$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa File: 1E018994AEBF11E993F33C65C4F9AE02.roa (raw, json) Hash identifier: X/Sdq5hIJBEWvLlKJlrKk+UmqaZwGN/XOEju9L4WvGs= Subject key identifier: B0:91:E5:1C:C2:57:8E:23:85:03:E6:1F:8F:C6:98:2F:9A:A7:0A:83 Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0D08 Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa Signing time: Thu 08 Feb 2024 18:36:50 +0000 ROA not before: Thu 08 Feb 2024 18:36:50 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 63526 IP address blocks: 103.106.236.0/22 maxlen: 22 103.106.236.0/23 maxlen: 23 103.106.236.0/24 maxlen: 24 103.106.237.0/24 maxlen: 24 103.106.238.0/23 maxlen: 23 103.106.238.0/24 maxlen: 24 103.106.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Validity Not Before: Feb 8 18:36:50 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65c51f42-4a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:79:75:c0:4a:0b:c0:fa:88:22:49:fe:d9: 3c:da:64:d0:c9:9d:8a:07:e2:f1:8f:ba:8f:43:a6: 6e:b5:71:62:1c:5d:ef:6a:f5:d9:47:a5:de:f2:70: 1e:a6:4b:fd:b9:f7:6a:9d:2e:84:8f:f1:7e:c6:24: e7:60:5f:b7:1f:0d:cb:1a:ea:1e:f5:c9:b0:9b:7c: a2:93:80:bf:c1:54:f3:0a:c7:d4:3c:03:ba:84:4f: 50:b9:aa:52:a1:e4:68:26:76:fc:f3:96:d0:ca:e8: 2f:00:a9:c3:65:f6:74:66:ce:8e:31:8e:68:61:dc: 33:5e:33:c7:66:36:48:c2:c1:93:cd:5b:07:c5:91: 5f:c9:cd:91:7f:1f:35:6c:ce:6d:c5:73:f2:a6:1e: 6e:a1:f6:39:93:01:3d:09:31:10:27:78:79:a7:3e: 40:f5:f1:f5:33:2a:b4:4f:87:6c:01:95:ca:54:c8: 33:3f:4a:8b:9d:5a:9d:89:74:94:1e:85:84:29:24: 70:58:61:1f:19:20:1a:0f:37:a8:b2:3f:52:ce:8f: be:4f:16:43:a6:87:15:fb:7f:18:80:d0:5f:7d:13: 99:1c:82:35:ce:f5:18:6f:0f:2d:d3:b4:d1:e1:0f: ba:dd:6b:61:d1:ad:7a:6f:01:ca:d9:d6:92:0d:c9: 39:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:91:E5:1C:C2:57:8E:23:85:03:E6:1F:8F:C6:98:2F:9A:A7:0A:83 X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.236.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:2b:e6:42:5b:3c:ef:3c:d2:c0:f7:78:6e:cf:33:8d:84:d0: ab:80:36:6d:4b:7f:10:7e:82:3d:c9:fc:e6:d1:63:df:7b:4c: ec:35:73:47:0e:8f:33:20:70:34:71:a9:a9:8b:c6:04:25:d0: a6:17:f6:34:a7:cf:2d:97:49:dc:47:43:34:ca:fd:50:0e:58: a7:a0:79:f0:75:66:db:32:97:3e:37:56:10:56:a1:67:34:ef: a1:2b:47:26:d3:82:82:46:ce:61:a3:7b:43:a6:8a:b3:b6:23: 5c:57:37:78:8a:90:d4:8c:30:21:71:6b:d1:07:07:9c:af:3a: b8:9f:03:b1:c6:8f:90:fd:1e:11:02:26:a0:f1:20:39:6f:fa: 2e:63:03:fc:b3:c3:60:0f:40:24:02:08:dd:e6:fd:f3:55:b3: 72:3d:cb:fc:93:91:59:86:83:d7:91:f7:63:7a:39:7d:46:46: ba:d5:4a:80:90:56:b1:c8:a1:6a:32:fa:0f:ec:2a:02:f8:7a: 27:ef:37:65:f2:7b:c6:04:a2:af:9d:28:74:23:fa:54:95:e6: c9:03:e7:95:22:77:9b:68:c5:87:e7:de:da:28:e3:b6:78:23: 3c:d9:ca:39:f1:59:b4:a6:25:03:8b:5a:1a:bf:04:86:c7:35: d3:4d:9f:12 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjQwMjA4MTgzNjUwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWM1MWY0Mi00YTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApw95dcBKC8D6iCJJ/tk82mTQyZ2KB+Lxj7qPQ6ZutXFiHF3vavXZR6Xe8nAe pkv9ufdqnS6Ej/F+xiTnYF+3Hw3LGuoe9cmwm3yik4C/wVTzCsfUPAO6hE9QuapS oeRoJnb885bQyugvAKnDZfZ0Zs6OMY5oYdwzXjPHZjZIwsGTzVsHxZFfyc2Rfx81 bM5txXPyph5uofY5kwE9CTEQJ3h5pz5A9fH1Myq0T4dsAZXKVMgzP0qLnVqdiXSU HoWEKSRwWGEfGSAaDzeosj9Szo++TxZDpocV+38YgNBffROZHII1zvUYbw8t07TR 4Q+63Wth0a16bwHK2daSDck54QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLCR5RzC V44jhQPmH4/GmC+apwqDMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyOTQvMENCNUVBRkFBRUJFMTFFOTgwRkI0RTYzQzRGOUFFMDIvMUUwMTg5OTRB RUJGMTFFOTkzRjMzQzY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnauwwDQYJKoZIhvcNAQELBQADggEBAD4r5kJbPO880sD3 eG7PM42E0KuANm1LfxB+gj3J/ObRY997TOw1c0cOjzMgcDRxqamLxgQl0KYX9jSn zy2XSdxHQzTK/VAOWKegefB1Ztsylz43VhBWoWc076ErRybTgoJGzmGje0OmirO2 I1xXN3iKkNSMMCFxa9EHB5yvOrifA7HGj5D9HhECJqDxIDlv+i5jA/yzw2APQCQC CN3m/fNVs3I9y/yTkVmGg9eR92N6OX1GRrrVSoCQVrHIoWoy+g/sKgL4eifvN2Xy e8YEoq+dKHQj+lSV5skD55Uid5toxYfn3too47Z4IzzZyjnxWbSmJQOLWhq/BIbH NdNNnxI= -----END CERTIFICATE-----Generated at Wed May 8 20:36:07 2024 by rpki-client on console-ams.rpki-client.org