$ rpki-client -vvf rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa File: F9D16F1CC7D811EDB42DFF20C4F9AE02.roa (raw, json) Hash identifier: oo4Z2IzwnZrGrJi36X5QXi5JdjWdK/gLBgNaCY2IPBM= Subject key identifier: CD:65:52:06:1E:9C:D2:70:64:AF:15:DA:9B:FA:E5:55:A6:BD:A5:05 Certificate issuer: /CN=A91F88F4/serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90 Certificate serial: 0977 Authority key identifier: B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa Signing time: Tue 30 May 2023 21:38:41 +0000 ROA not before: Tue 30 May 2023 21:38:40 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 135311 IP address blocks: 103.213.240.0/23 maxlen: 24 103.213.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2423 (0x977) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F88F4/serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90 Validity Not Before: May 30 21:38:40 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64766ce0-fbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:69:1d:00:d5:3c:e4:71:16:ed:af:95:f6: a0:d7:94:89:99:4f:d0:ad:68:ed:f8:1f:41:7e:c1: 55:97:d5:2d:ca:e6:20:0f:2e:4c:b9:20:8f:b7:c5: 16:d7:8f:99:0f:80:e2:3f:ca:33:67:9a:fe:42:cf: d4:f0:1d:55:ff:31:a9:31:8f:8a:47:a9:5a:f4:2a: ea:db:54:ca:a9:c4:45:1b:a3:72:f1:2d:b0:5c:8f: 15:15:2a:b6:1a:11:cf:43:1b:7a:f9:d0:93:cb:94: 61:be:b6:b8:a1:94:07:fe:12:34:ee:53:c5:63:6d: 55:a6:69:c7:0c:0a:95:da:61:64:e9:58:cc:fc:d9: dc:96:af:45:28:3f:d9:32:64:d7:24:b7:ff:00:91: 1c:13:ad:e4:71:6e:04:fc:ea:c6:b8:fe:32:7f:32: 32:5d:db:a9:b6:f5:5c:f5:1a:ef:59:89:48:86:63: b8:e5:ee:f2:b0:b4:88:34:02:d1:d3:f3:f3:ab:e9: b1:db:3c:a5:4a:07:47:aa:e2:d2:18:17:a3:10:8b: 01:88:04:b0:ea:cf:a2:1d:14:2f:92:26:32:c7:16: ac:f4:6f:6d:3e:cc:81:46:c5:d8:e6:4e:14:d2:eb: 6e:cf:d5:15:8f:52:ab:d3:98:09:4e:7c:72:2e:20: 84:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:65:52:06:1E:9C:D2:70:64:AF:15:DA:9B:FA:E5:55:A6:BD:A5:05 X509v3 Authority Key Identifier: keyid:B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.213.240.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:90:b7:fd:17:6d:05:06:8c:1d:f8:ee:09:3c:39:81:d5:ed: 4d:d1:70:30:ad:91:d9:c6:d6:31:42:5f:03:cf:ac:0c:2b:68: 1e:d2:a3:44:18:ac:66:58:8f:52:af:8c:e5:22:fb:a6:f9:f4: 6c:a0:cc:14:57:87:c7:62:33:5e:bb:4c:d4:ce:20:2d:68:a9: 36:c8:47:7c:15:aa:21:1c:61:ca:0b:d7:ca:e5:ed:54:96:81: 44:db:df:d1:12:7c:f2:93:92:91:1a:f3:fc:72:87:f4:a4:6c: 76:59:6b:98:b6:96:54:55:f9:32:00:6b:21:38:b1:73:e4:dd: 75:44:4e:b5:d3:31:f4:10:e4:6c:04:33:8c:9d:66:e5:f6:68: 75:9a:73:f4:96:e4:c6:61:12:ed:3f:f3:2e:a5:ce:c6:01:82: 0c:2d:0f:43:82:f9:fe:fa:0a:ca:92:6a:4f:d9:b0:39:6f:0b: 1c:32:e1:2b:86:b8:c5:86:c4:a2:3d:e7:7e:c8:28:82:d9:d1: 21:92:e6:e6:c9:d6:2f:94:c2:57:4b:28:77:14:e6:81:d2:c7: 13:d4:c2:4a:7d:8f:f9:37:33:d0:cc:35:0e:f0:7f:bf:ed:f5: e5:cd:db:12:ea:52:0d:47:12:04:cd:be:6a:44:56:c2:a1:14: 69:79:68:a1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg4RjQxMTAvBgNVBAUTKEIxODRDMzVGNkFFREJGQjg1RERBNDExM0YyNzUyRTBD ODlDQTNBOTAwHhcNMjMwNTMwMjEzODQwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDc2NmNlMC1mYmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugNpHQDVPORxFu2vlfag15SJmU/QrWjt+B9BfsFVl9UtyuYgDy5MuSCPt8UW 14+ZD4DiP8ozZ5r+Qs/U8B1V/zGpMY+KR6la9Crq21TKqcRFG6Ny8S2wXI8VFSq2 GhHPQxt6+dCTy5Rhvra4oZQH/hI07lPFY21VpmnHDAqV2mFk6VjM/Nnclq9FKD/Z MmTXJLf/AJEcE63kcW4E/OrGuP4yfzIyXduptvVc9RrvWYlIhmO45e7ysLSINALR 0/Pzq+mx2zylSgdHquLSGBejEIsBiASw6s+iHRQvkiYyxxas9G9tPsyBRsXY5k4U 0utuz9UVj1Kr05gJTnxyLiCE+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFM1lUgYe nNJwZK8V2pv65VWmvaUFMB8GA1UdIwQYMBaAFLGEw19q7b+4XdpBE/J1LgyJyjqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODhGNC8wN0FFNzdDQzQ4 Q0MxMUVBQUVGNTAxNTFDNEY5QUUwMi9zWVREWDJydHY3aGQya0VUOG5VdURJbktP cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZVERYMnJ0djdoZDJrRVQ4blV1REluS09wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg4RjQvMDdBRTc3Q0M0OENDMTFFQUFFRjUwMTUxQzRGOUFFMDIvRjlEMTZGMUND N0Q4MTFFREI0MkRGRjIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn1fAwDQYJKoZIhvcNAQELBQADggEBACuQt/0XbQUGjB34 7gk8OYHV7U3RcDCtkdnG1jFCXwPPrAwraB7So0QYrGZYj1KvjOUi+6b59GygzBRX h8diM167TNTOIC1oqTbIR3wVqiEcYcoL18rl7VSWgUTb39ESfPKTkpEa8/xyh/Sk bHZZa5i2llRV+TIAayE4sXPk3XVETrXTMfQQ5GwEM4ydZuX2aHWac/SW5MZhEu0/ 8y6lzsYBggwtD0OC+f76CsqSak/ZsDlvCxwy4SuGuMWGxKI9537IKILZ0SGS5ubJ 1i+UwldLKHcU5oHSxxPUwkp9j/k3M9DMNQ7wf7/t9eXN2xLqUg1HEgTNvmpEVsKh FGl5aKE= -----END CERTIFICATE-----Generated at Thu May 16 21:45:32 2024 by rpki-client on console-fra.rpki-client.org