$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/29B0FABC031511EB8CE8EF17C4F9AE02.roa File: 29B0FABC031511EB8CE8EF17C4F9AE02.roa (raw, json) Hash identifier: CJrI9wQZ2hxyLqaRQUs5rsp/QVGIEwTqRWwS7HetIkI= Subject key identifier: BA:FE:8C:37:DB:62:0B:0C:23:24:6C:52:33:C7:66:97:D4:8A:F2:18 Certificate issuer: /CN=A91F0C55/serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Certificate serial: 0682 Authority key identifier: 2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/29B0FABC031511EB8CE8EF17C4F9AE02.roa Signing time: Sat 28 Oct 2023 22:30:18 +0000 ROA not before: Sat 28 Oct 2023 22:30:18 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 141219 IP address blocks: 103.156.108.0/23 maxlen: 24 2406:8ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C55/serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Validity Not Before: Oct 28 22:30:18 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=653d8b7a-a719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:32:5e:f9:51:30:5e:a2:0b:de:23:50:82: 16:63:ea:85:41:8d:e1:4c:a0:21:e4:5b:e9:e3:3f: 13:d7:30:3c:99:5c:1b:51:ea:07:26:e2:c4:9e:92: 07:84:ea:95:b3:00:e5:fb:90:f1:73:db:e8:33:ca: 74:3d:ce:ca:24:44:78:40:b8:87:8a:fa:23:1b:67: 1d:21:b6:c5:6a:92:d3:c1:eb:98:31:6c:70:50:06: 1e:9f:f5:c0:88:94:82:60:59:39:74:71:5f:73:22: bd:3a:e7:2c:20:c7:12:3b:78:cd:83:3b:00:90:0d: ba:60:9b:ba:4c:f8:f0:81:dc:71:55:06:a0:db:a9: a6:8b:89:9f:6d:c0:cf:ee:c9:b8:a6:85:5f:b8:40: 4c:23:7f:05:34:13:b0:98:98:04:c9:a8:5c:64:03: c9:ff:80:57:22:71:06:bd:47:6e:37:ef:80:6d:1d: 77:46:b2:89:a2:bb:4b:9f:0a:d8:d9:91:a6:4b:ca: 55:a6:89:9f:8b:39:2c:25:33:af:e4:88:10:7f:82: e5:b1:4f:6e:cd:c4:49:2b:d9:c0:9c:11:b2:27:8c: 4a:4c:40:0f:09:9c:74:5e:f6:49:df:a8:5d:f8:22: 73:45:ac:d4:b8:ed:7d:54:e8:9f:db:79:9f:67:40: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FE:8C:37:DB:62:0B:0C:23:24:6C:52:33:C7:66:97:D4:8A:F2:18 X509v3 Authority Key Identifier: keyid:2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/29B0FABC031511EB8CE8EF17C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.108.0/23 IPv6: 2406:8ac0::/32 Signature Algorithm: sha256WithRSAEncryption 75:60:0a:cb:c8:5c:00:4a:85:7f:45:f6:38:f1:96:c1:7e:c0: 4a:bb:db:e9:12:aa:5c:7d:36:84:65:6a:98:08:c1:81:87:5f: 21:33:77:40:66:80:6e:5a:c9:e4:33:b6:37:1e:c3:66:18:47: 2d:33:84:66:cd:87:4d:a8:60:7d:69:bf:d7:c8:8d:53:1a:2a: 54:fb:2b:14:1a:e5:9f:29:be:65:86:c0:53:27:24:e0:9d:38: ef:b4:a5:ba:49:8f:6c:e0:28:c6:6c:82:06:79:95:a6:07:bc: ef:c0:b6:d6:f8:d3:66:73:b0:75:94:03:77:3b:6b:3b:85:42: 23:74:4e:b7:6a:81:eb:60:9c:21:80:3f:0a:4c:f2:92:bf:80: cf:00:e3:2c:05:da:bb:8c:9b:ad:6a:47:3d:0c:fc:11:3d:49: 1a:51:1c:57:c1:ac:ff:06:3f:6a:d0:ca:f0:51:d6:ad:7a:79: 31:78:ab:02:80:ab:45:83:bf:2f:90:53:f2:5b:47:de:3b:b5: 6a:ff:4f:47:26:14:e1:ee:4d:b8:6c:49:11:91:f6:98:93:7e: b1:30:b1:3a:0b:9e:c0:f5:66:2d:ad:5f:b6:4c:d3:26:28:10: 1e:4e:71:22:42:e6:95:7b:79:13:ff:36:ca:ac:90:8e:81:25: 91:0b:a4:5f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNTUxMTAvBgNVBAUTKDJFQ0ExOTk0NERBOUIwQkE4NzI1QkU3MEJCRUY1NDlF NUQyMUI5MzcwHhcNMjMxMDI4MjIzMDE4WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNkOGI3YS1hNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6YyXvlRMF6iC94jUIIWY+qFQY3hTKAh5Fvp4z8T1zA8mVwbUeoHJuLEnpIH hOqVswDl+5Dxc9voM8p0Pc7KJER4QLiHivojG2cdIbbFapLTweuYMWxwUAYen/XA iJSCYFk5dHFfcyK9OucsIMcSO3jNgzsAkA26YJu6TPjwgdxxVQag26mmi4mfbcDP 7sm4poVfuEBMI38FNBOwmJgEyahcZAPJ/4BXInEGvUduN++AbR13RrKJortLnwrY 2ZGmS8pVpomfizksJTOv5IgQf4LlsU9uzcRJK9nAnBGyJ4xKTEAPCZx0XvZJ36hd +CJzRazUuO19VOif23mfZ0DzqQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLr+jDfb YgsMIyRsUjPHZpfUivIYMB8GA1UdIwQYMBaAFC7KGZRNqbC6hyW+cLvvVJ5dIbk3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM1NS80MTU3RkY5NjAz MTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNMcUhKYjV3dS05VW5sMGh1 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzb1psRTJwc0xxSEpiNXd1LTlVbmwwaHVUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBDNTUvNDE1N0ZGOTYwMzEzMTFFQkE3MENDODEyQzRGOUFFMDIvMjlCMEZBQkMw MzE1MTFFQjhDRThFRjE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnnGwwDQQCAAIwBwMFACQGisAwDQYJKoZIhvcNAQELBQAD ggEBAHVgCsvIXABKhX9F9jjxlsF+wEq72+kSqlx9NoRlapgIwYGHXyEzd0BmgG5a yeQztjcew2YYRy0zhGbNh02oYH1pv9fIjVMaKlT7KxQa5Z8pvmWGwFMnJOCdOO+0 pbpJj2zgKMZsggZ5laYHvO/Attb402ZzsHWUA3c7azuFQiN0TrdqgetgnCGAPwpM 8pK/gM8A4ywF2ruMm61qRz0M/BE9SRpRHFfBrP8GP2rQyvBR1q16eTF4qwKAq0WD vy+QU/JbR947tWr/T0cmFOHuTbhsSRGR9piTfrEwsToLnsD1Zi2tX7ZM0yYoEB5O cSJC5pV7eRP/NsqskI6BJZELpF8= -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org