$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/513415BC400011EE88B66B4FC4F9AE02.roa File: 513415BC400011EE88B66B4FC4F9AE02.roa (raw, json) Hash identifier: 2xYkc0CBHJO1BA1IWYUatPbE+AVeAURXevuFcb34wYs= Subject key identifier: C0:90:75:C4:15:7C:A6:61:F9:AA:56:B7:EC:CB:E5:88:43:3B:A9:3D Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 02D7 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/513415BC400011EE88B66B4FC4F9AE02.roa Signing time: Fri 15 Mar 2024 03:05:21 +0000 ROA not before: Fri 15 Mar 2024 03:05:21 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 133467 IP address blocks: 103.84.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Mar 15 03:05:21 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65f3baf0-b43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:9f:8b:21:9a:43:d8:e2:c1:64:0d:a1:55: 31:99:f9:db:6e:57:fa:1f:75:82:2b:b9:be:de:98: d7:17:98:b6:7f:69:7b:08:11:ff:8e:40:85:6d:a2: 98:fa:0e:98:dd:b7:db:fd:a8:2e:0c:9f:44:50:f9: 23:bc:b8:fa:2e:d8:56:13:08:8a:8e:a3:1d:f3:69: 4b:85:6f:53:67:7b:7a:55:da:0f:93:d3:d0:76:d7: 1e:3c:5d:c8:ee:58:7b:61:93:ca:55:3e:4c:21:c7: c8:06:67:1f:b7:72:1c:46:8d:48:a9:27:ca:c8:f3: ef:6a:21:cc:1d:f2:a8:d5:5c:00:7a:0c:de:94:c4: 93:22:95:05:41:dc:4c:47:ec:2a:14:e8:45:48:1d: e5:8b:21:cf:50:13:15:24:a7:5e:6c:d1:bd:53:91: 3f:a1:84:03:ee:15:f3:6c:b8:51:11:91:77:07:99: a3:7a:db:dd:c1:3a:05:01:05:fe:62:72:87:bd:c6: 7c:80:86:5d:1a:92:16:57:78:11:6d:32:61:42:bc: 2c:1b:81:22:26:a1:ed:59:c8:58:d2:f4:6c:f7:f0: ad:71:3c:a2:8d:bf:6e:00:11:d6:11:70:85:0e:ad: cb:65:11:7a:4a:72:11:4b:cb:70:e3:39:2b:d9:be: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:90:75:C4:15:7C:A6:61:F9:AA:56:B7:EC:CB:E5:88:43:3B:A9:3D X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/513415BC400011EE88B66B4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.44.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:ab:f3:e5:a5:1a:90:46:83:f5:0c:1c:18:e0:ba:d7:3b:fe: e1:64:7f:db:81:b1:7a:4a:51:1d:29:be:e7:ad:c9:8a:1b:04: 97:50:96:14:59:2a:1b:d6:d0:24:6f:91:fd:c7:ef:86:16:2d: 69:27:d1:c7:70:4e:5c:c0:30:f0:b5:8c:b8:d5:00:49:0a:15: 9e:51:5f:be:52:65:74:53:7e:6f:2a:c5:e8:9c:81:22:4a:05: 09:a3:2a:0f:db:42:87:87:51:00:c6:66:11:84:02:1c:ef:c8: 72:da:1e:e4:b5:f1:61:2b:b6:e5:a6:c0:d8:a9:e6:e0:75:48: 54:54:af:9b:dd:fc:83:4d:76:2f:eb:e3:eb:3e:d1:59:72:8c: 6b:99:ae:1a:cc:93:2b:99:e6:70:a3:f8:a7:e6:43:76:ef:66: 41:a4:c6:b4:c0:ee:0e:75:fe:14:6f:df:eb:00:51:72:43:b7: 3f:3b:83:a9:4b:63:79:94:62:24:02:e3:8c:e9:7e:df:73:93: b5:e0:77:4c:7c:a8:2a:1e:50:c1:e4:c1:ef:80:22:6f:6f:90: 6c:6b:b5:3a:1f:50:72:14:05:06:95:11:de:1a:29:4d:94:7c: be:8d:44:ef:b0:02:63:68:99:34:04:c9:1b:6e:24:dc:87:88: ab:12:f2:26 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjQwMzE1MDMwNTIxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWYzYmFmMC1iNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgyfiyGaQ9jiwWQNoVUxmfnbblf6H3WCK7m+3pjXF5i2f2l7CBH/jkCFbaKY +g6Y3bfb/aguDJ9EUPkjvLj6LthWEwiKjqMd82lLhW9TZ3t6VdoPk9PQdtcePF3I 7lh7YZPKVT5MIcfIBmcft3IcRo1IqSfKyPPvaiHMHfKo1VwAegzelMSTIpUFQdxM R+wqFOhFSB3liyHPUBMVJKdebNG9U5E/oYQD7hXzbLhREZF3B5mjetvdwToFAQX+ YnKHvcZ8gIZdGpIWV3gRbTJhQrwsG4EiJqHtWchY0vRs9/CtcTyijb9uABHWEXCF Dq3LZRF6SnIRS8tw4zkr2b7jaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMCQdcQV fKZh+apWt+zL5YhDO6k9MB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzYzQTYvMEQzOUM0RTQ5QTlCMTFFQzgyQzcwQjIwQzRGOUFFMDIvNTEzNDE1QkM0 MDAwMTFFRTg4QjY2QjRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnVCwwDQYJKoZIhvcNAQELBQADggEBAJur8+WlGpBGg/UM HBjgutc7/uFkf9uBsXpKUR0pvuetyYobBJdQlhRZKhvW0CRvkf3H74YWLWkn0cdw TlzAMPC1jLjVAEkKFZ5RX75SZXRTfm8qxeicgSJKBQmjKg/bQoeHUQDGZhGEAhzv yHLaHuS18WErtuWmwNip5uB1SFRUr5vd/INNdi/r4+s+0VlyjGuZrhrMkyuZ5nCj +KfmQ3bvZkGkxrTA7g51/hRv3+sAUXJDtz87g6lLY3mUYiQC44zpft9zk7Xgd0x8 qCoeUMHkwe+AIm9vkGxrtTofUHIUBQaVEd4aKU2UfL6NRO+wAmNomTQEyRtuJNyH iKsS8iY= -----END CERTIFICATE-----Generated at Fri May 17 04:26:40 2024 by rpki-client on console-fra.rpki-client.org