$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9128/86A79556485011ECBDD48E5DC4F9AE02/6262C03A1F2711EEA1F6981AC4F9AE02.roa File: 6262C03A1F2711EEA1F6981AC4F9AE02.roa (raw, json) Hash identifier: ti2NZ+l0ZELYP1OSO7ZaIDCY1efZhnWpJVleI3cmrhE= Subject key identifier: 5A:4C:DB:39:23:0B:64:CC:F3:1A:34:4A:6A:12:9C:2D:71:ED:7C:6A Certificate issuer: /CN=A91B9128/serialNumber=A6DB5ED7F50766D0795BF356BE5523063C60ACDC Certificate serial: 0391 Authority key identifier: A6:DB:5E:D7:F5:07:66:D0:79:5B:F3:56:BE:55:23:06:3C:60:AC:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ptte1_UHZtB5W_NWvlUjBjxgrNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9128/86A79556485011ECBDD48E5DC4F9AE02/6262C03A1F2711EEA1F6981AC4F9AE02.roa Signing time: Wed 27 Dec 2023 17:03:55 +0000 ROA not before: Wed 27 Dec 2023 17:03:55 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 149019 IP address blocks: 103.176.174.0/23 maxlen: 23 103.176.174.0/24 maxlen: 24 103.176.175.0/24 maxlen: 24 2401:1660::/32 maxlen: 32 2401:1660::/48 maxlen: 48 2401:1660:1::/48 maxlen: 48 2401:1660:2::/48 maxlen: 48 2401:1660:3::/48 maxlen: 48 2401:1660:4::/48 maxlen: 48 2401:1660:5::/48 maxlen: 48 2401:1660:6::/48 maxlen: 48 2401:1660:7::/48 maxlen: 48 2401:1660:8::/48 maxlen: 48 2401:1660:9::/48 maxlen: 48 2401:1660:a::/48 maxlen: 48 2401:1660:b::/48 maxlen: 48 2401:1660:c::/48 maxlen: 48 2401:1660:d::/48 maxlen: 48 2401:1660:e::/48 maxlen: 48 2401:1660:f::/48 maxlen: 48 2401:1660:10::/48 maxlen: 48 2401:1660:11::/48 maxlen: 48 2401:1660:12::/48 maxlen: 48 2401:1660:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9128/86A79556485011ECBDD48E5DC4F9AE02/ptte1_UHZtB5W_NWvlUjBjxgrNw.crl rsync://rpki.apnic.net/member_repository/A91B9128/86A79556485011ECBDD48E5DC4F9AE02/ptte1_UHZtB5W_NWvlUjBjxgrNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ptte1_UHZtB5W_NWvlUjBjxgrNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9128/serialNumber=A6DB5ED7F50766D0795BF356BE5523063C60ACDC Validity Not Before: Dec 27 17:03:55 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658c58fa-3b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:3b:60:a7:67:e6:6c:17:2d:a5:4f:2f:a4: b2:15:da:96:08:45:75:1c:20:d9:59:da:18:47:75: 21:1b:30:90:fc:3b:5e:58:1c:e4:25:08:3e:16:c2: 18:80:bb:16:0e:b2:e6:01:29:03:f7:dd:3e:1f:dd: 2d:75:54:29:a9:0c:ad:1f:46:c9:8f:42:01:32:2f: 1a:bb:cf:31:80:01:5e:7e:88:4a:5d:b4:07:d7:89: fd:bd:8c:db:36:dd:a6:d0:02:77:e6:cc:10:55:af: c3:22:5c:17:70:51:a5:47:8f:42:fc:ca:8f:27:02: a4:90:c4:35:d6:51:ad:c6:44:70:8a:c7:ba:f1:8e: 25:ff:0b:43:96:1c:da:9d:4b:04:bb:56:53:98:16: 3b:78:0e:cc:2e:04:b5:9e:9d:c2:30:cd:2d:30:c4: d6:25:d5:b4:23:f8:f5:31:c9:3e:e2:2f:92:14:33: b8:73:19:cb:c0:93:84:26:d0:82:30:14:2e:f5:b4: a8:44:e6:96:ab:86:87:90:c3:a1:03:ff:c4:e3:dc: 85:fc:a2:44:13:b2:cb:cc:b6:2e:35:85:fb:c4:5d: 4e:ac:22:38:fa:c5:73:b9:07:b2:f9:99:28:7e:6d: a9:56:f1:52:e1:6c:52:8b:a2:f7:0a:09:3f:4f:ea: 87:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4C:DB:39:23:0B:64:CC:F3:1A:34:4A:6A:12:9C:2D:71:ED:7C:6A