$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/DF5D49F6985611ECBE7ED328C4F9AE02.roa File: DF5D49F6985611ECBE7ED328C4F9AE02.roa (raw, json) Hash identifier: Jye8x95uFjD/OaUFMn6lb2ErVEwMFKU3iECzbKAX1vQ= Subject key identifier: 4E:FB:9E:F5:B2:C4:3C:03:9B:51:34:0B:28:35:80:05:79:52:EF:B5 Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Certificate serial: 0D71 Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/DF5D49F6985611ECBE7ED328C4F9AE02.roa Signing time: Sat 02 Mar 2024 18:56:35 +0000 ROA not before: Sat 02 Mar 2024 18:56:35 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 16509 IP address blocks: 103.85.214.0/24 maxlen: 24 103.85.215.0/24 maxlen: 24 2001:df5:6d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3441 (0xd71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Validity Not Before: Mar 2 18:56:35 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65e37662-dfa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:d3:0a:cd:75:7d:a9:1e:bf:f0:99:a9:6c: 6c:27:a1:df:1d:17:1a:bd:24:36:e0:6f:5e:cd:ae: 2d:bd:ed:df:ea:98:c4:67:9b:94:69:29:87:e8:2f: 09:19:9f:de:26:48:37:d0:84:05:b5:ca:37:b2:c5: 3c:72:9f:f5:3a:97:ef:ed:97:ad:4c:3a:7c:99:9c: 1f:a1:75:77:32:53:f8:50:3a:d5:69:5f:f1:9f:66: 8c:c6:95:45:42:5e:6a:82:6b:f8:4a:65:d4:08:ed: c0:b4:14:3d:da:1c:b4:63:32:85:4f:be:bd:c0:10: 27:f7:9c:6c:11:44:2f:a5:88:32:82:58:b7:33:48: 3a:90:be:e0:d0:03:d1:3d:cd:68:17:f7:fa:de:70: 0a:5b:55:b9:d4:85:fa:1c:93:c8:f6:fc:74:ef:a2: c8:d4:8f:fb:5c:61:45:0f:37:7a:9d:ad:28:f9:ff: 59:45:24:1b:12:5c:00:87:00:16:60:03:3b:6e:38: 8e:50:c1:20:b7:94:fd:30:5a:60:00:4a:95:42:34: d9:85:a4:30:6b:8e:7d:9b:90:0f:ef:ee:35:5f:e3: 95:2f:df:27:3f:f7:85:82:35:24:b7:16:ff:c0:7d: e9:34:86:e0:bd:93:b4:86:74:ca:5e:ce:ad:dc:be: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FB:9E:F5:B2:C4:3C:03:9B:51:34:0B:28:35:80:05:79:52:EF:B5 X509v3 Authority Key Identifier: keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/DF5D49F6985611ECBE7ED328C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.214.0/23 IPv6: 2001:df5:6d00::/48 Signature Algorithm: sha256WithRSAEncryption 80:c6:4e:49:2e:8b:ef:c3:93:83:6d:38:fb:80:b7:fb:5f:cd: 01:f6:43:52:00:c9:09:37:ec:0a:b3:b3:f3:a2:c6:97:97:8f: 50:60:1c:6b:0d:a2:4e:50:21:db:c0:cc:93:db:62:0a:e4:08: b4:af:49:43:c5:7c:e1:14:d0:08:e6:02:f5:f3:85:37:ef:8b: 0a:f8:41:21:2e:11:e2:44:3f:15:0c:9d:14:00:53:6a:42:4c: d7:a9:89:78:7e:2f:57:3f:76:49:36:b1:aa:f6:e3:29:ab:54: 32:80:1b:13:76:da:16:85:7c:72:f3:a3:4d:43:93:bf:da:a4: 09:2d:5d:40:5e:e3:d6:08:91:48:f8:5d:88:3f:59:aa:9a:a3: 69:30:f8:96:48:63:53:6c:ee:bf:13:26:ed:cb:6b:70:7d:c4: e4:f9:ae:9f:b2:03:fb:d9:4a:92:f7:47:81:9c:18:a0:49:12: e7:05:0d:de:c6:bb:e7:aa:15:0b:0b:e4:77:c6:df:27:ba:b2: 52:39:7f:74:07:3d:a5:c7:aa:97:3f:71:af:60:3d:1e:28:47: ac:52:de:51:79:82:b6:0f:91:1f:4b:fc:a0:65:5d:ad:52:17: 7e:e8:a4:5d:c8:c1:b9:6b:a4:73:38:c9:b0:7a:63:f8:39:dc: 3a:a1:d0:75 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5 QjlDMkQxNEQwHhcNMjQwMzAyMTg1NjM1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzNzY2Mi1kZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0XTCs11fakev/CZqWxsJ6HfHRcavSQ24G9eza4tve3f6pjEZ5uUaSmH6C8J GZ/eJkg30IQFtco3ssU8cp/1Opfv7ZetTDp8mZwfoXV3MlP4UDrVaV/xn2aMxpVF Ql5qgmv4SmXUCO3AtBQ92hy0YzKFT769wBAn95xsEUQvpYgygli3M0g6kL7g0APR Pc1oF/f63nAKW1W51IX6HJPI9vx076LI1I/7XGFFDzd6na0o+f9ZRSQbElwAhwAW YAM7bjiOUMEgt5T9MFpgAEqVQjTZhaQwa459m5AP7+41X+OVL98nP/eFgjUktxb/ wH3pNIbgvZO0hnTKXs6t3L6PCwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFE77nvWy xDwDm1E0Cyg1gAV5Uu+1MB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0FBNjkvNDBFMUZDOUM5RUIwMTFFOUIwN0U3QTgyQzRGOUFFMDIvREY1RDQ5RjY5 ODU2MTFFQ0JFN0VEMzI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnVdYwDwQCAAIwCQMHACABDfVtADANBgkqhkiG9w0BAQsF AAOCAQEAgMZOSS6L78OTg204+4C3+1/NAfZDUgDJCTfsCrOz86LGl5ePUGAcaw2i TlAh28DMk9tiCuQItK9JQ8V84RTQCOYC9fOFN++LCvhBIS4R4kQ/FQydFABTakJM 16mJeH4vVz92STaxqvbjKatUMoAbE3baFoV8cvOjTUOTv9qkCS1dQF7j1giRSPhd iD9ZqpqjaTD4lkhjU2zuvxMm7ctrcH3E5Pmun7ID+9lKkvdHgZwYoEkS5wUN3sa7 56oVCwvkd8bfJ7qyUjl/dAc9pceqlz9xr2A9HihHrFLeUXmCtg+RH0v8oGVdrVIX fuikXcjBuWukczjJsHpj+DncOqHQdQ== -----END CERTIFICATE-----Generated at Wed Apr 24 21:18:20 2024 by rpki-client on console-ams.rpki-client.org