$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/FB47EC14C6B011EDAF5BEF4AC4F9AE02.roa File: FB47EC14C6B011EDAF5BEF4AC4F9AE02.roa (raw, json) Hash identifier: zq5Smsxfkgz2eR/9pMB72X8pxmyX+qoPjCoVnr3b1dA= Subject key identifier: 66:E2:7B:76:43:8B:02:B9:2E:5F:9F:7C:A7:D9:19:48:02:D9:74:6A Certificate issuer: /CN=A91BB6DE/serialNumber=5AE6336939EA8F5EFB2A21E430673F80CCD5055A Certificate serial: 8F Authority key identifier: 5A:E6:33:69:39:EA:8F:5E:FB:2A:21:E4:30:67:3F:80:CC:D5:05:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/FB47EC14C6B011EDAF5BEF4AC4F9AE02.roa Signing time: Fri 01 Dec 2023 00:52:34 +0000 ROA not before: Fri 01 Dec 2023 00:52:34 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 141372 IP address blocks: 103.157.200.0/23 maxlen: 23 103.157.200.0/24 maxlen: 24 103.157.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.crl rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB6DE/serialNumber=5AE6336939EA8F5EFB2A21E430673F80CCD5055A Validity Not Before: Dec 1 00:52:34 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65692e52-526e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:70:14:0a:0c:e3:21:09:77:d7:b4:38:b2:6d: d9:27:db:04:4b:06:5e:f3:0b:36:8f:cd:18:73:ae: 65:59:b8:89:70:3a:74:9f:42:e7:a5:eb:75:28:0e: 1c:fc:96:c9:38:41:e6:b3:4c:5f:31:b3:84:33:74: 05:14:57:bc:d1:f7:6d:12:87:87:a8:c0:8f:d6:8d: 3d:42:d9:bc:7b:2f:6b:c4:07:df:1c:b0:5a:45:3f: cd:4d:c1:06:05:0c:5a:3f:b4:9b:14:85:c4:ba:95: fb:42:71:82:ad:74:cf:b1:95:46:fa:86:ea:72:dd: f9:31:86:c2:7a:70:f5:20:0b:28:f9:f5:c8:f1:ac: ae:2b:6b:14:71:83:69:aa:73:dc:43:c6:de:43:e2: d1:0c:32:bc:db:b6:25:76:1f:48:65:ad:a2:f8:6b: 6f:a9:ff:63:28:49:59:ae:e1:34:46:35:94:c6:98: d2:22:47:78:0a:9f:30:3f:72:1c:f8:ba:7f:d8:68: 00:d3:81:26:3a:09:51:b5:94:33:5b:7e:cb:50:45: 54:cf:45:fd:7a:02:82:a5:d6:21:84:42:50:2d:39: c2:69:fe:2d:90:8c:c1:71:27:f7:ef:92:f0:fc:dd: 5c:38:7f:56:25:23:ef:36:ef:33:a0:bc:5a:9c:1f: b3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E2:7B:76:43:8B:02:B9:2E:5F:9F:7C:A7:D9:19:48:02:D9:74:6A X509v3 Authority Key Identifier: keyid:5A:E6:33:69:39:EA:8F:5E:FB:2A:21:E4:30:67:3F:80:CC:D5:05:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/FB47EC14C6B011EDAF5BEF4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.200.0/23 Signature Algorithm: sha256WithRSAEncryption 94:31:72:bd:8f:32:9a:b0:b6:3d:ff:c7:40:f9:3a:f2:0f:cc: 