$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa File: C85D0F7E477711EBB4044E31C4F9AE02.roa (raw, json) Hash identifier: Bhz7N8pZoKpTA86d7VHsfPqDjwr9atp9lYNrAhBYh2s= Subject key identifier: DF:D0:65:50:77:3F:A3:F4:76:C4:68:14:20:E4:99:08:55:A9:7A:F5 Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234 Certificate serial: 1A9A Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa Signing time: Fri 02 Feb 2024 17:04:10 +0000 ROA not before: Fri 02 Feb 2024 17:04:10 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 61317 IP address blocks: 103.5.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 16:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6810 (0x1a9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234 Validity Not Before: Feb 2 17:04:10 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65bd208a-5041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f4:0c:fd:a7:2e:8d:2e:39:ea:f3:ba:7f:bf: b4:3e:aa:ce:88:bf:48:09:5f:58:b1:29:55:17:a9: 12:24:65:15:fc:46:e0:a4:8f:4e:fb:2a:61:d9:32: b3:0b:e2:1e:9d:d2:bc:94:59:1a:2b:88:36:a0:63: ba:91:f1:75:b4:87:4c:4f:0e:9a:2f:81:91:1e:70: db:7f:ad:b9:aa:a8:56:7a:df:95:68:9c:00:f7:1c: ac:66:2a:8e:c1:c0:e0:a9:da:c0:74:5a:4c:c0:dd: 71:db:db:e8:18:08:c4:39:de:7c:3a:91:f2:93:85: 9c:3a:da:30:a8:f1:0d:51:31:e4:32:24:1f:13:1b: d8:24:95:e5:11:11:30:ba:5e:01:8e:92:25:60:0d: 3f:72:a1:cb:7f:d9:fe:aa:91:c4:07:56:11:04:a8: 0c:3b:15:9a:5a:e1:7e:f4:7f:9a:a1:0e:84:34:60: 32:1d:6c:0d:5e:87:d1:ba:d5:1a:e7:77:ef:3c:0e: cd:e5:e2:a6:5c:0f:e4:d8:22:ac:80:f8:d3:6b:89: 00:97:16:58:51:e0:21:75:04:6a:95:c6:46:43:4f: 26:9d:29:8d:6f:e1:9f:42:8c:e6:8f:8a:cb:2d:21: 48:db:d5:04:74:2d:41:28:f1:3c:3d:44:75:3b:e5: a6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D0:65:50:77:3F:A3:F4:76:C4:68:14:20:E4:99:08:55:A9:7A:F5 X509v3 Authority Key Identifier: keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.164.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:45:54:fb:2d:ba:fa:c9:32:60:79:b0:26:04:f6:59:1b:e6: 5b:80:ac:a8:38:bb:2d:52:c2:2e:6a:fe:8b:07:8f:0d:3b:39: 3d:2d:c9:1b:ed:61:2f:e5:50:29:9b:ed:4b:16:a7:91:88:1c: 4d:bc:6e:68:70:ca:10:c1:37:3b:03:04:47:4b:31:a0:19:e5: 06:58:be:ff:db:b9:94:49:27:17:87:26:d7:27:0e:98:ab:bc: 8f:bf:42:28:66:ab:c9:55:9c:ee:9f:15:1e:16:7b:93:08:12: ea:ed:94:cb:84:d6:f5:f2:aa:c3:35:02:39:7e:2e:f4:1b:e1: 4c:30:9a:84:db:24:8b:b3:15:c7:3b:6d:93:92:27:cd:08:4d: d1:e6:96:41:69:1f:76:97:18:68:6a:af:75:64:a7:e4:35:4e: bf:8a:18:23:aa:0a:cf:3d:ae:de:79:f7:e1:03:d0:56:88:c1: d6:3e:bc:1c:38:b0:24:23:9f:1c:b0:3f:dd:be:5d:37:b4:06: 3c:2c:81:f0:05:31:5c:40:81:01:08:be:9a:24:b2:3c:73:82: 19:26:bd:2f:87:dc:9c:86:e6:1b:dc:5e:59:2e:b4:ef:b1:1e: fc:70:fa:f7:fa:92:33:51:b7:8d:5e:bd:c1:ea:3e:89:1f:68: cd:15:35:07 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3 OUQzMDUyMzQwHhcNMjQwMjAyMTcwNDEwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWJkMjA4YS01MDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vQM/acujS456vO6f7+0PqrOiL9ICV9YsSlVF6kSJGUV/EbgpI9O+yph2TKz C+IendK8lFkaK4g2oGO6kfF1tIdMTw6aL4GRHnDbf625qqhWet+VaJwA9xysZiqO wcDgqdrAdFpMwN1x29voGAjEOd58OpHyk4WcOtowqPENUTHkMiQfExvYJJXlEREw ul4BjpIlYA0/cqHLf9n+qpHEB1YRBKgMOxWaWuF+9H+aoQ6ENGAyHWwNXofRutUa 53fvPA7N5eKmXA/k2CKsgPjTa4kAlxZYUeAhdQRqlcZGQ08mnSmNb+GfQozmj4rL LSFI29UEdC1BKPE8PUR1O+WmuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN/QZVB3 P6P0dsRoFCDkmQhVqXr1MB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5 ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFFREMvMkRDMUJBRjIwOTg1MTFFN0IxRkZDMjNGQzRGOUFFMDIvQzg1RDBGN0U0 Nzc3MTFFQkI0MDQ0RTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnBaQwDQYJKoZIhvcNAQELBQADggEBAAxFVPstuvrJMmB5 sCYE9lkb5luArKg4uy1Swi5q/osHjw07OT0tyRvtYS/lUCmb7UsWp5GIHE28bmhw yhDBNzsDBEdLMaAZ5QZYvv/buZRJJxeHJtcnDpirvI+/Qihmq8lVnO6fFR4We5MI EurtlMuE1vXyqsM1Ajl+LvQb4UwwmoTbJIuzFcc7bZOSJ80ITdHmlkFpH3aXGGhq r3Vkp+Q1Tr+KGCOqCs89rt559+ED0FaIwdY+vBw4sCQjnxywP92+XTe0BjwsgfAF MVxAgQEIvpoksjxzghkmvS+H3JyG5hvcXlkutO+xHvxw+vf6kjNRt41evcHqPokf aM0VNQc= -----END CERTIFICATE-----Generated at Tue Apr 16 18:27:59 2024 by rpki-client on console-fra.rpki-client.org