$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/FD91D382FDFE11EEA991412FC4F9AE02.roa File: FD91D382FDFE11EEA991412FC4F9AE02.roa (raw, json) Hash identifier: UJVqZVv2LvOtLV0E0fDBrYAFdyi9fTFpHu6AEr0aBjA= Subject key identifier: B9:42:4E:87:12:FC:38:8B:5B:3B:C3:9B:94:03:14:E8:8F:78:76:6A Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: DA Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/FD91D382FDFE11EEA991412FC4F9AE02.roa Signing time: Fri 19 Apr 2024 03:43:31 +0000 ROA not before: Fri 19 Apr 2024 03:43:31 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 140683 IP address blocks: 103.163.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 05:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Apr 19 03:43:31 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6621e863-e5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:d1:a2:34:a8:f0:2c:2a:2f:79:2f:32:a7: 5e:f1:7b:ca:2b:93:9b:35:68:03:04:71:b0:db:3d: 9b:1b:fd:7a:ef:7b:2c:d9:aa:2a:bf:68:fd:9d:f7: 23:f7:84:3b:fa:a7:4d:3f:ab:b3:c1:cc:02:b9:e1: fd:62:4b:10:00:18:74:2e:0d:2f:af:ea:71:30:33: 89:a1:eb:ca:d0:ea:57:ed:51:76:07:f7:0f:c5:4a: f9:db:67:5d:7a:d8:9b:90:ae:0d:2a:8b:bb:37:02: a6:4c:0f:80:a3:cd:ff:c2:d2:99:3e:c2:7b:e2:5d: e3:24:50:b4:b2:8d:e9:6f:19:2c:b7:14:08:06:a1: 22:88:41:69:3f:4b:51:d7:78:13:42:9a:0c:2c:72: c1:58:66:74:04:00:a4:e5:a6:7c:a2:b0:14:b5:89: 88:bc:35:68:2d:43:70:e7:30:f2:22:c6:6a:15:95: b6:cd:f9:bf:7b:18:42:55:c2:5f:13:0e:0e:e7:da: 44:cd:a4:64:39:5d:69:df:ea:18:94:47:57:af:aa: 27:33:5b:c7:fb:3a:3a:e5:45:b6:08:f3:e6:9d:f6: 9a:ff:5f:23:07:5c:2e:92:de:5c:8e:5b:51:22:d7: e5:b1:29:b1:fb:ae:f7:40:3c:fa:5b:66:ab:c3:e4: 3b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:42:4E:87:12:FC:38:8B:5B:3B:C3:9B:94:03:14:E8:8F:78:76:6A X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/FD91D382FDFE11EEA991412FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.208.0/24 Signature Algorithm: sha256WithRSAEncryption 95:f9:a5:82:1f:ab:ad:91:76:9f:f5:43:ab:3d:dd:a1:c6:d3: ce:27:aa:21:eb:21:b0:cd:75:2f:49:c4:1a:a3:66:02:48:76: ab:fb:33:7b:e9:92:60:98:dc:cf:4c:67:f1:07:05:b5:c3:09: 84:df:24:04:3c:7f:2d:23:e9:b1:b9:49:27:dc:a9:17:47:25: 4e:08:02:b6:d7:99:68:91:3b:ae:1a:9a:a5:cb:cf:9e:43:a6: 19:9b:56:06:10:19:2e:84:b6:ef:da:08:2a:e5:58:d1:46:e8: f9:2e:f7:aa:fb:ef:5e:00:c7:43:b7:40:5c:6d:8f:31:d7:ee: fc:9f:83:49:aa:21:0e:da:f8:18:22:08:0a:7e:55:99:dd:67: 3a:27:aa:a9:27:97:e4:15:b4:8e:80:4d:43:78:f5:e0:06:f2: a0:28:d4:2b:dd:6d:f0:4a:fa:d3:22:6d:82:e6:7d:01:e3:b1: 3c:84:23:b1:e6:c3:07:51:77:cc:3c:be:cc:ef:da:d9:1e:b9: 4b:47:71:47:9e:fe:9b:d7:1b:11:9b:63:0f:45:0d:ca:d0:b4: 79:5d:e4:e2:b2:10:16:20:46:d0:52:52:a6:b4:ea:ba:98:4d: e8:44:49:38:6c:1c:20:72:bf:be:1f:0e:f2:e8:92:79:60:cd: 3e:fb:0f:f0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjQwNDE5MDM0MzMxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjIxZTg2My1lNWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2jRojSo8CwqL3kvMqde8XvKK5ObNWgDBHGw2z2bG/1673ss2aoqv2j9nfcj 94Q7+qdNP6uzwcwCueH9YksQABh0Lg0vr+pxMDOJoevK0OpX7VF2B/cPxUr522dd etibkK4NKou7NwKmTA+Ao83/wtKZPsJ74l3jJFC0so3pbxkstxQIBqEiiEFpP0tR 13gTQpoMLHLBWGZ0BACk5aZ8orAUtYmIvDVoLUNw5zDyIsZqFZW2zfm/exhCVcJf Ew4O59pEzaRkOV1p3+oYlEdXr6onM1vH+zo65UW2CPPmnfaa/18jB1wukt5cjltR ItflsSmx+673QDz6W2arw+Q7vwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLlCTocS /DiLWzvDm5QDFOiPeHZqMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkY0QTEvMEY1ODdBODhCMUNDMTFFRDg1RjI1QTNEQzRGOUFFMDIvRkQ5MUQzODJG REZFMTFFRUE5OTE0MTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABno9AwDQYJKoZIhvcNAQELBQADggEBAJX5pYIfq62Rdp/1 Q6s93aHG084nqiHrIbDNdS9JxBqjZgJIdqv7M3vpkmCY3M9MZ/EHBbXDCYTfJAQ8 fy0j6bG5SSfcqRdHJU4IArbXmWiRO64amqXLz55DphmbVgYQGS6Etu/aCCrlWNFG 6Pku96r7714Ax0O3QFxtjzHX7vyfg0mqIQ7a+BgiCAp+VZndZzonqqknl+QVtI6A TUN49eAG8qAo1CvdbfBK+tMibYLmfQHjsTyEI7HmwwdRd8w8vszv2tkeuUtHcUee /pvXGxGbYw9FDcrQtHld5OKyEBYgRtBSUqa06rqYTehESThsHCByv74fDvLoknlg zT77D/A= -----END CERTIFICATE-----Generated at Tue May 21 07:17:36 2024 by rpki-client on console-ams.rpki-client.org