$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/336BA9301F3511EBA1BEA484C4F9AE02.roa File: 336BA9301F3511EBA1BEA484C4F9AE02.roa (raw, json) Hash identifier: YmQJVFgClUNZS8zoNTFsOSqkp6KCRISLG2h6fntHKcw= Subject key identifier: 37:E9:8F:2E:CB:94:57:54:62:99:49:F2:ED:87:3C:AC:8A:F9:A3:08 Certificate issuer: /CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1 Certificate serial: 066A Authority key identifier: D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/336BA9301F3511EBA1BEA484C4F9AE02.roa Signing time: Mon 30 Oct 2023 20:48:55 +0000 ROA not before: Mon 30 Oct 2023 20:48:55 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 133468 IP address blocks: 103.96.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1 Validity Not Before: Oct 30 20:48:55 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=654016b6-732c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:5e:85:58:55:b0:27:a2:6f:78:d6:44:28: b0:4c:e3:22:c8:28:41:65:55:f8:fb:72:0d:14:e1: ba:e0:fd:30:b1:c0:f7:4c:b4:8e:a2:49:f2:d6:17: da:6a:1e:00:a9:e4:2b:6c:ce:d2:b4:f6:c1:53:1a: 8f:b8:bf:8c:d2:47:40:47:d3:e6:61:d6:61:b5:06: 53:74:8f:1c:3b:e6:25:30:f4:3b:84:8a:2d:cb:6a: 39:3e:4e:76:12:6d:ba:e6:75:1b:59:36:b8:ec:f1: df:5d:b2:17:76:f8:0a:05:aa:96:dc:73:8f:e4:f7: 7c:42:f9:5b:bf:39:62:5b:ad:19:fb:8a:ae:1d:68: 4a:54:84:ac:db:11:dd:54:53:56:14:ac:b2:3d:4b: 13:70:e8:df:c5:5b:a9:49:4a:c1:6b:81:a9:0c:95: c8:50:98:6e:94:c4:85:39:19:ce:82:6b:23:a4:71: 54:b6:3a:b7:8f:db:ae:0e:9f:2e:b7:ce:b5:3a:7c: ee:fb:bf:4c:f1:98:66:6d:13:e1:c1:28:a3:33:93: bf:03:24:fa:35:ef:24:fb:ca:6b:b5:69:2b:9d:c6: 51:ca:de:43:d8:8d:3e:19:93:27:b2:45:c4:5e:98: 41:ce:35:47:0c:89:93:5a:b6:56:da:55:e1:4d:8f: fa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E9:8F:2E:CB:94:57:54:62:99:49:F2:ED:87:3C:AC:8A:F9:A3:08 X509v3 Authority Key Identifier: keyid:D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/336BA9301F3511EBA1BEA484C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.96.68.0/23 Signature Algorithm: sha256WithRSAEncryption 02:75:41:2f:58:6b:1e:60:b5:c5:74:e1:64:e9:ac:c3:4a:31: c1:5a:4d:59:04:dd:ba:76:bd:4c:a5:4a:93:a1:0c:6f:ff:0f: 89:e6:53:31:cf:7e:bb:5a:47:14:ac:2f:80:f6:d6:ca:a2:d2: 05:11:af:76:80:2f:0a:1c:7c:35:ba:30:f6:a2:bd:7c:be:3a: 21:b5:cd:2e:c7:3f:49:98:c7:d1:20:ac:e1:d1:19:95:78:55: 9d:92:7b:46:56:ed:35:79:04:0b:26:fa:63:ca:4e:ec:38:4e: 94:c8:c7:be:f1:70:03:34:6b:f9:58:69:74:65:03:a1:3f:4b: 53:c2:40:2c:ff:3d:61:ca:97:36:1c:14:02:cf:bc:2e:8d:6d: e9:42:ad:6a:f3:66:38:ca:5e:7b:56:11:45:ec:68:e7:d8:e3: c0:97:93:d2:8d:b5:1e:2b:63:98:cd:11:48:29:8e:70:ab:1a: c9:23:54:1a:95:f5:18:e9:fb:a1:50:f7:51:9b:8a:59:5c:fb: 2f:ef:36:ea:bd:52:a4:57:f8:1c:04:22:ef:bb:62:22:75:aa: d3:9d:d8:cc:21:c2:cb:d1:99:66:68:82:97:5d:c7:cf:85:3f: cc:3f:d5:7a:e4:a9:bc:31:43:7e:92:be:fc:c4:7d:dc:ee:50: fd:2a:74:7e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQxMDIxMTAvBgNVBAUTKEQxNkI1QzAyRjU3MUE4QjhERkJENDczQ0VGMTRBODky Q0IwRDAwRTEwHhcNMjMxMDMwMjA0ODU1WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQwMTZiNi03MzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxctehVhVsCeib3jWRCiwTOMiyChBZVX4+3INFOG64P0wscD3TLSOokny1hfa ah4AqeQrbM7StPbBUxqPuL+M0kdAR9PmYdZhtQZTdI8cO+YlMPQ7hIoty2o5Pk52 Em265nUbWTa47PHfXbIXdvgKBaqW3HOP5Pd8QvlbvzliW60Z+4quHWhKVISs2xHd VFNWFKyyPUsTcOjfxVupSUrBa4GpDJXIUJhulMSFORnOgmsjpHFUtjq3j9uuDp8u t861Onzu+79M8ZhmbRPhwSijM5O/AyT6Ne8k+8prtWkrncZRyt5D2I0+GZMnskXE XphBzjVHDImTWrZW2lXhTY/6SwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDfpjy7L lFdUYplJ8u2HPKyK+aMIMB8GA1UdIwQYMBaAFNFrXAL1cai4371HPO8UqJLLDQDh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDEwMi9CNzhBQTdGNDY1 NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFMamZ2VWM4N3hTb2tzc05B T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBXdGNBdlZ4cUxqZnZVYzg3eFNva3NzTkFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQxMDIvQjc4QUE3RjQ2NTREMTFFQTg2RTUwMTdGQzRGOUFFMDIvMzM2QkE5MzAx RjM1MTFFQkExQkVBNDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnYEQwDQYJKoZIhvcNAQELBQADggEBAAJ1QS9Yax5gtcV0 4WTprMNKMcFaTVkE3bp2vUylSpOhDG//D4nmUzHPfrtaRxSsL4D21sqi0gURr3aA LwocfDW6MPaivXy+OiG1zS7HP0mYx9EgrOHRGZV4VZ2Se0ZW7TV5BAsm+mPKTuw4 TpTIx77xcAM0a/lYaXRlA6E/S1PCQCz/PWHKlzYcFALPvC6NbelCrWrzZjjKXntW EUXsaOfY48CXk9KNtR4rY5jNEUgpjnCrGskjVBqV9Rjp+6FQ91Gbillc+y/vNuq9 UqRX+BwEIu+7YiJ1qtOd2MwhwsvRmWZogpddx8+FP8w/1XrkqbwxQ36SvvzEfdzu UP0qdH4= -----END CERTIFICATE-----Generated at Thu May 16 21:45:31 2024 by rpki-client on console-fra.rpki-client.org