$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa File: 71014290D87411EE97234F5CC4F9AE02.roa (raw, json) Hash identifier: UU48qML74BflhU1qL+0Ak4D82yZ8NydrD9esJZZYc34= Subject key identifier: E4:0E:C7:10:56:C6:22:6E:BD:C5:CF:97:43:BE:40:02:C6:D1:78:AB Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Certificate serial: 54 Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa Signing time: Sat 02 Mar 2024 09:09:54 +0000 ROA not before: Sat 02 Mar 2024 09:09:54 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 16509 IP address blocks: 103.14.230.0/24 maxlen: 24 2001:df2:b740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 07:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Validity Not Before: Mar 2 09:09:54 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65e2ece1-b570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:35:c2:2d:aa:96:a0:56:21:5e:f5:6e:fa: 60:b1:93:c0:2b:e2:32:8a:a9:eb:cc:6b:90:6c:11: 46:3c:4d:dc:df:96:0b:bd:0b:3a:7f:74:df:bb:49: 1b:74:08:b3:ce:b3:03:71:46:eb:e2:c7:63:06:b9: bd:0a:ef:2a:09:70:da:ec:3c:02:13:b6:22:1d:9d: 9d:50:51:60:dd:8a:ff:f3:6e:ed:79:08:d4:f0:4c: 5b:db:de:c2:d6:fb:58:60:f5:8b:58:90:1a:16:f5: 29:0e:7a:6e:8f:5e:b3:c3:1d:02:89:82:6f:46:7a: 0f:8b:d2:c5:d6:37:99:82:80:8b:6e:15:ff:ff:a0: 66:5c:c6:ec:61:21:97:d8:83:64:08:6e:f9:11:e0: d1:79:cb:58:05:f9:63:f5:99:38:1f:94:92:cd:72: 41:1e:f4:1f:1e:dd:4a:41:e4:97:3f:ac:ef:50:2d: 48:3d:b2:da:c5:01:4d:db:37:3a:02:4c:11:8f:c9: 5d:3a:7c:ce:76:e7:b0:8b:90:a6:79:7e:a2:0b:e2: 05:44:ea:27:8d:92:53:51:29:cf:77:59:62:d1:10: 8a:dc:64:0a:cb:f2:ba:38:12:a7:49:bd:03:46:bb: 77:73:4f:26:cb:c5:ff:09:ca:85:df:d4:70:dd:21: d9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0E:C7:10:56:C6:22:6E:BD:C5:CF:97:43:BE:40:02:C6:D1:78:AB X509v3 Authority Key Identifier: keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.14.230.0/24 IPv6: 2001:df2:b740::/48 Signature Algorithm: sha256WithRSAEncryption 93:90:a2:4f:32:f0:01:59:a5:f3:11:dd:b0:8c:1a:64:c5:ec: 46:16:e1:9b:9f:f8:cd:57:24:9c:5f:0f:b7:b7:9d:8a:38:c2: 5e:84:d0:f9:3f:0e:86:76:5e:21:07:07:c0:f0:b6:06:41:7a: d9:0e:d2:46:13:6d:b0:89:2e:97:53:d1:cb:57:91:a7:ea:e0: c4:0c:0c:c1:aa:d9:cc:3e:80:69:c4:8b:5e:eb:cd:65:27:27: 6a:18:8e:06:36:9b:6f:15:0f:2f:5c:7a:af:8c:3d:29:a7:2e: bb:f4:81:fd:99:bb:81:71:fa:5c:45:59:2c:98:3e:57:8a:c5: 1c:1e:17:30:1f:2a:28:bc:67:d3:5d:43:15:f0:79:a1:ee:29: ba:2a:58:a3:e9:84:c9:91:1a:2f:0f:fc:98:96:64:a0:23:19: ba:34:ae:03:c4:bb:89:3d:b5:a3:43:2d:bb:78:f6:ea:db:6e: 46:fd:25:66:71:db:49:68:14:4e:9c:b3:53:67:e6:b4:c9:c7: f2:03:a9:2f:27:48:e9:87:69:99:0f:c2:04:5d:c3:b8:8f:d4: a9:5c:d0:4c:e7:67:71:29:f0:c0:a1:da:df:d7:7e:aa:49:ad: dd:53:19:f1:87:e3:02:99:2b:a0:1a:d9:9d:fb:cd:9c:37:e4: b1:a6:a9:97 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjIyNzExMC8GA1UEBRMoNzM1OEU2QkMyOTA4QzY4MTQwQkYzQjhBODE1RjY5NURD QjJBOEE0QjAeFw0yNDAzMDIwOTA5NTRaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZTJlY2UxLWI1NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS0DXCLaqWoFYhXvVu+mCxk8Ar4jKKqevMa5BsEUY8Tdzflgu9Czp/dN+7SRt0 CLPOswNxRuvix2MGub0K7yoJcNrsPAITtiIdnZ1QUWDdiv/zbu15CNTwTFvb3sLW +1hg9YtYkBoW9SkOem6PXrPDHQKJgm9Geg+L0sXWN5mCgItuFf//oGZcxuxhIZfY g2QIbvkR4NF5y1gF+WP1mTgflJLNckEe9B8e3UpB5Jc/rO9QLUg9strFAU3bNzoC TBGPyV06fM5257CLkKZ5fqIL4gVE6ieNklNRKc93WWLREIrcZArL8ro4EqdJvQNG u3dzTybLxf8JyoXf1HDdIdkDAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU5A7HEFbG Im69xc+XQ75AAsbReKswHwYDVR0jBBgwFoAUc1jmvCkIxoFAvzuKgV9pXcsqiksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjI3L0Q1QTU1Mzk4NUQy RDExRUVBM0UzOUY1N0M0RjlBRTAyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlr cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzFqbXZDa0l4b0ZBdnp1S2dWOXBYY3NxaWtzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi83MTAxNDI5MEQ4 NzQxMUVFOTcyMzRGNUNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAGcO5jAPBAIAAjAJAwcAIAEN8rdAMA0GCSqGSIb3DQEBCwUA A4IBAQCTkKJPMvABWaXzEd2wjBpkxexGFuGbn/jNVyScXw+3t52KOMJehND5Pw6G dl4hBwfA8LYGQXrZDtJGE22wiS6XU9HLV5Gn6uDEDAzBqtnMPoBpxIte681lJydq GI4GNptvFQ8vXHqvjD0ppy679IH9mbuBcfpcRVksmD5XisUcHhcwHyoovGfTXUMV 8Hmh7im6Klij6YTJkRovD/yYlmSgIxm6NK4DxLuJPbWjQy27ePbq225G/SVmcdtJ aBROnLNTZ+a0ycfyA6kvJ0jph2mZD8IEXcO4j9SpXNBM52dxKfDAodrf136qSa3d Uxnxh+MCmSugGtmd+82cN+SxpqmX -----END CERTIFICATE-----Generated at Wed May 1 10:34:19 2024 by rpki-client on console-fra.rpki-client.org