$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/96FC6944591111EEBFB2384AC4F9AE02.roa File: 96FC6944591111EEBFB2384AC4F9AE02.roa (raw, json) Hash identifier: rvYTS1aH1b3AcodzlLApwdGnHpabMmYS9OY5Ugpek7I= Subject key identifier: D4:94:FC:BB:00:8B:40:AE:50:39:4A:69:A9:D5:7A:09:30:62:3D:4F Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Certificate serial: 0603 Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/96FC6944591111EEBFB2384AC4F9AE02.roa Signing time: Tue 02 Jan 2024 23:41:59 +0000 ROA not before: Tue 02 Jan 2024 23:41:59 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 60021 IP address blocks: 103.158.160.0/24 maxlen: 24 103.158.161.0/24 maxlen: 24 2406:bcc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1539 (0x603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Validity Not Before: Jan 2 23:41:59 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65949f46-31e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:37:12:3b:06:79:c9:03:cd:12:3c:c6:5b: 56:a4:12:fc:9f:85:d2:d6:a8:f9:66:73:e5:07:23: 96:9c:cb:b3:cf:a7:6b:0c:5d:ba:96:3d:c1:f8:5c: 21:3e:f3:90:b3:5d:2e:1b:e2:d4:ca:4c:0c:da:ea: 11:29:f1:25:b1:5b:4e:04:72:ba:2a:6b:22:43:c9: 2c:36:3e:c4:df:81:6b:6c:8a:42:01:e7:1d:fe:2c: 2d:b5:de:03:04:60:06:ec:08:cd:6d:66:b7:58:7e: 70:f8:1f:6a:d7:64:be:5b:7f:11:41:00:28:1a:77: de:a8:b3:2a:36:19:c8:62:34:b4:96:ce:15:ca:f4: 86:1b:67:e3:e2:b1:ce:74:92:3b:e3:6b:c8:35:05: 34:9c:bb:53:b7:26:ca:3a:48:9e:70:26:c0:3c:49: cb:19:c9:b1:3f:04:2c:19:dd:68:60:5d:74:5e:6b: ed:b1:5f:df:19:16:da:ad:da:9b:6d:0a:d3:ca:5b: b4:30:07:92:5e:a5:b9:1f:55:76:d6:0d:db:fa:45: b6:27:a2:4f:c9:c9:79:a5:98:89:fa:2b:d2:ec:76: 4a:f7:3a:ef:68:d4:88:bd:df:89:45:55:5b:be:89: d3:b2:cc:61:fa:34:e9:07:e0:5e:f9:3c:60:b5:0b: 9c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:94:FC:BB:00:8B:40:AE:50:39:4A:69:A9:D5:7A:09:30:62:3D:4F X509v3 Authority Key Identifier: keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/96FC6944591111EEBFB2384AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.160.0/23 IPv6: 2406:bcc0::/32 Signature Algorithm: sha256WithRSAEncryption 88:ee:7a:1e:7c:f6:ca:0f:ff:98:b6:c9:57:8f:34:8f:4c:70: ec:c6:06:4b:6b:3d:f9:4d:fc:dd:31:1d:75:58:20:eb:8c:a4: 8d:fc:a0:e9:e9:be:8c:ee:40:39:28:c6:c9:a8:e3:d9:28:61: cd:4a:30:4f:ea:ca:97:12:46:86:e7:83:a8:89:a1:3b:c0:b4: 6f:f9:41:6a:07:ff:76:4b:71:58:14:ad:2a:3e:79:1c:77:ad: b3:9a:88:73:90:b3:7d:38:db:e6:90:92:23:9f:33:54:27:71: 1e:c6:ab:b4:9e:65:e6:3e:a2:da:44:4a:d5:f3:04:ea:57:44: a9:b1:41:70:d3:85:af:d1:c3:1d:b5:0c:25:0f:c9:27:e3:bb: fa:af:56:50:01:d0:68:e6:8f:44:c7:6a:1e:e2:e1:c4:aa:67: a8:d3:e4:f2:c9:d2:1b:62:49:49:c4:c8:52:58:16:b2:4d:b7: 4a:a9:87:b9:49:71:b3:aa:27:ae:ba:a5:e9:08:39:62:c1:cb: 21:36:a5:24:6c:27:51:ab:33:9d:2e:50:6b:f1:e7:cd:7e:06: 56:53:6f:80:1a:fa:51:00:91:5b:be:90:16:81:55:8e:74:bb: c4:df:74:99:7d:f2:b4:91:9d:66:05:c1:77:c0:f4:27:5b:2f: 38:57:83:8d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5QjQxMTAvBgNVBAUTKDM0OEJFNjY5NEVENzA0MUFBRjI4RDBFQzhDNkM2NTY1 NTkxRjJEREEwHhcNMjQwMTAyMjM0MTU5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk0OWY0Ni0zMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqw3EjsGeckDzRI8xltWpBL8n4XS1qj5ZnPlByOWnMuzz6drDF26lj3B+Fwh PvOQs10uG+LUykwM2uoRKfElsVtOBHK6KmsiQ8ksNj7E34FrbIpCAecd/iwttd4D BGAG7AjNbWa3WH5w+B9q12S+W38RQQAoGnfeqLMqNhnIYjS0ls4VyvSGG2fj4rHO dJI742vINQU0nLtTtybKOkiecCbAPEnLGcmxPwQsGd1oYF10XmvtsV/fGRbardqb bQrTylu0MAeSXqW5H1V21g3b+kW2J6JPycl5pZiJ+ivS7HZK9zrvaNSIvd+JRVVb vonTssxh+jTpB+Be+TxgtQucwQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNSU/LsA i0CuUDlKaanVegkwYj1PMB8GA1UdIwQYMBaAFDSL5mlO1wQaryjQ7IxsZWVZHy3a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTlCNC81REU1OTY5NjU5 NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJCcXZLTkRzakd4bFpWa2ZM ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Jdm1hVTdYQkJxdktORHNqR3hsWlZrZkxkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk5QjQvNURFNTk2OTY1OTQ5MTFFQkE0OEM3ODcxQzRGOUFFMDIvOTZGQzY5NDQ1 OTExMTFFRUJGQjIzODRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnnqAwDQQCAAIwBwMFACQGvMAwDQYJKoZIhvcNAQELBQAD ggEBAIjueh589soP/5i2yVePNI9McOzGBktrPflN/N0xHXVYIOuMpI38oOnpvozu QDkoxsmo49koYc1KME/qypcSRobng6iJoTvAtG/5QWoH/3ZLcVgUrSo+eRx3rbOa iHOQs3042+aQkiOfM1QncR7Gq7SeZeY+otpEStXzBOpXRKmxQXDTha/Rwx21DCUP ySfju/qvVlAB0Gjmj0THah7i4cSqZ6jT5PLJ0htiSUnEyFJYFrJNt0qph7lJcbOq J666pekIOWLByyE2pSRsJ1GrM50uUGvx581+BlZTb4Aa+lEAkVu+kBaBVY50u8Tf dJl98rSRnWYFwXfA9CdbLzhXg40= -----END CERTIFICATE-----Generated at Fri May 17 01:02:52 2024 by rpki-client on console-ams.rpki-client.org