$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/371059F4B8A311EEBDA30041C4F9AE02.roa File: 371059F4B8A311EEBDA30041C4F9AE02.roa (raw, json) Hash identifier: aRUyVqIfJTn8kVpUhz1W3Sr47MqMAHCDZi0HqrTI2S4= Subject key identifier: B3:03:43:CA:23:56:2A:EF:8A:49:37:EA:3C:4A:31:AD:59:79:F6:AF Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Certificate serial: 18 Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/371059F4B8A311EEBDA30041C4F9AE02.roa Signing time: Thu 08 Feb 2024 17:37:47 +0000 ROA not before: Thu 08 Feb 2024 17:37:47 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 148973 IP address blocks: 103.175.26.0/23 maxlen: 23 103.175.26.0/24 maxlen: 24 103.175.27.0/24 maxlen: 24 2001:df0:5a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Validity Not Before: Feb 8 17:37:47 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65c5116b-a9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:e6:7d:e5:48:89:b8:b3:31:0e:ef:f6:d3: 0e:7b:81:cc:fa:c7:8f:db:26:83:89:13:d9:74:e1: 04:49:75:e3:0e:ab:69:42:54:e7:70:7b:ea:2f:3c: 7a:d6:54:58:d6:0e:80:b6:e6:c7:3b:e3:ab:eb:70: 3f:40:4a:2a:ed:3c:1c:fe:70:e3:6d:19:ff:92:a9: fb:18:a7:a2:11:77:9c:88:5d:49:3f:e0:e9:56:78: d8:b4:7a:b9:e4:12:43:59:87:4e:32:d0:05:14:9b: 81:14:8d:05:c1:3c:f7:2d:4e:c6:68:2e:68:27:59: 5e:eb:be:5e:f0:1b:01:af:de:c7:5e:40:bc:b7:c8: d4:ba:67:4a:8b:89:5d:dd:0d:e7:cb:e8:b5:98:f9: 44:83:8d:26:5c:99:2e:f9:52:9f:fb:b0:0d:48:2c: 01:34:e6:ab:e9:6d:0d:33:17:1b:5a:e0:92:c7:b3: f6:33:e3:3b:d5:80:32:cb:14:79:30:b6:e0:42:b4: 1a:2f:30:ef:2b:7a:e5:19:6f:f0:2d:10:21:87:a7: c2:28:0b:5f:9e:0b:d2:e9:ec:7e:df:a7:f0:0c:cb: cc:67:aa:46:bc:ff:b1:a4:17:6d:ef:f7:65:3d:66: 88:b1:e4:fc:c8:fc:e1:1b:43:14:24:33:4d:ce:2e: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:03:43:CA:23:56:2A:EF:8A:49:37:EA:3C:4A:31:AD:59:79:F6:AF X509v3 Authority Key Identifier: keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/371059F4B8A311EEBDA30041C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.26.0/23 IPv6: 2001:df0:5a40::/48 Signature Algorithm: sha256WithRSAEncryption 8e:d1:d4:c5:25:45:32:ca:2a:7c:86:74:3a:ad:48:77:70:d0: 2d:48:29:d3:aa:d3:34:6e:39:e0:8b:b8:32:04:13:f4:f5:fd: 76:27:a7:61:3e:89:10:73:ee:7b:c4:9e:0d:11:2e:5b:a8:82: 0d:9a:71:70:91:cf:9d:08:fb:c7:ac:e4:a2:0c:64:60:2e:5a: 58:ff:e4:61:55:f6:79:f5:ff:42:ae:cf:20:95:1e:bf:e7:5e: 47:e7:e7:5c:0c:65:ad:eb:e3:b6:ae:2f:2a:4e:3e:49:b0:ec: ae:39:68:e7:be:22:f7:5a:e4:81:61:9f:ad:45:5d:db:3a:b5: d1:ae:99:39:a3:15:9d:0a:19:77:b5:e4:67:9d:b7:fe:6f:69: ce:89:fc:20:67:f1:23:82:9a:ed:2f:ea:64:eb:d3:e3:86:3b: a8:6f:ba:e4:26:8c:4d:e3:34:1a:33:d1:19:af:f6:d3:38:d1: f8:11:ae:59:33:33:88:fb:44:a3:de:dc:ed:9e:f5:1a:68:e9: 6b:80:e0:21:a8:ef:c2:a3:85:cc:a2:12:f4:d5:0b:eb:cb:f4: 2b:51:74:24:0e:87:50:d5:d2:67:69:85:47:39:97:6e:e2:34: e1:2d:dd:3e:49:a8:8b:ef:cc:ac:1e:0b:93:56:cc:77:36:f5: 2c:a0:7d:75 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RTZENzExMC8GA1UEBRMoNzBDRDAyQjY2NDI0NzlBODc0NDYyNzE1NzA2RTZBQTlB ODlEQTJDOTAeFw0yNDAyMDgxNzM3NDdaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YzUxMTZiLWE5YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0H+Z95UiJuLMxDu/20w57gcz6x4/bJoOJE9l04QRJdeMOq2lCVOdwe+ovPHrW VFjWDoC25sc746vrcD9ASirtPBz+cONtGf+SqfsYp6IRd5yIXUk/4OlWeNi0ernk EkNZh04y0AUUm4EUjQXBPPctTsZoLmgnWV7rvl7wGwGv3sdeQLy3yNS6Z0qLiV3d DefL6LWY+USDjSZcmS75Up/7sA1ILAE05qvpbQ0zFxta4JLHs/Yz4zvVgDLLFHkw tuBCtBovMO8reuUZb/AtECGHp8IoC1+eC9Lp7H7fp/AMy8xnqka8/7GkF23v92U9 Zoix5PzI/OEbQxQkM03OLnWpAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUswNDyiNW Ku+KSTfqPEoxrVl59q8wHwYDVR0jBBgwFoAUcM0CtmQkeah0RicVcG5qqaidoskw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFNkQ3LzcxQTUxNTc0QUVG MjExRUVCMjkzQjQ4MEM0RjlBRTAyL2NNMEN0bVFrZWFoMFJpY1ZjRzVxcWFpZG9z ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY00wQ3RtUWtlYWgwUmljVmNHNXFxYWlkb3NrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZENy83MUE1MTU3NEFFRjIxMUVFQjI5M0I0ODBDNEY5QUUwMi8zNzEwNTlGNEI4 QTMxMUVFQkRBMzAwNDFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWevGjAPBAIAAjAJAwcAIAEN8FpAMA0GCSqGSIb3DQEBCwUA A4IBAQCO0dTFJUUyyip8hnQ6rUh3cNAtSCnTqtM0bjngi7gyBBP09f12J6dhPokQ c+57xJ4NES5bqIINmnFwkc+dCPvHrOSiDGRgLlpY/+RhVfZ59f9Crs8glR6/515H 5+dcDGWt6+O2ri8qTj5JsOyuOWjnviL3WuSBYZ+tRV3bOrXRrpk5oxWdChl3teRn nbf+b2nOifwgZ/EjgprtL+pk69Pjhjuob7rkJoxN4zQaM9EZr/bTONH4Ea5ZMzOI +0Sj3tztnvUaaOlrgOAhqO/Co4XMohL01Qvry/QrUXQkDodQ1dJnaYVHOZdu4jTh Ld0+SaiL78ysHguTVsx3NvUsoH11 -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:31 2024 by rpki-client on console-fra.rpki-client.org