$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/059261A8BC5111EABE07AE32C4F9AE02.roa File: 059261A8BC5111EABE07AE32C4F9AE02.roa (raw, json) Hash identifier: GMzjXTtzVauDwypVhHPwgP11aqtJKysxV0/a8VxbSKo= Subject key identifier: 2C:4E:E9:E0:62:C9:74:51:B6:43:FC:0F:7E:6B:CB:52:0F:05:A0:E4 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 0741 Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/059261A8BC5111EABE07AE32C4F9AE02.roa Signing time: Tue 18 Jul 2023 21:37:58 +0000 ROA not before: Tue 18 Jul 2023 21:37:58 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 140879 IP address blocks: 103.152.218.0/23 maxlen: 23 103.152.218.0/24 maxlen: 24 103.152.219.0/24 maxlen: 24 2400:8ca0::/32 maxlen: 32 2400:8ca0::/48 maxlen: 48 2400:8ca0:1::/48 maxlen: 48 2400:8ca0:2::/48 maxlen: 48 2400:8ca0:3::/48 maxlen: 48 2400:8ca0:4::/48 maxlen: 48 2400:8ca0:5::/48 maxlen: 48 2400:8ca0:6::/48 maxlen: 48 2400:8ca0:7::/48 maxlen: 48 2400:8ca0:8::/48 maxlen: 48 2400:8ca0:9::/48 maxlen: 48 2400:8ca0:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: Jul 18 21:37:58 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64b70635-2bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:70:c3:27:c3:62:9a:e5:32:da:fa:d8:d8:18: df:77:fa:96:ec:18:2d:b1:0f:d0:ba:48:8e:5d:60: 66:58:31:45:de:a3:46:82:b9:4d:31:7b:e4:31:ed: 8b:5e:b0:13:ab:29:c9:69:5f:77:3e:46:8f:06:16: 26:7f:b1:88:21:97:5a:0f:2f:2c:79:c8:70:b5:98: 94:ba:0a:d2:69:65:2d:1f:32:cb:54:21:70:ff:7a: 62:e6:b0:6a:f5:22:2f:7e:02:00:35:40:68:67:da: 40:5f:32:5e:83:0a:91:b7:3d:f2:30:5a:7f:84:ba: 89:b0:ee:69:78:54:37:21:55:70:8f:1a:fd:76:2d: 38:59:e0:f5:ad:51:65:4d:3b:2e:49:8a:4e:2e:50: a7:d2:c2:36:fc:d1:12:86:17:76:66:ac:eb:aa:89: 4c:ef:2e:91:0d:1a:11:76:02:ab:fe:b4:46:82:7f: 1c:1f:93:ef:07:fb:6d:ca:5e:94:8d:18:8b:17:b2: 68:0a:f4:21:f9:c5:fb:c9:ec:75:fc:3b:5e:b2:3e: c2:37:82:82:8e:69:23:e9:cd:70:67:a8:f0:c2:07: e8:fa:d2:11:21:e1:c0:7b:3b:e4:95:86:d4:64:f4: 4f:cd:c6:03:c8:83:13:0a:22:ee:21:86:d8:9e:78: bb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4E:E9:E0:62:C9:74:51:B6:43:FC:0F:7E:6B:CB:52:0F:05:A0:E4 X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/059261A8BC5111EABE07AE32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.218.0/23 IPv6: 2400:8ca0::/32 Signature Algorithm: sha256WithRSAEncryption 37:6b:06:02:df:8a:fa:bc:b4:fb:40:81:39:fb:6d:f3:3e:9b: f7:9b:a8:cd:d7:61:15:ef:04:e1:d8:84:85:62:ad:83:12:04: 9d:10:b1:69:84:5f:d9:60:6a:95:f8:d3:f6:58:e0:e2:89:b7: 9b:27:d1:9a:5f:42:35:03:39:60:23:01:ab:f0:ee:99:8e:2d: 15:b7:ee:b9:94:ec:35:dc:a6:f5:76:7b:ae:e9:f8:a2:02:b8: b5:a6:03:87:eb:e7:c2:67:f9:3e:2f:27:38:41:8d:5b:da:ea: 78:a0:e0:d4:ea:e2:32:67:af:98:90:eb:70:55:5d:5c:b1:f7: cb:79:a0:d5:ab:00:57:4a:6a:25:0d:ff:84:7e:59:5b:2a:2b: af:ee:e0:48:8c:61:a0:af:ad:07:b1:de:8a:d6:c4:28:18:d1: 07:ff:46:eb:2b:bb:74:a0:98:5b:d0:38:b9:2c:2a:c4:62:df: ff:d6:6a:4d:6f:0a:33:e3:a1:9a:18:5b:92:39:25:7a:ee:3a: 2a:e6:eb:ac:41:1d:19:a6:01:d2:65:3d:f8:4c:3d:82:f2:25: ba:a1:f6:af:04:cf:3e:fd:6f:ce:f0:ad:64:53:f0:e7:28:91: 31:54:dc:83:3d:a1:bf:2b:35:71:34:85:d4:00:3f:79:92:99: b3:e6:45:f1 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjMwNzE4MjEzNzU4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGI3MDYzNS0yYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXDDJ8NimuUy2vrY2Bjfd/qW7BgtsQ/QukiOXWBmWDFF3qNGgrlNMXvkMe2L XrATqynJaV93PkaPBhYmf7GIIZdaDy8sechwtZiUugrSaWUtHzLLVCFw/3pi5rBq 9SIvfgIANUBoZ9pAXzJegwqRtz3yMFp/hLqJsO5peFQ3IVVwjxr9di04WeD1rVFl TTsuSYpOLlCn0sI2/NEShhd2ZqzrqolM7y6RDRoRdgKr/rRGgn8cH5PvB/ttyl6U jRiLF7JoCvQh+cX7yex1/Dtesj7CN4KCjmkj6c1wZ6jwwgfo+tIRIeHAezvklYbU ZPRPzcYDyIMTCiLuIYbYnni7ewIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCxO6eBi yXRRtkP8D35ry1IPBaDkMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRGMUIvMjNGMzA1NTBCQzRGMTFFQUJBOEM5NjJGQzRGOUFFMDIvMDU5MjYxQThC QzUxMTFFQUJFMDdBRTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnmNowDQQCAAIwBwMFACQAjKAwDQYJKoZIhvcNAQELBQAD ggEBADdrBgLfivq8tPtAgTn7bfM+m/ebqM3XYRXvBOHYhIVirYMSBJ0QsWmEX9lg apX40/ZY4OKJt5sn0ZpfQjUDOWAjAavw7pmOLRW37rmU7DXcpvV2e67p+KICuLWm A4fr58Jn+T4vJzhBjVva6nig4NTq4jJnr5iQ63BVXVyx98t5oNWrAFdKaiUN/4R+ WVsqK6/u4EiMYaCvrQex3orWxCgY0Qf/Rusru3SgmFvQOLksKsRi3//Wak1vCjPj oZoYW5I5JXruOirm66xBHRmmAdJlPfhMPYLyJbqh9q8Ezz79b87wrWRT8OcokTFU 3IM9ob8rNXE0hdQAP3mSmbPmRfE= -----END CERTIFICATE-----Generated at Thu May 16 23:39:16 2024 by rpki-client on console-ams.rpki-client.org