9:D2:8D:5D:54:97:27:5C:A7:07:BC:3F:D0:A3:72:D3 Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Certificate serial: 09E4 Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/57422FE8E0D111EAA04F6C2DC4F9AE02.roa Signing time: Tue 30 Apr 2024 21:29:36 +0000 ROA not before: Tue 30 Apr 2024 21:29:36 +0000 ROA not after: Thu 29 Aug 2024 00:00:00 +0000 asID: 136267 IP address blocks: 103.85.196.0/22 maxlen: 24 2400:afc0::/32 maxlen: 32 2400:afc0:196::/48 maxlen: 48 2400:afc0:197::/48 maxlen: 48 2400:afc0:198::/48 maxlen: 48 2400:afc0:199::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2532 (0x9e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Validity Not Before: Apr 30 21:29:36 2024 GMT Not After : Aug 29 00:00:00 2024 GMT Subject: CN=663162c0-cd06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:f6:ee:44:19:0c:52:f1:ec:82:69:e5:62: f0:df:88:57:b8:8b:d5:00:21:c1:94:fc:8f:5d:22: 96:bf:53:bf:11:ff:a6:23:13:d5:71:fe:1e:e2:4e: 7e:8a:a7:34:15:ef:41:55:6c:d9:44:75:f3:27:b8: 66:96:4a:77:ab:7a:42:02:51:af:d3:ac:7f:83:69: b5:cf:ee:91:46:f8:12:81:41:94:9a:51:d8:38:04: 18:e2:76:48:0f:fc:c2:3d:b6:94:a6:5c:b5:7c:37: 9e:ff:ca:1c:bc:b5:8b:61:9e:36:03:ab:2a:c4:19: 1c:df:8e:c1:63:ae:6a:23:8e:fb:6e:0b:53:e6:73: 52:f1:b9:bf:bd:be:f0:1d:ca:eb:02:31:31:d3:35: 49:15:6d:db:36:84:24:91:5e:45:08:22:94:29:1e: 24:b2:97:d2:cb:58:d2:80:04:c7:02:10:fd:b2:54: f0:d7:fb:92:be:04:c1:d8:f7:5f:c9:71:c5:8a:05: a7:4b:c3:e5:ca:3f:ca:6d:01:a8:60:93:1e:ee:a5: ab:94:c1:31:17:0f:3a:1d:da:78:01:8a:6d:73:7e: 66:d1:73:d2:5e:b9:81:ac:50:28:5a:4e:f1:04:2d: 02:28:41:a5:9d:a7:6a:a6:3a:fb:8d:81:14:fc:27: 85:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DC:29:03:E9:D2:8D:5D:54:97:27:5C:A7:07:BC:3F:D0:A3:72:D3 X509v3 Authority Key Identifier: keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/57422FE8E0D111EAA04F6C2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.196.0/22 IPv6: 2400:afc0::/32 Signature Algorithm: sha256WithRSAEncryption 3a:4e:80:9b:ca:f6:c6:6b:fb:e9:b3:86:64:8f:b6:e2:6d:97: 75:66:42:4d:3b:4e:1e:25:9a:04:a9:e2:b9:42:64:1a:d3:41: f0:77:53:ff:e6:40:df:e6:00:8a:4d:09:ea:43:e9:bd:64:13: 39:65:84:fa:5d:51:c2:e9:cb:63:20:24:f4:57:dd:1e:40:21: 4e:e5:52:7c:4b:11:2d:6a:28:22:11:b9:fd:0d:de:7c:09:db: 84:6e:9c:3a:6f:70:3a:55:7b:44:2c:7d:be:4b:92:bd:d8:b0: c6:04:ef:05:ef:a1:b2:56:d2:ba:bf:c8:76:1b:ba:65:c8:a3: 36:a9:e4:f0:cd:4d:5e:e0:96:7a:b8:1a:79:83:9e:e0:d8:a1: 57:17:51:b8:40:2c:26:08:aa:3e:08:f7:2c:cd:9c:8b:4f:b6: ef:41:51:a9:e7:16:62:b2:6b:d7:71:f6:dc:f9:ed:f8:1b:11: ca:f0:8c:c6:f3:43:2f:d8:e3:79:f9:c5:14:a2:f6:1a:fb:61: 98:b5:6f:3d:d4:31:46:fc:4f:7e:5d:95:92:e2:e0:b2:0c:33: 43:77:19:02:9f:93:c2:fb:ce:95:da:05:76:51:c8:bf:31:a3: 94:93:cb:89:2d:87:ba:04:f8:4f:1d:74:fd:31:d7:e6:55:70: 4a:53:56:83 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcxNjUxMTAvBgNVBAUTKEIwQTQyNENFMzlDNzhDNjVEQkYyRkZDMDJBREI4RTM1 NDAzNkM5QzAwHhcNMjQwNDMwMjEyOTM2WhcNMjQwODI5MDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxNjJjMC1jZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpP27kQZDFLx7IJp5WLw34hXuIvVACHBlPyPXSKWv1O/Ef+mIxPVcf4e4k5+ iqc0Fe9BVWzZRHXzJ7hmlkp3q3pCAlGv06x/g2m1z+6RRvgSgUGUmlHYOAQY4nZI D/zCPbaUply1fDee/8ocvLWLYZ42A6sqxBkc347BY65qI477bgtT5nNS8bm/vb7w HcrrAjEx0zVJFW3bNoQkkV5FCCKUKR4kspfSy1jSgATHAhD9slTw1/uSvgTB2Pdf yXHFigWnS8Plyj/KbQGoYJMe7qWrlMExFw86Hdp4AYptc35m0XPSXrmBrFAoWk7x BC0CKEGlnadqpjr7jYEU/CeFCQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLfcKQPp 0o1dVJcnXKcHvD/Qo3LTMB8GA1UdIwQYMBaAFLCkJM45x4xl2/L/wCrbjjVANsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzE2NS8yMTVGRUZCNDU1 QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpHWGI4dl9BS3R1T05VQTJ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLUWt6am5IakdYYjh2X0FLdHVPTlVBMnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjcxNjUvMjE1RkVGQjQ1NUIyMTFFQThGMzVCRTQ0QzRGOUFFMDIvNTc0MjJGRThF MEQxMTFFQUEwNEY2QzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnVcQwDQQCAAIwBwMFACQAr8AwDQYJKoZIhvcNAQELBQAD ggEBADpOgJvK9sZr++mzhmSPtuJtl3VmQk07Th4lmgSp4rlCZBrTQfB3U//mQN/m AIpNCepD6b1kEzllhPpdUcLpy2MgJPRX3R5AIU7lUnxLES1qKCIRuf0N3nwJ24Ru nDpvcDpVe0Qsfb5Lkr3YsMYE7wXvobJW0rq/yHYbumXIozap5PDNTV7glnq4GnmD nuDYoVcXUbhALCYIqj4I9yzNnItPtu9BUannFmKya9dx9tz57fgbEcrwjMbzQy/Y 43n5xRSi9hr7YZi1bz3UMUb8T35dlZLi4LIMM0N3GQKfk8L7zpXaBXZRyL8xo5ST y4kth7oE+E8ddP0x1+ZVcEpTVoM= -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org