5d:df:80:ef:05:93:0b:87:62:75:c9:82:fb:0a:33:11:2b:6e: 5c:a8:aa:15:b8:43:cd:c6:a8:0d:35:3c:84:da:06:50:41:f7: 3b:b5:07:b6:10:5a:1c:14:78:62:dd:03:b1:f1:ca:c1:f3:ea: c2:95:66:48:7b:9c:a3:66:da:cd:23:1a:75:c2:6c:70:09:06: eb:26:57:f7:04:72:5e:06:cd:a7:75:2a:62:74:b3:ac:71:c8: 7d:d6:dc:a7:1e:8f:fd:dc:0e:03:1d:a7:8b:55:f5:1d:cc:08: 81:55:09:82:b7:27:c7:79:19:eb:03:3e:f4:46:e1:7c:95:b5: 60:2a:06:72:b9:56:68:eb:f6:59:2b:9d:c3:e7:0d:31:de:31: 24:75:0b:97:28:43:d6:c1:a8:8f:41:a7:c8:f5:a0:e1:f5:cf: f5:cd:c8:5b:ca:6c:7a:78:43:f5:c9:5e:c5:c9:62:fd:b6:99: 6b:62:05:be:72:15:f9:88:52:b5:fb:15:bd:3b:80:db:26:b3: 02:7e:10:6b:ce:0d:a8:88:d7:32:72:51:e4:90:46:eb:a1:62: 6f:84:6b:6c:d0:d8:16:65:c2:f8:0e:a7:c9:21:86:fb:1d:1e: ed:01:f7:43 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2REUxMTAvBgNVBAUTKDVBRTYzMzY5MzlFQThGNUVGQjJBMjFFNDMwNjczRjgw Q0NENTA1NUEwHhcNMjMxMjAxMDA1MjM0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY5MmU1Mi01MjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnAUCgzjIQl317Q4sm3ZJ9sESwZe8ws2j80Yc65lWbiJcDp0n0Lnpet1KA4c /JbJOEHms0xfMbOEM3QFFFe80fdtEoeHqMCP1o09Qtm8ey9rxAffHLBaRT/NTcEG BQxaP7SbFIXEupX7QnGCrXTPsZVG+obqct35MYbCenD1IAso+fXI8ayuK2sUcYNp qnPcQ8beQ+LRDDK827Yldh9IZa2i+Gtvqf9jKElZruE0RjWUxpjSIkd4Cp8wP3Ic +Lp/2GgA04EmOglRtZQzW37LUEVUz0X9egKCpdYhhEJQLTnCaf4tkIzBcSf375Lw /N1cOH9WJSPvNu8zoLxanB+zVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGbie3ZD iwK5Ll+ffKfZGUgC2XRqMB8GA1UdIwQYMBaAFFrmM2k56o9e+yoh5DBnP4DM1QVa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZERS9BNTNBQjc0QzlD MzgxMUVCODFCRTE1NjBDNEY5QUUwMi9XdVl6YVRucWoxNzdLaUhrTUdjX2dNelZC Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1WXphVG5xajE3N0tpSGtNR2NfZ016VkJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI2REUvQTUzQUI3NEM5QzM4MTFFQjgxQkUxNTYwQzRGOUFFMDIvRkI0N0VDMTRD NkIwMTFFREFGNUJFRjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnncgwDQYJKoZIhvcNAQELBQADggEBAJQxcr2PMpqwtj3/ x0D5OvIPzF3fgO8FkwuHYnXJgvsKMxErblyoqhW4Q83GqA01PITaBlBB9zu1B7YQ WhwUeGLdA7HxysHz6sKVZkh7nKNm2s0jGnXCbHAJBusmV/cEcl4Gzad1KmJ0s6xx yH3W3Kcej/3cDgMdp4tV9R3MCIFVCYK3J8d5GesDPvRG4XyVtWAqBnK5Vmjr9lkr ncPnDTHeMSR1C5coQ9bBqI9Bp8j1oOH1z/XNyFvKbHp4Q/XJXsXJYv22mWtiBb5y FfmIUrX7Fb07gNsmswJ+EGvODaiI1zJyUeSQRuuhYm+Ea2zQ2BZlwvgOp8khhvsd Hu0B90M= -----END CERTIFICATE-----Generated at Fri May 17 01:47:19 2024 by rpki-client on console-fra.rpki-client.org