$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/E1755B4E24D711EDBE2C660BC4F9AE02.roa File: E1755B4E24D711EDBE2C660BC4F9AE02.roa (raw, json) Hash identifier: OFjYFv8tLy2zQnIzsX4nCsQcZdp8BhHD9S3hqGHRqMo= Subject key identifier: AE:3E:5F:B8:2B:E2:1B:0A:14:20:76:71:2F:64:43:70:AA:18:E5:DA Certificate issuer: /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Certificate serial: 03D7 Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/E1755B4E24D711EDBE2C660BC4F9AE02.roa Signing time: Thu 05 Oct 2023 01:02:32 +0000 ROA not before: Thu 05 Oct 2023 01:02:32 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 132849 IP address blocks: 103.172.142.0/23 maxlen: 23 2001:df0:6a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Validity Not Before: Oct 5 01:02:32 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651e0b28-f0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:88:98:0f:98:59:9f:49:8b:73:09:d2:63: 96:17:f7:09:05:8f:76:4c:32:3f:ca:f1:00:85:f5: cf:ac:6c:af:7a:0b:2b:bb:cc:10:65:db:b6:eb:82: 65:75:c1:60:a9:fe:c4:f2:a1:08:c4:96:b5:21:9d: 0e:56:10:92:41:20:16:96:cb:64:39:77:16:3b:6c: db:5f:c9:85:95:b2:06:c8:77:82:5c:32:b2:97:7d: bd:37:28:1d:34:ec:e9:31:52:1d:a1:aa:e4:6c:d1: f4:86:c8:ef:16:3e:ec:a1:3b:fc:29:ad:6b:ac:41: b7:d9:c4:26:6a:21:ca:66:4b:d2:4f:c0:67:11:9f: 37:7f:6c:6e:58:34:bf:4d:28:62:d3:9d:d9:55:96: 00:54:43:e4:0c:8a:48:5d:fb:a1:9d:3a:2d:03:e0: b4:1f:82:71:5b:78:65:bb:ab:73:7a:6b:f6:33:43: d8:95:64:69:1f:01:89:7a:32:95:d7:04:b2:19:59: ce:d7:94:28:1c:cd:c8:bc:cc:97:aa:a9:52:ab:bb: 5d:14:60:fa:3d:43:4b:e4:ff:b8:75:bd:a5:18:27: 6f:3d:48:c9:2a:31:d2:63:7e:48:3d:ac:5c:98:33: 4b:0f:f0:94:9f:09:09:f4:5e:42:33:b1:12:d7:80: 8d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3E:5F:B8:2B:E2:1B:0A:14:20:76:71:2F:64:43:70:AA:18:E5:DA X509v3 Authority Key Identifier: keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/E1755B4E24D711EDBE2C660BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.142.0/23 IPv6: 2001:df0:6a40::/48 Signature Algorithm: sha256WithRSAEncryption 45:29:6e:ab:3f:76:7c:97:c5:5b:95:32:83:18:f4:35:87:a7: f1:7f:8e:75:61:4e:58:fe:ef:10:31:a0:d3:b4:68:fd:04:0b: 76:03:79:1d:c3:ca:93:5c:e7:8f:81:3d:c7:d2:fd:64:41:0c: cd:df:ff:d6:b8:e9:3e:91:8f:ba:21:dc:b5:b3:ca:2f:ed:e2: 16:cc:90:e6:ea:9d:33:49:62:b1:6a:51:ad:8d:7a:a2:bc:63: e6:d5:f9:57:48:6a:cf:ab:02:5e:a9:35:b3:e4:43:17:63:ca: 31:54:bf:5a:08:7f:cb:3f:07:2f:68:ed:73:bf:49:81:2a:09: 3d:2e:c4:bb:91:16:c2:95:1d:ab:8d:29:ce:ea:cf:78:46:f6: 3f:e9:3b:48:4c:e2:08:e1:4b:de:d8:be:41:6a:81:e3:04:f6: d7:59:92:37:bd:7f:10:12:da:47:01:34:76:ee:18:0a:6e:93: 67:8a:28:5d:45:a0:40:6e:c8:53:41:04:db:c3:2b:a7:10:06: 25:72:bd:df:46:c7:b2:51:5f:ef:77:8a:89:be:90:e5:c6:db: 09:ca:4c:27:92:23:6b:75:2c:c7:d5:e7:99:02:1f:b4:6c:f5: c5:79:51:94:c0:fc:13:aa:5c:0d:f9:38:c4:d8:63:1a:54:4e: 51:ff:61:b8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1NkMxMTAvBgNVBAUTKDUxMkQ5QkRFODEzQ0I3QkM3NzE5MEE4NEY5QjE4REI4 RUI0RTIyNUYwHhcNMjMxMDA1MDEwMjMyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFlMGIyOC1mMGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXWImA+YWZ9Ji3MJ0mOWF/cJBY92TDI/yvEAhfXPrGyvegsru8wQZdu264Jl dcFgqf7E8qEIxJa1IZ0OVhCSQSAWlstkOXcWO2zbX8mFlbIGyHeCXDKyl329Nygd NOzpMVIdoarkbNH0hsjvFj7soTv8Ka1rrEG32cQmaiHKZkvST8BnEZ83f2xuWDS/ TShi053ZVZYAVEPkDIpIXfuhnTotA+C0H4JxW3hlu6tzemv2M0PYlWRpHwGJejKV 1wSyGVnO15QoHM3IvMyXqqlSq7tdFGD6PUNL5P+4db2lGCdvPUjJKjHSY35IPaxc mDNLD/CUnwkJ9F5CM7ES14CNHQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFK4+X7gr 4hsKFCB2cS9kQ3CqGOXaMB8GA1UdIwQYMBaAFFEtm96BPLe8dxkKhPmxjbjrTiJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2Qy9GQjMwNUE1RTBD OEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3eDNHUXFFLWJHTnVPdE9J bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTMmIzb0U4dDd4M0dRcUUtYkdOdU90T0lsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk1NkMvRkIzMDVBNUUwQzhBMTFFQ0EzMTkxQjBDQzRGOUFFMDIvRTE3NTVCNEUy NEQ3MTFFREJFMkM2NjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrI4wDwQCAAIwCQMHACABDfBqQDANBgkqhkiG9w0BAQsF AAOCAQEARSluqz92fJfFW5Uygxj0NYen8X+OdWFOWP7vEDGg07Ro/QQLdgN5HcPK k1znj4E9x9L9ZEEMzd//1rjpPpGPuiHctbPKL+3iFsyQ5uqdM0lisWpRrY16orxj 5tX5V0hqz6sCXqk1s+RDF2PKMVS/Wgh/yz8HL2jtc79JgSoJPS7Eu5EWwpUdq40p zurPeEb2P+k7SEziCOFL3ti+QWqB4wT211mSN71/EBLaRwE0du4YCm6TZ4ooXUWg QG7IU0EE28MrpxAGJXK930bHslFf73eKib6Q5cbbCcpMJ5Ija3Usx9XnmQIftGz1 xXlRlMD8E6pcDfk4xNhjGlROUf9huA== -----END CERTIFICATE-----Generated at Fri May 17 02:38:40 2024 by rpki-client on console-fra.rpki-client.org