$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/6734E4C4B57411EEBCB6B977C4F9AE02.roa File: 6734E4C4B57411EEBCB6B977C4F9AE02.roa (raw, json) Hash identifier: SlEkJKeWiwLtr2u4eKIm9arVfuxIvf+Z6mCwVHWhjSM= Subject key identifier: 64:5B:5B:FA:5F:6F:C9:62:7B:A1:17:7D:AE:B4:19:74:A2:D7:34:4E Certificate issuer: /CN=A91CC7EA/serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345 Certificate serial: 1A Authority key identifier: 27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/6734E4C4B57411EEBCB6B977C4F9AE02.roa Signing time: Tue 27 Feb 2024 07:49:35 +0000 ROA not before: Tue 27 Feb 2024 07:49:35 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 141769 IP address blocks: 103.163.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Nov 2024 04:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC7EA/serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345 Validity Not Before: Feb 27 07:49:35 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65dd940f-8f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:50:0a:21:59:fd:30:35:03:9d:1b:c5:9b:c5: 49:c9:f0:e6:21:0d:2e:8c:0f:35:68:bc:58:44:ea: ab:19:89:46:f2:60:ba:c4:c8:c5:6e:25:3f:79:18: 5d:e0:ae:b6:92:90:56:24:d1:07:e8:cc:f1:d7:4f: df:bc:96:bb:c5:f0:67:32:e5:ce:e5:44:e1:2a:6b: 5b:fc:7f:96:37:df:c3:64:ee:09:31:ce:2a:5f:2e: 98:c8:5d:50:7c:d6:d1:52:3b:ed:0b:cb:ed:4f:be: 8c:96:fa:77:41:d5:fd:80:c5:6d:8e:db:72:a3:95: 24:e3:bf:98:24:ea:58:3c:09:45:88:51:7c:0c:34: 8b:13:68:34:1b:eb:e6:c9:fa:51:13:ec:c7:26:47: 14:63:2e:0d:ef:85:58:8c:93:9f:3e:10:cf:70:68: 38:74:7d:85:61:00:29:20:8c:cb:90:29:72:7b:74: 59:76:6b:4c:65:8b:1e:54:d7:2a:a5:71:e9:c6:f7: 0f:ce:a0:b9:be:8d:92:6c:c8:fa:73:78:07:98:69: cd:5d:80:7c:3c:96:a7:82:60:58:5c:94:ef:14:2a: aa:02:8f:a1:c9:29:60:04:91:d5:97:ab:28:42:39: 19:28:19:c0:59:cf:94:b5:f5:ad:f3:c3:1a:a3:d1: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5B:5B:FA:5F:6F:C9:62:7B:A1:17:7D:AE:B4:19:74:A2:D7:34:4E X509v3 Authority Key Identifier: keyid:27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/6734E4C4B57411EEBCB6B977C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.172.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:d9:7a:1b:ba:39:17:9f:75:b0:f4:30:53:23:9f:55:2d:33: de:ab:1d:88:39:79:9f:c3:60:99:f9:9f:39:0a:d7:71:07:cb: 4c:c6:be:bd:06:65:e1:dc:ad:3c:67:27:0a:99:ef:99:0b:fa: 15:78:56:1c:af:82:22:66:67:66:c0:87:10:be:2f:1c:43:94: c9:9c:d2:06:16:15:ef:57:d5:87:40:96:e6:f9:e2:f5:4f:f0: 9e:a1:a8:1c:9f:8d:e0:a8:42:0e:34:88:a2:0f:c2:75:5d:c3: d6:1c:81:8b:12:c3:1f:30:08:d7:9a:1d:19:1b:9b:a4:bb:61: 83:64:1f:12:d2:6a:0e:05:ff:72:99:d7:fc:2b:cf:c3:0d:bf: b9:4b:62:3d:d1:38:c2:78:47:35:b5:ad:0a:11:c8:e1:14:71: 61:16:c8:98:ba:33:13:b8:78:8a:69:fb:6d:6b:bf:80:91:a9: 20:80:8f:38:01:09:00:37:b2:97:1d:c6:ba:7a:bd:20:4c:8c: 3d:bf:a8:6f:1e:69:5e:a4:0b:0f:0c:7c:2d:b1:44:c1:27:83: 57:28:04:c1:c2:88:64:cb:c6:66:1e:eb:10:1b:19:b6:0e:87: 13:5d:43:50:4d:13:9c:36:87:6f:86:57:1c:4a:54:42:f8:ec: 36:11:4f:97 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzdFQTExMC8GA1UEBRMoMjdBMjIyMEYxQUJGQ0RDQTZDRkQ1MjIzNkVDMTBBMTEx MkE4ODM0NTAeFw0yNDAyMjcwNzQ5MzVaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZGQ5NDBmLThmNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjUAohWf0wNQOdG8WbxUnJ8OYhDS6MDzVovFhE6qsZiUbyYLrEyMVuJT95GF3g rraSkFYk0QfozPHXT9+8lrvF8Gcy5c7lROEqa1v8f5Y338Nk7gkxzipfLpjIXVB8 1tFSO+0Ly+1PvoyW+ndB1f2AxW2O23KjlSTjv5gk6lg8CUWIUXwMNIsTaDQb6+bJ +lET7McmRxRjLg3vhViMk58+EM9waDh0fYVhACkgjMuQKXJ7dFl2a0xlix5U1yql cenG9w/OoLm+jZJsyPpzeAeYac1dgHw8lqeCYFhclO8UKqoCj6HJKWAEkdWXqyhC ORkoGcBZz5S19a3zwxqj0SnFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZFtb+l9v yWJ7oRd9rrQZdKLXNE4wHwYDVR0jBBgwFoAUJ6IiDxq/zcps/VIjbsEKERKog0Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDN0VBL0I1Qzg3RDY4QjU3 MzExRUU4RjUwODk2Q0M0RjlBRTAyL0o2SWlEeHFfemNwc19WSWpic0VLRVJLb2cw VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjZJaUR4cV96Y3BzX1ZJamJzRUtFUktvZzBVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzdFQS9CNUM4N0Q2OEI1NzMxMUVFOEY1MDg5NkNDNEY5QUUwMi82NzM0RTRDNEI1 NzQxMUVFQkNCNkI5NzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWejrDANBgkqhkiG9w0BAQsFAAOCAQEAXdl6G7o5F591sPQw UyOfVS0z3qsdiDl5n8NgmfmfOQrXcQfLTMa+vQZl4dytPGcnCpnvmQv6FXhWHK+C ImZnZsCHEL4vHEOUyZzSBhYV71fVh0CW5vni9U/wnqGoHJ+N4KhCDjSIog/CdV3D 1hyBixLDHzAI15odGRubpLthg2QfEtJqDgX/cpnX/CvPww2/uUtiPdE4wnhHNbWt ChHI4RRxYRbImLozE7h4imn7bWu/gJGpIICPOAEJADeylx3Gunq9IEyMPb+obx5p XqQLDwx8LbFEwSeDVygEwcKIZMvGZh7rEBsZtg6HE11DUE0TnDaHb4ZXHEpUQvjs NhFPlw== -----END CERTIFICATE-----Generated at Thu Oct 31 04:57:53 2024 by rpki-client on console-fra.rpki-client.org