$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/433917A83D8211EEA0E4DD46C4F9AE02.roa File: 433917A83D8211EEA0E4DD46C4F9AE02.roa (raw, json) Hash identifier: iCk6VUHMVH5gHtg/PREmheSPvw2aWyW21P7KHrsfjDI= Subject key identifier: E1:03:90:B6:2E:34:D2:52:1F:8C:DA:71:BD:36:40:7F:50:29:E7:FA Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0D3A Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/433917A83D8211EEA0E4DD46C4F9AE02.roa Signing time: Fri 08 Sep 2023 18:25:48 +0000 ROA not before: Fri 08 Sep 2023 18:25:48 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 151465 IP address blocks: 103.5.0.0/22 maxlen: 22 103.5.0.0/23 maxlen: 23 103.5.0.0/24 maxlen: 24 103.5.1.0/24 maxlen: 24 103.5.2.0/23 maxlen: 23 103.5.2.0/24 maxlen: 24 103.5.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3386 (0xd3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Sep 8 18:25:48 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64fb672c-02b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:27:14:d5:d9:57:22:7a:b1:cf:3a:fc:b7: a6:63:64:c9:a6:50:a3:ca:de:1c:60:f0:30:15:fb: cc:f1:ca:39:2a:c9:d1:71:f7:e3:35:85:44:c8:c5: 08:2c:7c:79:ba:03:ac:21:a4:47:80:38:e8:bc:62: b8:6e:ae:7f:34:ab:7c:e6:e0:e3:e4:01:a7:1b:8a: 4a:70:f6:1e:40:b6:c1:4e:a0:1c:20:dc:5c:dd:aa: 74:bc:61:9e:d6:b9:18:65:ee:85:44:d3:63:0a:05: 3f:6f:40:13:35:af:f7:53:76:a3:bb:81:a8:49:ff: 72:79:0a:55:1f:a7:60:5c:71:d9:9d:78:1b:1b:e9: 37:1d:b1:be:07:38:b9:d7:cc:90:9d:36:5a:8e:16: 65:b9:36:10:db:5d:fd:18:e2:26:79:88:e4:3b:78: e5:10:0e:3d:97:aa:c4:56:37:e7:e6:2c:82:e5:aa: 58:29:0a:14:68:d9:26:92:c2:bb:f4:9c:eb:89:1c: 82:bc:8b:5a:73:48:21:eb:94:1f:e6:3f:3a:d9:92: e3:b0:48:f5:e9:29:1e:d6:1d:0f:3c:f9:6c:0b:df: 0d:0e:07:31:bd:14:55:07:49:4f:18:ef:1f:91:bf: 57:c8:d6:7d:fe:b7:16:de:0d:45:29:f7:d5:85:71: 69:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:03:90:B6:2E:34:D2:52:1F:8C:DA:71:BD:36:40:7F:50:29:E7:FA X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/433917A83D8211EEA0E4DD46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.0.0/22 Signature Algorithm: sha256WithRSAEncryption 43:a6:bb:13:b1:f0:40:ae:de:e4:91:8e:b9:5d:05:a0:28:07: 5c:78:96:98:dd:03:c5:61:dc:f2:64:50:69:9f:68:8d:2d:ed: ac:2c:9d:82:84:3e:45:9b:f3:e8:5d:cc:4b:12:93:dc:2c:ff: 69:7a:1f:fa:68:ad:43:c3:4c:ff:74:c4:4c:29:03:6d:e4:be: 0b:54:0d:27:b7:a4:cc:d6:b8:48:b5:1c:f1:44:bb:7f:f1:3e: bd:ac:25:55:70:99:c0:04:6b:ed:eb:3b:21:b7:65:4a:86:47: 69:30:85:29:d0:9d:0b:4d:5d:af:b9:b4:c5:9e:d0:97:06:59: a9:44:2a:72:94:9e:85:9b:11:cc:96:df:6f:02:41:c6:70:75: 6c:cd:b0:40:d3:47:93:41:13:e3:65:53:f5:0c:e8:6e:04:cf: fb:6f:4a:60:05:a1:0c:9f:68:e2:6c:6c:29:66:e4:4e:66:e4: 42:c8:63:1c:be:8a:2d:7b:c0:2e:fa:e0:35:fe:93:ab:c9:e9: fa:d4:2c:2d:7c:42:4e:5f:f2:88:a6:96:56:8f:e0:4d:83:ce: 31:5b:22:81:c8:7b:af:35:4b:a3:20:56:d4:84:27:90:25:77: 87:e1:a6:d8:3a:98:74:84:09:8b:e7:db:63:65:85:3d:60:fd: 5b:07:18:74 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjMwOTA4MTgyNTQ4WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZiNjcyYy0wMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysknFNXZVyJ6sc86/LemY2TJplCjyt4cYPAwFfvM8co5KsnRcffjNYVEyMUI LHx5ugOsIaRHgDjovGK4bq5/NKt85uDj5AGnG4pKcPYeQLbBTqAcINxc3ap0vGGe 1rkYZe6FRNNjCgU/b0ATNa/3U3aju4GoSf9yeQpVH6dgXHHZnXgbG+k3HbG+Bzi5 18yQnTZajhZluTYQ2139GOImeYjkO3jlEA49l6rEVjfn5iyC5apYKQoUaNkmksK7 9JzriRyCvItac0gh65Qf5j862ZLjsEj16Ske1h0PPPlsC98NDgcxvRRVB0lPGO8f kb9XyNZ9/rcW3g1FKffVhXFpYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOEDkLYu NNJSH4zacb02QH9QKef6MB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg2OEMvM0ZCOTMzNjhBOURCMTFFOTg0Mjg1Mjg2QzRGOUFFMDIvNDMzOTE3QTgz RDgyMTFFRUEwRTRERDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnBQAwDQYJKoZIhvcNAQELBQADggEBAEOmuxOx8ECu3uSR jrldBaAoB1x4lpjdA8Vh3PJkUGmfaI0t7awsnYKEPkWb8+hdzEsSk9ws/2l6H/po rUPDTP90xEwpA23kvgtUDSe3pMzWuEi1HPFEu3/xPr2sJVVwmcAEa+3rOyG3ZUqG R2kwhSnQnQtNXa+5tMWe0JcGWalEKnKUnoWbEcyW328CQcZwdWzNsEDTR5NBE+Nl U/UM6G4Ez/tvSmAFoQyfaOJsbClm5E5m5ELIYxy+ii17wC764DX+k6vJ6frULC18 Qk5f8oimllaP4E2DzjFbIoHIe681S6MgVtSEJ5Ald4fhptg6mHSECYvn22NlhT1g /VsHGHQ= -----END CERTIFICATE-----Generated at Fri May 10 19:18:49 2024 by rpki-client on console-ams.rpki-client.org