$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/08C849682F6E11EDA8ABA74BC4F9AE02.roa File: 08C849682F6E11EDA8ABA74BC4F9AE02.roa (raw, json) Hash identifier: 1bWzJRcM1ZYHgmkOH7WcubfHf6+XQ+/NzwqHg0XnnvA= Subject key identifier: C7:2C:42:9C:5D:7C:09:B5:76:24:8E:36:38:17:B9:43:94:68:74:E9 Certificate issuer: /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Certificate serial: 0502 Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/08C849682F6E11EDA8ABA74BC4F9AE02.roa Signing time: Sat 03 Jun 2023 01:38:49 +0000 ROA not before: Sat 03 Jun 2023 01:38:49 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 24479 IP address blocks: 103.215.64.0/22 maxlen: 22 103.215.64.0/23 maxlen: 24 103.215.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 00:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1282 (0x502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Validity Not Before: Jun 3 01:38:49 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=647a99a9-4b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1a:47:1a:96:9e:ce:91:c4:f9:1d:d5:72:3b: e8:0a:91:55:25:11:30:76:01:dd:00:f2:f4:96:6d: 2d:fc:04:bc:fc:c3:a9:5c:ec:bb:98:0e:7e:bc:ca: 33:d4:e0:fa:c9:b5:c4:da:78:7a:71:b4:6c:75:0e: d9:4b:75:45:77:bd:d4:28:75:76:66:8a:47:63:f2: dc:9d:b1:72:49:2a:c5:23:1c:9e:27:d9:38:eb:10: 9d:27:4a:62:47:05:9a:65:ec:e1:63:55:99:eb:42: 86:89:29:71:c9:63:df:f8:cf:20:8e:9b:d3:dd:79: 72:6b:b7:c3:22:ca:91:78:a6:46:d7:2c:c9:32:75: 9d:dc:8a:95:41:5c:8b:59:71:ff:26:d1:48:74:8f: 8d:84:44:c5:f5:ef:ea:a2:3a:ee:69:fd:9f:ed:d1: 03:75:cb:47:ba:48:a7:3f:05:a6:9c:1d:88:16:6d: 9e:cd:78:a6:ec:e3:7c:ac:47:25:64:94:39:07:e9: 3e:18:17:f6:bc:b3:9a:96:f7:58:80:08:de:25:9c: 49:1c:e1:47:f4:7d:5b:d2:6b:31:15:86:08:b1:d6: e1:17:b6:33:fc:f8:ce:99:62:5e:a2:b3:a6:9f:5b: 03:b6:9b:fd:94:9c:3c:36:d9:a2:b5:5c:1f:eb:f1: 6f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2C:42:9C:5D:7C:09:B5:76:24:8E:36:38:17:B9:43:94:68:74:E9 X509v3 Authority Key Identifier: keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/08C849682F6E11EDA8ABA74BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.215.64.0/22 Signature Algorithm: sha256WithRSAEncryption 85:fe:d9:f5:ee:88:c8:98:a2:75:a4:4c:5a:eb:33:f9:75:cc: fa:35:8e:7c:f8:fb:79:e8:5b:02:82:07:a7:12:39:3e:e5:11: a7:19:93:89:d5:02:77:2d:b9:3e:e3:7f:8f:f4:9e:55:9e:3b: 33:f1:cc:7d:95:db:ec:58:5b:1b:10:27:02:06:bb:a2:c6:87: 22:c6:04:b5:4a:6e:96:e8:c0:c1:6b:cb:4d:2f:c0:3a:bc:13: 8a:55:ab:ab:38:85:f2:04:b5:83:61:f7:82:e1:93:c4:ce:c0: ab:9b:56:e5:f1:92:cc:87:21:03:d5:46:e1:a8:28:d7:d5:4d: d2:b8:15:d8:7f:16:c9:36:de:32:90:d3:2e:ac:ca:a3:85:d0: b3:06:10:5f:c2:94:9a:ba:e9:19:e7:b3:d1:dc:6c:1c:14:64: 56:7c:b4:e7:c5:9d:af:77:87:1d:c5:52:07:77:89:40:d8:58: 90:a7:fd:16:32:30:f2:96:11:92:2c:d1:02:3e:84:bf:40:41: cb:00:66:ad:15:20:37:f3:47:7e:34:78:de:5d:17:b5:1a:0e: d2:ef:b0:03:a6:55:2e:65:9f:59:c1:f8:eb:89:45:0b:8b:ea: 52:1b:d2:dc:eb:41:8b:43:0f:8b:13:38:df:3d:4b:af:91:63: 41:b5:ec:b4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyRTExMTAvBgNVBAUTKDZDMTk3REE0OTIyQ0ZEREM0RTk4Qzg4NDZFMDNBN0Q3 RDBFNDBCNzEwHhcNMjMwNjAzMDEzODQ5WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhOTlhOS00YjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xpHGpaezpHE+R3VcjvoCpFVJREwdgHdAPL0lm0t/AS8/MOpXOy7mA5+vMoz 1OD6ybXE2nh6cbRsdQ7ZS3VFd73UKHV2ZopHY/LcnbFySSrFIxyeJ9k46xCdJ0pi RwWaZezhY1WZ60KGiSlxyWPf+M8gjpvT3Xlya7fDIsqReKZG1yzJMnWd3IqVQVyL WXH/JtFIdI+NhETF9e/qojruaf2f7dEDdctHukinPwWmnB2IFm2ezXim7ON8rEcl ZJQ5B+k+GBf2vLOalvdYgAjeJZxJHOFH9H1b0msxFYYIsdbhF7Yz/PjOmWJeorOm n1sDtpv9lJw8NtmitVwf6/FvHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMcsQpxd fAm1diSONjgXuUOUaHTpMB8GA1UdIwQYMBaAFGwZfaSSLP3cTpjIhG4Dp9fQ5Atx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjJFMS8zRjY5Q0M2NjdG MDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19keE9tTWlFYmdPbjE5RGtD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbDlwSklzX2R4T21NaUViZ09uMTlEa0MzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUYyRTEvM0Y2OUNDNjY3RjAzMTFFQkEwODFBMDJCQzRGOUFFMDIvMDhDODQ5Njgy RjZFMTFFREE4QUJBNzRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn10AwDQYJKoZIhvcNAQELBQADggEBAIX+2fXuiMiYonWk TFrrM/l1zPo1jnz4+3noWwKCB6cSOT7lEacZk4nVAnctuT7jf4/0nlWeOzPxzH2V 2+xYWxsQJwIGu6LGhyLGBLVKbpbowMFry00vwDq8E4pVq6s4hfIEtYNh94Lhk8TO wKubVuXxksyHIQPVRuGoKNfVTdK4Fdh/Fsk23jKQ0y6syqOF0LMGEF/ClJq66Rnn s9HcbBwUZFZ8tOfFna93hx3FUgd3iUDYWJCn/RYyMPKWEZIs0QI+hL9AQcsAZq0V IDfzR340eN5dF7UaDtLvsAOmVS5ln1nB+OuJRQuL6lIb0tzrQYtDD4sTON89S6+R Y0G17LQ= -----END CERTIFICATE-----Generated at Tue May 21 01:47:05 2024 by rpki-client on console-fra.rpki-client.org