$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/353932A29B3111EEAFB64748C4F9AE02.roa File: 353932A29B3111EEAFB64748C4F9AE02.roa (raw, json) Hash identifier: dA+75XZYfIv7FHA9mDv4EvyHN1uJI7D+ikYpjPHNzzQ= Subject key identifier: 3B:BF:36:68:27:8D:5A:84:B0:0F:F6:1F:F4:A2:C8:03:3A:C8:49:32 Certificate issuer: /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Certificate serial: 06B3 Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/353932A29B3111EEAFB64748C4F9AE02.roa Signing time: Fri 15 Dec 2023 10:03:35 +0000 ROA not before: Fri 15 Dec 2023 10:03:35 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 140930 IP address blocks: 103.153.154.0/23 maxlen: 23 103.153.154.0/24 maxlen: 24 2406:4740:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 23:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1715 (0x6b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Validity Not Before: Dec 15 10:03:35 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=657c2476-e75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4d:29:1d:cc:82:c3:d1:2f:e8:ee:c3:ba:6d: a7:d9:f6:a4:fc:1c:0e:16:1d:2b:d7:e4:64:3d:50: e8:16:fc:10:b2:43:60:cd:fc:df:bd:24:cd:71:9d: c5:21:05:91:6b:24:9a:2d:d5:07:a3:3a:d1:78:f6: 2a:eb:31:54:83:3e:bc:d9:27:cf:ae:fe:d8:10:1e: 4d:a3:87:9c:00:93:c3:e5:f9:28:91:39:13:20:a4: 83:52:85:5b:6c:2e:73:bb:05:f5:f4:9b:9d:0f:ab: f7:db:07:a4:ea:60:ca:d0:de:e3:76:2a:b6:1a:29: c0:5c:ff:cb:00:04:6e:09:2b:a5:ce:99:3c:4b:a7: 5b:f7:c0:cd:1e:63:e3:97:50:f0:38:73:74:8d:8a: c1:73:95:e6:90:d9:8a:b1:03:0e:2e:17:47:f4:50: f0:f2:35:48:7c:95:a8:28:b8:03:37:ea:eb:f7:6a: 9d:c4:ae:79:aa:1f:33:97:47:f7:09:25:eb:20:ac: 71:dc:28:50:5f:e5:2a:70:95:df:b6:5d:60:7a:d5: a3:70:69:29:aa:44:da:ef:f1:e0:e9:27:82:7d:cb: e1:ba:23:ac:3d:0f:b0:00:f5:6c:11:14:36:15:8e: 46:88:78:87:68:b1:b5:32:cf:34:38:d2:ab:29:ad: 9b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BF:36:68:27:8D:5A:84:B0:0F:F6:1F:F4:A2:C8:03:3A:C8:49:32 X509v3 Authority Key Identifier: keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/353932A29B3111EEAFB64748C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.154.0/23 IPv6: 2406:4740:1::/48 Signature Algorithm: sha256WithRSAEncryption 77:19:6d:56:18:4c:c3:2e:64:03:00:ca:5a:1f:20:4e:84:31: 6d:17:d9:b4:b8:35:ee:e8:bf:8d:19:52:a4:6b:82:9a:84:e7: 6b:0d:d8:f0:6f:aa:4f:b8:2c:42:58:ce:c5:5c:20:fc:bf:1d: a8:49:63:ab:9a:a4:de:52:e5:10:e4:cd:e2:c3:0b:08:b0:f7: 60:d8:14:d6:4c:35:66:51:60:39:5a:8b:95:45:85:73:16:a7: 62:79:c3:64:74:71:4e:80:ea:2d:9a:b5:75:8c:83:4a:d2:7b: 5d:80:ea:5e:63:91:65:4d:99:d3:1f:e1:4c:52:8d:17:6a:2b: e4:bd:90:d7:f6:6b:9c:91:34:26:bd:ad:86:85:81:0f:52:02: 8a:a3:a0:89:20:4d:f0:96:1c:ab:7c:99:b1:27:72:16:1b:b2: 74:f4:61:a4:dd:60:be:3a:43:a8:f1:81:51:82:98:02:b2:e3: 1e:35:35:bf:23:a5:46:b3:eb:73:4d:cf:60:f8:ea:9c:b5:14: b6:cc:32:6e:1f:a2:fb:7e:41:43:e9:d4:5d:24:15:07:bb:d4: 44:c8:0c:50:a8:70:8e:d9:51:15:36:08:28:35:84:05:7b:76: c2:e3:03:31:b6:89:63:2e:9c:c7:53:11:7e:dd:08:74:02:1f: c0:3d:b0:78 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMDAxMTAvBgNVBAUTKDJCREY1Q0IzMjI4QkVDODczRUNFRTc1RDY3NTgzNTQ2 NTM4MjM0OTIwHhcNMjMxMjE1MTAwMzM1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTdjMjQ3Ni1lNzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA100pHcyCw9Ev6O7Dum2n2fak/BwOFh0r1+RkPVDoFvwQskNgzfzfvSTNcZ3F IQWRaySaLdUHozrRePYq6zFUgz682SfPrv7YEB5No4ecAJPD5fkokTkTIKSDUoVb bC5zuwX19JudD6v32wek6mDK0N7jdiq2GinAXP/LAARuCSulzpk8S6db98DNHmPj l1DwOHN0jYrBc5XmkNmKsQMOLhdH9FDw8jVIfJWoKLgDN+rr92qdxK55qh8zl0f3 CSXrIKxx3ChQX+UqcJXftl1getWjcGkpqkTa7/Hg6SeCfcvhuiOsPQ+wAPVsERQ2 FY5GiHiHaLG1Ms80ONKrKa2bnwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDu/Nmgn jVqEsA/2H/SiyAM6yEkyMB8GA1UdIwQYMBaAFCvfXLMii+yHPs7nXWdYNUZTgjSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODEwMC9BQUM3MkUwQ0ZD Q0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJYy16dWRkWjFnMVJsT0NO SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5OWNzeUtMN0ljLXp1ZGRaMWcxUmxPQ05KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDgxMDAvQUFDNzJFMENGQ0NFMTFFQThDMTlEODdGQzRGOUFFMDIvMzUzOTMyQTI5 QjMxMTFFRUFGQjY0NzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmZowDwQCAAIwCQMHACQGR0AAATANBgkqhkiG9w0BAQsF AAOCAQEAdxltVhhMwy5kAwDKWh8gToQxbRfZtLg17ui/jRlSpGuCmoTnaw3Y8G+q T7gsQljOxVwg/L8dqEljq5qk3lLlEOTN4sMLCLD3YNgU1kw1ZlFgOVqLlUWFcxan YnnDZHRxToDqLZq1dYyDStJ7XYDqXmORZU2Z0x/hTFKNF2or5L2Q1/ZrnJE0Jr2t hoWBD1ICiqOgiSBN8JYcq3yZsSdyFhuydPRhpN1gvjpDqPGBUYKYArLjHjU1vyOl RrPrc03PYPjqnLUUtswybh+i+35BQ+nUXSQVB7vURMgMUKhwjtlRFTYIKDWEBXt2 wuMDMbaJYy6cx1MRft0IdAIfwD2weA== -----END CERTIFICATE-----Generated at Mon Jun 3 01:08:48 2024 by rpki-client on console-fra.rpki-client.org