$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/5563895C378911EABB08EC0EC4F9AE02.roa File: 5563895C378911EABB08EC0EC4F9AE02.roa (raw, json) Hash identifier: ZGlx2pnoKbRkPmKqlszuomlf6l7H23AsgoYIs72WYp8= Subject key identifier: 29:0D:0D:F6:B5:37:D0:FB:9D:8D:7B:FC:05:7A:D7:76:FF:91:9E:D3 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0BE3 Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/5563895C378911EABB08EC0EC4F9AE02.roa Signing time: Thu 12 Oct 2023 18:46:36 +0000 ROA not before: Thu 12 Oct 2023 18:46:36 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 139667 IP address blocks: 103.143.88.0/23 maxlen: 23 103.143.88.0/24 maxlen: 24 103.143.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3043 (0xbe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: Oct 12 18:46:36 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65283f0b-ec4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:0c:e9:80:8d:78:20:df:f1:50:f4:d5:ff: 79:de:f9:4e:c5:3b:38:83:12:c0:e4:29:80:0c:7f: da:c6:94:81:63:af:59:46:19:e4:db:44:cf:d8:1e: c6:df:90:9f:08:6c:b8:ef:56:d8:e1:16:04:f8:eb: e7:73:ca:d0:5c:f8:ee:bf:74:f1:42:72:c3:e1:80: b6:fd:55:cc:e1:7d:09:8d:ef:fa:1f:84:a6:02:ec: 28:13:77:75:86:82:ba:a0:d1:63:fd:19:63:8c:e7: 15:84:3b:f1:78:24:35:b4:55:1b:bd:1c:dc:4a:bf: 4c:1a:81:51:c9:82:b8:c2:35:57:80:a9:26:f2:f6: f0:da:f7:96:41:51:7d:51:49:7f:11:f0:d6:95:d0: 5c:b5:00:63:da:d1:40:c4:fa:e3:10:67:0c:02:3e: 98:f7:c1:f0:02:f4:1f:63:27:4e:44:40:fb:19:d4: 64:b9:0b:0f:7d:29:99:70:78:62:45:d0:6f:0d:74: 96:52:93:94:a8:df:9f:a3:4e:95:3a:4c:6a:4d:b2: 02:3d:4d:6d:14:7a:65:39:d8:b2:9e:f1:77:6e:11: 75:38:fe:f1:a3:cb:32:25:4d:c9:20:2d:7b:d0:2b: 02:fe:3e:ff:78:d6:c0:7b:76:1b:30:f6:b9:b5:be: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0D:0D:F6:B5:37:D0:FB:9D:8D:7B:FC:05:7A:D7:76:FF:91:9E:D3 X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/5563895C378911EABB08EC0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.88.0/23 Signature Algorithm: sha256WithRSAEncryption 09:0c:83:ab:43:92:dd:f7:f9:28:5a:6e:0f:c9:b5:06:56:30: 55:ba:1a:86:30:55:42:10:99:61:d3:b2:34:29:c1:db:04:58: 5e:cc:ec:52:f3:b3:09:5b:c6:04:fb:c6:41:92:e5:76:88:2a: 33:c8:b3:59:fd:3e:0d:94:c6:8f:08:97:8e:e3:ee:4d:49:92: fd:ab:92:11:45:da:65:74:f0:8b:56:7c:5d:94:8d:69:d9:99: e5:1a:92:38:2f:65:cd:2d:fb:4c:6a:a4:ce:da:45:e8:82:90: 88:51:4a:31:99:1c:ea:68:c2:94:b0:22:21:30:1f:9e:73:17: 64:96:96:5e:fe:dc:c5:9c:d8:21:28:92:a3:fb:2d:37:09:cc: d0:35:e3:a4:fb:ba:b2:96:c0:56:af:1b:72:10:0f:dc:43:e6: 8e:5c:00:0d:1a:c5:5a:92:16:d1:03:5e:e9:a5:9f:79:49:1f: 17:fd:0c:48:1d:92:5a:5d:de:cc:05:9a:1a:02:5b:b2:47:09: c2:3b:73:78:07:0f:f8:61:49:09:41:b3:c6:5c:ca:ca:5e:77: b5:5e:e1:e4:9f:e2:b0:2c:72:21:84:b2:9a:09:cf:e3:e5:a7: 37:28:24:0c:7c:16:b7:a9:46:5a:55:9d:fd:0d:4e:e5:19:0a: b3:45:5a:d2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjMxMDEyMTg0NjM2WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTI4M2YwYi1lYzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnwM6YCNeCDf8VD01f953vlOxTs4gxLA5CmADH/axpSBY69ZRhnk20TP2B7G 35CfCGy471bY4RYE+Ovnc8rQXPjuv3TxQnLD4YC2/VXM4X0Jje/6H4SmAuwoE3d1 hoK6oNFj/RljjOcVhDvxeCQ1tFUbvRzcSr9MGoFRyYK4wjVXgKkm8vbw2veWQVF9 UUl/EfDWldBctQBj2tFAxPrjEGcMAj6Y98HwAvQfYydORED7GdRkuQsPfSmZcHhi RdBvDXSWUpOUqN+fo06VOkxqTbICPU1tFHplOdiynvF3bhF1OP7xo8syJU3JIC17 0CsC/j7/eNbAe3YbMPa5tb70kQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCkNDfa1 N9D7nY17/AV613b/kZ7TMB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFEQTYvREIxOEI4RTZERERGMTFFOTk5M0NGMjY1QzRGOUFFMDIvNTU2Mzg5NUMz Nzg5MTFFQUJCMDhFQzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnj1gwDQYJKoZIhvcNAQELBQADggEBAAkMg6tDkt33+Sha bg/JtQZWMFW6GoYwVUIQmWHTsjQpwdsEWF7M7FLzswlbxgT7xkGS5XaIKjPIs1n9 Pg2Uxo8Il47j7k1Jkv2rkhFF2mV08ItWfF2UjWnZmeUakjgvZc0t+0xqpM7aReiC kIhRSjGZHOpowpSwIiEwH55zF2SWll7+3MWc2CEokqP7LTcJzNA146T7urKWwFav G3IQD9xD5o5cAA0axVqSFtEDXumln3lJHxf9DEgdklpd3swFmhoCW7JHCcI7c3gH D/hhSQlBs8Zcysped7Ve4eSf4rAsciGEspoJz+PlpzcoJAx8FrepRlpVnf0NTuUZ CrNFWtI= -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org