$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa File: A0841A68D0D511EC81001E73C4F9AE02.roa (raw, json) Hash identifier: HT+iJuMBxdgYK5g+jEQD2a03TeM+F29o6gZsZ/BsbjI= Subject key identifier: 67:B4:B7:35:60:6A:64:CA:F7:E3:A5:17:9B:A9:3B:12:E4:26:8A:58 Certificate issuer: /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC Certificate serial: 022A Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa Signing time: Sun 31 Dec 2023 03:04:37 +0000 ROA not before: Sun 31 Dec 2023 03:04:37 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 132742 IP address blocks: 103.80.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC Validity Not Before: Dec 31 03:04:37 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6590da44-6d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:4d:c4:77:94:6c:bb:4e:bf:1e:05:a2:4e: 4f:9a:51:f2:b7:36:8d:50:8f:d7:2e:93:28:5b:16: a3:56:ca:1d:d3:4e:fa:71:e6:f9:7d:83:47:65:5e: 27:cb:da:6d:be:de:48:09:ba:1b:58:43:a1:53:41: 77:b7:35:a9:80:1d:26:d9:96:37:55:a5:ea:66:33: 68:1e:62:ed:dc:f3:74:9b:47:cc:47:c9:20:01:f2: a0:96:22:56:62:da:a3:62:e4:3d:4d:b5:80:04:7c: 8d:16:25:75:68:7e:dd:cd:0e:fc:32:06:5c:57:d3: cb:cd:42:5e:ad:c1:e8:20:05:9e:3f:a2:1f:c0:a5: 67:a0:aa:ce:a8:1b:7d:03:a0:10:53:37:f3:b5:e7: 7a:b3:67:b5:1d:63:74:9b:40:a7:c8:1e:75:f3:15: 2b:88:ed:42:1e:be:81:4e:3d:cd:a0:66:67:13:47: 85:56:c9:76:b0:42:14:4d:ab:6d:07:c2:8e:f7:d8: 2f:65:9f:84:c1:4b:05:24:9d:3e:ec:37:1b:2f:c1: 12:31:15:37:84:bc:b0:05:44:a2:af:9d:d4:a4:b4: f8:48:a9:c1:a0:92:a8:7a:ae:fc:5f:ed:f6:ed:63: 7f:4e:8b:ee:7d:7b:a4:a9:b6:5e:85:80:55:cd:a0: 6a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B4:B7:35:60:6A:64:CA:F7:E3:A5:17:9B:A9:3B:12:E4:26:8A:58 X509v3 Authority Key Identifier: keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.80.144.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:50:d4:e9:fb:16:62:b3:eb:02:04:0c:cf:ac:cb:e3:c2:74: 58:e1:60:32:9c:88:7a:3d:2f:6f:24:7c:2b:ac:c1:26:88:e9: 19:66:16:4f:d6:e4:19:64:20:cf:eb:93:e2:bf:ca:77:2c:62: ef:81:52:5a:9d:58:37:06:b2:5b:4c:57:f4:1c:27:de:0d:27: 33:20:23:c2:a7:32:b7:52:89:e1:ad:c7:12:12:2d:b0:37:a1: 56:5e:2e:58:28:c6:07:e1:57:0b:15:79:f3:32:14:bb:a0:03: f5:3c:aa:65:33:20:8d:81:12:ef:ab:30:48:a8:2d:74:4c:7f: e8:ed:5a:06:49:30:1a:33:95:9f:e5:3b:de:1a:67:3d:89:cb: e1:53:89:d1:13:38:1f:7f:1e:8f:76:2f:fe:cc:45:36:85:cd: 4c:95:b6:e0:9b:7b:1d:4f:d8:39:c3:c9:a0:43:a4:1b:d9:89: ba:7b:1f:23:bf:0f:58:ed:73:88:cd:dc:4a:d7:a7:a6:fe:81: 97:dc:4b:06:0b:69:0f:c3:5d:03:31:5e:5b:b5:3c:74:84:ea: a4:d5:02:ff:16:db:ea:fe:e0:f7:ec:8e:e3:0c:41:46:b8:c4: 96:36:7c:13:6d:76:21:e2:ee:72:5c:81:1a:90:a0:1c:e3:1e: 20:ec:cd:53 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2QzUxMTAvBgNVBAUTKEQ1MjhGQUQ0Qjg3NkFCRkI3MEFGMzg5MjIyMEYyOTNF MTc5MUI2QkMwHhcNMjMxMjMxMDMwNDM3WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTkwZGE0NC02ZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaBNxHeUbLtOvx4Fok5PmlHytzaNUI/XLpMoWxajVsod0076ceb5fYNHZV4n y9ptvt5ICbobWEOhU0F3tzWpgB0m2ZY3VaXqZjNoHmLt3PN0m0fMR8kgAfKgliJW YtqjYuQ9TbWABHyNFiV1aH7dzQ78MgZcV9PLzUJercHoIAWeP6IfwKVnoKrOqBt9 A6AQUzfzted6s2e1HWN0m0CnyB518xUriO1CHr6BTj3NoGZnE0eFVsl2sEIUTatt B8KO99gvZZ+EwUsFJJ0+7DcbL8ESMRU3hLywBUSir53UpLT4SKnBoJKoeq78X+32 7WN/TovufXukqbZehYBVzaBqNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGe0tzVg amTK9+OlF5upOxLkJopYMB8GA1UdIwQYMBaAFNUo+tS4dqv7cK84kiIPKT4Xkba8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZDNS9FODI2NjAyMEM2 QzAxMUVDOEFCNzU1M0ZDNEY5QUUwMi8xU2o2MUxoMnFfdHdyemlTSWc4cFBoZVJ0 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTajYxTGgycV90d3J6aVNJZzhwUGhlUnRydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U2QzUvRTgyNjYwMjBDNkMwMTFFQzhBQjc1NTNGQzRGOUFFMDIvQTA4NDFBNjhE MEQ1MTFFQzgxMDAxRTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnUJAwDQYJKoZIhvcNAQELBQADggEBAGtQ1On7FmKz6wIE DM+sy+PCdFjhYDKciHo9L28kfCuswSaI6RlmFk/W5BlkIM/rk+K/yncsYu+BUlqd WDcGsltMV/QcJ94NJzMgI8KnMrdSieGtxxISLbA3oVZeLlgoxgfhVwsVefMyFLug A/U8qmUzII2BEu+rMEioLXRMf+jtWgZJMBozlZ/lO94aZz2Jy+FTidETOB9/Ho92 L/7MRTaFzUyVtuCbex1P2DnDyaBDpBvZibp7HyO/D1jtc4jN3ErXp6b+gZfcSwYL aQ/DXQMxXlu1PHSE6qTVAv8W2+r+4PfsjuMMQUa4xJY2fBNtdiHi7nJcgRqQoBzj HiDszVM= -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:05 2024 by rpki-client on console-fra.rpki-client.org