$ rpki-client -vvf rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/A98754E2F1D011ECA4B56760C4F9AE02.roa File: A98754E2F1D011ECA4B56760C4F9AE02.roa (raw, json) Hash identifier: 93C3ip8IAc66vxePjOVcSjubt03Yf9sEjcjXT+Nlxb8= Subject key identifier: 91:3E:4C:17:7D:F6:A8:C5:69:1F:60:66:1C:8E:2D:4E:B1:22:BA:22 Certificate issuer: /CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Certificate serial: 01C5 Authority key identifier: 6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/A98754E2F1D011ECA4B56760C4F9AE02.roa Signing time: Tue 23 Jan 2024 04:05:16 +0000 ROA not before: Tue 23 Jan 2024 04:05:16 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 138583 IP address blocks: 103.133.212.0/24 maxlen: 24 2001:df7:bb80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Validity Not Before: Jan 23 04:05:16 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65af3afc-2282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:29:07:14:be:bd:f5:1b:ae:36:63:f4:d6:52: ab:45:0a:1f:f0:26:fe:aa:6e:4a:2f:05:f5:24:d8: 98:59:dc:f0:c6:9b:48:3b:e5:8f:b0:d4:73:c2:50: 52:eb:44:77:df:ee:28:65:5a:ad:23:23:c2:36:f5: fa:dc:55:ab:bd:53:f4:75:2d:78:43:56:21:78:4f: 8b:a6:22:f6:c3:5a:6c:1c:ce:00:f6:66:e8:26:a2: c3:b8:f4:40:b6:81:3d:03:d2:32:1a:92:10:c1:e4: a4:80:8c:15:03:30:1e:c5:c4:34:1d:85:35:9a:20: fb:14:79:01:5a:54:f9:9d:28:0e:e6:96:14:86:bd: d6:71:cb:bb:8d:89:c2:91:8c:29:6b:17:98:42:52: 2f:fa:f9:e8:53:78:a1:b6:9d:03:af:84:48:3f:3c: 21:a8:61:07:65:55:68:a6:5e:ae:63:82:88:90:76: 79:39:51:ab:dd:49:ed:50:7a:32:01:99:98:ed:ac: 9f:93:f0:ab:b5:bc:69:94:75:36:93:66:40:61:86: e1:d6:40:a2:9a:63:ac:46:fb:2c:56:4f:0f:97:b0: 3e:64:81:0f:60:ea:5e:fd:7c:2d:d1:bd:f8:55:19: 85:99:47:4e:68:33:eb:91:9a:71:41:88:29:be:52: e9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3E:4C:17:7D:F6:A8:C5:69:1F:60:66:1C:8E:2D:4E:B1:22:BA:22 X509v3 Authority Key Identifier: keyid:6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/A98754E2F1D011ECA4B56760C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.212.0/24 IPv6: 2001:df7:bb80::/48 Signature Algorithm: sha256WithRSAEncryption ab:67:d3:2a:75:70:5a:8b:e5:f6:3e:69:8c:bd:cd:f2:e3:60: 04:3f:30:33:68:87:fe:ff:9d:07:1a:73:40:12:ec:3e:97:eb: 95:19:b3:89:45:76:0c:a3:12:43:3a:62:2f:cb:8f:49:31:76: 9a:aa:a1:cd:52:81:6b:8b:ee:0c:a3:9d:75:bc:07:07:38:35: 31:ca:49:4d:c4:e2:8f:8d:30:9b:87:36:75:3e:97:cd:82:71: 8e:9c:9d:75:41:ad:f3:86:9d:63:3d:28:24:21:e0:4e:2b:df: 31:a9:ee:ad:9a:d3:87:c3:a2:76:f3:1a:f5:0d:19:3a:2e:d7: 78:13:87:1a:e1:3b:b7:1e:99:1c:20:8a:2e:b4:f9:57:bd:1f: 3c:2e:8c:c9:ec:cb:a0:61:00:b2:73:2f:f8:50:31:61:86:10: 55:92:0d:40:f8:c6:6e:10:c9:47:ff:1f:59:20:a8:d3:bc:96: 46:20:88:2f:38:cf:81:53:32:f8:e0:11:62:ba:ec:d6:fc:4a: b9:7c:c2:44:3f:0a:21:f5:47:0d:df:bf:4e:41:60:2c:f1:5f: ee:d5:c0:29:86:27:0d:20:f4:51:39:ec:d6:4b:e7:09:bb:3f: 5b:19:20:1d:f3:ed:3d:d8:da:29:38:dd:c4:69:60:aa:11:15: d8:56:15:a8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxNUIxMTAvBgNVBAUTKDZBQzRDMUI0QjY5MUJFQ0YxMkRERjcyNjVGOTYyNkQ1 OUFDNzY2Q0MwHhcNMjQwMTIzMDQwNTE2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWFmM2FmYy0yMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApykHFL699RuuNmP01lKrRQof8Cb+qm5KLwX1JNiYWdzwxptIO+WPsNRzwlBS 60R33+4oZVqtIyPCNvX63FWrvVP0dS14Q1YheE+LpiL2w1psHM4A9mboJqLDuPRA toE9A9IyGpIQweSkgIwVAzAexcQ0HYU1miD7FHkBWlT5nSgO5pYUhr3Wccu7jYnC kYwpaxeYQlIv+vnoU3ihtp0Dr4RIPzwhqGEHZVVopl6uY4KIkHZ5OVGr3UntUHoy AZmY7ayfk/CrtbxplHU2k2ZAYYbh1kCimmOsRvssVk8Pl7A+ZIEPYOpe/Xwt0b34 VRmFmUdOaDPrkZpxQYgpvlLpoQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJE+TBd9 9qjFaR9gZhyOLU6xIroiMB8GA1UdIwQYMBaAFGrEwbS2kb7PEt33Jl+WJtWax2bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE1Qi81QzU0MzY4NEYx Q0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZzOFMzZmNtWDVZbTFackha c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzVEJ0TGFSdnM4UzNmY21YNVltMVpySFpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQxNUIvNUM1NDM2ODRGMUNEMTFFQzkzMzlCOTVGQzRGOUFFMDIvQTk4NzU0RTJG MUQwMTFFQ0E0QjU2NzYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnhdQwDwQCAAIwCQMHACABDfe7gDANBgkqhkiG9w0BAQsF AAOCAQEAq2fTKnVwWovl9j5pjL3N8uNgBD8wM2iH/v+dBxpzQBLsPpfrlRmziUV2 DKMSQzpiL8uPSTF2mqqhzVKBa4vuDKOddbwHBzg1McpJTcTij40wm4c2dT6XzYJx jpyddUGt84adYz0oJCHgTivfManurZrTh8OidvMa9Q0ZOi7XeBOHGuE7tx6ZHCCK LrT5V70fPC6MyezLoGEAsnMv+FAxYYYQVZINQPjGbhDJR/8fWSCo07yWRiCILzjP gVMy+OARYrrs1vxKuXzCRD8KIfVHDd+/TkFgLPFf7tXAKYYnDSD0UTns1kvnCbs/ WxkgHfPtPdjaKTjdxGlgqhEV2FYVqA== -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org