$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/425BF5FE7A4711EBAD125258C4F9AE02.roa File: 425BF5FE7A4711EBAD125258C4F9AE02.roa (raw, json) Hash identifier: //CBIFW9G+/3hG8eXpvv6Hsd/GArYGHPj8b2SgrbzU0= Subject key identifier: 8C:EF:F3:29:07:05:EB:28:19:D9:12:95:38:EB:32:3A:C9:76:91:9F Certificate issuer: /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05 Certificate serial: 0E69 Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/425BF5FE7A4711EBAD125258C4F9AE02.roa Signing time: Fri 20 Oct 2023 18:06:20 +0000 ROA not before: Fri 20 Oct 2023 18:06:20 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 132825 IP address blocks: 103.99.40.0/23 maxlen: 24 103.132.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3689 (0xe69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05 Validity Not Before: Oct 20 18:06:20 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6532c19c-b517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a0:4b:fb:9c:d1:b3:1e:e0:e3:16:e0:19:fb: 29:d6:31:47:f3:57:ec:4a:4f:10:bb:38:93:f8:24: 2e:74:79:7c:9d:db:d6:08:30:4c:0b:f9:b2:c8:33: 83:7a:54:76:21:ef:14:80:e4:e1:77:83:aa:19:38: 90:6e:3c:2b:2b:22:a6:85:d4:70:f4:d2:bb:79:fc: 8b:8c:85:3e:45:db:22:0b:33:12:c4:00:27:97:6a: 13:0a:98:48:55:72:e9:28:a2:fa:2d:7c:5f:5a:69: b1:a0:9b:24:f3:63:3f:84:60:cd:ce:4a:40:52:64: 08:39:a8:df:14:be:6f:1e:93:d6:73:ab:5e:e8:e1: 5e:c8:7f:69:a0:83:ef:78:b4:fd:6e:7a:7a:d2:22: 9a:f6:09:55:76:e0:24:12:fb:e9:0c:ba:f5:19:74: c5:32:35:5d:6b:23:68:42:a6:c6:7b:c2:72:99:30: fc:95:3b:1d:90:b2:bf:40:ce:4c:60:58:5c:df:2e: 5b:d8:5e:af:f2:5f:74:75:6b:45:69:06:63:27:05: d2:17:e0:79:36:3e:98:1f:fb:46:14:0b:9c:56:dd: 97:87:76:21:da:05:d9:33:62:8c:83:56:af:bb:95: 8f:27:46:d9:16:b2:a1:a6:cd:f0:2d:e8:67:bb:b4: 2c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EF:F3:29:07:05:EB:28:19:D9:12:95:38:EB:32:3A:C9:76:91:9F X509v3 Authority Key Identifier: keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/425BF5FE7A4711EBAD125258C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.40.0/23 103.132.234.0/23 Signature Algorithm: sha256WithRSAEncryption 25:dd:01:49:70:72:47:64:18:10:90:86:a3:10:06:db:26:fe: e4:8a:22:93:01:b0:75:9c:03:39:28:32:83:24:6a:98:17:c0: 3e:9b:78:5d:51:e1:49:e3:fe:e1:69:fb:96:7e:b2:e9:8d:69: 4d:fe:fa:70:4c:e9:cb:78:34:46:06:3e:df:de:49:cc:7d:52: 0f:71:6b:57:20:2b:75:d9:e2:47:16:b1:7d:46:eb:ca:e3:8a: 79:a1:22:7c:4c:47:bb:e4:65:3e:b1:35:cd:60:c1:3c:25:04: 2c:d9:b9:c1:1f:91:97:48:99:5d:83:d0:d4:5a:ce:13:43:3e: 66:93:63:de:20:24:20:a8:42:71:ac:51:85:88:09:6f:17:75: bc:ce:d8:ed:43:5b:56:82:c6:1f:6e:88:9f:37:cd:76:02:98: f9:2d:44:e4:99:2d:45:78:e2:67:01:67:94:96:ac:9a:d9:93: 27:cd:06:d9:79:d0:3f:c1:17:7f:da:aa:9a:96:2c:4f:78:30: f4:87:49:52:50:da:c2:fa:91:f5:8a:aa:82:8b:f8:31:0b:99: 00:b1:37:ff:24:90:c5:00:3a:f5:e8:0e:25:39:0c:0e:c4:9d: 57:5c:04:51:bf:f1:ab:eb:49:b2:b0:0b:22:39:24:e0:62:1f: 70:50:91:3d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2QjQxMTAvBgNVBAUTKDZDQTZCMkFDMUREMTdCMDE0REI2Qzc2NzI3OUQwOEM2 NkU0RUZDMDUwHhcNMjMxMDIwMTgwNjIwWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTMyYzE5Yy1iNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qBL+5zRsx7g4xbgGfsp1jFH81fsSk8QuziT+CQudHl8ndvWCDBMC/myyDOD elR2Ie8UgOThd4OqGTiQbjwrKyKmhdRw9NK7efyLjIU+RdsiCzMSxAAnl2oTCphI VXLpKKL6LXxfWmmxoJsk82M/hGDNzkpAUmQIOajfFL5vHpPWc6te6OFeyH9poIPv eLT9bnp60iKa9glVduAkEvvpDLr1GXTFMjVdayNoQqbGe8JymTD8lTsdkLK/QM5M YFhc3y5b2F6v8l90dWtFaQZjJwXSF+B5Nj6YH/tGFAucVt2Xh3Yh2gXZM2KMg1av u5WPJ0bZFrKhps3wLehnu7Qs1QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIzv8ykH BesoGdkSlTjrMjrJdpGfMB8GA1UdIwQYMBaAFGymsqwd0XsBTbbHZyedCMZuTvwF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZCNC83MjZGNTFDMjYz RjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3Rk50c2RuSjUwSXhtNU9f QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLYXlyQjNSZXdGTnRzZG5KNTBJeG01T19BVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkM2QjQvNzI2RjUxQzI2M0YyMTFFOUJCMjBERDQ1QzRGOUFFMDIvNDI1QkY1RkU3 QTQ3MTFFQkFEMTI1MjU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnYygDBAFnhOowDQYJKoZIhvcNAQELBQADggEBACXdAUlw ckdkGBCQhqMQBtsm/uSKIpMBsHWcAzkoMoMkapgXwD6beF1R4Unj/uFp+5Z+sumN aU3++nBM6ct4NEYGPt/eScx9Ug9xa1cgK3XZ4kcWsX1G68rjinmhInxMR7vkZT6x Nc1gwTwlBCzZucEfkZdImV2D0NRazhNDPmaTY94gJCCoQnGsUYWICW8XdbzO2O1D W1aCxh9uiJ83zXYCmPktROSZLUV44mcBZ5SWrJrZkyfNBtl50D/BF3/aqpqWLE94 MPSHSVJQ2sL6kfWKqoKL+DELmQCxN/8kkMUAOvXoDiU5DA7EnVdcBFG/8avrSbKw CyI5JOBiH3BQkT0= -----END CERTIFICATE-----Generated at Mon May 6 20:19:18 2024 by rpki-client on console-fra.rpki-client.org