$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/2CCD56C8E33D11ECA430C25AC4F9AE02.roa File: 2CCD56C8E33D11ECA430C25AC4F9AE02.roa (raw, json) Hash identifier: U86p5u71TOWjIBSjWoG1eT1xUhAaYR+Xro7PSSd38QQ= Subject key identifier: C2:00:75:6F:62:5D:93:35:A0:D5:73:15:B0:A9:5C:F8:0F:FE:30:3C Certificate issuer: /CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D Certificate serial: 0196 Authority key identifier: 5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/2CCD56C8E33D11ECA430C25AC4F9AE02.roa Signing time: Wed 09 Aug 2023 03:03:32 +0000 ROA not before: Wed 09 Aug 2023 03:03:32 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 149857 IP address blocks: 103.189.4.0/23 maxlen: 23 103.189.4.0/24 maxlen: 24 103.189.5.0/24 maxlen: 24 2400:83e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D Validity Not Before: Aug 9 03:03:32 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64d30204-425e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:e3:f6:b8:6d:64:af:19:bb:11:c9:b4:e9: 58:dd:36:04:d4:59:57:5c:14:ce:cf:d3:ee:1a:c6: ed:64:d5:93:23:f1:92:a8:12:26:26:74:4d:0f:05: 05:69:21:67:89:61:bc:3c:3e:64:b2:bb:d3:db:e2: 52:4b:1a:16:16:05:6a:da:e5:1d:90:fd:64:80:d6: ff:61:d5:42:59:38:5b:04:74:ca:b6:bd:70:dc:eb: d3:47:95:08:7e:ce:fb:4e:b3:4a:4c:09:e8:6e:e1: 02:fd:5d:b9:44:49:fb:9b:97:43:79:eb:1c:a9:b7: f9:43:3e:ec:f7:90:8f:a5:b7:d4:1c:bc:d7:da:e1: 78:06:a2:3a:6f:06:50:b0:7f:24:3f:c6:db:24:e2: 03:78:1d:06:46:3e:d6:a3:ee:48:70:66:b8:ca:0f: ce:bf:6e:b4:d8:9b:83:88:14:e2:72:43:69:37:d0: 20:fb:d1:1a:82:3c:fd:3d:ad:e9:31:a1:6c:14:c9: 19:48:23:0f:3a:37:83:a7:f7:91:28:73:53:b4:35: df:17:c1:ae:60:2f:0f:b0:31:06:8d:25:8e:c4:04: 79:fa:8b:05:a9:82:84:35:12:b7:d5:9c:08:90:17: e7:88:4f:ff:6d:1c:a0:f0:d5:4c:82:99:a6:f2:ce: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:00:75:6F:62:5D:93:35:A0:D5:73:15:B0:A9:5C:F8:0F:FE:30:3C X509v3 Authority Key Identifier: keyid:5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/2CCD56C8E33D11ECA430C25AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.4.0/23 IPv6: 2400:83e0::/32 Signature Algorithm: sha256WithRSAEncryption 9f:42:e6:a0:56:34:47:97:73:cd:f4:63:79:2d:ec:66:55:07: 4a:e4:a0:58:0c:5d:8e:10:ad:17:78:38:f6:10:5d:26:02:c3: d6:75:ed:50:f4:9f:91:ae:35:dc:4c:41:bf:3e:6c:71:3b:0d: 6d:0c:c8:cf:48:f6:55:c6:d8:f3:fc:22:3f:ce:59:aa:08:9b: 2f:e9:21:09:40:80:8a:85:16:35:73:df:54:2a:b8:67:3d:e5: 19:b1:de:d9:e2:e3:dc:8c:7b:b5:40:fd:6b:03:3a:ac:0d:de: 37:2a:86:25:29:d2:5b:8e:5e:dc:df:74:af:98:13:3a:5c:19: d6:83:67:c8:55:c6:22:4a:f6:fe:f2:92:ee:d2:61:2a:7a:8a: 14:1d:f3:77:37:14:90:d8:bd:4e:75:7e:8d:c5:2f:59:6a:f8: 20:2c:90:db:6c:9b:e6:17:e1:fc:59:89:f1:4f:0b:ab:9d:b1: 0d:35:42:f9:76:1d:f8:4b:ab:e7:02:fb:40:e2:53:7c:4f:08: 1a:d9:f5:00:55:26:d7:02:26:58:ca:03:3e:f0:90:15:91:ca: 5d:ba:15:ca:30:a2:de:6a:a2:6d:16:3b:d4:40:a7:54:02:56: 25:69:26:17:da:24:8a:35:66:b9:d5:52:d5:ea:a4:f0:bb:73: fd:a9:bc:4b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMUQxMTAvBgNVBAUTKDVBOTlCMDI3NjcxOUQzQTgzNzcwRkFBRTE0RDc1NzVD QzY2NjQ4OEQwHhcNMjMwODA5MDMwMzMyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGQzMDIwNC00MjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNbj9rhtZK8ZuxHJtOlY3TYE1FlXXBTOz9PuGsbtZNWTI/GSqBImJnRNDwUF aSFniWG8PD5ksrvT2+JSSxoWFgVq2uUdkP1kgNb/YdVCWThbBHTKtr1w3OvTR5UI fs77TrNKTAnobuEC/V25REn7m5dDeescqbf5Qz7s95CPpbfUHLzX2uF4BqI6bwZQ sH8kP8bbJOIDeB0GRj7Wo+5IcGa4yg/Ov2602JuDiBTickNpN9Ag+9Eagjz9Pa3p MaFsFMkZSCMPOjeDp/eRKHNTtDXfF8GuYC8PsDEGjSWOxAR5+osFqYKENRK31ZwI kBfniE//bRyg8NVMgpmm8s5/ewIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMIAdW9i XZM1oNVzFbCpXPgP/jA8MB8GA1UdIwQYMBaAFFqZsCdnGdOoN3D6rhTXV1zGZkiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IxRC9CQTY0RDA2NkUz MzcxMUVDOTczMEVCM0RDNEY5QUUwMi9XcG13SjJjWjA2ZzNjUHF1Rk5kWFhNWm1T STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwbXdKMmNaMDZnM2NQcXVGTmRYWE1abVNJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNCMUQvQkE2NEQwNjZFMzM3MTFFQzk3MzBFQjNEQzRGOUFFMDIvMkNDRDU2QzhF MzNEMTFFQ0E0MzBDMjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnvQQwDQQCAAIwBwMFACQAg+AwDQYJKoZIhvcNAQELBQAD ggEBAJ9C5qBWNEeXc830Y3kt7GZVB0rkoFgMXY4QrRd4OPYQXSYCw9Z17VD0n5Gu NdxMQb8+bHE7DW0MyM9I9lXG2PP8Ij/OWaoImy/pIQlAgIqFFjVz31QquGc95Rmx 3tni49yMe7VA/WsDOqwN3jcqhiUp0luOXtzfdK+YEzpcGdaDZ8hVxiJK9v7yku7S YSp6ihQd83c3FJDYvU51fo3FL1lq+CAskNtsm+YX4fxZifFPC6udsQ01Qvl2HfhL q+cC+0DiU3xPCBrZ9QBVJtcCJljKAz7wkBWRyl26Fcowot5qom0WO9RAp1QCViVp JhfaJIo1ZrnVUtXqpPC7c/2pvEs= -----END CERTIFICATE-----Generated at Fri May 17 04:44:33 2024 by rpki-client on console-ams.rpki-client.org