X509v3 Authority Key Identifier: keyid:A6:DB:5E:D7:F5:07:66:D0:79:5B:F3:56:BE:55:23:06:3C:60:AC:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9128/86A79556485011ECBDD48E5DC4F9AE02/ptte1_UHZtB5W_NWvlUjBjxgrNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ptte1_UHZtB5W_NWvlUjBjxgrNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9128/86A79556485011ECBDD48E5DC4F9AE02/6262C03A1F2711EEA1F6981AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.174.0/23 IPv6: 2401:1660::/32 Signature Algorithm: sha256WithRSAEncryption 46:2c:8c:a8:d4:c0:1a:63:4a:34:84:45:0c:ed:17:5b:b5:0d: 7a:85:61:24:40:ef:fa:2d:d5:49:97:d4:f8:cd:71:7a:d0:31: 35:59:62:99:8a:d8:be:a2:bf:9c:c7:a5:57:b1:61:83:41:c8: 72:53:9b:0f:2c:89:d5:11:45:5a:d8:d6:f9:d4:f1:17:94:cc: 2b:c8:41:18:2c:9c:d6:fa:8c:6c:7d:d2:59:e5:1e:08:92:37: 36:73:72:9f:50:8c:41:ee:a0:4c:30:b8:6d:44:c6:99:47:61: 58:91:22:59:d9:45:7a:bc:3d:41:f0:ae:c8:5b:51:bf:2c:0e: b0:5c:c2:a0:59:0d:e8:db:39:5a:31:bc:eb:4b:fd:f8:7f:41: 1d:32:7d:54:e7:08:e8:c8:52:d5:b9:b0:14:ea:70:bb:05:ee: de:04:62:fe:06:63:45:3d:88:d2:28:71:31:51:98:aa:7d:6b: 63:64:0b:f7:b0:9d:ce:57:be:b9:b3:48:2c:f7:90:25:5b:6a: 68:9c:a0:08:fb:45:51:71:71:16:6f:46:36:dd:44:69:42:5f: 2a:43:6e:4b:86:a8:79:fc:da:92:d7:69:09:d5:50:9c:47:ee: b7:b4:04:30:27:0e:97:15:c9:5d:8c:eb:52:fc:c9:a1:76:c5: d3:5d:69:8a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxMjgxMTAvBgNVBAUTKEE2REI1RUQ3RjUwNzY2RDA3OTVCRjM1NkJFNTUyMzA2 M0M2MEFDREMwHhcNMjMxMjI3MTcwMzU1WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThjNThmYS0zYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSM7YKdn5mwXLaVPL6SyFdqWCEV1HCDZWdoYR3UhGzCQ/DteWBzkJQg+FsIY gLsWDrLmASkD990+H90tdVQpqQytH0bJj0IBMi8au88xgAFefohKXbQH14n9vYzb Nt2m0AJ35swQVa/DIlwXcFGlR49C/MqPJwKkkMQ11lGtxkRwise68Y4l/wtDlhza nUsEu1ZTmBY7eA7MLgS1np3CMM0tMMTWJdW0I/j1Mck+4i+SFDO4cxnLwJOEJtCC MBQu9bSoROaWq4aHkMOhA//E49yF/KJEE7LLzLYuNYX7xF1OrCI4+sVzuQey+Zko fm2pVvFS4WxSi6L3Cgk/T+qHIwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFpM2zkj C2TM8xo0SmoSnC1x7XxqMB8GA1UdIwQYMBaAFKbbXtf1B2bQeVvzVr5VIwY8YKzc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEyOC84NkE3OTU1NjQ4 NTAxMUVDQkRENDhFNURDNEY5QUUwMi9wdHRlMV9VSFp0QjVXX05XdmxVakJqeGdy TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B0dGUxX1VIWnRCNVdfTld2bFVqQmp4Z3JOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjkxMjgvODZBNzk1NTY0ODUwMTFFQ0JERDQ4RTVEQzRGOUFFMDIvNjI2MkMwM0Ex RjI3MTFFRUExRjY5ODFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnsK4wDQQCAAIwBwMFACQBFmAwDQYJKoZIhvcNAQELBQAD ggEBAEYsjKjUwBpjSjSERQztF1u1DXqFYSRA7/ot1UmX1PjNcXrQMTVZYpmK2L6i v5zHpVexYYNByHJTmw8sidURRVrY1vnU8ReUzCvIQRgsnNb6jGx90lnlHgiSNzZz cp9QjEHuoEwwuG1ExplHYViRIlnZRXq8PUHwrshbUb8sDrBcwqBZDejbOVoxvOtL /fh/QR0yfVTnCOjIUtW5sBTqcLsF7t4EYv4GY0U9iNIocTFRmKp9a2NkC/ewnc5X vrmzSCz3kCVbamicoAj7RVFxcRZvRjbdRGlCXypDbkuGqHn82pLXaQnVUJxH7re0 BDAnDpcVyV2M61L8yaF2xdNdaYo= -----END CERTIFICATE-----Generated at Tue May 21 03:29:52 2024 by rpki-client on console-fra.rpki-client.org