$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/A82C70A4C9FA11EBB7F2E749C4F9AE02.roa File: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (raw, json) Hash identifier: 2IL0VUXtbh4m28fX/DagcqnHyL8duadfYRBEM0Zd8j8= Subject key identifier: 30:5B:8D:55:7F:5A:8D:4C:EF:52:ED:44:3D:23:F1:4A:C6:50:77:A7 Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Certificate serial: 0C81 Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/A82C70A4C9FA11EBB7F2E749C4F9AE02.roa Signing time: Sun 24 Mar 2024 06:49:26 +0000 ROA not before: Sun 24 Mar 2024 06:49:26 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 139931 IP address blocks: 103.16.152.0/22 maxlen: 22 103.16.153.0/24 maxlen: 24 2406:4b00:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 18:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Validity Not Before: Mar 24 06:49:26 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65ffccf6-5879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:02:b0:d0:79:5a:1c:35:88:75:52:d5:ea: e7:1e:05:d7:6f:b3:03:82:d6:9a:44:66:97:05:97: 7b:34:d2:16:50:d4:f4:1a:d3:ed:18:a3:e2:15:7b: 72:8a:34:a4:f5:12:e3:d3:16:21:e8:e3:64:da:05: ec:e7:02:08:50:e2:82:bb:30:01:3a:1a:3d:3f:d4: 4c:a6:be:8a:b0:14:2b:13:6f:3c:4b:9c:62:69:b5: e7:d1:e6:ef:83:94:bf:bd:6a:c6:6e:47:27:a4:1c: 2a:1d:bb:34:2c:48:7f:5a:3c:92:5c:a1:9d:71:80: 25:5d:77:02:a0:00:be:ed:73:55:5e:6e:75:ce:a8: 44:c6:6a:6a:f9:47:a6:da:bf:54:93:56:51:83:45: 1c:fd:49:a0:87:bd:7e:86:a5:90:f0:ac:b7:4b:24: 4d:7a:ae:ac:80:e9:2e:66:a5:9b:06:70:8f:a9:62: 30:d2:2f:97:d9:fd:c7:e7:11:56:b7:20:f3:4c:de: c0:3a:93:f2:e3:96:5f:36:f6:56:00:eb:5e:0d:da: f9:d1:ab:fd:99:de:41:9b:d3:36:97:b9:ed:fd:56: 15:86:c3:0e:ed:17:9d:c8:da:7a:35:05:a9:f1:06: 32:b7:a1:b8:8e:65:5e:28:e7:ce:53:24:2a:23:4b: 7b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5B:8D:55:7F:5A:8D:4C:EF:52:ED:44:3D:23:F1:4A:C6:50:77:A7 X509v3 Authority Key Identifier: keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/A82C70A4C9FA11EBB7F2E749C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.16.152.0/22 IPv6: 2406:4b00:a::/48 Signature Algorithm: sha256WithRSAEncryption bc:07:8d:16:08:57:b8:c1:c3:62:84:c3:ea:e0:b8:b6:01:c4: e2:f6:df:0d:a1:15:c2:b8:fe:b0:87:a3:0f:e5:8f:72:24:e5: 65:55:28:6e:3a:43:d3:cb:f0:f8:5a:e3:73:9d:3b:43:9d:d6: fa:aa:ef:0f:be:cc:c8:ea:35:e6:04:1d:74:9d:3a:f9:b6:4c: 6c:e6:42:c2:47:9f:73:be:19:a4:c2:0d:54:bd:ba:3b:82:0a: 6d:20:1f:ce:78:58:f3:d9:f4:11:7a:b3:1f:67:ae:7b:1a:63: 90:e1:a1:4e:6c:4f:4d:6f:7e:a2:b7:ae:29:8a:ab:bb:0a:cf: 35:20:c8:49:1a:26:49:31:57:fd:00:dc:52:cf:47:d9:e8:05: 0e:58:c7:e5:f0:24:1b:f2:ca:5b:48:60:b7:c5:b0:38:d3:b3: c6:b0:78:d6:ca:20:53:33:49:34:b1:00:db:bc:3b:99:bd:a9: 77:e3:44:6a:20:68:40:d9:31:e6:07:db:61:63:7b:74:12:73: 42:3a:c0:53:80:e1:7d:c7:f9:d6:d2:61:a4:ca:5b:df:20:71: 7d:d7:d1:13:76:4c:aa:c3:fe:03:0d:32:f2:e2:de:e4:76:c2: 43:29:c3:75:a7:17:f5:2f:2d:c1:5f:a2:0e:b2:f0:f4:94:67: fa:8e:17:ca -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFMDcxMTAvBgNVBAUTKEM4RUJBMzM0QkQ3REE2RTkyRTY3QzQwOEJEMDM3ODdC QUVBRTBDQUQwHhcNMjQwMzI0MDY0OTI2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWZmY2NmNi01ODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsACsNB5Whw1iHVS1ernHgXXb7MDgtaaRGaXBZd7NNIWUNT0GtPtGKPiFXty ijSk9RLj0xYh6ONk2gXs5wIIUOKCuzABOho9P9RMpr6KsBQrE288S5xiabXn0ebv g5S/vWrGbkcnpBwqHbs0LEh/WjySXKGdcYAlXXcCoAC+7XNVXm51zqhExmpq+Uem 2r9Uk1ZRg0Uc/Umgh71+hqWQ8Ky3SyRNeq6sgOkuZqWbBnCPqWIw0i+X2f3H5xFW tyDzTN7AOpPy45ZfNvZWAOteDdr50av9md5Bm9M2l7nt/VYVhsMO7RedyNp6NQWp 8QYyt6G4jmVeKOfOUyQqI0t7ZwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDBbjVV/ Wo1M71LtRD0j8UrGUHenMB8GA1UdIwQYMBaAFMjrozS9fabpLmfECL0DeHuurgyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkUwNy85NjJDNEI3RUQy QkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1a3VaOFFJdlFONGU2NnVE SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPdWpOTDE5cHVrdVo4UUl2UU40ZTY2dURLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZFMDcvOTYyQzRCN0VEMkJGMTFFOUE4NEQ2NjIyQzRGOUFFMDIvQTgyQzcwQTRD OUZBMTFFQkI3RjJFNzQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnEJgwDwQCAAIwCQMHACQGSwAACjANBgkqhkiG9w0BAQsF AAOCAQEAvAeNFghXuMHDYoTD6uC4tgHE4vbfDaEVwrj+sIejD+WPciTlZVUobjpD 08vw+Frjc507Q53W+qrvD77MyOo15gQddJ06+bZMbOZCwkefc74ZpMINVL26O4IK bSAfznhY89n0EXqzH2euexpjkOGhTmxPTW9+oreuKYqruwrPNSDISRomSTFX/QDc Us9H2egFDljH5fAkG/LKW0hgt8WwONOzxrB41sogUzNJNLEA27w7mb2pd+NEaiBo QNkx5gfbYWN7dBJzQjrAU4Dhfcf51tJhpMpb3yBxfdfRE3ZMqsP+Aw0y8uLe5HbC QynDdacX9S8twV+iDrLw9JRn+o4Xyg== -----END CERTIFICATE-----Generated at Tue May 14 21:48:45 2024 by rpki-client on console-ams.rpki-client.org