$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/245DB0FE0C2B11EBAD607865C4F9AE02.roa File: 245DB0FE0C2B11EBAD607865C4F9AE02.roa (raw, json) Hash identifier: jAm4wuZHNeAUDsvNxj3rPM2xCjY6H/P6C55YUabgiyk= Subject key identifier: 6A:8E:76:2F:25:CD:1A:03:95:62:D8:8A:99:DF:06:DA:93:BD:5B:22 Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 060E Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/245DB0FE0C2B11EBAD607865C4F9AE02.roa Signing time: Thu 27 Apr 2023 00:00:50 +0000 ROA not before: Thu 27 Apr 2023 00:00:50 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 55720 IP address blocks: 103.212.68.0/24 maxlen: 24 103.212.69.0/24 maxlen: 24 103.212.70.0/24 maxlen: 24 103.212.71.0/24 maxlen: 24 139.5.177.0/24 maxlen: 24 139.5.178.0/24 maxlen: 24 139.5.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Apr 2024 22:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1550 (0x60e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: Apr 27 00:00:50 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6449bb31-cb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:ba:67:91:6f:23:ac:f6:57:86:94:6a:61: 7e:7e:40:8e:7c:b0:ff:2a:31:1d:c0:4e:74:89:e8: b2:18:21:ba:b2:f1:76:95:46:fa:bb:e7:06:a7:4b: 95:4c:1d:de:28:7b:01:90:dd:fa:77:43:07:1a:86: ae:48:2a:e6:9b:c3:ab:45:2b:a8:cf:60:df:bd:d4: 68:14:33:97:47:0c:d2:70:ee:12:87:80:4a:df:af: cd:86:d6:ae:de:d6:26:5d:dc:ac:05:22:9d:9f:fc: f0:b1:05:f9:88:57:6a:ba:42:32:e6:c4:84:a3:49: a7:b2:05:ae:d2:1e:df:7a:34:cd:c9:db:e1:68:8a: 42:34:b7:3e:c0:e9:7b:8d:04:3f:a2:0d:be:47:c8: 5e:45:58:62:6f:25:1f:ef:4c:7c:5b:37:1b:09:2b: 08:62:29:1c:9d:4c:3c:98:88:29:d1:4e:ed:c7:bc: b2:96:d5:1a:45:2a:a1:a8:60:35:dd:68:dc:33:ef: 7c:cd:d9:86:d3:2e:b6:7b:1c:ff:56:af:46:23:a7: 22:65:6f:dc:74:4e:b6:79:82:0b:c6:d0:26:b2:37: b0:ac:e9:f3:2a:33:e0:da:68:91:80:a7:b6:b1:5e: 76:b6:68:70:37:84:b9:b9:46:86:3d:11:8f:9c:dd: 14:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8E:76:2F:25:CD:1A:03:95:62:D8:8A:99:DF:06:DA:93:BD:5B:22 X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/245DB0FE0C2B11EBAD607865C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.68.0/22 139.5.177.0-139.5.179.255 Signature Algorithm: sha256WithRSAEncryption 23:71:22:8d:c4:b6:86:b4:94:6f:77:8a:5b:a2:58:15:fe:9f: a6:fc:19:7f:cd:5f:db:0e:e3:f2:38:8b:00:65:71:91:4f:44: ea:14:c1:58:a5:ff:8d:34:50:f9:97:ce:89:7a:3d:f0:4a:1b: 8e:73:18:a1:b7:1b:97:e7:9a:a7:eb:95:24:56:4c:93:df:ce: 11:2a:51:17:97:5a:72:34:da:4c:f8:22:c8:89:3f:99:6b:74: e3:fa:7a:11:12:c1:06:6c:46:97:0e:47:97:b1:c1:21:52:5c: 1d:96:5a:4b:71:a2:32:9c:0f:75:9f:6d:7d:05:03:bb:e1:f5: 6e:45:4d:46:b8:43:a4:e5:5f:50:d0:3b:6f:e4:51:14:a7:01: e9:84:c1:ef:e2:ea:72:d7:47:c3:8f:46:83:d8:de:fa:87:2b: f6:40:8a:4f:30:24:8a:33:db:8f:ff:56:df:a8:9f:72:8d:b7: f6:8a:37:40:c4:67:a7:79:a1:ef:de:67:99:5e:3f:40:15:1e: 7a:45:16:8d:e1:2c:06:1e:85:1a:4f:5c:f6:3a:bb:a0:cb:4d: 35:93:6a:8c:f0:c0:2d:a6:bc:55:16:6e:d6:37:57:af:63:87: a2:1a:8b:8f:1a:4e:b5:43:26:7f:73:b8:cb:52:1c:13:82:ec: 75:32:2c:c4 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjMwNDI3MDAwMDUwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDQ5YmIzMS1jYjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvW66Z5FvI6z2V4aUamF+fkCOfLD/KjEdwE50ieiyGCG6svF2lUb6u+cGp0uV TB3eKHsBkN36d0MHGoauSCrmm8OrRSuoz2DfvdRoFDOXRwzScO4Sh4BK36/Nhtau 3tYmXdysBSKdn/zwsQX5iFdqukIy5sSEo0mnsgWu0h7fejTNydvhaIpCNLc+wOl7 jQQ/og2+R8heRVhibyUf70x8WzcbCSsIYikcnUw8mIgp0U7tx7yyltUaRSqhqGA1 3WjcM+98zdmG0y62exz/Vq9GI6ciZW/cdE62eYILxtAmsjewrOnzKjPg2miRgKe2 sV52tmhwN4S5uUaGPRGPnN0UpwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFGqOdi8l zRoDlWLYipnfBtqTvVsiMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkYzMTIvQUE5MkI5NzgwQzI5MTFFQjk1NDBERDYxQzRGOUFFMDIvMjQ1REIwRkUw QzJCMTFFQkFENjA3ODY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAJn1EQwDAMEAIsFsQMEAosFsDANBgkqhkiG9w0BAQsFAAOC AQEAI3EijcS2hrSUb3eKW6JYFf6fpvwZf81f2w7j8jiLAGVxkU9E6hTBWKX/jTRQ +ZfOiXo98EobjnMYobcbl+eap+uVJFZMk9/OESpRF5dacjTaTPgiyIk/mWt04/p6 ERLBBmxGlw5Hl7HBIVJcHZZaS3GiMpwPdZ9tfQUDu+H1bkVNRrhDpOVfUNA7b+RR FKcB6YTB7+LqctdHw49Gg9je+ocr9kCKTzAkijPbj/9W36ifco239oo3QMRnp3mh 795nmV4/QBUeekUWjeEsBh6FGk9c9jq7oMtNNZNqjPDALaa8VRZu1jdXr2OHohqL jxpOtUMmf3O4y1IcE4LsdTIsxA== -----END CERTIFICATE-----Generated at Thu Mar 28 23:50:00 2024 by rpki-client on console-ams.rpki-client.org