$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa File: 5915642864AB11EEBFD54F2EC4F9AE02.roa (raw, json) Hash identifier: vrkSfrIO1esiQb62oklUF19uRzO1YJ77hK8qAtotf54= Subject key identifier: 75:72:4A:3F:5A:51:BA:ED:EA:CD:27:9C:78:23:D1:44:69:41:A9:96 Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0D4B Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa Signing time: Sat 07 Oct 2023 00:49:19 +0000 ROA not before: Sat 07 Oct 2023 00:49:19 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 151627 IP address blocks: 103.5.0.0/22 maxlen: 22 103.5.0.0/23 maxlen: 23 103.5.0.0/24 maxlen: 24 103.5.1.0/24 maxlen: 24 103.5.2.0/23 maxlen: 23 103.5.2.0/24 maxlen: 24 103.5.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3403 (0xd4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Oct 7 00:49:19 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6520ab0f-39e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ea:ca:87:2e:95:f9:d9:67:0b:9d:ab:93:2b: 14:56:11:56:4c:ea:d7:32:4a:da:d8:04:bc:13:4d: 20:d6:6c:0b:07:a0:70:0f:b8:7c:ae:b6:77:ad:51: 8c:39:04:fb:ce:75:da:e7:f8:6d:ea:c0:6f:97:e7: 0e:2b:98:7d:25:aa:5a:a5:63:01:e9:d6:d8:b1:f4: bf:ba:f9:90:37:61:86:c8:57:11:ed:46:c2:93:32: 43:b0:a3:eb:9f:dc:55:30:7c:d9:98:8c:de:f1:8c: 92:7c:0c:e4:b8:31:78:67:2f:23:88:b8:5d:ca:50: 3f:8e:db:54:53:aa:33:ea:01:72:94:40:70:f5:54: d6:c2:66:b8:22:21:22:3b:28:32:50:12:29:f4:a5: 7a:ac:05:4d:dd:55:ea:00:62:52:6f:2e:00:3a:c8: 40:62:c6:c1:69:96:13:9a:2b:ef:b2:5a:35:ae:8e: b9:53:71:19:e5:65:4f:c3:a5:df:82:8c:e0:42:92: ad:b3:13:38:f6:ca:34:d9:15:9c:93:37:2b:d8:ae: 19:fd:4e:91:61:08:99:56:b8:8e:84:39:0a:46:49: 53:98:9d:c0:11:15:0b:ba:c0:75:67:d6:d6:54:eb: fc:e9:59:ee:b3:9b:38:1b:0b:f1:12:b0:84:a4:25: 1e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:72:4A:3F:5A:51:BA:ED:EA:CD:27:9C:78:23:D1:44:69:41:A9:96 X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.0.0/22 Signature Algorithm: sha256WithRSAEncryption 73:88:9b:2c:9c:8c:73:4f:50:35:87:5e:0b:ac:05:c7:82:1d: 58:12:5e:ee:88:c2:50:7e:24:84:0a:f2:95:24:de:d6:c7:21: 6d:c9:e7:bc:f1:08:2a:98:ea:33:ae:14:88:6d:02:2c:8d:69: c4:5d:e6:cb:ea:9f:17:34:b6:45:ff:bc:3c:87:02:67:0d:40: 57:15:83:0f:a0:cc:43:f0:80:be:b1:4e:45:3e:df:e0:81:b0: eb:69:33:1b:ac:2c:b1:f5:49:0d:84:3a:07:17:1b:bc:b9:19: 15:a5:b9:48:d1:b0:89:db:82:f8:37:c6:19:c1:c9:89:f2:a5: 50:87:d7:3c:e0:cd:66:9c:58:94:9f:f5:cc:14:bd:90:d0:49: 58:da:30:05:9f:50:e7:93:52:f9:c1:36:30:26:10:eb:27:65: dc:33:af:19:c3:02:4b:e3:d1:94:f9:f9:40:e5:ab:18:7f:e6: a5:56:d4:51:42:45:7b:ee:e2:b9:4c:e6:71:bb:49:cd:68:a3: d3:14:96:c0:69:3c:98:e6:35:f1:74:28:1b:f2:90:fa:72:a9: 17:c0:50:66:0d:c0:04:05:1d:ff:d7:03:5c:77:b2:7b:8c:e7: 00:a8:fd:c5:64:e2:9f:2d:0c:d6:85:a7:cd:43:d5:e3:07:5f: ae:81:2b:33 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjMxMDA3MDA0OTE5WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTIwYWIwZi0zOWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OrKhy6V+dlnC52rkysUVhFWTOrXMkra2AS8E00g1mwLB6BwD7h8rrZ3rVGM OQT7znXa5/ht6sBvl+cOK5h9JapapWMB6dbYsfS/uvmQN2GGyFcR7UbCkzJDsKPr n9xVMHzZmIze8YySfAzkuDF4Zy8jiLhdylA/jttUU6oz6gFylEBw9VTWwma4IiEi OygyUBIp9KV6rAVN3VXqAGJSby4AOshAYsbBaZYTmivvslo1ro65U3EZ5WVPw6Xf gozgQpKtsxM49so02RWckzcr2K4Z/U6RYQiZVriOhDkKRklTmJ3AERULusB1Z9bW VOv86Vnus5s4GwvxErCEpCUelwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHVySj9a Ubrt6s0nnHgj0URpQamWMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg2OEMvM0ZCOTMzNjhBOURCMTFFOTg0Mjg1Mjg2QzRGOUFFMDIvNTkxNTY0Mjg2 NEFCMTFFRUJGRDU0RjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnBQAwDQYJKoZIhvcNAQELBQADggEBAHOImyycjHNPUDWH XgusBceCHVgSXu6IwlB+JIQK8pUk3tbHIW3J57zxCCqY6jOuFIhtAiyNacRd5svq nxc0tkX/vDyHAmcNQFcVgw+gzEPwgL6xTkU+3+CBsOtpMxusLLH1SQ2EOgcXG7y5 GRWluUjRsInbgvg3xhnByYnypVCH1zzgzWacWJSf9cwUvZDQSVjaMAWfUOeTUvnB NjAmEOsnZdwzrxnDAkvj0ZT5+UDlqxh/5qVW1FFCRXvu4rlM5nG7Sc1oo9MUlsBp PJjmNfF0KBvykPpyqRfAUGYNwAQFHf/XA1x3snuM5wCo/cVk4p8tDNaFp81D1eMH X66BKzM= -----END CERTIFICATE-----Generated at Fri May 10 19:18:49 2024 by rpki-client on console-ams.rpki-client.org