$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/254E9F807D4A11EEABBD1328C4F9AE02.roa File: 254E9F807D4A11EEABBD1328C4F9AE02.roa (raw, json) Hash identifier: FTkZFnPGHr58+WOSv1PVdzgNoyhtH6CZda9d2LLuglw= Subject key identifier: 72:B8:9B:99:8C:02:43:D6:91:E0:36:38:65:20:40:D5:34:24:D6:5A Certificate issuer: /CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Certificate serial: 04 Authority key identifier: F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/254E9F807D4A11EEABBD1328C4F9AE02.roa Signing time: Tue 07 Nov 2023 08:47:15 +0000 ROA not before: Tue 07 Nov 2023 08:47:15 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 151788 IP address blocks: 103.72.58.0/24 maxlen: 24 103.72.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Validity Not Before: Nov 7 08:47:15 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6549f993-008b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3c:2a:8d:ed:86:27:1e:70:62:cb:15:50:b6: 0e:05:f0:b4:6d:d7:67:d1:f6:90:86:74:0a:70:47: 95:80:92:d4:7b:33:1e:ba:fb:8a:5d:5e:d8:a5:f8: 87:82:24:3a:bc:2e:3b:1a:ef:48:80:cc:6b:f9:62: 74:93:5c:cc:25:26:7d:4c:15:76:62:af:92:fa:f9: c3:2c:58:10:59:ef:1e:08:56:94:01:7a:c8:1c:e5: 9d:0b:cc:1e:bd:3d:9b:70:9b:86:4b:b9:ca:a8:6f: 95:01:25:79:c3:b9:c9:e2:4e:9c:9f:85:bb:3d:e4: 1a:99:0c:a5:6f:f8:8e:20:78:2c:45:6e:45:54:c2: 52:be:fa:27:7a:3c:56:c9:1d:e1:b4:31:83:b1:d0: 73:47:24:ff:f8:6a:55:41:3c:b7:d6:cf:44:5d:32: e9:be:60:81:59:1f:1d:91:32:d5:db:c2:3c:40:48: 2a:60:96:53:a5:cb:24:3c:31:a0:9a:91:56:74:92: af:c3:30:c7:d4:b9:f0:40:a2:91:31:98:72:6e:cd: 7a:92:2d:0e:81:0e:f6:57:a5:4e:cb:af:ee:6b:fa: 71:04:1d:e9:23:5b:fd:51:e0:01:e1:38:e6:4a:5c: 97:8b:1a:49:11:e6:83:bd:18:4e:15:ac:af:0f:5c: 31:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B8:9B:99:8C:02:43:D6:91:E0:36:38:65:20:40:D5:34:24:D6:5A X509v3 Authority Key Identifier: keyid:F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/254E9F807D4A11EEABBD1328C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.58.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:23:0d:8e:2c:55:ba:b9:43:0a:7b:e6:e4:80:55:74:33:1f: 22:40:a7:38:4b:33:ef:15:39:b8:9e:bf:bb:f1:0f:d4:40:93: a5:3d:e0:96:75:29:38:70:8b:6f:1e:f1:15:a8:e3:93:78:2e: ea:94:41:48:22:3b:86:cc:62:db:9f:35:84:5a:4f:23:de:3d: 86:8c:c0:d0:3c:22:b4:b0:d6:29:25:ae:96:63:4a:92:d4:fd: 33:5c:ee:8a:ec:e2:c2:53:82:ae:24:5b:07:d2:a4:83:f7:40: 99:87:4e:87:22:74:6c:c4:40:fb:8b:ed:f7:82:fb:80:7a:9c: 7d:b2:a5:b6:7b:cb:ea:99:1c:a5:cb:66:14:eb:f6:80:62:39: b0:e9:5e:cf:a3:2c:87:a8:70:91:0e:9b:d0:35:53:96:89:09: 9f:99:20:7c:49:51:64:a4:87:0a:b9:8b:f3:cc:90:b5:3f:07: bc:df:15:d4:42:37:ec:15:51:0f:39:9c:0d:8b:0a:71:1a:9b: 40:23:1c:17:8e:44:39:aa:d9:d9:c0:1d:2b:8a:b4:f1:71:7b: 56:75:d4:99:58:cc:83:18:f0:3c:ce:80:05:a8:55:42:8d:4c: fd:27:4f:15:3f:70:b6:ef:59:82:62:77:6b:64:3e:a4:ef:95: ee:07:2f:1d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0RDNjExMC8GA1UEBRMoRjg0RkJCNDE1RDlBNDU0MzM2MkVERjcyNjVGNTM3RTJD RkY5RjgyMDAeFw0yMzExMDcwODQ3MTVaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NDlmOTkzLTAwOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiPCqN7YYnHnBiyxVQtg4F8LRt12fR9pCGdApwR5WAktR7Mx66+4pdXtil+IeC JDq8Ljsa70iAzGv5YnSTXMwlJn1MFXZir5L6+cMsWBBZ7x4IVpQBesgc5Z0LzB69 PZtwm4ZLucqob5UBJXnDucniTpyfhbs95BqZDKVv+I4geCxFbkVUwlK++id6PFbJ HeG0MYOx0HNHJP/4alVBPLfWz0RdMum+YIFZHx2RMtXbwjxASCpgllOlyyQ8MaCa kVZ0kq/DMMfUufBAopExmHJuzXqSLQ6BDvZXpU7Lr+5r+nEEHekjW/1R4AHhOOZK XJeLGkkR5oO9GE4VrK8PXDFXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUcribmYwC Q9aR4DY4ZSBA1TQk1lowHwYDVR0jBBgwFoAU+E+7QV2aRUM2Lt9yZfU34s/5+CAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDREM2LzgwMTI4RUM4N0Q0 OTExRUVCOUM2REMyNkM0RjlBRTAyLy1FLTdRVjJhUlVNMkx0OXlaZlUzNHNfNS1D QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLUUtN1FWMmFSVU0yTHQ5eVpmVTM0c181LUNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0RDNi84MDEyOEVDODdENDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8yNTRFOUY4MDdE NEExMUVFQUJCRDEzMjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWdIOjANBgkqhkiG9w0BAQsFAAOCAQEATCMNjixVurlDCnvm 5IBVdDMfIkCnOEsz7xU5uJ6/u/EP1ECTpT3glnUpOHCLbx7xFajjk3gu6pRBSCI7 hsxi2581hFpPI949hozA0DwitLDWKSWulmNKktT9M1zuiuziwlOCriRbB9Kkg/dA mYdOhyJ0bMRA+4vt94L7gHqcfbKltnvL6pkcpctmFOv2gGI5sOlez6Msh6hwkQ6b 0DVTlokJn5kgfElRZKSHCrmL88yQtT8HvN8V1EI37BVRDzmcDYsKcRqbQCMcF45E OarZ2cAdK4q08XF7VnXUmVjMgxjwPM6ABahVQo1M/SdPFT9wtu9ZgmJ3a2Q+pO+V 7gcvHQ== -----END CERTIFICATE-----Generated at Fri Jun 7 09:41:07 2024 by rpki-client on console-ams.rpki-client.org