$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/AE2B3BD221BD11ECA88ED95BC4F9AE02.roa File: AE2B3BD221BD11ECA88ED95BC4F9AE02.roa (raw, json) Hash identifier: +CtDubk59Sw48O8Ouf2tA+TlSw7n0l4E3ftM+xsc3kE= Subject key identifier: A4:BA:28:0E:52:34:67:E5:F3:27:35:65:A6:53:F3:84:8A:7C:97:B3 Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Certificate serial: 0589 Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/AE2B3BD221BD11ECA88ED95BC4F9AE02.roa Signing time: Mon 14 Aug 2023 23:20:33 +0000 ROA not before: Mon 14 Aug 2023 23:20:33 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 21859 IP address blocks: 103.68.194.0/24 maxlen: 24 103.68.195.0/24 maxlen: 24 121.54.190.0/24 maxlen: 24 121.54.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 23:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1417 (0x589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Validity Not Before: Aug 14 23:20:33 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64dab6c1-fcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:61:4d:6d:c9:37:ef:4d:b2:98:56:f1:73:fc: ae:ad:91:6c:e3:5a:63:cf:d5:41:38:8f:be:81:a2: ca:5b:0b:95:31:bf:0f:7a:12:a7:f4:76:cf:ee:6d: 0c:56:48:1e:1c:e4:30:d3:bf:76:42:04:ea:5c:4f: e5:a4:fd:dc:99:ca:1e:aa:17:8e:34:cf:f4:db:d9: f4:dc:5a:94:cd:7d:64:8a:e1:ec:17:43:b8:5e:ad: 12:06:8e:12:80:5a:12:4b:f1:94:97:b5:0a:9f:dd: fb:13:18:a6:d4:82:59:5a:d7:9d:57:96:4a:b3:6f: c6:d3:2e:06:22:99:dc:2d:ed:63:54:eb:e1:5c:df: 1e:42:cc:c9:96:9d:5d:a8:1e:37:90:2e:6b:53:39: 99:cd:45:e1:2e:58:e3:d9:f4:5f:53:26:50:97:e0: 59:c0:ac:a3:86:58:f0:98:5d:c3:60:30:e3:65:56: 03:52:91:b5:17:47:ee:3d:c6:40:50:a5:24:8b:7d: 7b:7d:9d:8f:2e:9c:51:6c:5d:2b:ad:4c:46:f1:2e: 27:72:2b:4c:36:e4:eb:f1:10:b6:5c:93:51:d6:05: 30:84:bd:d6:18:77:c6:05:b2:2d:e4:20:c7:92:52: 2e:f1:eb:1f:af:45:ae:16:b2:b6:bb:7c:72:66:6a: fe:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BA:28:0E:52:34:67:E5:F3:27:35:65:A6:53:F3:84:8A:7C:97:B3 X509v3 Authority Key Identifier: keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/AE2B3BD221BD11ECA88ED95BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.194.0/23 121.54.190.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:fd:e8:1b:a4:72:4c:f5:ee:68:95:90:31:f8:b9:ed:08:ac: 78:b3:dc:48:57:e3:16:ad:0a:2d:41:eb:c1:f0:93:23:57:40: fc:52:76:53:d7:db:96:84:0d:50:c4:30:c6:61:b3:3f:aa:aa: fe:f5:e4:07:61:bb:c3:2a:72:85:62:85:d7:c1:38:74:ff:e8: 01:cb:71:2e:ff:e5:89:23:b1:07:ab:c4:37:21:cd:57:26:cd: 5d:90:dc:cf:b0:5b:cd:81:78:1d:3f:3d:4a:2a:a6:52:d9:32: 3e:8e:14:3b:60:68:be:3d:f9:3b:e8:27:31:39:01:1e:63:33: 9e:9f:a0:fc:b2:c5:5a:3a:83:d6:ff:0c:33:69:a2:70:c5:d7: eb:70:d1:cb:81:ea:8d:f5:60:02:7e:95:9a:8a:f0:a6:9b:f8: 8b:4e:83:e0:c9:e5:35:5c:c9:8b:3c:f6:0d:71:ab:ad:8c:3d: 5b:5e:71:8f:fe:37:6a:cd:5a:39:9f:09:e0:1d:c1:2d:16:58: 4a:b1:50:bd:fe:87:56:82:bd:1d:07:0e:6a:13:0d:9d:2d:2c: d4:37:5e:ec:ab:77:19:7a:9e:77:1b:6e:85:9c:3d:54:b8:7d: 5e:71:63:b7:dc:e2:f1:d4:0a:90:a6:fa:16:08:00:f7:49:c7: 49:12:eb:00 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD QTczM0REQTYwHhcNMjMwODE0MjMyMDMzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRhYjZjMS1mY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlWFNbck3702ymFbxc/yurZFs41pjz9VBOI++gaLKWwuVMb8PehKn9HbP7m0M VkgeHOQw0792QgTqXE/lpP3cmcoeqheONM/029n03FqUzX1kiuHsF0O4Xq0SBo4S gFoSS/GUl7UKn937Exim1IJZWtedV5ZKs2/G0y4GIpncLe1jVOvhXN8eQszJlp1d qB43kC5rUzmZzUXhLljj2fRfUyZQl+BZwKyjhljwmF3DYDDjZVYDUpG1F0fuPcZA UKUki317fZ2PLpxRbF0rrUxG8S4ncitMNuTr8RC2XJNR1gUwhL3WGHfGBbIt5CDH klIu8esfr0WuFrK2u3xyZmr+EwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKS6KA5S NGfl8yc1ZaZT84SKfJezMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMyNkYvNzg2NkY1MzA1RkM3MTFFQjhBNjkyMDJFQzRGOUFFMDIvQUUyQjNCRDIy MUJEMTFFQ0E4OEVEOTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnRMIDBAF5Nr4wDQYJKoZIhvcNAQELBQADggEBABz96Buk ckz17miVkDH4ue0IrHiz3EhX4xatCi1B68HwkyNXQPxSdlPX25aEDVDEMMZhsz+q qv715Adhu8MqcoVihdfBOHT/6AHLcS7/5YkjsQerxDchzVcmzV2Q3M+wW82BeB0/ PUoqplLZMj6OFDtgaL49+TvoJzE5AR5jM56foPyyxVo6g9b/DDNponDF1+tw0cuB 6o31YAJ+lZqK8Kab+ItOg+DJ5TVcyYs89g1xq62MPVtecY/+N2rNWjmfCeAdwS0W WEqxUL3+h1aCvR0HDmoTDZ0tLNQ3Xuyrdxl6nncbboWcPVS4fV5xY7fc4vHUCpCm +hYIAPdJx0kS6wA= -----END CERTIFICATE-----Generated at Thu Apr 25 02:01:31 2024 by rpki-client on console-ams.rpki-client.org