$ rpki-client -vvf rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/9FFF0E74665511EEB872BE4DC4F9AE02.roa File: 9FFF0E74665511EEB872BE4DC4F9AE02.roa (raw, json) Hash identifier: xGNIPMjpSmhM+U9jHzs/U/HPwQuWXKcaUastOc6kvgk= Subject key identifier: F5:AC:06:05:05:BA:F8:00:6E:B5:D8:98:BC:2C:85:80:62:BF:F8:30 Certificate issuer: /CN=A91F63DC/serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1 Certificate serial: 02 Authority key identifier: 06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/9FFF0E74665511EEB872BE4DC4F9AE02.roa Signing time: Mon 09 Oct 2023 03:40:44 +0000 ROA not before: Mon 09 Oct 2023 03:40:44 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 133522 IP address blocks: 103.153.16.0/23 maxlen: 23 103.153.16.0/24 maxlen: 24 103.153.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F63DC/serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1 Validity Not Before: Oct 9 03:40:44 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6523763c-326b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bf:f6:41:3c:8b:ec:3d:86:38:c7:e9:ad:cc: 2f:8f:f1:e3:5c:ad:ad:6c:9e:99:3a:37:cf:ed:55: 2d:e5:0e:01:cd:6f:0f:1a:bd:db:ac:86:0c:12:c1: 7c:6b:06:0a:cb:bb:0e:1c:f9:c4:24:81:33:fe:1b: f4:ba:e6:6c:c3:21:17:68:75:20:19:a1:49:e6:5c: c8:9c:00:11:64:4d:f6:59:a4:85:36:94:a0:68:39: eb:ba:6c:09:f8:7f:50:e1:5f:16:37:cc:81:5d:66: d2:0f:4c:94:23:72:41:c5:0d:74:b7:1d:75:81:0d: 58:d6:b7:23:e4:41:82:18:65:4e:d8:c6:eb:ed:e3: ba:e7:75:04:66:02:26:a1:59:f5:8c:be:cb:75:26: 7d:91:8d:23:b0:7c:03:e8:1f:eb:46:aa:ca:f0:f3: 43:f6:58:9a:08:ea:7a:4d:2f:12:98:3e:90:60:16: 30:d6:be:92:eb:29:7a:6a:98:6e:7d:3a:1f:56:db: c1:b3:0e:8c:bb:23:4a:03:11:77:fe:8f:b1:54:87: 78:64:91:f7:fa:d4:61:18:53:55:e5:4d:cc:d4:80: 8b:b7:8a:bf:cb:1a:16:e3:60:99:68:d1:36:18:e6: 4d:1c:8c:0a:aa:66:e8:d9:9c:f6:b8:8f:a2:12:e4: 26:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AC:06:05:05:BA:F8:00:6E:B5:D8:98:BC:2C:85:80:62:BF:F8:30 X509v3 Authority Key Identifier: keyid:06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/9FFF0E74665511EEB872BE4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.16.0/23 Signature Algorithm: sha256WithRSAEncryption 79:d8:d1:10:a5:d6:74:cf:07:9c:ce:31:09:bc:e7:2c:8e:bd: 2e:86:aa:46:54:f0:17:c6:71:30:29:80:47:b3:ef:12:75:99: 64:88:41:4a:93:6f:fb:0d:7b:65:f2:7d:34:c6:b6:81:af:1b: a5:40:5d:6d:15:e6:ef:7c:f7:02:1f:fe:95:fd:8d:d8:06:d4: ce:fb:4e:8b:44:98:5d:c6:4b:b8:bb:9d:22:f5:d2:11:da:6c: 49:94:db:38:f4:1e:88:8b:77:57:56:0d:70:b8:60:6c:42:23: 01:d7:2c:34:d3:d8:bc:db:23:ab:4e:8f:25:7d:eb:1a:61:1d: b4:ce:f5:ab:d5:b3:41:8e:94:19:2a:66:65:95:36:a3:1f:df: 3d:76:50:1e:5b:7b:7e:27:32:9d:d5:62:fc:d3:49:6c:9f:f7: d9:47:d5:1e:dd:83:65:14:2e:e9:c0:15:65:a9:21:e8:70:88: c1:0b:00:32:77:44:e1:22:aa:40:33:59:52:d0:ee:cd:c7:1d: 12:d4:08:89:0c:8b:e3:07:1e:05:9b:dd:c2:12:7e:3c:5b:d9: 03:b1:2f:99:f8:e8:c9:e2:02:ca:4b:97:e2:b4:ed:a1:6b:a4: a7:d7:5e:bb:ca:5b:aa:c3:02:36:5a:d0:90:ed:94:86:9a:e5: 26:25:03:d6 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NjNEQzExMC8GA1UEBRMoMDY2NjZBRUNENzhDMEE1RUQxMzc5MEE1RTlBQTQwQzM0 OTBGQkNGMTAeFw0yMzEwMDkwMzQwNDRaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MjM3NjNjLTMyNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClv/ZBPIvsPYY4x+mtzC+P8eNcra1snpk6N8/tVS3lDgHNbw8avdushgwSwXxr BgrLuw4c+cQkgTP+G/S65mzDIRdodSAZoUnmXMicABFkTfZZpIU2lKBoOeu6bAn4 f1DhXxY3zIFdZtIPTJQjckHFDXS3HXWBDVjWtyPkQYIYZU7Yxuvt47rndQRmAiah WfWMvst1Jn2RjSOwfAPoH+tGqsrw80P2WJoI6npNLxKYPpBgFjDWvpLrKXpqmG59 Oh9W28GzDoy7I0oDEXf+j7FUh3hkkff61GEYU1XlTczUgIu3ir/LGhbjYJlo0TYY 5k0cjAqqZujZnPa4j6IS5CZ1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9awGBQW6 +AButdiYvCyFgGK/+DAwHwYDVR0jBBgwFoAUBmZq7NeMCl7RN5Cl6apAw0kPvPEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2M0RDLzA0MzE1MkUyNjY1 MzExRUU5QzY4RUUyQkM0RjlBRTAyL0JtWnE3TmVNQ2w3Uk41Q2w2YXBBdzBrUHZQ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQm1acTdOZU1DbDdSTjVDbDZhcEF3MGtQdlBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjNEQy8wNDMxNTJFMjY2NTMxMUVFOUM2OEVFMkJDNEY5QUUwMi85RkZGMEU3NDY2 NTUxMUVFQjg3MkJFNERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeZEDANBgkqhkiG9w0BAQsFAAOCAQEAedjREKXWdM8HnM4x CbznLI69LoaqRlTwF8ZxMCmAR7PvEnWZZIhBSpNv+w17ZfJ9NMa2ga8bpUBdbRXm 73z3Ah/+lf2N2AbUzvtOi0SYXcZLuLudIvXSEdpsSZTbOPQeiIt3V1YNcLhgbEIj AdcsNNPYvNsjq06PJX3rGmEdtM71q9WzQY6UGSpmZZU2ox/fPXZQHlt7ficyndVi /NNJbJ/32UfVHt2DZRQu6cAVZakh6HCIwQsAMndE4SKqQDNZUtDuzccdEtQIiQyL 4wceBZvdwhJ+PFvZA7EvmfjoyeICykuX4rTtoWukp9deu8pbqsMCNlrQkO2Uhprl JiUD1g== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:36 2024 by rpki-client on console-ams.rpki-client.org