$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/5BA557A6DEB011EDB7B0C04EC4F9AE02.roa File: 5BA557A6DEB011EDB7B0C04EC4F9AE02.roa (raw, json) Hash identifier: rqsGCczlTsAssnjE3lU2t0y5qqxlPSKotk0BlBeeudM= Subject key identifier: 79:8F:73:E6:38:CF:F1:C4:29:78:BA:3F:06:69:86:9A:62:B9:98:E8 Certificate issuer: /CN=A91EC93F/serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1 Certificate serial: BC Authority key identifier: 09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/5BA557A6DEB011EDB7B0C04EC4F9AE02.roa Signing time: Mon 15 Apr 2024 06:09:21 +0000 ROA not before: Mon 15 Apr 2024 06:09:21 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 150749 IP address blocks: 103.83.238.0/23 maxlen: 23 103.83.238.0/24 maxlen: 24 103.83.239.0/24 maxlen: 24 2001:df1:ef40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93F/serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1 Validity Not Before: Apr 15 06:09:21 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=661cc490-dc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e5:ac:ef:89:ac:4e:7c:25:32:06:61:4e:96: cb:70:b5:b7:3f:39:42:2c:c0:0e:3e:ac:71:db:36: 42:b1:70:07:d6:a6:59:36:cd:db:31:12:0c:94:9b: 30:a8:af:66:f9:5a:e3:9c:77:ba:b2:b6:e1:96:9a: 50:43:c7:dc:6c:c6:5e:a2:4e:e1:1d:c0:9a:42:6d: 35:18:71:79:07:b3:b8:f5:32:d5:4a:64:90:bd:3f: f1:63:13:2d:ee:d3:24:fe:e7:7a:31:28:e9:d4:8b: 9a:23:a0:02:66:2b:56:39:d8:d6:37:b0:17:45:91: 70:80:95:ad:4d:8f:29:f6:80:1d:ff:c1:17:86:0b: 11:ca:dd:77:df:21:77:4b:31:36:29:9c:df:c6:02: 9d:2d:05:3e:08:57:b4:84:9d:e2:41:51:97:c6:2c: 18:5a:5d:08:37:0d:fa:20:6d:89:49:2f:ea:a9:35: 9e:65:15:ea:b0:d4:ea:54:9c:b6:fb:e3:ee:7a:58: d2:75:d1:d8:28:31:57:4e:56:cc:23:af:a9:fc:b5: 87:0a:4e:84:ba:8a:01:02:9e:4c:ed:6e:a0:18:b8: 85:0b:ab:60:b4:7d:d9:14:50:bd:0d:e4:7f:5d:6e: f2:da:c7:78:c9:9b:65:8b:ba:77:44:03:a0:d5:5d: 07:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8F:73:E6:38:CF:F1:C4:29:78:BA:3F:06:69:86:9A:62:B9:98:E8 X509v3 Authority Key Identifier: keyid:09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/5BA557A6DEB011EDB7B0C04EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.238.0/23 IPv6: 2001:df1:ef40::/48 Signature Algorithm: sha256WithRSAEncryption 54:2c:15:16:43:22:51:87:8c:22:79:4e:ac:12:43:d8:e3:19: 30:77:bb:24:04:9d:86:b2:c8:35:41:db:26:6e:6b:c0:3d:90: 00:e5:9d:06:5a:77:20:e3:77:bc:f0:3c:c3:34:a1:ce:7e:d4: 31:e0:7f:39:2c:aa:93:b4:7d:d1:fb:43:4d:41:53:7d:6c:a2: 5a:4c:5e:d9:ac:ff:4a:f8:5a:bc:8b:cf:39:e4:42:53:88:37: 34:d7:9f:03:c9:ae:1e:ef:a8:ac:62:d1:61:39:6c:ec:ec:92: 36:6b:3d:09:13:23:a5:64:be:a8:c1:a2:9e:ba:99:a0:d0:78: 64:4a:b1:0b:2e:af:d9:37:51:09:ef:65:19:3f:32:9f:4a:60: 4f:e3:b3:da:72:c2:d5:cd:31:ab:0c:86:c4:88:f3:19:84:87: c6:ca:fd:5b:a7:70:d1:4c:dc:1e:27:66:c1:02:20:62:07:8b: b6:29:bb:fd:91:65:de:2c:4e:c8:19:26:d3:48:94:5c:c7:c8: be:7b:8c:c1:92:15:7e:b5:f1:e5:6d:40:91:fe:e8:1e:65:33: 02:cf:c6:22:60:e6:15:4c:94:74:80:c3:e2:04:8e:38:42:b9: d9:cd:f5:98:0e:6b:af:d6:a7:93:be:95:91:bd:b0:12:f7:eb: c4:46:e4:fe -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0YxMTAvBgNVBAUTKDA5NEEwRENEODAyQTA1QkY3NTczRkY3QTZFRTBBN0E5 NzIwNTUwRDEwHhcNMjQwNDE1MDYwOTIxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjFjYzQ5MC1kYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnuWs74msTnwlMgZhTpbLcLW3PzlCLMAOPqxx2zZCsXAH1qZZNs3bMRIMlJsw qK9m+VrjnHe6srbhlppQQ8fcbMZeok7hHcCaQm01GHF5B7O49TLVSmSQvT/xYxMt 7tMk/ud6MSjp1IuaI6ACZitWOdjWN7AXRZFwgJWtTY8p9oAd/8EXhgsRyt133yF3 SzE2KZzfxgKdLQU+CFe0hJ3iQVGXxiwYWl0INw36IG2JSS/qqTWeZRXqsNTqVJy2 ++PueljSddHYKDFXTlbMI6+p/LWHCk6EuooBAp5M7W6gGLiFC6tgtH3ZFFC9DeR/ XW7y2sd4yZtli7p3RAOg1V0H2wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHmPc+Y4 z/HEKXi6PwZphppiuZjoMB8GA1UdIwQYMBaAFAlKDc2AKgW/dXP/em7gp6lyBVDR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRi82MEE4Rjg4Q0RF QUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJiOTFjXzk2YnVDbnFYSUZV TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVb056WUFxQmI5MWNfOTZidUNucVhJRlVORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUM5M0YvNjBBOEY4OENERUFEMTFFRDhBNkRGMTREQzRGOUFFMDIvNUJBNTU3QTZE RUIwMTFFREI3QjBDMDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnU+4wDwQCAAIwCQMHACABDfHvQDANBgkqhkiG9w0BAQsF AAOCAQEAVCwVFkMiUYeMInlOrBJD2OMZMHe7JASdhrLINUHbJm5rwD2QAOWdBlp3 ION3vPA8wzShzn7UMeB/OSyqk7R90ftDTUFTfWyiWkxe2az/SvhavIvPOeRCU4g3 NNefA8muHu+orGLRYTls7OySNms9CRMjpWS+qMGinrqZoNB4ZEqxCy6v2TdRCe9l GT8yn0pgT+Oz2nLC1c0xqwyGxIjzGYSHxsr9W6dw0UzcHidmwQIgYgeLtim7/ZFl 3ixOyBkm00iUXMfIvnuMwZIVfrXx5W1Akf7oHmUzAs/GImDmFUyUdIDD4gSOOEK5 2c31mA5rr9ank76Vkb2wEvfrxEbk/g== -----END CERTIFICATE-----Generated at Sun May 19 08:25:11 2024 by rpki-client on console-ams.rpki-client.org