$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B9D90E00606311EE8844F941C4F9AE02.roa File: B9D90E00606311EE8844F941C4F9AE02.roa (raw, json) Hash identifier: lO67gx11y7LRP3TT7EpxGiQlsSTO09ZeqHZQUPRePIk= Subject key identifier: 89:FF:FA:AB:D2:A0:EC:97:52:73:0B:B2:1A:C5:31:7B:39:4E:82:EB Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Certificate serial: 03BD Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B9D90E00606311EE8844F941C4F9AE02.roa Signing time: Sat 21 Oct 2023 01:13:41 +0000 ROA not before: Sat 21 Oct 2023 01:13:41 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 211949 IP address blocks: 103.173.126.0/24 maxlen: 24 103.173.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Validity Not Before: Oct 21 01:13:41 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=653325c5-c1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:aa:8c:25:c6:e8:72:32:07:4c:77:e9:b4:51: 3b:d8:f9:cd:9c:40:a0:9f:73:9c:21:e3:75:62:30: 15:9a:c9:a0:3e:a6:b2:ab:01:dd:a1:df:f1:7b:49: 3d:b6:fc:d8:e5:47:08:e0:d0:f3:64:69:04:93:49: b5:46:b1:b6:4a:b8:5d:99:4c:d4:0f:51:e7:74:a2: b3:7a:ac:23:f5:4b:fc:8d:fa:ed:87:30:61:b1:44: 68:cd:32:b5:9a:84:e5:74:b7:db:52:63:f4:eb:e5: 23:e1:67:02:b4:69:40:37:fa:c9:32:b5:1d:b5:5e: e0:9e:ee:02:8b:38:f9:dc:56:a2:f1:70:82:11:1d: 5a:54:eb:dc:72:c7:1e:c9:00:ee:17:ec:04:5a:2f: 59:ed:94:86:31:63:62:49:2f:dd:f3:01:f9:83:f7: 3d:6d:95:de:0b:86:30:0b:a0:f5:4c:e0:da:32:33: bf:2b:d0:0b:63:a6:75:0d:af:e7:37:bf:79:f1:50: df:0d:f0:d5:0b:ca:11:c3:b5:c8:81:b6:24:ba:0a: 83:75:59:ae:1e:01:8b:da:ba:63:7d:fa:22:03:e3: b8:f0:a8:64:1c:9d:d7:89:d2:d6:a9:d6:cc:b1:17: 31:5f:b6:fa:8e:fa:9d:d0:97:f4:e0:9f:2b:bb:ff: cb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FF:FA:AB:D2:A0:EC:97:52:73:0B:B2:1A:C5:31:7B:39:4E:82:EB X509v3 Authority Key Identifier: keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B9D90E00606311EE8844F941C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.126.0/23 Signature Algorithm: sha256WithRSAEncryption 91:f9:f3:cb:f7:51:fa:9c:b0:b2:c3:09:05:8d:ff:90:4c:65: 73:64:28:06:b4:41:84:03:c9:79:f4:c7:d2:d9:6a:a9:04:a7: f1:c7:53:ff:5b:37:5a:49:fa:12:63:13:90:60:ab:2d:33:b1: fa:32:ee:3d:a1:e0:d0:ca:22:1a:12:9e:4c:4c:52:74:16:4f: 86:65:81:ba:15:ae:30:9d:54:64:88:e6:55:f9:2b:f8:ac:6f: e2:54:fd:fe:3a:c2:1e:ba:80:8d:06:ab:60:cf:04:60:8c:15: 32:0a:16:eb:b2:ba:c2:93:53:6e:8c:09:13:0d:e5:1b:57:7e: 27:99:7a:3e:1f:c0:94:0d:50:bc:4f:ac:22:80:7a:5f:1e:d1: b7:f2:7e:a4:0b:fc:c1:2f:21:c5:3c:69:9e:69:d2:73:d2:f2: 23:de:e5:d0:9a:7c:01:ec:98:2f:65:54:75:fe:36:99:82:9f: 2e:28:b7:c5:e1:e9:9b:d8:77:0d:4b:6f:47:8e:6e:04:d5:3e: 56:94:0c:08:7b:68:97:21:9c:5f:50:71:1b:00:13:2c:20:66: e8:1c:54:13:e0:ac:c6:79:68:34:f0:72:dc:c3:33:9a:30:52: 32:8c:74:01:2a:e8:dc:06:01:82:e6:48:25:5f:3f:69:46:e1: 22:88:c1:69 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzRkUxMTAvBgNVBAUTKEExNENBMDc4Qzg1RTQ2NTM1RDkyMDQzODJCODQ5NzRG MTNCMEM5M0MwHhcNMjMxMDIxMDExMzQxWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTMzMjVjNS1jMWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qqMJcbocjIHTHfptFE72PnNnECgn3OcIeN1YjAVmsmgPqayqwHdod/xe0k9 tvzY5UcI4NDzZGkEk0m1RrG2SrhdmUzUD1HndKKzeqwj9Uv8jfrthzBhsURozTK1 moTldLfbUmP06+Uj4WcCtGlAN/rJMrUdtV7gnu4Cizj53Fai8XCCER1aVOvccsce yQDuF+wEWi9Z7ZSGMWNiSS/d8wH5g/c9bZXeC4YwC6D1TODaMjO/K9ALY6Z1Da/n N7958VDfDfDVC8oRw7XIgbYkugqDdVmuHgGL2rpjffoiA+O48KhkHJ3XidLWqdbM sRcxX7b6jvqd0Jf04J8ru//LDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIn/+qvS oOyXUnMLshrFMXs5ToLrMB8GA1UdIwQYMBaAFKFMoHjIXkZTXZIEOCuEl08TsMk8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODNGRS8zMjk1RjkwMjFE QjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJsTmRrZ1E0SzRTWFR4T3d5 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VeWdlTWhlUmxOZGtnUTRLNFNYVHhPd3lUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTgzRkUvMzI5NUY5MDIxREIzMTFFQzg2RTA4NjNFQzRGOUFFMDIvQjlEOTBFMDA2 MDYzMTFFRTg4NDRGOTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrX4wDQYJKoZIhvcNAQELBQADggEBAJH588v3UfqcsLLD CQWN/5BMZXNkKAa0QYQDyXn0x9LZaqkEp/HHU/9bN1pJ+hJjE5Bgqy0zsfoy7j2h 4NDKIhoSnkxMUnQWT4ZlgboVrjCdVGSI5lX5K/isb+JU/f46wh66gI0Gq2DPBGCM FTIKFuuyusKTU26MCRMN5RtXfieZej4fwJQNULxPrCKAel8e0bfyfqQL/MEvIcU8 aZ5p0nPS8iPe5dCafAHsmC9lVHX+NpmCny4ot8Xh6ZvYdw1Lb0eObgTVPlaUDAh7 aJchnF9QcRsAEywgZugcVBPgrMZ5aDTwctzDM5owUjKMdAEq6NwGAYLmSCVfP2lG 4SKIwWk= -----END CERTIFICATE-----Generated at Fri May 17 03:06:34 2024 by rpki-client on console-ams.rpki-client.org