$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/324967826D8D11EE9883B985C4F9AE02.roa File: 324967826D8D11EE9883B985C4F9AE02.roa (raw, json) Hash identifier: Iw9nloeINldGMGy1FSw0VoNVET6GSwNxLTiS8s9vzes= Subject key identifier: B9:6A:BE:AA:76:8E:20:6E:1A:75:E4:5A:D0:CE:F9:B5:D3:ED:5F:4B Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: 02 Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/324967826D8D11EE9883B985C4F9AE02.roa Signing time: Wed 18 Oct 2023 08:06:10 +0000 ROA not before: Wed 18 Oct 2023 08:06:10 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 139053 IP address blocks: 103.138.250.0/24 maxlen: 24 103.138.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: Oct 18 08:06:10 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=652f91f1-2a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:4e:6b:d5:4a:fa:07:00:71:dc:0d:91:ef: 38:4f:6e:34:cb:60:d3:b7:e7:67:96:ab:3f:40:49: 0f:fd:26:6b:17:be:16:13:e3:0f:64:de:7c:94:d3: 93:74:ff:b7:81:bf:e9:ab:e6:e2:a7:40:b8:68:5b: c4:61:2b:e5:9e:45:22:fb:3e:71:e0:a7:6a:59:01: 95:2a:c5:e6:35:6a:31:ef:55:cb:0f:15:39:ef:03: c8:26:73:3d:a3:d4:e4:91:23:f3:c5:e1:9f:d3:b9: 63:b4:b3:24:a8:b0:4e:75:dd:ed:bb:50:9f:d1:ab: 29:93:ca:99:a5:ad:f7:37:eb:ab:ff:1c:64:68:3e: be:33:d3:5f:15:61:d9:f1:5d:f3:cc:0c:9a:eb:42: f2:07:0b:6d:62:ce:cd:2c:19:59:09:b3:5b:9d:3c: 91:f1:d5:93:22:dc:0c:3c:72:45:23:1f:70:a5:c2: 03:34:56:82:98:e2:64:fc:ff:07:00:d0:d3:e9:e1: f4:07:81:4c:94:50:c7:bd:8c:eb:cc:34:b5:f3:57: 51:a6:fe:a7:df:26:6e:eb:ad:9d:b6:26:6c:9d:e2: 88:97:4d:20:39:23:ef:c2:dc:58:c4:e7:5f:9a:ce: d2:0a:3b:62:b8:ed:39:4d:07:35:51:2e:e7:12:1e: 3a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6A:BE:AA:76:8E:20:6E:1A:75:E4:5A:D0:CE:F9:B5:D3:ED:5F:4B X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/324967826D8D11EE9883B985C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.250.0/23 Signature Algorithm: sha256WithRSAEncryption 97:f2:29:ea:00:63:e4:65:3b:40:0a:a5:3c:a0:8b:27:bf:7f: ee:52:eb:3a:c1:cd:6a:65:6c:9a:4f:fa:8f:af:72:10:1e:b4: 2a:04:6b:07:3e:32:35:d3:66:c3:bf:88:4e:67:bb:05:47:d3: c1:26:3c:13:40:62:98:fe:0a:0a:9b:04:22:3a:7b:32:36:99: b8:21:a8:10:9d:98:f1:0d:11:e2:a9:60:95:59:5c:81:a5:85: 71:41:10:52:96:9a:13:89:c3:16:ef:bc:79:a1:ad:83:41:d0: 98:8f:ef:c6:3d:7d:fc:f4:f0:bf:26:73:81:c3:fe:3e:dc:24: 3e:15:93:b3:fb:b0:68:5d:a9:23:d0:d8:0d:79:ed:0d:70:85: c8:a8:01:4e:3a:67:5e:aa:38:a9:ef:ee:0c:df:da:81:49:bf: 8e:0d:88:6f:c6:09:a1:39:35:c9:0f:74:06:cc:a1:ff:71:44: cb:5a:d0:1b:89:ba:8e:5f:95:d6:c0:cb:c9:5d:db:f7:16:09: d6:51:10:c6:01:6a:b0:c2:f8:44:b2:81:32:9e:a7:d9:cb:b6: 47:b7:43:40:60:08:45:4c:64:4a:f5:b2:2f:cd:5c:41:0b:87: cc:d8:a3:f2:37:d8:9a:85:2e:a5:3f:d3:e4:ea:bf:a2:20:9b: 6a:70:1d:a4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REQ4MjExMC8GA1UEBRMoRjQ0MDE4MTgxRUU1QzYyNDBFMTM5NDM5NUE1Q0NDNEQy RjYyMzFBNDAeFw0yMzEwMTgwODA2MTBaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MmY5MWYxLTJhMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwZ05r1Ur6BwBx3A2R7zhPbjTLYNO352eWqz9ASQ/9JmsXvhYT4w9k3nyU05N0 /7eBv+mr5uKnQLhoW8RhK+WeRSL7PnHgp2pZAZUqxeY1ajHvVcsPFTnvA8gmcz2j 1OSRI/PF4Z/TuWO0sySosE513e27UJ/RqymTypmlrfc366v/HGRoPr4z018VYdnx XfPMDJrrQvIHC21izs0sGVkJs1udPJHx1ZMi3Aw8ckUjH3ClwgM0VoKY4mT8/wcA 0NPp4fQHgUyUUMe9jOvMNLXzV1Gm/qffJm7rrZ22Jmyd4oiXTSA5I+/C3FjE51+a ztIKO2K47TlNBzVRLucSHjplAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUuWq+qnaO IG4adeRa0M75tdPtX0swHwYDVR0jBBgwFoAU9EAYGB7lxiQOE5Q5WlzMTS9iMaQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJERDgyLzE5N0Y5RDkyOTFF MjExRTk5NzY4ODkwRUM0RjlBRTAyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1h US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUVBWUdCN2x4aVFPRTVRNVdsek1UUzlpTWFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi8zMjQ5Njc4MjZE OEQxMUVFOTg4M0I5ODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeK+jANBgkqhkiG9w0BAQsFAAOCAQEAl/Ip6gBj5GU7QAql PKCLJ79/7lLrOsHNamVsmk/6j69yEB60KgRrBz4yNdNmw7+ITme7BUfTwSY8E0Bi mP4KCpsEIjp7MjaZuCGoEJ2Y8Q0R4qlglVlcgaWFcUEQUpaaE4nDFu+8eaGtg0HQ mI/vxj19/PTwvyZzgcP+PtwkPhWTs/uwaF2pI9DYDXntDXCFyKgBTjpnXqo4qe/u DN/agUm/jg2Ib8YJoTk1yQ90Bsyh/3FEy1rQG4m6jl+V1sDLyV3b9xYJ1lEQxgFq sML4RLKBMp6n2cu2R7dDQGAIRUxkSvWyL81cQQuHzNij8jfYmoUupT/T5Oq/oiCb anAdpA== -----END CERTIFICATE-----Generated at Thu May 16 19:10:56 2024 by rpki-client on console-fra.rpki-client.org