$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/BCD8D1DCD22B11EE9443A443C4F9AE02.roa File: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (raw, json) Hash identifier: T1xeJuM61tXFrRrs4nBlTF2LptDqgwUMRZIt/7strSc= Subject key identifier: 2D:6D:38:AA:84:E4:1C:44:D4:3A:06:20:DE:58:2E:54:34:65:9F:49 Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Certificate serial: 0352 Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/BCD8D1DCD22B11EE9443A443C4F9AE02.roa Signing time: Fri 23 Feb 2024 09:12:59 +0000 ROA not before: Fri 23 Feb 2024 09:12:59 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 16509 IP address blocks: 103.179.36.0/24 maxlen: 24 2001:df0:45c4::/46 maxlen: 47 2001:df0:45c4::/47 maxlen: 48 2001:df0:45c6::/48 maxlen: 48 2001:df0:45c8::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Validity Not Before: Feb 23 09:12:59 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d8619b-1b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:95:5c:29:9c:80:81:a5:83:a4:5f:3c:6f: 34:f8:1a:56:08:84:5f:67:d1:83:a1:e3:56:0e:1b: 9a:30:f9:ea:72:7f:96:85:16:2a:9e:cc:55:89:f0: 4c:b8:c0:73:e3:9d:57:5d:6b:9c:15:5b:ce:c4:67: 18:4b:18:ac:bb:0f:58:2d:08:23:b6:c3:4a:87:4f: 8c:aa:c0:fc:e1:62:04:8d:0b:3d:46:47:56:99:af: 84:5b:eb:65:55:75:79:0b:f5:d9:25:e2:dd:1e:fd: 1a:33:c7:59:61:0c:37:61:89:40:83:b8:40:55:d3: 3f:3d:bc:2a:56:d6:b8:8c:6b:aa:8e:6a:bc:45:0c: e1:44:24:a3:2d:ed:cd:b6:79:46:6d:04:be:05:49: 5b:33:b1:a7:f4:34:55:54:ea:7c:1a:1e:55:10:4a: 21:2a:8c:39:d8:35:fa:2b:5b:ed:c2:b0:48:85:e5: 41:ae:a7:04:2c:12:f3:df:b7:d8:18:e3:41:c7:4e: c8:c3:ae:1f:26:d9:82:46:07:11:a8:8d:9e:17:e3: 40:bc:ad:d6:6b:e1:08:44:fa:8d:74:90:7c:d7:6d: a5:1a:0e:5e:b6:b7:03:49:64:3f:cc:b2:0c:f5:2b: a8:ef:2e:d6:36:55:4d:fb:04:4e:80:e5:38:2b:0a: d7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6D:38:AA:84:E4:1C:44:D4:3A:06:20:DE:58:2E:54:34:65:9F:49 X509v3 Authority Key Identifier: keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/BCD8D1DCD22B11EE9443A443C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.36.0/24 IPv6: 2001:df0:45c4::-2001:df0:45cf:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 9b:5d:b7:01:c0:ad:12:c4:0c:6f:5f:05:a6:d1:97:46:38:3c: 41:90:64:1a:76:79:c8:a6:25:df:45:5d:97:c3:d7:40:60:e1: 64:e7:1b:15:3f:ed:d2:b3:a7:b6:f6:35:c3:9e:1c:bf:8a:21: 88:94:51:23:f6:07:8c:37:c4:f4:1c:07:ee:3a:ac:21:05:70: 89:f1:9d:ac:07:bf:72:fd:5b:e2:00:89:d6:22:fe:05:06:e7: 82:54:25:4f:9f:67:79:8c:65:d1:5a:d9:a7:b4:a3:f4:94:98: 25:34:df:c5:11:08:38:71:86:ce:0e:2b:88:38:e2:23:af:34: 6f:98:82:66:f1:74:d8:ed:2b:ee:bb:1a:4c:76:6c:72:bb:34: 80:ab:bf:be:ac:c1:01:d1:52:39:f6:65:db:a8:2d:3c:c7:52: e8:44:4a:2f:c4:64:9d:e0:05:4c:d7:56:42:dd:99:01:36:41: 51:25:26:f4:09:37:c9:32:44:6a:be:5a:b0:15:22:14:c7:7c: fa:c8:29:fa:f5:dc:03:5f:4a:33:24:26:4c:6a:49:5d:d3:a2: f8:63:dc:b1:50:7c:13:b2:7a:87:2f:c3:a7:fd:c8:01:5b:2a: 2b:41:6d:ae:de:da:5f:5b:fd:74:05:f5:44:27:56:47:57:21: 72:4b:52:3f -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy NkZERjdBMTMwHhcNMjQwMjIzMDkxMjU5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ4NjE5Yi0xYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviiVXCmcgIGlg6RfPG80+BpWCIRfZ9GDoeNWDhuaMPnqcn+WhRYqnsxVifBM uMBz451XXWucFVvOxGcYSxisuw9YLQgjtsNKh0+MqsD84WIEjQs9RkdWma+EW+tl VXV5C/XZJeLdHv0aM8dZYQw3YYlAg7hAVdM/PbwqVta4jGuqjmq8RQzhRCSjLe3N tnlGbQS+BUlbM7Gn9DRVVOp8Gh5VEEohKow52DX6K1vtwrBIheVBrqcELBLz37fY GONBx07Iw64fJtmCRgcRqI2eF+NAvK3Wa+EIRPqNdJB8122lGg5etrcDSWQ/zLIM 9Suo7y7WNlVN+wROgOU4KwrXbQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFC1tOKqE 5BxE1DoGIN5YLlQ0ZZ9JMB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFBRjUvRTk5RjUyM0E2RUM0MTFFQ0FGRDI3MzMxQzRGOUFFMDIvQkNEOEQxRENE MjJCMTFFRTk0NDNBNDQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMAwEAgABMAYDBABnsyQwGgQCAAIwFDASAwcCIAEN8EXEAwcEIAEN8EXAMA0G CSqGSIb3DQEBCwUAA4IBAQCbXbcBwK0SxAxvXwWm0ZdGODxBkGQadnnIpiXfRV2X w9dAYOFk5xsVP+3Ss6e29jXDnhy/iiGIlFEj9geMN8T0HAfuOqwhBXCJ8Z2sB79y /VviAInWIv4FBueCVCVPn2d5jGXRWtmntKP0lJglNN/FEQg4cYbODiuIOOIjrzRv mIJm8XTY7SvuuxpMdmxyuzSAq7++rMEB0VI59mXbqC08x1LoREovxGSd4AVM11ZC 3ZkBNkFRJSb0CTfJMkRqvlqwFSIUx3z6yCn69dwDX0ozJCZMakld06L4Y9yxUHwT snqHL8On/cgBWyorQW2u3tpfW/10BfVEJ1ZHVyFyS1I/ -----END CERTIFICATE-----Generated at Wed May 1 04:49:30 2024 by rpki-client on console-ams.rpki-client.org