$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/A606B22CA65211EDB3A5967CC4F9AE02.roa File: A606B22CA65211EDB3A5967CC4F9AE02.roa (raw, json) Hash identifier: xyz/02ryzl16W4qrT07+J5xASQFDNUQalvA+EHdQsOU= Subject key identifier: 2A:7B:40:E1:BF:24:0E:C7:01:AC:0C:AD:0E:7D:D8:24:59:1B:1C:5E Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Certificate serial: CC Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/A606B22CA65211EDB3A5967CC4F9AE02.roa Signing time: Thu 15 Feb 2024 05:16:52 +0000 ROA not before: Thu 15 Feb 2024 05:16:52 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 134663 IP address blocks: 103.72.138.0/24 maxlen: 24 103.72.139.0/24 maxlen: 24 2001:df2:4440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Validity Not Before: Feb 15 05:16:52 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65cd9e44-59d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e6:57:b6:b6:83:70:9f:a8:e5:0b:19:67:d2: 09:a5:ef:ec:8b:73:ab:06:f3:1f:9f:e3:29:5e:94: 5d:2c:3e:72:92:db:2f:dc:4f:43:f2:fd:76:7a:e1: 1b:b1:26:e6:50:bd:02:d3:21:dd:02:e3:fd:73:2e: 60:dc:87:48:e8:7c:38:95:27:a9:73:e8:95:6a:a1: 1d:37:6b:bd:0b:4f:a3:05:f3:67:9a:c5:45:cd:98: f3:1e:9a:07:55:94:83:a0:9a:08:16:c3:39:30:e4: 09:ba:8c:4c:09:b3:f9:3d:b5:df:7d:7a:28:de:4e: f9:21:c5:79:5f:d5:e3:92:79:3f:81:0c:61:3e:0b: dd:a2:f4:c6:ec:3b:71:1e:a6:d5:65:3b:39:05:34: cf:71:65:ed:e8:61:ee:ec:1f:e9:c4:87:13:e6:9e: b6:56:39:a8:0e:71:f1:d5:e7:df:d9:f9:e6:4c:9d: be:15:4b:ec:b8:33:e3:d3:12:8f:e6:14:cc:bf:c3: 78:5e:a5:66:cb:8f:67:fd:74:f0:54:cd:44:db:cc: 5d:7e:5c:f0:13:f3:a3:02:0c:f9:63:50:8e:4c:09: d9:d5:0e:ba:ee:d1:19:26:bb:e3:9f:c6:fe:92:88: da:d4:27:8d:a4:95:41:ef:a4:55:1f:bc:a7:94:26: 6d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7B:40:E1:BF:24:0E:C7:01:AC:0C:AD:0E:7D:D8:24:59:1B:1C:5E X509v3 Authority Key Identifier: keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/A606B22CA65211EDB3A5967CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.138.0/23 IPv6: 2001:df2:4440::/48 Signature Algorithm: sha256WithRSAEncryption 5b:11:93:3e:6d:80:fe:74:0c:0c:2f:fd:b2:d2:5f:a5:5b:17: e0:78:69:35:62:6b:7c:14:43:57:e5:5f:a7:c4:b0:dc:2b:30: 5b:5b:9d:87:02:02:9d:b1:79:21:0d:0f:58:5e:e1:ea:91:01: ee:c7:04:dc:94:69:c6:fc:53:e5:6f:d8:4d:db:53:b3:c0:c5: 9a:c8:66:aa:ea:97:62:f4:31:2c:cb:fa:2c:c2:bb:b4:aa:64: ef:d2:1f:a2:f6:37:00:9a:12:5e:69:09:eb:aa:89:fc:5d:05: 66:98:67:89:27:bd:01:b5:f9:3d:0b:fd:2e:43:9d:95:84:09: d9:a1:b2:2e:8d:2c:3c:38:b7:39:a6:19:b6:8e:e5:5a:ff:a5: da:8d:9a:c9:8f:ce:52:b1:02:0f:39:cc:f4:22:45:20:46:4a: 5d:38:ba:ce:51:7e:6c:91:ec:be:ef:50:b8:19:1f:73:3b:f4: e4:52:56:d4:bd:83:df:ac:b2:91:d7:e4:4a:91:6d:05:f9:67: 2b:b4:06:71:e0:57:59:0b:80:f4:13:d9:2b:72:2a:92:6d:db: 9c:d3:92:eb:c6:2e:f1:e4:4a:6f:cb:67:c5:2b:de:e5:5b:7d: 1c:c6:b3:2a:19:bf:e9:ba:af:27:3d:95:79:c5:77:74:f1:9c: 6e:b8:4c:9e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMUIxMTAvBgNVBAUTKEY2OUJCNkY3NzYwNzM5OUZEMzQyQjEyNENBRjhERThE RTQ3RjczMEYwHhcNMjQwMjE1MDUxNjUyWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWNkOWU0NC01OWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+ZXtraDcJ+o5QsZZ9IJpe/si3OrBvMfn+MpXpRdLD5yktsv3E9D8v12euEb sSbmUL0C0yHdAuP9cy5g3IdI6Hw4lSepc+iVaqEdN2u9C0+jBfNnmsVFzZjzHpoH VZSDoJoIFsM5MOQJuoxMCbP5PbXffXoo3k75IcV5X9Xjknk/gQxhPgvdovTG7Dtx HqbVZTs5BTTPcWXt6GHu7B/pxIcT5p62VjmoDnHx1eff2fnmTJ2+FUvsuDPj0xKP 5hTMv8N4XqVmy49n/XTwVM1E28xdflzwE/OjAgz5Y1COTAnZ1Q667tEZJrvjn8b+ koja1CeNpJVB76RVH7ynlCZtpwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCp7QOG/ JA7HAawMrQ592CRZGxxeMB8GA1UdIwQYMBaAFPabtvd2Bzmf00KxJMr43o3kf3MP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIxQi8yQUQxMzk4NkE2 NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9aX1RRckVreXZqZWplUl9j dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwdTI5M1lIT1pfVFFyRWt5dmplamVSX2N3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JCMUIvMkFEMTM5ODZBNjRGMTFFRDk4MDJDQTc2QzRGOUFFMDIvQTYwNkIyMkNB NjUyMTFFREIzQTU5NjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnSIowDwQCAAIwCQMHACABDfJEQDANBgkqhkiG9w0BAQsF AAOCAQEAWxGTPm2A/nQMDC/9stJfpVsX4HhpNWJrfBRDV+Vfp8Sw3CswW1udhwIC nbF5IQ0PWF7h6pEB7scE3JRpxvxT5W/YTdtTs8DFmshmquqXYvQxLMv6LMK7tKpk 79IfovY3AJoSXmkJ66qJ/F0FZphniSe9AbX5PQv9LkOdlYQJ2aGyLo0sPDi3OaYZ to7lWv+l2o2ayY/OUrECDznM9CJFIEZKXTi6zlF+bJHsvu9QuBkfczv05FJW1L2D 36yykdfkSpFtBflnK7QGceBXWQuA9BPZK3Iqkm3bnNOS68Yu8eRKb8tnxSve5Vt9 HMazKhm/6bqvJz2VecV3dPGcbrhMng== -----END CERTIFICATE-----Generated at Sun May 19 07:40:45 2024 by rpki-client on console-fra.rpki-client.org