$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa File: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (raw, json) Hash identifier: d0zmRTZZFiPHi857cwhVqd99eYG426DFoXz+8wiqEgM= Subject key identifier: 11:5A:AF:CA:8A:A3:1B:68:90:82:68:EE:47:6A:07:DC:40:D7:50:55 Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Certificate serial: 0CC1 Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa Signing time: Thu 08 Feb 2024 18:36:59 +0000 ROA not before: Thu 08 Feb 2024 18:36:59 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 24559 IP address blocks: 103.126.104.0/22 maxlen: 24 203.91.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 18:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3265 (0xcc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Validity Not Before: Feb 8 18:36:59 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65c51f4b-db5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f7:12:39:4a:43:e8:79:96:98:26:0e:28:7e: 1d:24:42:ce:a8:46:5e:3d:c4:67:e2:a4:9d:8a:35: 44:fe:13:10:0c:43:75:bc:b8:3a:4d:b8:03:1f:fa: 07:9d:55:a0:0c:76:b7:f9:f8:cf:1c:cf:dd:c3:7c: d6:16:05:bb:4b:ca:3e:5c:0d:78:6d:45:70:86:f0: a4:a1:53:95:f7:54:ec:51:b4:83:f9:d7:6f:eb:ee: bd:8c:c5:c1:b6:db:c8:c7:c5:4b:71:d4:86:43:ee: ae:fb:99:de:41:f6:91:c3:6d:45:c3:91:45:05:9f: 09:a7:f0:28:9c:24:1b:da:d7:92:ea:d3:9f:8d:52: 59:21:f7:8a:04:9d:aa:e9:82:60:6f:c2:48:a0:bf: 50:c1:39:84:8e:ea:28:ad:fa:94:a5:88:a6:e8:2a: e8:60:9f:da:d5:96:b7:a0:3b:d5:d9:7f:ae:ca:3a: fe:c7:7d:62:b1:d8:f1:df:eb:62:71:83:df:b7:cf: 55:93:ef:ba:7a:b6:35:9c:1f:64:00:ae:7b:9d:a7: 63:86:10:c4:51:47:e2:8b:01:51:dd:1a:f0:d5:06: 83:3d:37:a9:e5:7c:f0:69:cc:1a:b0:16:7b:68:32: 8a:de:f8:39:10:0b:74:1b:0d:f5:ca:f8:a0:86:a8: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5A:AF:CA:8A:A3:1B:68:90:82:68:EE:47:6A:07:DC:40:D7:50:55 X509v3 Authority Key Identifier: keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.104.0/22 203.91.112.0/21 Signature Algorithm: sha256WithRSAEncryption 56:b4:14:c6:1c:f1:39:06:45:95:d0:da:da:e0:70:b2:00:13: b6:a9:6d:bd:da:64:d2:94:4b:eb:21:51:ab:d0:19:d6:b9:2a: 50:c4:fe:cf:c4:aa:34:c0:b1:db:e9:7f:16:36:19:14:b0:cd: fb:c0:de:4e:14:d7:b4:a4:a9:0c:45:61:b6:97:2c:5b:a8:04: 4c:4b:c6:49:77:58:6f:20:6b:cd:e3:2a:61:14:88:9f:77:cd: 98:1e:37:a5:53:50:1b:d1:6e:93:68:6b:09:99:01:92:ee:89: 56:2b:8e:c1:2e:30:4b:dc:e0:55:36:36:20:89:7a:7e:32:26: c9:0e:2f:87:b2:cf:78:24:f4:a0:c1:d5:0b:0d:14:a3:45:a5: 72:bb:51:08:b0:ce:eb:0f:b4:53:6c:97:60:39:3c:0e:0c:63: 4f:12:d0:9f:87:78:57:4c:8a:bb:0a:e0:40:f0:d6:65:77:ba: 13:e6:88:4f:3e:82:51:20:8f:ec:50:a0:70:c6:76:86:27:07: 01:79:9f:48:4a:8b:d8:7d:eb:43:96:f5:73:c6:41:24:85:c5: e2:a1:e4:c9:59:64:c1:f8:34:2a:b2:86:c9:eb:77:99:2b:88: 93:25:09:41:f0:83:98:4a:ca:f8:87:b2:63:6a:e0:b5:7d:f3: 70:59:1e:c4 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFCOTIxMTAvBgNVBAUTKEI3NDZDREQzMTcyQTIwMTFGMDIxODlGRjJEQUQ3ODdE MjlDMDExRTkwHhcNMjQwMjA4MTgzNjU5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWM1MWY0Yi1kYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vcSOUpD6HmWmCYOKH4dJELOqEZePcRn4qSdijVE/hMQDEN1vLg6TbgDH/oH nVWgDHa3+fjPHM/dw3zWFgW7S8o+XA14bUVwhvCkoVOV91TsUbSD+ddv6+69jMXB ttvIx8VLcdSGQ+6u+5neQfaRw21Fw5FFBZ8Jp/AonCQb2teS6tOfjVJZIfeKBJ2q 6YJgb8JIoL9QwTmEjuoorfqUpYim6CroYJ/a1Za3oDvV2X+uyjr+x31isdjx3+ti cYPft89Vk++6erY1nB9kAK57nadjhhDEUUfiiwFR3Rrw1QaDPTep5XzwacwasBZ7 aDKK3vg5EAt0Gw31yvighqhQWQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBFar8qK oxtokIJo7kdqB9xA11BVMB8GA1UdIwQYMBaAFLdGzdMXKiAR8CGJ/y2teH0pwBHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUI5Mi9BQUJGQzQ5QUJE NjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlCSHdJWW5fTGExNGZTbkFF ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwYk4weGNxSUJId0lZbl9MYTE0ZlNuQUVlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFCOTIvQUFCRkM0OUFCRDYwMTFFOTk1NkEwRjE5QzRGOUFFMDIvRjhBQzNERDhE QjkxMTFFOUI3MEVERDJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnfmgDBAPLW3AwDQYJKoZIhvcNAQELBQADggEBAFa0FMYc 8TkGRZXQ2trgcLIAE7apbb3aZNKUS+shUavQGda5KlDE/s/EqjTAsdvpfxY2GRSw zfvA3k4U17SkqQxFYbaXLFuoBExLxkl3WG8ga83jKmEUiJ93zZgeN6VTUBvRbpNo awmZAZLuiVYrjsEuMEvc4FU2NiCJen4yJskOL4eyz3gk9KDB1QsNFKNFpXK7UQiw zusPtFNsl2A5PA4MY08S0J+HeFdMirsK4EDw1mV3uhPmiE8+glEgj+xQoHDGdoYn BwF5n0hKi9h960OW9XPGQSSFxeKh5MlZZMH4NCqyhsnrd5kriJMlCUHwg5hKyviH smNq4LV983BZHsQ= -----END CERTIFICATE-----Generated at Tue May 14 21:48:44 2024 by rpki-client on console-ams.rpki-client.org