$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/290732FC79A211E79F34D81FC4F9AE02.roa File: 290732FC79A211E79F34D81FC4F9AE02.roa (raw, json) Hash identifier: Jf58211mLThLRZI8BWv56J4HhbDeINKve+PZOIHEx7w= Subject key identifier: D7:5A:43:95:01:BD:BF:4D:9F:A2:BE:C3:93:75:2B:F0:A6:85:55:1F Certificate issuer: /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Certificate serial: 1847 Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/290732FC79A211E79F34D81FC4F9AE02.roa Signing time: Fri 12 Jan 2024 17:04:32 +0000 ROA not before: Fri 12 Jan 2024 17:04:32 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 136134 IP address blocks: 103.81.68.0/22 maxlen: 22 103.81.68.0/24 maxlen: 24 103.81.69.0/24 maxlen: 24 103.81.70.0/24 maxlen: 24 103.81.71.0/24 maxlen: 24 2402:bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6215 (0x1847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Validity Not Before: Jan 12 17:04:32 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65a17120-a25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:3b:d4:94:5a:68:0d:0e:3f:83:62:d0:1f: 81:f4:1a:50:44:f9:73:e6:ba:84:5c:9a:87:a7:f7: f5:9f:cd:14:eb:ec:6b:65:fa:cc:ac:b7:85:85:12: e2:8f:a6:61:6f:63:ca:15:4f:06:05:e9:c3:98:8b: a0:3e:a6:5d:ae:2e:a6:56:bd:3a:3e:0e:73:12:be: 5a:89:9d:42:73:d0:8c:87:a9:7e:5f:f5:91:82:5a: 4b:9c:5a:59:b3:2e:fa:fc:52:f3:5d:b7:23:5e:80: da:1b:2c:99:09:95:7b:69:f1:9b:bd:95:fb:fc:a2: b8:96:80:b8:78:72:ef:ef:f0:36:f2:35:74:a9:f5: 09:55:05:3e:ad:3a:76:85:64:9a:a8:fd:62:67:ed: 03:ef:48:b7:e3:86:3f:88:da:17:0c:9c:82:56:3b: 65:43:6c:83:c3:ef:d5:d1:16:dc:81:1a:47:1c:4f: b5:61:29:b0:4f:3b:e0:5a:ca:50:99:71:09:6f:dd: 4b:a4:dd:7f:dd:28:19:13:69:b7:f8:35:c2:7c:d0: a8:fd:ed:99:9e:66:51:8f:7b:0b:4b:7e:b2:93:b5: e0:63:e4:5b:5e:d1:d4:2a:31:79:1c:9c:5a:fe:85: 98:3e:bb:60:85:19:3d:9e:e1:40:aa:1d:51:3e:10: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5A:43:95:01:BD:BF:4D:9F:A2:BE:C3:93:75:2B:F0:A6:85:55:1F X509v3 Authority Key Identifier: keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/290732FC79A211E79F34D81FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.68.0/22 IPv6: 2402:bc0::/32 Signature Algorithm: sha256WithRSAEncryption 47:e0:49:28:83:6a:2c:6f:b1:69:d6:8c:7f:17:aa:b5:13:8b: d5:8a:88:14:a5:6d:db:2c:b7:04:c4:fd:91:a1:ec:69:9f:60: 4f:f7:84:64:16:f6:a6:59:74:86:05:34:4a:99:a3:26:92:3a: 58:94:86:8f:95:a2:f0:84:db:13:ad:11:a2:3b:9b:a7:eb:49: 3e:de:31:8f:b1:1f:9d:08:de:d1:9b:e2:a5:07:08:da:be:50: a9:67:79:92:8b:54:21:f5:4e:b0:5d:4d:7f:4a:67:0d:8a:43: ee:49:ba:b9:fa:87:bb:f8:06:b3:4b:f5:c1:44:ff:51:5e:ce: 3e:94:7a:dc:40:54:32:55:c5:ad:86:30:5d:2c:34:22:29:e1: b8:3a:d1:9e:ac:e7:f0:30:fc:c2:3e:ab:81:ef:c4:b6:22:92: 2e:07:d1:08:ae:05:5e:7f:00:1f:9b:db:5a:26:ea:1e:f4:63: 3d:89:c1:45:40:f3:e9:d5:fc:f8:f4:32:f3:52:4e:5b:e7:eb: da:af:a7:7d:11:c3:98:62:53:0c:1d:a5:63:b5:0c:12:3c:e9: e3:53:54:58:f2:50:de:9d:ee:13:42:7c:bb:ab:2d:79:1e:93: 72:e5:e0:33:02:45:ce:92:41:24:bc:a3:05:03:de:bd:9d:21: 7c:6c:8e:78 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICGEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MzMxMTAvBgNVBAUTKDA5QTNFQ0M0OUY4M0E3OThBRTEzOUYxRENCQzUzNkVF NkY2N0NFN0UwHhcNMjQwMTEyMTcwNDMyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWExNzEyMC1hMjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswc71JRaaA0OP4Ni0B+B9BpQRPlz5rqEXJqHp/f1n80U6+xrZfrMrLeFhRLi j6Zhb2PKFU8GBenDmIugPqZdri6mVr06Pg5zEr5aiZ1Cc9CMh6l+X/WRglpLnFpZ sy76/FLzXbcjXoDaGyyZCZV7afGbvZX7/KK4loC4eHLv7/A28jV0qfUJVQU+rTp2 hWSaqP1iZ+0D70i344Y/iNoXDJyCVjtlQ2yDw+/V0RbcgRpHHE+1YSmwTzvgWspQ mXEJb91LpN1/3SgZE2m3+DXCfNCo/e2ZnmZRj3sLS36yk7XgY+RbXtHUKjF5HJxa /oWYPrtghRk9nuFAqh1RPhD0gwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNdaQ5UB vb9Nn6K+w5N1K/CmhVUfMB8GA1UdIwQYMBaAFAmj7MSfg6eYrhOfHcvFNu5vZ85+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUzMy9FOEZENEZBNDc5 OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1aXVFNThkeThVMjdtOW56 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhUHN4Si1EcDVpdUU1OGR5OFUyN205bnpuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U1MzMvRThGRDRGQTQ3OTlGMTFFN0I4NzkxMDFEQzRGOUFFMDIvMjkwNzMyRkM3 OUEyMTFFNzlGMzREODFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnUUQwDQQCAAIwBwMFACQCC8AwDQYJKoZIhvcNAQELBQAD ggEBAEfgSSiDaixvsWnWjH8XqrUTi9WKiBSlbdsstwTE/ZGh7GmfYE/3hGQW9qZZ dIYFNEqZoyaSOliUho+VovCE2xOtEaI7m6frST7eMY+xH50I3tGb4qUHCNq+UKln eZKLVCH1TrBdTX9KZw2KQ+5Jurn6h7v4BrNL9cFE/1Fezj6UetxAVDJVxa2GMF0s NCIp4bg60Z6s5/Aw/MI+q4HvxLYiki4H0QiuBV5/AB+b21om6h70Yz2JwUVA8+nV /Pj0MvNSTlvn69qvp30Rw5hiUwwdpWO1DBI86eNTVFjyUN6d7hNCfLurLXkek3Ll 4DMCRc6SQSS8owUD3r2dIXxsjng= -----END CERTIFICATE-----Generated at Wed May 8 18:14:38 2024 by rpki-client on console-fra.rpki-client.org