$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/555FE26AB13D11E59299870AC4F9AE02.roa File: 555FE26AB13D11E59299870AC4F9AE02.roa (raw, json) Hash identifier: 9+XllQCwnWA8kHK0XFOl98KK3RLYOi3finy1cm0lLFc= Subject key identifier: 26:B1:35:FE:7D:5B:78:D1:E0:3E:2B:BA:8E:35:B3:A0:C3:05:F8:57 Certificate issuer: /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9 Certificate serial: 2DF5 Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/555FE26AB13D11E59299870AC4F9AE02.roa Signing time: Tue 31 Oct 2023 16:02:05 +0000 ROA not before: Tue 31 Oct 2023 16:02:05 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 133122 IP address blocks: 103.195.12.0/24 maxlen: 24 103.195.13.0/24 maxlen: 24 103.243.148.0/24 maxlen: 24 103.243.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 15:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11765 (0x2df5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9 Validity Not Before: Oct 31 16:02:05 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=654124fc-f454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:eb:c4:3a:c9:37:6d:8f:fe:57:c1:11:8d:04: a9:e8:a6:6c:81:ed:b7:29:01:78:e0:63:7b:e5:c3: d8:9e:4f:03:00:a7:3c:16:e3:9d:d2:40:1b:ac:bb: c4:83:e0:36:b5:cb:6b:96:2a:ed:95:d9:de:08:8b: 99:e2:60:0e:98:0f:08:a8:91:02:fc:42:43:5d:2b: 7b:ab:21:ee:3a:e8:57:fb:db:43:70:6e:f6:8b:ca: 4b:89:fb:f2:de:7d:79:cf:5a:d3:ff:c8:99:4b:fa: 95:c1:da:65:f7:17:43:6f:1a:15:8c:38:c1:6e:7f: 5a:af:24:86:c4:09:e2:9b:e3:8d:5d:b3:79:9c:6f: 24:a4:2e:0b:73:ba:5c:b2:12:e8:38:c4:e6:64:2d: 6d:2a:ae:fc:80:81:ed:e2:31:fa:6a:1d:b4:0f:e3: 64:69:1d:51:38:91:93:27:2e:37:03:c3:d3:78:92: 3f:d0:22:2c:19:58:ab:ad:74:f5:cd:cb:d7:a8:b1: 5b:12:d8:63:5f:b7:d9:15:06:bb:e6:5e:b8:b1:d1: 6b:e2:06:5b:35:65:5e:d9:ee:1b:f3:d0:72:34:10: cf:30:10:d3:4f:73:0a:7f:00:88:b9:d4:cd:0e:74: 5a:ac:1d:23:2c:95:f8:92:87:6a:88:1f:62:2c:fb: 7c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B1:35:FE:7D:5B:78:D1:E0:3E:2B:BA:8E:35:B3:A0:C3:05:F8:57 X509v3 Authority Key Identifier: keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/555FE26AB13D11E59299870AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.195.12.0/23 103.243.148.0/23 Signature Algorithm: sha256WithRSAEncryption 95:4e:50:a2:5f:f3:2b:a4:92:0e:2c:c7:b5:92:05:7b:a4:ad: 21:e6:2d:40:a9:10:4d:9d:90:30:97:9d:6a:71:1a:2b:e6:2c: 13:06:71:57:51:28:89:a9:c1:e0:c1:5b:34:61:4f:8e:b1:8e: 3d:11:72:6b:68:b4:92:d9:ab:e8:55:38:77:8f:45:b1:d6:0d: 42:48:7d:35:68:97:96:67:65:59:59:7d:48:93:74:d5:84:d1: 29:80:16:24:ec:7b:12:52:b9:80:44:13:9b:dc:b8:a2:ec:b3: f9:ec:6a:85:af:dc:0a:cb:31:93:1a:43:45:90:bd:a9:5e:46: 69:86:e9:b0:1b:60:75:6f:65:85:f9:75:5b:21:2a:55:cc:f4: 48:71:68:f4:aa:03:59:ef:f0:03:43:8a:dc:f7:c8:28:61:89: 9f:70:72:75:d8:6e:b3:73:97:33:98:ac:0d:b4:ff:eb:8a:c9: e4:6c:c3:37:b1:a6:19:a5:fc:2e:1e:48:eb:34:4f:e7:f7:8f: 2c:74:fc:41:01:c0:55:26:9d:cc:6a:f2:4c:db:43:d8:3f:65: ac:b6:58:db:ca:15:fd:c5:2f:f3:dd:a4:88:d4:63:12:45:40: c1:f9:9c:e1:b3:01:31:9c:2c:14:3d:7b:10:8f:0d:51:29:d8: 20:f5:95:64 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICLfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCRjgxMTAvBgNVBAUTKDI2MDNDNjc0Mjk2RDM0NTY2QzhFRThGOTdDREI0QTRC MjBGNjIzRTkwHhcNMjMxMDMxMTYwMjA1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQxMjRmYy1mNDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9+vEOsk3bY/+V8ERjQSp6KZsge23KQF44GN75cPYnk8DAKc8FuOd0kAbrLvE g+A2tctrlirtldneCIuZ4mAOmA8IqJEC/EJDXSt7qyHuOuhX+9tDcG72i8pLifvy 3n15z1rT/8iZS/qVwdpl9xdDbxoVjDjBbn9arySGxAnim+ONXbN5nG8kpC4Lc7pc shLoOMTmZC1tKq78gIHt4jH6ah20D+NkaR1ROJGTJy43A8PTeJI/0CIsGVirrXT1 zcvXqLFbEthjX7fZFQa75l64sdFr4gZbNWVe2e4b89ByNBDPMBDTT3MKfwCIudTN DnRarB0jLJX4kodqiB9iLPt8mwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCaxNf59 W3jR4D4ruo41s6DDBfhXMB8GA1UdIwQYMBaAFCYDxnQpbTRWbI7o+XzbSksg9iPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUJGOC9EMDg5MzQ5RTM0 ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5GWnNqdWo1Zk50S1N5RDJJ LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pnUEdkQ2x0TkZac2p1ajVmTnRLU3lEMkktay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjFCRjgvRDA4OTM0OUUzNDg3MTFFMzhGQjVCNzc0NTkxMUVBMzIvNTU1RkUyNkFC MTNEMTFFNTkyOTk4NzBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnwwwDBAFn85QwDQYJKoZIhvcNAQELBQADggEBAJVOUKJf 8yukkg4sx7WSBXukrSHmLUCpEE2dkDCXnWpxGivmLBMGcVdRKImpweDBWzRhT46x jj0RcmtotJLZq+hVOHePRbHWDUJIfTVol5ZnZVlZfUiTdNWE0SmAFiTsexJSuYBE E5vcuKLss/nsaoWv3ArLMZMaQ0WQvaleRmmG6bAbYHVvZYX5dVshKlXM9EhxaPSq A1nv8ANDitz3yChhiZ9wcnXYbrNzlzOYrA20/+uKyeRswzexphml/C4eSOs0T+f3 jyx0/EEBwFUmncxq8kzbQ9g/Zay2WNvKFf3FL/PdpIjUYxJFQMH5nOGzATGcLBQ9 exCPDVEp2CD1lWQ= -----END CERTIFICATE-----Generated at Wed May 22 20:09:16 2024 by rpki-client on console-ams.rpki-client.org