$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/B4D2B6A2C1A811EA80577A47C4F9AE02.roa File: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (raw, json) Hash identifier: 5C8ePjvhSgQfbUkW1V0izpOZDdVtdh6I4HowBYXf4n8= Subject key identifier: 46:BB:F2:CE:32:E1:37:77:0A:6E:59:41:B5:B6:3E:9F:77:B4:CD:4C Certificate issuer: /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Certificate serial: 0710 Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/B4D2B6A2C1A811EA80577A47C4F9AE02.roa Signing time: Thu 22 Jun 2023 22:23:48 +0000 ROA not before: Thu 22 Jun 2023 22:23:48 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 140633 IP address blocks: 103.151.150.0/23 maxlen: 23 2001:df3:c680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 22:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1808 (0x710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Validity Not Before: Jun 22 22:23:48 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6494c9f3-14c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:80:7a:60:e9:e7:70:77:10:78:39:78:bd:8f: bf:55:f9:a0:03:01:30:28:9b:32:c1:70:14:ad:54: b4:6f:6f:10:8e:79:f2:b5:0a:52:28:c9:1c:4f:50: 75:08:48:96:c6:4a:76:d0:52:a2:2d:ea:21:e7:05: 48:c9:90:56:75:6e:11:0d:b5:3a:91:f4:63:21:de: 64:3a:3e:74:4d:50:12:2a:ff:4d:3a:ea:f3:f6:98: 71:ec:48:bb:f2:11:38:66:b5:18:9e:08:16:1c:ff: 7e:52:fb:7a:58:d2:b5:1b:2b:12:59:8a:1a:c1:a0: ee:65:70:87:90:fa:39:45:6c:9d:43:75:55:a3:24: ce:f6:a9:26:57:35:29:12:76:26:e4:70:da:ae:49: ad:ec:0c:98:60:9d:c6:7a:b5:4d:c7:a2:8e:31:d6: 21:1b:0b:be:0e:14:db:98:62:16:a4:91:eb:f6:89: a3:a0:b2:41:ff:27:ef:58:83:b1:a0:cc:37:b5:eb: 75:b3:65:8e:9f:06:53:12:e8:ba:1b:51:57:18:a2: 6c:39:c4:0e:dc:7e:b1:f0:8c:77:fb:12:1a:27:c5: 82:61:d9:b0:3f:50:59:0c:bf:76:53:ab:c4:1f:46: 53:47:da:db:88:3f:a7:b6:65:a6:9a:29:47:8a:c6: ca:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BB:F2:CE:32:E1:37:77:0A:6E:59:41:B5:B6:3E:9F:77:B4:CD:4C X509v3 Authority Key Identifier: keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/B4D2B6A2C1A811EA80577A47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.150.0/23 IPv6: 2001:df3:c680::/48 Signature Algorithm: sha256WithRSAEncryption 27:87:47:e7:6d:e0:90:74:54:2c:db:65:45:e2:35:7a:2e:02: d7:d4:a0:c5:a8:00:aa:40:47:6a:62:7f:8e:03:29:43:17:a1: df:13:aa:24:fb:cf:e9:ed:8b:f9:06:59:35:f9:dc:ae:b0:7b: a5:09:43:fa:d1:e7:39:1c:d5:55:66:14:48:57:de:12:52:2e: eb:0d:d5:12:c9:df:81:aa:4c:0e:f5:df:39:62:05:29:96:6b: 73:14:36:2b:0a:58:d9:80:fb:e4:a1:fd:06:69:9c:1c:62:6e: 2d:f3:14:7e:5a:58:b9:21:03:f0:39:a7:8f:31:f6:ba:a7:88: 25:57:62:2a:f8:be:bb:ba:83:ed:ac:ef:25:81:37:91:aa:1c: 60:ec:3c:45:5f:20:d7:cf:14:93:80:89:c2:18:f3:c7:db:5d: 57:e4:93:a7:56:3b:e8:f0:a7:d3:27:1e:19:f6:5a:ee:8f:50: 60:59:ee:a2:52:fc:a7:5a:de:64:e9:ce:c4:16:3b:d1:01:e2: 21:ba:08:c0:ae:e5:b6:53:c5:3f:2e:ce:8b:ec:fa:fe:c4:7b: 45:47:56:3b:1b:4f:06:33:7f:db:7a:7e:b3:a7:5b:84:b0:81: 26:3c:56:a8:c4:3a:32:28:8e:e9:52:06:d4:46:07:2a:14:5b: 3d:a1:8e:2c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI1NEQxMTAvBgNVBAUTKDhENDEzMzZDQjVEMEFGRkYxMDI4MjE2RDk1MzRCQjdF MDJDM0U3ODUwHhcNMjMwNjIyMjIyMzQ4WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDk0YzlmMy0xNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoB6YOnncHcQeDl4vY+/VfmgAwEwKJsywXAUrVS0b28QjnnytQpSKMkcT1B1 CEiWxkp20FKiLeoh5wVIyZBWdW4RDbU6kfRjId5kOj50TVASKv9NOurz9phx7Ei7 8hE4ZrUYnggWHP9+Uvt6WNK1GysSWYoawaDuZXCHkPo5RWydQ3VVoyTO9qkmVzUp EnYm5HDarkmt7AyYYJ3GerVNx6KOMdYhGwu+DhTbmGIWpJHr9omjoLJB/yfvWIOx oMw3tet1s2WOnwZTEui6G1FXGKJsOcQO3H6x8Ix3+xIaJ8WCYdmwP1BZDL92U6vE H0ZTR9rbiD+ntmWmmilHisbKBQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEa78s4y 4Td3Cm5ZQbW2Pp93tM1MMB8GA1UdIwQYMBaAFI1BM2y10K//ECghbZU0u34Cw+eF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjU0RC84Q0U2MkRGQUMx QTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJfOFFLQ0Z0bFRTN2ZnTEQ1 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVRXpiTFhRcl84UUtDRnRsVFM3ZmdMRDU0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzI1NEQvOENFNjJERkFDMUE3MTFFQTlENkI4NzQzQzRGOUFFMDIvQjREMkI2QTJD MUE4MTFFQTgwNTc3QTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnl5YwDwQCAAIwCQMHACABDfPGgDANBgkqhkiG9w0BAQsF AAOCAQEAJ4dH523gkHRULNtlReI1ei4C19SgxagAqkBHamJ/jgMpQxeh3xOqJPvP 6e2L+QZZNfncrrB7pQlD+tHnORzVVWYUSFfeElIu6w3VEsnfgapMDvXfOWIFKZZr cxQ2KwpY2YD75KH9BmmcHGJuLfMUflpYuSED8DmnjzH2uqeIJVdiKvi+u7qD7azv JYE3kaocYOw8RV8g188Uk4CJwhjzx9tdV+STp1Y76PCn0yceGfZa7o9QYFnuolL8 p1reZOnOxBY70QHiIboIwK7ltlPFPy7Oi+z6/sR7RUdWOxtPBjN/23p+s6dbhLCB JjxWqMQ6MiiO6VIG1EYHKhRbPaGOLA== -----END CERTIFICATE-----Generated at Sat May 25 01:00:18 2024 by rpki-client on console-ams.rpki-client.org