$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/0F0EC4A67A8811EB95169F62C4F9AE02.roa File: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (raw, json) Hash identifier: G+u8mwiapJexmo/rY6P7k5xS6TEMD9oyOlDerwWxLQU= Subject key identifier: 8A:A3:76:36:98:B1:AA:BF:87:F9:30:76:B2:1F:F9:6B:F3:81:DD:69 Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Certificate serial: 05B1 Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/0F0EC4A67A8811EB95169F62C4F9AE02.roa Signing time: Thu 11 Apr 2024 00:02:55 +0000 ROA not before: Thu 11 Apr 2024 00:02:55 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 133448 IP address blocks: 103.86.85.0/24 maxlen: 24 103.86.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1457 (0x5b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Validity Not Before: Apr 11 00:02:55 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=661728af-9dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b5:a4:87:28:d2:2a:0f:86:95:10:a6:c6:35: e1:eb:56:80:63:7b:2d:1a:33:ff:6d:26:a0:cf:f4: 7f:cf:a4:d8:bf:77:b0:09:97:0f:e2:cc:68:a6:f5: 7f:85:ea:f1:7e:4f:6a:49:c3:3b:15:7d:34:68:e0: 10:7a:a7:d7:43:a1:3a:5c:8f:0d:bf:70:99:2f:5e: 4c:b6:73:4d:8a:38:1b:80:ee:a0:00:ac:cb:75:a8: 64:d2:71:22:66:8e:36:82:51:7f:35:a6:95:8e:c0: b9:0e:be:6b:2f:e1:5e:a4:12:7a:eb:0f:6f:50:bb: 63:4c:d4:06:43:a6:a7:ce:5f:b3:77:25:d5:3b:0a: e0:11:a4:50:f9:58:d3:f2:c9:fc:74:4e:a1:04:d4: 7c:63:3a:ab:12:7b:64:92:d8:c4:bc:20:bb:46:1f: e6:c5:96:75:c4:07:d4:69:89:f3:37:41:fd:52:cb: 4c:a5:c5:a9:53:9c:ed:b7:e7:be:20:09:a3:ee:0c: 06:38:d6:53:19:2f:1b:7d:58:0f:5b:91:11:7e:06: b5:1d:f3:97:a4:e1:76:1e:c5:0c:d9:70:9f:c0:6c: 92:51:6d:e9:aa:55:9f:9d:85:2b:91:8b:86:24:f1: 31:78:48:8b:03:11:c4:39:2f:bf:2c:71:8f:ca:ee: 08:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A3:76:36:98:B1:AA:BF:87:F9:30:76:B2:1F:F9:6B:F3:81:DD:69 X509v3 Authority Key Identifier: keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/0F0EC4A67A8811EB95169F62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.85.0/24 103.86.87.0/24 Signature Algorithm: sha256WithRSAEncryption ae:7e:92:95:c2:fe:c3:5a:4f:a1:75:7f:52:d1:d7:ff:46:65: 41:15:c6:31:42:bd:af:75:88:73:4a:31:f9:77:dd:cf:13:9c: 04:88:6c:b6:07:c3:0b:8c:23:af:3a:6d:66:74:3b:86:0b:eb: f6:58:97:12:b4:84:e0:5d:b3:a9:47:34:66:04:a2:96:4a:f6: 2f:66:80:55:1b:5a:1a:44:44:07:6a:9c:d8:82:e5:ef:08:9c: 42:4a:e4:ff:42:5d:c9:75:47:fc:ac:fe:30:85:45:e1:dc:1e: 79:84:27:47:0c:27:54:67:eb:d4:3a:b9:ff:39:0b:da:b7:db: 34:87:4a:46:ce:fc:d2:de:68:b9:4d:39:c7:4b:df:33:f3:7b: f2:6c:57:8d:16:a4:ba:b1:cb:d0:00:6e:47:9f:b0:f0:6f:eb: d5:25:87:9c:09:73:2b:b8:02:35:51:7f:42:00:c2:5d:81:8b: e3:4e:c0:9a:c5:c1:1c:c7:04:66:9d:ca:84:75:eb:bd:eb:4c: a8:9b:58:6b:a9:d5:71:42:07:ae:20:1b:24:13:0e:4b:2c:a2: cd:af:71:31:4e:19:6c:32:b0:46:d6:f4:43:ef:c3:1f:5d:2c: 10:79:a6:9b:b0:64:a4:8c:04:27:5a:ca:16:3f:76:b5:6b:23: 53:94:ec:c3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCQ0IxMTAvBgNVBAUTKDE2Qjk4ODQyRDg2MUFFRkU4MDMwNDAyMDBDOUFBQTg5 NTYwRjJCQ0EwHhcNMjQwNDExMDAwMjU1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjE3MjhhZi05ZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrWkhyjSKg+GlRCmxjXh61aAY3stGjP/bSagz/R/z6TYv3ewCZcP4sxopvV/ herxfk9qScM7FX00aOAQeqfXQ6E6XI8Nv3CZL15MtnNNijgbgO6gAKzLdahk0nEi Zo42glF/NaaVjsC5Dr5rL+FepBJ66w9vULtjTNQGQ6anzl+zdyXVOwrgEaRQ+VjT 8sn8dE6hBNR8YzqrEntkktjEvCC7Rh/mxZZ1xAfUaYnzN0H9UstMpcWpU5ztt+e+ IAmj7gwGONZTGS8bfVgPW5ERfga1HfOXpOF2HsUM2XCfwGySUW3pqlWfnYUrkYuG JPExeEiLAxHEOS+/LHGPyu4I5wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIqjdjaY saq/h/kwdrIf+Wvzgd1pMB8GA1UdIwQYMBaAFBa5iELYYa7+gDBAIAyaqolWDyvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUJDQi8zNDJGRkYxODdB ODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2NkFNRUFnREpxcWlWWVBL OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZybUlRdGhocnY2QU1FQWdESnFxaVZZUEs4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFCQ0IvMzQyRkZGMTg3QTg2MTFFQjk3QUU1MTYwQzRGOUFFMDIvMEYwRUM0QTY3 QTg4MTFFQjk1MTY5RjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnVlUDBABnVlcwDQYJKoZIhvcNAQELBQADggEBAK5+kpXC /sNaT6F1f1LR1/9GZUEVxjFCva91iHNKMfl33c8TnASIbLYHwwuMI686bWZ0O4YL 6/ZYlxK0hOBds6lHNGYEopZK9i9mgFUbWhpERAdqnNiC5e8InEJK5P9CXcl1R/ys /jCFReHcHnmEJ0cMJ1Rn69Q6uf85C9q32zSHSkbO/NLeaLlNOcdL3zPze/JsV40W pLqxy9AAbkefsPBv69Ulh5wJcyu4AjVRf0IAwl2Bi+NOwJrFwRzHBGadyoR1673r TKibWGup1XFCB64gGyQTDkssos2vcTFOGWwysEbW9EPvwx9dLBB5ppuwZKSMBCda yhY/drVrI1OU7MM= -----END CERTIFICATE-----Generated at Fri May 3 03:10:57 2024 by rpki-client on console-ams.rpki-client.org