$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/B7E86E0C6D8711EEB912BD62C4F9AE02.roa File: B7E86E0C6D8711EEB912BD62C4F9AE02.roa (raw, json) Hash identifier: HVw4YLVaBZ7QvrL+BUoSQ3ytCQQ5WDYYuP6g/OGdj5s= Subject key identifier: CB:0C:01:52:F4:6B:28:F7:BE:4D:BD:2E:51:F7:0E:A1:7E:39:E2:72 Certificate issuer: /CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0 Certificate serial: 05 Authority key identifier: 5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/B7E86E0C6D8711EEB912BD62C4F9AE02.roa Signing time: Wed 18 Oct 2023 07:26:57 +0000 ROA not before: Wed 18 Oct 2023 07:26:57 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 45905 IP address blocks: 103.65.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0 Validity Not Before: Oct 18 07:26:57 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=652f88c1-c4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:01:0b:16:4e:e5:93:f9:71:f8:3f:21:e3:8d: 39:d4:8c:30:60:24:2d:54:9c:99:af:5a:fd:de:f1: 7e:25:34:3a:2e:3c:da:6c:18:99:b0:01:01:26:df: 93:42:3e:09:1a:ac:5d:c4:95:4a:1f:80:08:2d:80: 40:64:6b:c4:6d:e9:55:39:a0:70:db:41:88:05:a7: e7:0f:a5:9e:dd:a4:25:5e:5b:46:ad:42:c5:97:db: 77:c2:fb:dc:28:cb:5f:93:c5:e6:cd:73:22:81:16: 64:2b:b5:46:17:73:53:79:4f:b9:bb:d5:c2:7a:71: b6:43:84:37:0c:95:c4:a0:e2:10:63:f4:d2:47:79: c2:2d:0d:6a:d7:b2:a5:5f:28:09:11:71:10:b2:6d: 05:1f:86:16:bd:7e:dc:fb:3b:0e:2e:77:36:88:9e: b5:35:e8:7d:e5:a7:aa:ec:92:59:14:f8:43:24:03: 2b:46:9a:01:b5:dc:6a:75:85:86:5e:00:6b:d3:3e: ec:fc:d0:7b:9d:d3:6f:f1:72:82:79:c6:57:87:b4: 22:b5:83:e1:4a:3c:4d:f4:5d:e2:83:22:93:9d:18: 09:52:7d:b3:06:ff:5c:8c:87:00:9f:91:31:29:e3: 66:09:7f:3b:9f:72:d4:a8:57:3f:8a:fd:68:db:ac: 75:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0C:01:52:F4:6B:28:F7:BE:4D:BD:2E:51:F7:0E:A1:7E:39:E2:72 X509v3 Authority Key Identifier: keyid:5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/B7E86E0C6D8711EEB912BD62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.65.134.0/23 Signature Algorithm: sha256WithRSAEncryption 49:05:4b:da:73:c6:f7:cb:29:da:97:dc:b4:09:08:45:9f:83: e9:b9:7e:c5:1a:02:43:f7:65:04:2d:e1:f7:94:31:ac:16:cf: 76:84:f3:28:c6:61:04:f9:9b:96:d8:9a:ea:89:2b:9e:1a:d1: 49:af:69:03:77:88:2c:15:71:65:61:cf:c5:2d:04:ec:50:82: 46:15:81:f6:a4:eb:e8:0b:83:38:e8:4e:ac:5c:9f:a2:c2:bf: 4a:96:aa:0b:0f:1f:c3:f8:57:ff:f4:e5:41:3c:45:95:e5:0a: b1:74:0a:d9:e7:6c:ee:c9:1b:70:57:bf:c7:87:4c:05:9e:ff: 4e:a3:28:36:3b:3c:ab:7d:04:f8:8c:45:95:6e:2b:cb:23:26: 8e:4f:77:f7:a0:51:bd:8f:8f:60:ea:d2:23:14:6f:13:63:ea: 2e:47:0e:50:16:36:d0:dd:47:ec:06:fb:ad:9d:b7:66:af:41: d2:e2:0a:60:d4:c6:85:58:09:60:97:45:ed:48:91:ab:f1:f5: a7:91:fd:5b:e0:e3:82:a0:57:6c:55:ab:32:40:89:95:f5:24: 63:1c:21:84:59:7a:2a:84:55:41:f9:66:71:9b:ec:3a:a8:4f: d2:7d:fd:d0:cd:d6:6a:bf:27:ed:0d:87:1f:7f:d6:9a:0b:3e: fb:94:9e:1b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEQ4NjExMC8GA1UEBRMoNUY1Q0UyOEMwNEQxNkU5NTBFMEVCQ0Q1OTU1NTQyNDgz RDM5NTZEMDAeFw0yMzEwMTgwNzI2NTdaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MmY4OGMxLWM0ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjAQsWTuWT+XH4PyHjjTnUjDBgJC1UnJmvWv3e8X4lNDouPNpsGJmwAQEm35NC PgkarF3ElUofgAgtgEBka8Rt6VU5oHDbQYgFp+cPpZ7dpCVeW0atQsWX23fC+9wo y1+TxebNcyKBFmQrtUYXc1N5T7m71cJ6cbZDhDcMlcSg4hBj9NJHecItDWrXsqVf KAkRcRCybQUfhha9ftz7Ow4udzaInrU16H3lp6rsklkU+EMkAytGmgG13Gp1hYZe AGvTPuz80Hud02/xcoJ5xleHtCK1g+FKPE30XeKDIpOdGAlSfbMG/1yMhwCfkTEp 42YJfzufctSoVz+K/WjbrHWHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUywwBUvRr KPe+Tb0uUfcOoX454nIwHwYDVR0jBBgwFoAUX1zijATRbpUODrzVlVVCSD05VtAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwRDg2LzY4RTc5NzhBNkNC RDExRUVCODQ2RjM3OUM0RjlBRTAyL1gxemlqQVRSYnBVT0RyelZsVlZDU0QwNVZ0 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWDF6aWpBVFJicFVPRHJ6VmxWVkNTRDA1VnRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEQ4Ni82OEU3OTc4QTZDQkQxMUVFQjg0NkYzNzlDNEY5QUUwMi9CN0U4NkUwQzZE ODcxMUVFQjkxMkJENjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWdBhjANBgkqhkiG9w0BAQsFAAOCAQEASQVL2nPG98sp2pfc tAkIRZ+D6bl+xRoCQ/dlBC3h95QxrBbPdoTzKMZhBPmbltia6okrnhrRSa9pA3eI LBVxZWHPxS0E7FCCRhWB9qTr6AuDOOhOrFyfosK/SpaqCw8fw/hX//TlQTxFleUK sXQK2eds7skbcFe/x4dMBZ7/TqMoNjs8q30E+IxFlW4ryyMmjk9396BRvY+PYOrS IxRvE2PqLkcOUBY20N1H7Ab7rZ23Zq9B0uIKYNTGhVgJYJdF7UiRq/H1p5H9W+Dj gqBXbFWrMkCJlfUkYxwhhFl6KoRVQflmcZvsOqhP0n390M3War8n7Q2HH3/Wmgs+ +5SeGw== -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:33 2024 by rpki-client on console-fra.rpki-client.org