$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa File: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (raw, json) Hash identifier: 0Idm6A6nWK/fQZNYq7K+eosKvzzmF58y5ztchLiLTj0= Subject key identifier: B9:AD:0B:0F:D7:2F:1F:57:63:49:C5:47:BA:85:FE:EB:2C:C0:F0:FB Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Certificate serial: A7 Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa Signing time: Fri 17 Nov 2023 05:06:29 +0000 ROA not before: Fri 17 Nov 2023 05:06:29 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 142543 IP address blocks: 103.22.96.0/23 maxlen: 23 103.22.96.0/24 maxlen: 24 103.22.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Validity Not Before: Nov 17 05:06:29 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6556f4d5-3765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:51:9a:da:b1:9d:e0:a4:a8:8e:c6:58:e0: f7:8b:a7:6c:56:f1:ce:51:df:fa:2b:de:e2:99:f9: 60:f4:58:8c:8a:f1:f5:a7:3e:c9:22:6d:cd:1c:68: 13:ab:b4:80:2d:d6:cb:be:ca:64:91:f7:fc:c7:34: a4:d1:21:83:2a:03:f5:de:f4:04:f1:f7:b7:b1:c5: 54:cd:0b:59:41:3d:c6:87:99:64:ae:ae:83:07:07: 67:19:ce:bc:9d:32:5a:e8:04:1d:e1:52:e1:05:01: 7d:c3:1f:64:a8:7f:b3:56:7a:94:3b:3e:d2:16:34: 23:2d:6c:e3:f0:a4:c2:2c:5d:f8:e8:16:e6:97:79: 59:98:40:8c:6f:2b:78:9d:02:da:66:69:00:a4:fc: 78:15:b4:94:3b:a7:66:09:7b:f8:15:24:b3:f8:14: 9a:1a:c5:b0:54:a5:45:33:8e:4c:8f:ab:c7:14:9a: 79:a8:5a:7a:58:93:23:f4:66:54:95:a5:99:ce:f4: 5c:39:fd:65:03:7a:9c:93:b3:c8:99:88:bf:2c:c9: 51:60:d3:ed:80:7d:88:0a:18:4c:3e:14:67:48:ab: d5:b2:09:83:b4:af:b6:95:67:0a:14:d0:1e:52:84: 7c:e8:07:e5:35:19:0f:25:ba:35:14:40:92:79:72: 22:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AD:0B:0F:D7:2F:1F:57:63:49:C5:47:BA:85:FE:EB:2C:C0:F0:FB X509v3 Authority Key Identifier: keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.22.96.0/23 Signature Algorithm: sha256WithRSAEncryption 16:73:db:c9:45:22:76:49:d0:7e:3a:3b:c1:41:fb:7e:e3:68: 01:e1:c0:0b:c2:d7:0e:2d:2b:a7:d2:42:98:26:c1:c0:47:9d: 6e:56:ba:a0:44:0b:df:92:65:cb:33:74:92:30:12:48:fb:ce: 10:83:6b:92:92:f7:b9:93:cc:7e:9b:60:c5:85:78:dd:b3:41: 89:75:05:f5:36:69:a5:7c:e5:18:2e:d2:97:0b:dd:18:25:f0: b0:e4:d9:a7:8f:20:e8:29:7e:63:e1:ed:d6:88:79:4e:1c:91: 76:79:58:d4:a7:74:20:27:ec:cb:92:df:f1:a6:45:03:22:41: b3:5f:cb:ed:56:85:e1:88:cd:59:ca:66:a8:9c:57:b5:a7:9c: 45:23:5f:71:7f:58:85:73:e0:39:72:e5:3c:7c:03:64:1c:7c: 21:e4:84:27:4e:73:0f:59:54:22:04:25:9b:76:d6:3b:84:c0: f2:c4:37:78:da:d6:dc:ed:ff:85:0a:ab:3c:9c:0e:8b:a9:61: da:e1:ac:44:42:61:68:c5:7f:ce:13:94:c1:6d:a9:9f:39:b6: 9e:b4:7f:8b:17:f8:b4:aa:2b:11:f0:e4:ff:c2:29:46:85:be: b9:6f:cf:71:42:79:d9:d9:f0:2c:7d:16:db:63:db:34:0d:93: f4:d2:e3:d6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4 OEQyNjlCMkMwHhcNMjMxMTE3MDUwNjI5WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTU2ZjRkNS0zNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrtRmtqxneCkqI7GWOD3i6dsVvHOUd/6K97imflg9FiMivH1pz7JIm3NHGgT q7SALdbLvspkkff8xzSk0SGDKgP13vQE8fe3scVUzQtZQT3Gh5lkrq6DBwdnGc68 nTJa6AQd4VLhBQF9wx9kqH+zVnqUOz7SFjQjLWzj8KTCLF346Bbml3lZmECMbyt4 nQLaZmkApPx4FbSUO6dmCXv4FSSz+BSaGsWwVKVFM45Mj6vHFJp5qFp6WJMj9GZU laWZzvRcOf1lA3qck7PImYi/LMlRYNPtgH2IChhMPhRnSKvVsgmDtK+2lWcKFNAe UoR86AflNRkPJbo1FECSeXIimQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLmtCw/X Lx9XY0nFR7qF/usswPD7MB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5 QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkMyRTMvOUI0QTQ4OTA4OUEwMTFFRDgzNzU5MzQ2QzRGOUFFMDIvMERDMkQzRUM4 RDdBMTFFREJGQTdDMzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnFmAwDQYJKoZIhvcNAQELBQADggEBABZz28lFInZJ0H46 O8FB+37jaAHhwAvC1w4tK6fSQpgmwcBHnW5WuqBEC9+SZcszdJIwEkj7zhCDa5KS 97mTzH6bYMWFeN2zQYl1BfU2aaV85Rgu0pcL3Rgl8LDk2aePIOgpfmPh7daIeU4c kXZ5WNSndCAn7MuS3/GmRQMiQbNfy+1WheGIzVnKZqicV7WnnEUjX3F/WIVz4Dly 5Tx8A2QcfCHkhCdOcw9ZVCIEJZt21juEwPLEN3ja1tzt/4UKqzycDoupYdrhrERC YWjFf84TlMFtqZ85tp60f4sX+LSqKxHw5P/CKUaFvrlvz3FCednZ8Cx9Fttj2zQN k/TS49Y= -----END CERTIFICATE-----Generated at Fri May 17 06:18:10 2024 by rpki-client on console-fra.rpki-client.org