$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa File: FFE0F998101511EDA7D8F271C4F9AE02.roa (raw, json) Hash identifier: 0sTER7p3pFaiEEI4rnotOMQNNZ2iD/9Ch6oDrhs/hxs= Subject key identifier: 5C:B6:DA:96:BD:08:33:29:1E:A5:A8:67:0B:53:DE:16:E1:0C:B1:34 Certificate issuer: /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Certificate serial: 1840 Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa Signing time: Thu 22 Feb 2024 17:24:22 +0000 ROA not before: Thu 22 Feb 2024 17:24:22 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 149781 IP address blocks: 103.101.175.0/24 maxlen: 24 2001:df0:d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6208 (0x1840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Validity Not Before: Feb 22 17:24:22 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65d78346-e952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:e3:5c:d8:df:24:13:ff:aa:44:81:34:f6: dc:9e:37:18:ef:a5:6a:93:05:63:b7:ed:f5:7d:55: a5:72:72:12:4f:33:4f:f4:64:61:b9:e2:28:99:89: b2:8b:d8:e8:af:9e:24:8e:c3:1d:30:23:3d:2a:91: 16:82:e1:a1:33:90:e2:49:71:32:88:9e:06:fa:7d: dc:f8:d6:67:ae:60:56:48:30:55:5d:33:a3:25:b0: 29:aa:45:38:eb:cc:41:0a:b7:3a:e1:09:32:29:a1: 1e:dc:d5:4e:c1:c0:69:cf:8d:4b:7f:ab:2b:29:5c: 6d:7c:37:96:0b:55:49:f3:bb:6a:32:9f:58:da:07: be:b4:25:b2:0f:95:f6:d4:25:5d:bb:b5:67:e6:24: 98:9b:77:c3:6b:df:92:31:91:99:8e:43:0a:50:d9: db:b4:29:68:2b:1b:ab:75:fc:2c:f1:cf:f4:9e:55: 7b:d6:4d:48:7b:3f:a5:42:dd:c0:a9:9c:7a:4c:b0: 20:b5:02:d1:13:94:e4:3e:8c:96:f5:1a:54:f2:d3: 4d:89:ad:dc:71:17:16:04:80:d7:88:08:7b:1c:00: 5e:cc:39:24:4d:5f:d3:1b:51:84:78:10:90:0f:6c: d3:2f:30:b1:24:5f:dd:8d:b2:fe:f0:dc:84:be:f6: f6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B6:DA:96:BD:08:33:29:1E:A5:A8:67:0B:53:DE:16:E1:0C:B1:34 X509v3 Authority Key Identifier: keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.175.0/24 IPv6: 2001:df0:d00::/48 Signature Algorithm: sha256WithRSAEncryption 2f:97:c2:3d:11:14:1f:0a:0c:9a:5e:cd:49:04:de:60:a6:c4: fc:2a:85:ec:4d:8c:41:29:e4:c7:03:10:a9:85:68:6f:61:99: ff:17:59:5a:9d:4b:4c:db:b9:b1:75:d5:fa:54:18:b7:2f:ad: fd:2f:37:42:9e:0e:22:51:ed:44:9f:8c:9b:96:56:c3:26:f7: 57:43:ae:78:7b:e8:4d:37:bf:b0:84:dc:e6:93:bf:98:2e:fb: a8:a9:d1:2d:f9:f7:60:4e:84:c9:9f:c3:ec:b0:4e:c8:1f:10: d6:c7:27:1f:70:74:90:d4:f0:7e:76:77:7a:b0:a2:75:93:a7: f1:11:c6:48:cf:5b:e5:c7:11:54:25:37:36:ee:f7:fc:9a:8a: 1b:3c:76:4a:52:9f:c9:28:d7:71:e1:32:f8:31:ef:ed:f7:ed: d0:1b:f4:18:3d:87:10:74:83:00:db:d1:1e:d5:1b:bc:ce:77: 16:cc:85:56:13:ac:27:8f:ad:ad:9d:28:71:28:97:61:57:6b: bc:0e:bf:7e:f6:8b:e0:c9:5c:92:e2:71:11:cc:ac:f3:9d:af: 4a:9e:f9:aa:20:c4:bf:91:49:55:86:0c:69:ac:5d:b5:9a:89: 4f:fd:d0:b4:bc:c8:12:c5:9c:77:e4:4f:e9:4c:ac:97:6b:6b: 76:42:d6:2e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICGEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JBMjYxMTAvBgNVBAUTKDFBRkQ0MjY1RTYzRDBDQkY3NTIzNkVEOTY4NkFFNEYw MDE1NUZGN0UwHhcNMjQwMjIyMTcyNDIyWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ3ODM0Ni1lOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfnjXNjfJBP/qkSBNPbcnjcY76VqkwVjt+31fVWlcnISTzNP9GRhueIomYmy i9jor54kjsMdMCM9KpEWguGhM5DiSXEyiJ4G+n3c+NZnrmBWSDBVXTOjJbApqkU4 68xBCrc64QkyKaEe3NVOwcBpz41Lf6srKVxtfDeWC1VJ87tqMp9Y2ge+tCWyD5X2 1CVdu7Vn5iSYm3fDa9+SMZGZjkMKUNnbtCloKxurdfws8c/0nlV71k1Iez+lQt3A qZx6TLAgtQLRE5TkPoyW9RpU8tNNia3ccRcWBIDXiAh7HABezDkkTV/TG1GEeBCQ D2zTLzCxJF/djbL+8NyEvvb2wQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFy22pa9 CDMpHqWoZwtT3hbhDLE0MB8GA1UdIwQYMBaAFBr9QmXmPQy/dSNu2Whq5PABVf9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkEyNi9DQTY0Q0JGQTgy NUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURMOTFJMjdaYUdyazhBRlZf MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d2MUNaZVk5REw5MUkyN1phR3JrOEFGVl8zNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JBMjYvQ0E2NENCRkE4MjVEMTFFNzkxMzIwOTFEQzRGOUFFMDIvRkZFMEY5OTgx MDE1MTFFREE3RDhGMjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnZa8wDwQCAAIwCQMHACABDfANADANBgkqhkiG9w0BAQsF AAOCAQEAL5fCPREUHwoMml7NSQTeYKbE/CqF7E2MQSnkxwMQqYVob2GZ/xdZWp1L TNu5sXXV+lQYty+t/S83Qp4OIlHtRJ+Mm5ZWwyb3V0OueHvoTTe/sITc5pO/mC77 qKnRLfn3YE6EyZ/D7LBOyB8Q1scnH3B0kNTwfnZ3erCidZOn8RHGSM9b5ccRVCU3 Nu73/JqKGzx2SlKfySjXceEy+DHv7fft0Bv0GD2HEHSDANvRHtUbvM53FsyFVhOs J4+trZ0ocSiXYVdrvA6/fvaL4MlckuJxEcys852vSp75qiDEv5FJVYYMaaxdtZqJ T/3QtLzIEsWcd+RP6Uysl2trdkLWLg== -----END CERTIFICATE-----Generated at Thu May 16 17:51:51 2024 by rpki-client on console-ams.rpki-client.org