$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa File: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (raw, json) Hash identifier: wiUyotEbzoedB/Q0gb7W+sDI78aGSUuE5BSMkTbJBXA= Subject key identifier: 10:60:6E:33:C6:B6:CB:FC:17:37:C5:EA:F3:45:34:2C:B9:35:93:43 Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 09E7 Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa Signing time: Thu 22 Feb 2024 20:58:35 +0000 ROA not before: Thu 22 Feb 2024 20:58:35 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 10204 IP address blocks: 103.51.50.0/23 maxlen: 23 103.51.50.0/24 maxlen: 24 103.51.51.0/24 maxlen: 24 202.6.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2535 (0x9e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: Feb 22 20:58:35 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d7b57b-acdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:e0:4d:28:0d:2d:20:13:1e:70:4c:c0:31: 35:1b:21:85:53:0f:b5:b2:bb:92:04:4c:3e:88:a3: 04:e8:38:e5:95:4c:85:b4:e5:29:47:3b:54:c0:f8: 39:f7:06:4e:f6:a7:00:16:5a:6b:d2:b9:d8:95:a6: 44:fb:a2:4e:85:02:f9:0f:8f:f0:2e:9a:95:1b:7e: 1c:df:66:56:79:19:ef:26:b4:5f:e3:88:b6:a3:39: 5e:75:56:ff:45:4a:46:89:08:e6:fa:98:08:f5:8b: 25:9b:a5:1d:a2:53:d3:e5:03:1c:a7:f2:ca:4c:df: b0:1a:a3:f9:48:d5:81:53:8d:94:f8:98:9e:a5:0d: 1e:17:8c:f8:88:33:93:51:67:7b:40:1b:d6:52:15: 0a:89:56:ef:6a:80:45:cc:96:66:b1:de:e5:97:41: 67:5a:e6:e3:99:a1:6d:fb:03:52:4d:cc:5f:af:5d: 39:9b:7c:79:15:cc:21:17:9d:fb:71:1e:1c:4d:da: a0:53:33:e1:43:20:e5:96:2e:fa:c8:7e:77:9d:f8: 58:cd:08:1d:c4:53:30:75:02:b2:da:82:4c:2e:39: c4:23:35:fd:64:81:ea:6e:38:22:9f:57:da:94:a0: e2:7b:32:1b:72:88:79:93:a5:f9:9b:22:5f:5d:a3: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:60:6E:33:C6:B6:CB:FC:17:37:C5:EA:F3:45:34:2C:B9:35:93:43 X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.51.50.0/23 202.6.248.0/22 Signature Algorithm: sha256WithRSAEncryption 85:bd:11:c1:8f:44:0e:4f:e9:a9:23:73:86:41:65:92:a6:bc: be:32:4c:de:bd:e3:5e:bd:3f:82:5e:60:fc:1a:ef:b5:3e:66: 54:bb:81:fd:cf:7e:b6:53:e3:92:05:0b:9c:05:9a:42:05:de: 04:e9:e8:78:3a:a9:4f:4c:e8:fd:a9:62:38:96:a6:41:8d:fb: 38:6c:23:09:29:11:bb:72:d2:ab:f9:68:d9:40:95:88:af:61: 79:b9:a3:4a:64:76:fd:a1:0e:1f:11:b4:80:fe:9b:7a:e8:ba: a2:b2:da:e5:59:7d:5b:b6:af:ad:84:11:22:e0:47:2e:52:8f: c6:67:a8:7a:ab:48:c5:e8:b8:96:63:3e:64:35:cb:0b:f7:8b: ed:c6:e5:5e:b5:67:7b:97:d6:2b:1f:5d:37:b7:4d:a8:48:da: 64:1f:f7:49:eb:89:2b:5a:5f:4c:e7:77:56:ee:bc:6e:24:77: b6:63:c4:33:1e:ed:98:31:e5:94:67:e8:16:51:e7:9d:9a:d4: f8:19:58:56:a6:09:5a:59:6c:47:77:ff:0c:6b:ce:3a:ff:4d: c6:3e:7d:e7:37:c5:14:be:07:51:93:e3:b1:a3:42:53:b9:64: cc:32:07:fd:4b:74:db:73:46:e7:cd:69:17:19:40:6a:55:04: 53:98:8c:d0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjQwMjIyMjA1ODM1WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ3YjU3Yi1hY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTTgTSgNLSATHnBMwDE1GyGFUw+1sruSBEw+iKME6DjllUyFtOUpRztUwPg5 9wZO9qcAFlpr0rnYlaZE+6JOhQL5D4/wLpqVG34c32ZWeRnvJrRf44i2ozledVb/ RUpGiQjm+pgI9Yslm6UdolPT5QMcp/LKTN+wGqP5SNWBU42U+JiepQ0eF4z4iDOT UWd7QBvWUhUKiVbvaoBFzJZmsd7ll0FnWubjmaFt+wNSTcxfr105m3x5FcwhF537 cR4cTdqgUzPhQyDlli76yH53nfhYzQgdxFMwdQKy2oJMLjnEIzX9ZIHqbjgin1fa lKDiezIbcoh5k6X5myJfXaMGfwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBBgbjPG tsv8FzfF6vNFNCy5NZNDMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTA4NzUvNkQ5MUFBQkM1OTMxMTFFQUFBMzFCNDBBQzRGOUFFMDIvRjFGQzc0REU3 REUxMTFFRUIxQkZENjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnMzIDBALKBvgwDQYJKoZIhvcNAQELBQADggEBAIW9EcGP RA5P6akjc4ZBZZKmvL4yTN694169P4JeYPwa77U+ZlS7gf3PfrZT45IFC5wFmkIF 3gTp6Hg6qU9M6P2pYjiWpkGN+zhsIwkpEbty0qv5aNlAlYivYXm5o0pkdv2hDh8R tID+m3rouqKy2uVZfVu2r62EESLgRy5Sj8ZnqHqrSMXouJZjPmQ1ywv3i+3G5V61 Z3uX1isfXTe3TahI2mQf90nriStaX0znd1buvG4kd7ZjxDMe7Zgx5ZRn6BZR552a 1PgZWFamCVpZbEd3/wxrzjr/TcY+fec3xRS+B1GT47GjQlO5ZMwyB/1LdNtzRufN aRcZQGpVBFOYjNA= -----END CERTIFICATE-----Generated at Mon May 6 22:41:04 2024 by rpki-client on console-ams.rpki-client.org