$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa File: 3046CBE2C4E811EAB607D255C4F9AE02.roa (raw, json) Hash identifier: ZENIuC9ETk3oVi55Pu2Lt69JKVl7Ie6+Sxr+XymXlyI= Subject key identifier: 87:A7:91:B4:B5:3A:9B:DF:80:21:E1:1F:28:13:9C:18:8B:CE:56:A2 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 0725 Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa Signing time: Mon 04 Sep 2023 21:48:50 +0000 ROA not before: Mon 04 Sep 2023 21:48:50 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 140905 IP address blocks: 103.153.54.0/24 maxlen: 24 2001:df4:3480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1829 (0x725) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Sep 4 21:48:50 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64f650c2-4015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c5:d8:70:c1:37:71:f2:aa:70:d6:d5:8d:72: 69:f4:9c:7a:eb:6f:9b:b4:39:bd:11:2a:b6:7c:db: 12:72:79:a6:a9:c4:cb:f1:17:63:fd:d6:45:71:f9: 42:3b:b2:3f:26:96:f7:70:40:8d:56:99:92:bc:80: fa:3f:fd:ee:df:60:5d:73:a9:e7:0c:2f:7d:1e:c9: 2b:61:c3:7f:b0:53:04:67:5d:0b:0d:87:cf:4f:bb: 08:31:44:64:4a:d7:e3:0e:68:a1:65:37:bb:30:89: ee:66:89:bd:b8:fc:bf:d1:12:76:7b:45:58:4c:97: 73:ea:07:89:49:e9:7a:cb:3c:4e:d4:e3:c3:78:1d: 84:e8:a0:04:91:00:0f:2a:9b:cd:8f:52:c5:12:96: aa:23:2f:36:7a:8e:53:73:10:c4:5f:19:48:80:25: c8:83:0e:7e:dd:87:ad:ce:e7:f9:ca:74:3b:c0:76: 30:9f:69:05:4e:9b:21:c1:cf:7f:d5:fd:0e:34:3f: 6b:59:c8:e2:d3:e5:5a:7c:0a:c7:4d:55:a4:82:70: 4e:35:fa:13:71:28:39:c1:1f:34:da:c3:48:da:c6: 63:fa:b0:1f:11:2a:65:63:03:82:e5:8c:f6:08:bb: 1e:52:f9:92:2d:79:c8:ff:82:e9:77:44:b3:99:85: 67:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A7:91:B4:B5:3A:9B:DF:80:21:E1:1F:28:13:9C:18:8B:CE:56:A2 X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.54.0/24 IPv6: 2001:df4:3480::/48 Signature Algorithm: sha256WithRSAEncryption 1e:d9:56:b7:b6:c1:c0:65:eb:af:20:bb:0f:f8:00:9e:02:c0: d4:ff:e6:2c:5b:a2:35:59:4d:9b:09:a5:58:41:84:07:d1:5f: b0:88:80:06:19:ce:99:ed:48:00:b4:13:1b:1f:4d:13:42:2a: 73:ad:bb:84:0e:58:a3:6d:2b:55:3d:9c:99:23:0c:73:1d:0b: 13:01:76:fc:e2:75:be:90:af:34:7e:25:da:c0:f0:aa:e6:54: 88:7e:9b:1b:0f:98:b0:4b:a5:a0:bd:c1:11:08:cf:16:dd:e1: 9d:d4:0d:d7:d9:ec:a0:9d:f4:9c:93:0d:a2:38:78:54:bd:7e: 7a:37:f5:f8:84:22:28:0b:90:05:9d:fc:3f:3a:e1:15:06:13: 9f:54:c9:34:bc:b4:43:be:d7:83:8b:71:4e:f4:db:db:9f:d0: 3a:ac:34:3a:12:85:c8:31:89:90:38:ab:a8:d9:c9:b0:95:95: d1:04:19:eb:b6:05:5f:34:80:4f:3c:3a:38:70:18:95:18:e8: 9e:72:e5:25:8a:1f:2f:dd:56:88:f7:2e:ef:93:3b:02:a5:bd: f4:35:91:03:05:30:35:e0:0e:4a:ce:b8:0d:ee:99:33:75:d4: 28:c1:65:78:0d:d7:d1:6e:59:76:9e:6e:80:66:13:71:56:2e: 0e:06:e8:c4 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICByUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjMwOTA0MjE0ODUwWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY2NTBjMi00MDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18XYcME3cfKqcNbVjXJp9Jx662+btDm9ESq2fNsScnmmqcTL8Rdj/dZFcflC O7I/Jpb3cECNVpmSvID6P/3u32Bdc6nnDC99HskrYcN/sFMEZ10LDYfPT7sIMURk StfjDmihZTe7MInuZom9uPy/0RJ2e0VYTJdz6geJSel6yzxO1OPDeB2E6KAEkQAP KpvNj1LFEpaqIy82eo5TcxDEXxlIgCXIgw5+3Yetzuf5ynQ7wHYwn2kFTpshwc9/ 1f0OND9rWcji0+VafArHTVWkgnBONfoTcSg5wR802sNI2sZj+rAfESplYwOC5Yz2 CLseUvmSLXnI/4Lpd0SzmYVnBQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIenkbS1 OpvfgCHhHygTnBiLzlaiMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkE1MjEvQzlGQUU3Q0FDNEU2MTFFQUE2NDU0RjU0QzRGOUFFMDIvMzA0NkNCRTJD NEU4MTFFQUI2MDdEMjU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnmTYwDwQCAAIwCQMHACABDfQ0gDANBgkqhkiG9w0BAQsF AAOCAQEAHtlWt7bBwGXrryC7D/gAngLA1P/mLFuiNVlNmwmlWEGEB9FfsIiABhnO me1IALQTGx9NE0Iqc627hA5Yo20rVT2cmSMMcx0LEwF2/OJ1vpCvNH4l2sDwquZU iH6bGw+YsEuloL3BEQjPFt3hndQN19nsoJ30nJMNojh4VL1+ejf1+IQiKAuQBZ38 PzrhFQYTn1TJNLy0Q77Xg4txTvTb25/QOqw0OhKFyDGJkDirqNnJsJWV0QQZ67YF XzSATzw6OHAYlRjonnLlJYofL91WiPcu75M7AqW99DWRAwUwNeAOSs64De6ZM3XU KMFleA3X0W5Zdp5ugGYTcVYuDgboxA== -----END CERTIFICATE-----Generated at Thu May 16 22:58:18 2024 by rpki-client on console-fra.rpki-client.org