$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/089A55E052CB11EEB275AA16C4F9AE02.roa File: 089A55E052CB11EEB275AA16C4F9AE02.roa (raw, json) Hash identifier: ax1bHy7X34iXLX07N6LNxeI0vXjEjPqhN5RKN4nqXaY= Subject key identifier: 95:05:5B:88:DF:26:63:B7:95:9F:DD:75:4A:92:77:E8:31:F7:2F:00 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: 04 Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/089A55E052CB11EEB275AA16C4F9AE02.roa Signing time: Thu 14 Sep 2023 07:03:49 +0000 ROA not before: Thu 14 Sep 2023 07:03:49 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 151809 IP address blocks: 103.218.136.0/23 maxlen: 23 103.218.136.0/24 maxlen: 24 103.218.137.0/24 maxlen: 24 2001:df2:ee40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 07:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Validity Not Before: Sep 14 07:03:49 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6502b055-4441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f8:16:3f:12:b4:8a:55:f3:a2:7b:f4:7a:21: 98:02:f0:ae:4e:49:79:09:1e:08:16:1f:c4:76:2b: 40:6a:e9:05:2b:b5:78:c0:40:05:a9:9a:6c:7c:04: b6:c9:52:26:56:5b:9b:0d:33:a9:da:57:7f:ca:0c: 04:99:be:8e:5e:f8:c5:40:47:20:ef:27:89:7e:36: 70:bf:a3:24:21:08:7d:a5:6d:3c:69:6c:6a:f2:91: 0d:44:9b:13:95:63:9d:ee:6b:25:bd:9a:ab:94:6b: eb:6d:05:fb:b8:15:6c:33:56:fc:fc:33:88:e2:80: 17:1d:3a:f0:db:3b:4f:57:31:a0:64:b8:e1:ee:b9: a4:27:56:21:55:ea:37:57:31:e8:b7:d3:4e:8a:1c: ea:af:33:67:03:be:0c:6c:59:a2:1b:ea:d2:fa:0c: 82:22:a6:22:55:ee:fb:03:cd:81:af:db:82:b2:29: 9b:d8:9c:4c:4c:0d:85:69:84:aa:0c:74:58:b7:1f: ab:7f:e4:56:f0:39:45:c7:80:bd:d6:e2:d5:53:52: fa:32:cf:af:24:4b:63:5f:95:6c:cd:ec:9b:95:6e: 3f:30:1f:5e:81:5f:62:55:6b:fb:0f:11:51:b3:e1: 06:9b:eb:9f:35:69:b6:d1:68:86:f5:75:60:04:57: f8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:05:5B:88:DF:26:63:B7:95:9F:DD:75:4A:92:77:E8:31:F7:2F:00 X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/089A55E052CB11EEB275AA16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.218.136.0/23 IPv6: 2001:df2:ee40::/48 Signature Algorithm: sha256WithRSAEncryption 59:86:ee:ce:2b:a3:e5:a2:50:ca:b5:36:ee:fa:75:81:ad:db: bc:e2:ed:7c:3b:1e:42:e4:3f:75:b0:03:c6:5e:44:54:1a:7a: 2a:23:06:f5:93:45:cd:4f:90:38:45:41:1c:47:93:c3:f1:db: 71:7b:a3:a9:2f:e6:e9:84:d6:6f:42:1e:03:a0:9f:06:9b:98: c4:58:4a:29:48:4f:00:c5:8d:f4:48:7c:48:42:01:7e:12:ae: 0b:3e:e0:cc:45:1b:e2:92:bf:15:c1:2b:84:a5:75:4d:4a:94: 1b:e2:cc:33:14:eb:a4:88:12:40:7c:7a:ef:3f:60:42:b1:02: 57:61:3b:99:35:12:28:97:75:d9:2c:df:66:45:af:6e:f5:1a: 35:14:8e:65:19:7e:7e:61:8c:36:5d:27:8f:3a:7a:c2:fb:23: df:40:89:16:12:13:3e:c8:85:d7:93:bd:6d:0b:a4:b1:3e:38: ca:85:bc:e0:23:2d:76:b6:34:27:42:c7:88:79:37:f7:e0:57: 08:42:b6:83:e6:02:3b:de:a5:4c:74:a5:c2:78:b3:14:39:d1: 86:ba:46:ee:0c:b8:2c:f1:e9:78:e2:46:8c:fc:f5:1c:96:20: 2e:78:f7:fd:50:6c:db:6d:53:18:c7:d7:e4:8f:07:4f:3e:a1: 02:97:df:5b -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QkU0RTExMC8GA1UEBRMoNkZGMUEyNEU3RjU0RjJFRjBDNjA1RTBFMDZGQzhBNDZD NTQ0RDZEMzAeFw0yMzA5MTQwNzAzNDlaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MDJiMDU1LTQ0NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh+BY/ErSKVfOie/R6IZgC8K5OSXkJHggWH8R2K0Bq6QUrtXjAQAWpmmx8BLbJ UiZWW5sNM6naV3/KDASZvo5e+MVARyDvJ4l+NnC/oyQhCH2lbTxpbGrykQ1EmxOV Y53uayW9mquUa+ttBfu4FWwzVvz8M4jigBcdOvDbO09XMaBkuOHuuaQnViFV6jdX Mei3006KHOqvM2cDvgxsWaIb6tL6DIIipiJV7vsDzYGv24KyKZvYnExMDYVphKoM dFi3H6t/5FbwOUXHgL3W4tVTUvoyz68kS2NflWzN7JuVbj8wH16BX2JVa/sPEVGz 4Qab6581abbRaIb1dWAEV/j3AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUlQVbiN8m Y7eVn911SpJ36DH3LwAwHwYDVR0jBBgwFoAUb/GiTn9U8u8MYF4OBvyKRsVE1tMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCRTRFL0RCMDNGNjVBNTJD OTExRUU5MDMyOEYxNEM0RjlBRTAyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYl9HaVRuOVU4dThNWUY0T0J2eUtSc1ZFMXRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi8wODlBNTVFMDUy Q0IxMUVFQjI3NUFBMTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWfaiDAPBAIAAjAJAwcAIAEN8u5AMA0GCSqGSIb3DQEBCwUA A4IBAQBZhu7OK6PlolDKtTbu+nWBrdu84u18Ox5C5D91sAPGXkRUGnoqIwb1k0XN T5A4RUEcR5PD8dtxe6OpL+bphNZvQh4DoJ8Gm5jEWEopSE8AxY30SHxIQgF+Eq4L PuDMRRvikr8VwSuEpXVNSpQb4swzFOukiBJAfHrvP2BCsQJXYTuZNRIol3XZLN9m Ra9u9Ro1FI5lGX5+YYw2XSePOnrC+yPfQIkWEhM+yIXXk71tC6SxPjjKhbzgIy12 tjQnQseIeTf34FcIQraD5gI73qVMdKXCeLMUOdGGukbuDLgs8el44kaM/PUcliAu ePf9UGzbbVMYx9fkjwdPPqECl99b -----END CERTIFICATE-----Generated at Thu Jun 13 07:43:06 2024 by rpki-client on console-fra.rpki-client.org