$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/156CEB62DC6011ECB2698C14C4F9AE02.roa File: 156CEB62DC6011ECB2698C14C4F9AE02.roa (raw, json) Hash identifier: oKOcbNnwPGTy3q5emliwbRxX0Ls/8MFVWMAhcz5HBKI= Subject key identifier: 76:08:C0:AA:52:E2:1B:ED:99:EE:4C:1E:67:A3:E6:37:A4:59:82:1A Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 086D Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/156CEB62DC6011ECB2698C14C4F9AE02.roa Signing time: Thu 18 Apr 2024 22:00:25 +0000 ROA not before: Thu 18 Apr 2024 22:00:25 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 61327 IP address blocks: 103.89.144.0/22 maxlen: 22 103.89.144.0/24 maxlen: 24 103.89.145.0/24 maxlen: 24 103.89.146.0/24 maxlen: 24 103.89.147.0/24 maxlen: 24 202.155.188.0/22 maxlen: 22 2400:7ca0::/36 maxlen: 36 2400:7ca0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2157 (0x86d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Apr 18 22:00:25 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=662197f9-c310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c1:53:4c:d8:27:3d:18:c9:da:0e:b5:b4:c6: a9:f7:5b:57:e3:61:4f:2e:b2:80:70:5c:f0:94:47: 9e:ec:73:2b:a3:61:3e:89:62:5b:3d:ab:fd:77:51: 9a:24:44:6c:ba:90:b7:1b:65:77:91:29:bc:a1:18: 0b:4d:15:0d:47:43:66:e8:6a:da:02:39:38:2a:f8: f7:8b:75:ed:10:92:a0:3c:c3:17:09:f8:38:b9:23: df:a7:74:fb:43:a6:61:2c:9d:92:79:86:8d:fd:df: 5c:6a:13:f6:2d:05:9c:4f:1e:de:8b:99:28:e6:fc: 7a:6d:eb:cc:16:eb:ae:99:9e:ea:e9:05:dd:c3:f7: ae:17:a4:08:76:8c:bb:42:7a:e7:ff:ed:b1:75:7c: bb:17:a0:84:15:d7:29:00:20:e6:d2:39:fb:d8:4c: e8:47:19:3c:ce:c4:6f:fe:7b:e1:13:4b:8a:60:45: 47:29:c2:2b:1e:d5:4d:49:c7:b6:16:8c:40:d3:7a: b8:42:21:c8:e4:bf:c2:ad:de:b6:03:3f:8b:eb:94: 96:ca:1e:93:9f:cf:ad:57:e9:ea:22:b9:0b:8a:be: bf:7f:e8:cc:06:49:dc:f5:1b:df:a2:95:34:23:e5: 6f:14:ac:fa:c4:67:dd:1a:2b:cd:b1:2f:8c:71:7c: 99:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:08:C0:AA:52:E2:1B:ED:99:EE:4C:1E:67:A3:E6:37:A4:59:82:1A X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/156CEB62DC6011ECB2698C14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.144.0/22 202.155.188.0/22 IPv6: 2400:7ca0::/35 Signature Algorithm: sha256WithRSAEncryption 92:0a:fc:52:ca:41:b9:69:a2:ee:b7:6b:8b:90:af:1f:84:46: 5d:ee:f1:7d:ac:ae:b8:7e:49:eb:5c:e8:35:9a:18:af:8d:42: ba:d1:41:2f:e3:85:ce:89:80:f2:dc:33:ab:d6:77:29:8c:a7: 30:7a:27:7d:0c:18:91:62:84:1d:da:0a:40:45:ae:a2:d0:dd: 0b:e0:75:4e:c0:f4:33:91:a2:1a:49:5c:79:b1:a4:97:44:32: 08:cc:32:97:7e:b2:af:ff:17:a1:e3:79:f6:f9:43:c9:57:e6: f3:b9:15:98:d3:d5:e5:6f:49:3a:0b:33:34:91:ae:be:7e:69: 6f:70:cc:a8:bd:45:d7:f4:46:18:05:41:ec:d4:65:0f:81:0d: 7b:36:21:3b:85:a3:a3:f3:bb:b2:5b:dd:a9:6c:8a:15:f8:5f: 10:44:f6:8d:1e:de:f6:f8:4c:cd:5d:8f:7f:a9:bb:4c:ca:7f: a3:15:cd:fc:59:44:46:54:8c:4f:84:de:39:b7:ef:d8:3e:98: 8c:16:5f:8f:d6:53:6d:54:f8:e7:3d:14:10:3a:b4:29:4d:ee: 6d:4f:2a:2f:a7:d6:81:5d:43:a8:1f:60:87:ef:5e:26:72:48: d4:1b:fc:49:85:46:77:04:26:cd:b0:2f:e0:18:f0:b6:e1:1f: 56:73:64:c7 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjQwNDE4MjIwMDI1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjIxOTdmOS1jMzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08FTTNgnPRjJ2g61tMap91tX42FPLrKAcFzwlEee7HMro2E+iWJbPav9d1Ga JERsupC3G2V3kSm8oRgLTRUNR0Nm6GraAjk4Kvj3i3XtEJKgPMMXCfg4uSPfp3T7 Q6ZhLJ2SeYaN/d9cahP2LQWcTx7ei5ko5vx6bevMFuuumZ7q6QXdw/euF6QIdoy7 Qnrn/+2xdXy7F6CEFdcpACDm0jn72EzoRxk8zsRv/nvhE0uKYEVHKcIrHtVNSce2 FoxA03q4QiHI5L/Crd62Az+L65SWyh6Tn8+tV+nqIrkLir6/f+jMBknc9RvfopU0 I+VvFKz6xGfdGivNsS+McXyZkQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFHYIwKpS 4hvtme5MHmej5jekWYIaMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUY1NTQvRUIxQ0JCRTI5RTVCMTFFQUIyNDhGQzUxQzRGOUFFMDIvMTU2Q0VCNjJE QzYwMTFFQ0IyNjk4QzE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBIEAgABMAwDBAJnWZADBALKm7wwDgQCAAIwCAMGBSQAfKAAMA0GCSqGSIb3 DQEBCwUAA4IBAQCSCvxSykG5aaLut2uLkK8fhEZd7vF9rK64fknrXOg1mhivjUK6 0UEv44XOiYDy3DOr1ncpjKcweid9DBiRYoQd2gpARa6i0N0L4HVOwPQzkaIaSVx5 saSXRDIIzDKXfrKv/xeh43n2+UPJV+bzuRWY09Xlb0k6CzM0ka6+fmlvcMyovUXX 9EYYBUHs1GUPgQ17NiE7haOj87uyW92pbIoV+F8QRPaNHt72+EzNXY9/qbtMyn+j Fc38WURGVIxPhN45t+/YPpiMFl+P1lNtVPjnPRQQOrQpTe5tTyovp9aBXUOoH2CH 714mckjUG/xJhUZ3BCbNsC/gGPC24R9Wc2TH -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:32 2024 by rpki-client on console-ams.rpki-client.org