$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/5197AD868A0D11EAA9BA2E0FC4F9AE02.roa File: 5197AD868A0D11EAA9BA2E0FC4F9AE02.roa (raw, json) Hash identifier: bvB7GDHmnaarF1qMqlspjRavNLu6JF79ftbNTEveK8M= Subject key identifier: 20:3B:6C:C2:CB:06:6F:7F:6B:0C:CD:14:C1:CB:DF:4D:7A:14:8C:B8 Certificate issuer: /CN=A91B9385/serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4 Certificate serial: 08BB Authority key identifier: 35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/5197AD868A0D11EAA9BA2E0FC4F9AE02.roa Signing time: Wed 20 Mar 2024 21:30:04 +0000 ROA not before: Wed 20 Mar 2024 21:30:04 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 133480 IP address blocks: 103.108.92.0/24 maxlen: 24 103.108.93.0/24 maxlen: 24 103.108.94.0/24 maxlen: 24 103.108.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2235 (0x8bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9385/serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4 Validity Not Before: Mar 20 21:30:04 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65fb555c-aaa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:eb:e8:ce:d8:7c:d9:e0:e7:3a:37:6c:3f:2a: 9a:a0:db:e0:ea:31:13:0c:6c:67:90:31:a4:92:32: 15:15:3e:11:3c:f1:88:d7:72:9f:9d:e3:b4:ac:13: e8:d9:27:26:1f:83:6f:be:45:01:fe:13:3c:e3:bf: 6e:da:94:76:d2:cc:a5:a4:1d:8d:45:2f:c5:62:fd: 0c:b9:6c:ec:33:e1:56:63:1b:82:61:99:d3:69:bc: d5:ff:7c:7a:54:93:d6:16:ae:a6:30:b2:8c:db:8f: 68:20:06:3d:c1:67:46:8c:c4:70:af:b1:7a:21:bc: 48:c8:03:b2:66:cc:35:47:b3:7c:95:c1:1e:28:f1: a2:ed:f4:b6:bc:b8:c2:ae:bb:c5:48:e3:2e:e5:de: 00:0d:07:36:23:e6:d8:ae:b4:2a:f3:ef:2a:8d:62: 9a:be:0f:d4:12:7f:09:05:41:31:f5:10:cf:92:bc: 73:f7:55:cd:98:8c:8e:a2:45:6f:38:c3:e8:7e:61: f6:b4:95:14:2a:f1:99:e8:90:c1:e8:18:d8:18:e0: 7f:ad:4c:bc:c6:0c:d7:ad:75:be:e9:b4:b4:d9:43: 82:af:16:7c:0d:ce:45:52:90:84:8d:12:70:50:9c: 44:3d:9b:9d:1c:c1:a2:39:54:02:79:87:0d:7d:9b: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3B:6C:C2:CB:06:6F:7F:6B:0C:CD:14:C1:CB:DF:4D:7A:14:8C:B8 X509v3 Authority Key Identifier: keyid:35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/5197AD868A0D11EAA9BA2E0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.92.0/22 Signature Algorithm: sha256WithRSAEncryption 56:a2:df:df:61:3c:19:65:5e:74:74:f4:b5:48:26:86:7f:11: 32:68:17:25:53:5a:12:89:fb:91:b6:ab:79:b5:00:cd:7b:41: e7:45:e8:99:be:4f:c3:f5:ad:31:89:94:8a:d6:61:8a:26:70: f1:2a:3a:53:e2:34:61:e0:6c:2c:78:94:5b:1e:d5:45:fc:fd: c4:12:ed:8a:0a:3d:fa:b8:f4:23:3b:8f:a1:fe:e8:b5:be:83: fd:ed:f8:26:41:4c:37:d4:aa:a6:b2:9f:cf:f5:8d:f8:aa:0b: 3f:df:f5:96:9b:29:29:36:f5:26:49:61:b3:59:3f:cc:2a:d1: 0c:aa:a0:2d:8c:cd:92:ac:9a:4d:aa:91:1f:a5:ff:9e:7b:59: 12:62:01:3b:b0:be:aa:07:70:36:82:81:e1:6f:a0:4a:e0:4b: e7:77:39:0a:d1:28:c2:4e:48:a1:4e:a4:a5:07:79:65:cf:bc: cd:d0:bc:a3:dd:63:5f:07:78:71:44:81:a2:07:c8:f7:68:cb: d2:9b:7a:2b:c9:af:2e:84:d2:04:b3:7c:26:6f:05:54:d7:31: 36:b1:96:1f:26:0e:f0:f5:19:83:e0:49:fe:63:ff:a2:07:b3: ea:0a:6d:85:49:cd:36:fc:27:a7:9b:ca:d6:0f:4a:b4:0a:a9: fe:2d:dd:01 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkzODUxMTAvBgNVBAUTKDM1QkY5REM1NTM1QTY4M0FCNjk1QTc3ODI2Nzg2RDNE RjlFMkM1QjQwHhcNMjQwMzIwMjEzMDA0WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWZiNTU1Yy1hYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ovozth82eDnOjdsPyqaoNvg6jETDGxnkDGkkjIVFT4RPPGI13KfneO0rBPo 2ScmH4NvvkUB/hM8479u2pR20sylpB2NRS/FYv0MuWzsM+FWYxuCYZnTabzV/3x6 VJPWFq6mMLKM249oIAY9wWdGjMRwr7F6IbxIyAOyZsw1R7N8lcEeKPGi7fS2vLjC rrvFSOMu5d4ADQc2I+bYrrQq8+8qjWKavg/UEn8JBUEx9RDPkrxz91XNmIyOokVv OMPofmH2tJUUKvGZ6JDB6BjYGOB/rUy8xgzXrXW+6bS02UOCrxZ8Dc5FUpCEjRJw UJxEPZudHMGiOVQCeYcNfZuj2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCA7bMLL Bm9/awzNFMHL3016FIy4MB8GA1UdIwQYMBaAFDW/ncVTWmg6tpWneCZ4bT354sW0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTM4NS83M0NGNjc2QThB MEIxMUVBQTI5NjRDMEJDNEY5QUUwMi9OYi1keFZOYWFEcTJsYWQ0Sm5odFBmbml4 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05iLWR4Vk5hYURxMmxhZDRKbmh0UGZuaXhiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjkzODUvNzNDRjY3NkE4QTBCMTFFQUEyOTY0QzBCQzRGOUFFMDIvNTE5N0FEODY4 QTBEMTFFQUE5QkEyRTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnbFwwDQYJKoZIhvcNAQELBQADggEBAFai399hPBllXnR0 9LVIJoZ/ETJoFyVTWhKJ+5G2q3m1AM17QedF6Jm+T8P1rTGJlIrWYYomcPEqOlPi NGHgbCx4lFse1UX8/cQS7YoKPfq49CM7j6H+6LW+g/3t+CZBTDfUqqayn8/1jfiq Cz/f9ZabKSk29SZJYbNZP8wq0QyqoC2MzZKsmk2qkR+l/557WRJiATuwvqoHcDaC geFvoErgS+d3OQrRKMJOSKFOpKUHeWXPvM3QvKPdY18HeHFEgaIHyPdoy9KbeivJ ry6E0gSzfCZvBVTXMTaxlh8mDvD1GYPgSf5j/6IHs+oKbYVJzTb8J6ebytYPSrQK qf4t3QE= -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:18 2024 by rpki-client on console-fra.rpki-client.org