$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/8F5EABBE919F11EDA7387A37C4F9AE02.roa File: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (raw, json) Hash identifier: Vwxx6xhJaUHJItb6aa+WAVKu+FlRyk7MdIYaendPGXU= Subject key identifier: 54:B5:60:8B:38:2B:31:D0:80:EC:DA:B1:43:04:9D:A2:32:32:99:0D Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Certificate serial: 02BB Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/8F5EABBE919F11EDA7387A37C4F9AE02.roa Signing time: Wed 03 Jan 2024 03:04:31 +0000 ROA not before: Wed 03 Jan 2024 03:04:31 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 136166 IP address blocks: 103.82.176.0/22 maxlen: 25 2400:8740::/40 maxlen: 40 2400:8740:1000::/40 maxlen: 40 2400:8740:1000::/48 maxlen: 48 2400:8740:2000::/40 maxlen: 40 2400:8740:2000::/48 maxlen: 48 2400:8740:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Validity Not Before: Jan 3 03:04:31 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6594cebf-e28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:8b:00:d6:01:50:e2:89:8c:be:ca:c2:da: 74:fd:a3:df:73:ba:38:35:42:e0:fd:15:e3:1f:0f: ae:be:4c:90:9d:0b:20:c0:6b:42:2f:d7:76:ed:a9: ef:b2:31:ca:ef:25:33:a3:8e:3c:b2:31:77:c9:21: db:b7:66:83:b0:de:f0:95:35:bc:78:9f:6c:5f:a8: 57:c6:6b:3b:e9:68:83:e3:d0:b4:dc:f5:fd:76:14: f6:ff:44:28:d0:5a:fe:b2:1f:e9:4b:fd:99:a1:c1: 32:d2:2c:cd:8a:fe:d6:d8:75:07:73:f7:10:cb:38: 31:b5:48:9d:62:68:53:50:ae:44:02:98:af:02:60: 2f:50:66:f0:97:d5:15:47:63:49:26:0e:f3:1d:0c: 2c:15:3c:1d:06:db:51:e4:f4:6b:00:03:4c:f4:63: a5:c1:c3:a6:3b:1e:b6:69:ba:ec:c6:90:85:9a:20: 2c:5f:f9:ec:40:ff:af:cb:9f:9c:d7:3a:c5:c8:79: 6e:13:44:ee:f6:dd:b9:f8:1b:9d:0a:fa:b2:35:a0: 6c:4b:32:20:ee:64:17:5d:4f:e1:23:e2:06:cd:ac: ee:43:0f:61:6c:3a:48:ec:c4:48:a4:0e:12:8f:b0: 9b:69:90:0a:e9:a2:b1:2f:9c:41:33:67:02:cb:c7: 13:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B5:60:8B:38:2B:31:D0:80:EC:DA:B1:43:04:9D:A2:32:32:99:0D X509v3 Authority Key Identifier: keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/8F5EABBE919F11EDA7387A37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.82.176.0/22 IPv6: 2400:8740::/40 2400:8740:1000::/40 2400:8740:2000::/40 2400:8740:3000::/40 Signature Algorithm: sha256WithRSAEncryption 39:45:56:cb:24:d9:b7:0a:4e:66:ea:79:a6:c3:62:f3:6d:b3: 3a:cd:13:94:f7:7d:1e:bd:56:2d:03:ff:f7:0f:aa:bf:c1:e6: 41:9d:a3:f9:cc:c4:15:17:53:26:04:64:c1:9a:00:62:e7:5e: 4c:6b:af:6c:03:4a:dc:2d:37:d7:53:e4:43:61:1b:ee:5b:48: 9b:de:b6:25:fc:db:4a:2d:09:7a:ea:88:a8:60:1a:0e:8c:2a: 64:ea:cb:c4:cd:c3:35:ce:d7:3c:5f:8e:14:b5:9e:c4:65:55: d6:24:e0:05:16:3b:ed:75:0d:59:6e:fc:65:23:89:e7:3a:15: 64:fb:f7:dc:8f:c1:00:4c:cd:1b:b0:77:64:8f:38:cb:76:fb: e9:b4:50:40:2b:25:bc:b4:f6:90:35:ae:d1:e2:a7:90:91:32: c1:b1:ba:26:b1:b2:cf:e9:fb:05:5c:a2:79:3b:a4:1b:4d:c3: 81:b6:12:5e:74:5c:e8:eb:d6:57:42:d4:4e:bb:27:5d:61:8e: 0d:57:7f:6e:f4:15:18:3b:70:5d:4c:4e:ee:62:11:02:ad:14: 9b:9d:cf:75:22:2c:9e:92:3f:8e:c3:d6:00:3c:64:e9:56:59: a9:76:dc:ea:53:d7:0c:53:92:9a:72:23:92:d0:9a:b1:4c:b9: 3f:33:c0:68 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVGMkQxMTAvBgNVBAUTKEEwMTNCMTM4OEEzOTMzQkUxMDZCRUFFRERGRTlGM0I4 MzQ2RDM3NDgwHhcNMjQwMTAzMDMwNDMxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk0Y2ViZi1lMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7qLANYBUOKJjL7Kwtp0/aPfc7o4NULg/RXjHw+uvkyQnQsgwGtCL9d27anv sjHK7yUzo448sjF3ySHbt2aDsN7wlTW8eJ9sX6hXxms76WiD49C03PX9dhT2/0Qo 0Fr+sh/pS/2ZocEy0izNiv7W2HUHc/cQyzgxtUidYmhTUK5EApivAmAvUGbwl9UV R2NJJg7zHQwsFTwdBttR5PRrAANM9GOlwcOmOx62abrsxpCFmiAsX/nsQP+vy5+c 1zrFyHluE0Tu9t25+BudCvqyNaBsSzIg7mQXXU/hI+IGzazuQw9hbDpI7MRIpA4S j7CbaZAK6aKxL5xBM2cCy8cTYwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFFS1YIs4 KzHQgOzasUMEnaIyMpkNMB8GA1UdIwQYMBaAFKATsTiKOTO+EGvq7d/p87g0bTdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUYyRC9DRDZENkU1Njk4 OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03NFFhLXJ0My1uenVEUnRO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29CT3hPSW81TTc0UWEtcnQzLW56dURSdE4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDVGMkQvQ0Q2RDZFNTY5ODkyMTFFQzhGOTM1NzNCQzRGOUFFMDIvOEY1RUFCQkU5 MTlGMTFFREE3Mzg3QTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E ODA2MAwEAgABMAYDBAJnUrAwJgQCAAIwIAMGACQAh0AAAwYAJACHQBADBgAkAIdA IAMGACQAh0AwMA0GCSqGSIb3DQEBCwUAA4IBAQA5RVbLJNm3Ck5m6nmmw2LzbbM6 zROU930evVYtA//3D6q/weZBnaP5zMQVF1MmBGTBmgBi515Ma69sA0rcLTfXU+RD YRvuW0ib3rYl/NtKLQl66oioYBoOjCpk6svEzcM1ztc8X44UtZ7EZVXWJOAFFjvt dQ1ZbvxlI4nnOhVk+/fcj8EATM0bsHdkjzjLdvvptFBAKyW8tPaQNa7R4qeQkTLB sbomsbLP6fsFXKJ5O6QbTcOBthJedFzo69ZXQtROuyddYY4NV39u9BUYO3BdTE7u YhECrRSbnc91Iiyekj+Ow9YAPGTpVlmpdtzqU9cMU5KaciOS0JqxTLk/M8Bo -----END CERTIFICATE-----Generated at Tue May 21 04:39:46 2024 by rpki-client on console-ams.rpki-client.org