$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/020A31F812B011E7A7C42661C4F9AE02.roa File: 020A31F812B011E7A7C42661C4F9AE02.roa (raw, json) Hash identifier: N/QKwYU99zSxNpR5M+QspbIb1HfEPDfTD2V5TEy4RLU= Subject key identifier: 1B:F5:26:9A:97:F2:82:B8:82:34:00:34:CF:DC:81:65:47:4F:05:A1 Certificate issuer: /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B Certificate serial: 1A81 Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/020A31F812B011E7A7C42661C4F9AE02.roa Signing time: Thu 02 May 2024 17:04:44 +0000 ROA not before: Thu 02 May 2024 17:04:44 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136430 IP address blocks: 103.87.203.0/24 maxlen: 24 2001:df0:9500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6785 (0x1a81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B Validity Not Before: May 2 17:04:44 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6633c7ab-5636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:22:4b:dc:74:96:c2:bb:02:02:f1:67:9f:ae: f7:2b:ba:6a:41:ed:3b:73:29:34:54:e2:67:47:6a: ab:59:ba:44:5f:05:31:dc:5b:bb:d1:28:64:0f:ad: 6f:9b:f9:93:c2:9e:83:7c:a0:b0:fc:0c:87:7d:76: 45:15:ce:e9:bb:79:2b:48:d8:5f:fb:79:ec:93:df: bb:44:04:0f:fc:67:4d:84:5f:ed:8f:68:28:a2:71: 01:c6:48:a6:42:36:30:ed:0c:6b:c8:49:88:d8:49: 7e:e4:8b:8b:ef:d1:48:d2:0e:28:db:44:8c:56:dd: 2e:53:26:0c:dd:cc:2a:2d:51:bb:4f:8c:0c:02:62: 9b:7c:f1:43:f5:d1:0c:4a:1c:a3:cf:02:00:18:7d: 45:89:a6:17:a0:33:93:a3:f1:52:d3:5f:e5:ab:d0: ce:66:b7:64:c1:24:3b:cd:ff:0d:cf:84:56:17:c2: b6:3b:6b:6e:f1:2b:75:2d:8a:3d:33:e4:0c:db:98: e9:22:f5:23:ef:ce:21:2c:22:62:60:8f:86:c0:0c: 73:52:a0:e1:c8:f4:c4:2c:e4:2f:89:ea:fe:36:34: df:30:77:01:d6:a8:60:44:4e:3c:58:88:94:52:9f: bd:1f:65:09:19:7a:24:f8:5f:d1:29:37:9f:82:ca: 85:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F5:26:9A:97:F2:82:B8:82:34:00:34:CF:DC:81:65:47:4F:05:A1 X509v3 Authority Key Identifier: keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/020A31F812B011E7A7C42661C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.87.203.0/24 IPv6: 2001:df0:9500::/48 Signature Algorithm: sha256WithRSAEncryption b1:15:2d:11:13:c2:b6:b4:3d:18:03:df:42:6a:20:44:d5:5a: f0:0d:64:65:53:1a:bf:7c:5e:16:2a:d4:09:84:37:49:a2:10: 89:10:76:44:92:21:c5:8f:8f:88:ce:23:b5:d5:c0:23:60:b9: 94:4a:5a:71:c2:bc:02:01:f2:54:3e:96:60:3e:4e:f9:27:b2: 67:77:24:b3:51:51:7a:1a:59:7f:a3:c6:b9:f3:5f:f1:96:ff: ac:5c:18:54:6f:c1:52:9c:e5:4c:4b:f2:7f:bc:1f:2c:75:77: 90:f7:31:46:61:9f:2c:23:b7:a0:ec:e5:50:80:21:94:34:2b: b8:c5:9b:c5:3f:a0:87:af:d0:9d:a0:fa:b0:0a:b5:18:99:ca: f0:7a:4d:68:c8:05:c1:7d:06:88:39:fe:9b:44:5a:0c:0b:e3: 52:84:5e:9c:73:b0:4f:62:67:f5:55:9d:68:59:b1:c1:4e:d6: 08:55:c3:53:53:1e:87:62:6f:27:e2:8a:41:44:f5:ab:c6:3d: 8f:c1:54:d1:bd:34:42:19:5b:6b:7f:94:5e:d7:81:b8:21:57: e7:af:ee:da:f2:6f:15:68:06:0c:a6:85:00:99:b3:d9:ec:d6: 0d:cb:4f:5c:a8:e6:05:b9:4f:66:6d:ac:7b:5a:2a:0c:69:66: d0:f4:6a:c7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICGoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhERDUxMTAvBgNVBAUTKEQ2QzNGODEzNzhFODU0MDA3OEJBNzk5NDQyRUVEQkVD NzgwRTBGN0IwHhcNMjQwNTAyMTcwNDQ0WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzYzdhYi01NjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyJL3HSWwrsCAvFnn673K7pqQe07cyk0VOJnR2qrWbpEXwUx3Fu70ShkD61v m/mTwp6DfKCw/AyHfXZFFc7pu3krSNhf+3nsk9+7RAQP/GdNhF/tj2goonEBxkim QjYw7QxryEmI2El+5IuL79FI0g4o20SMVt0uUyYM3cwqLVG7T4wMAmKbfPFD9dEM ShyjzwIAGH1FiaYXoDOTo/FS01/lq9DOZrdkwSQ7zf8Nz4RWF8K2O2tu8St1LYo9 M+QM25jpIvUj784hLCJiYI+GwAxzUqDhyPTELOQvier+NjTfMHcB1qhgRE48WIiU Up+9H2UJGXok+F/RKTefgsqF8QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBv1JpqX 8oK4gjQANM/cgWVHTwWhMB8GA1UdIwQYMBaAFNbD+BN46FQAeLp5lELu2+x4Dg97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOERENS9ENUExQTFDNjEy QTcxMUU3QURCNERFNERDNEY5QUUwMi8xc1A0RTNqb1ZBQjR1bm1VUXU3YjdIZ09E M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzUDRFM2pvVkFCNHVubVVRdTdiN0hnT0Qzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzhERDUvRDVBMUExQzYxMkE3MTFFN0FEQjRERTREQzRGOUFFMDIvMDIwQTMxRjgx MkIwMTFFN0E3QzQyNjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnV8swDwQCAAIwCQMHACABDfCVADANBgkqhkiG9w0BAQsF AAOCAQEAsRUtERPCtrQ9GAPfQmogRNVa8A1kZVMav3xeFirUCYQ3SaIQiRB2RJIh xY+PiM4jtdXAI2C5lEpaccK8AgHyVD6WYD5O+SeyZ3cks1FRehpZf6PGufNf8Zb/ rFwYVG/BUpzlTEvyf7wfLHV3kPcxRmGfLCO3oOzlUIAhlDQruMWbxT+gh6/QnaD6 sAq1GJnK8HpNaMgFwX0GiDn+m0RaDAvjUoRenHOwT2Jn9VWdaFmxwU7WCFXDU1Me h2JvJ+KKQUT1q8Y9j8FU0b00Qhlba3+UXteBuCFX56/u2vJvFWgGDKaFAJmz2ezW DctPXKjmBblPZm2se1oqDGlm0PRqxw== -----END CERTIFICATE-----Generated at Thu May 16 18:26:09 2024 by rpki-client on console-fra.rpki-client.org