$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/0B3B85D63A1B11EDAE662B14C4F9AE02.roa File: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (raw, json) Hash identifier: GQNwSDUwzmX4l5wsYUCHS1XYZfJoT7fdlpD23IsAxJ8= Subject key identifier: 2F:63:50:93:02:D5:55:0A:D0:7A:A1:06:0C:33:6E:26:38:25:98:82 Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Certificate serial: 0139 Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/0B3B85D63A1B11EDAE662B14C4F9AE02.roa Signing time: Wed 03 Apr 2024 05:37:42 +0000 ROA not before: Wed 03 Apr 2024 05:37:42 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 18119 IP address blocks: 103.5.156.0/22 maxlen: 22 202.49.144.0/24 maxlen: 24 202.126.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Validity Not Before: Apr 3 05:37:42 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660ceb26-e160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:80:5a:a4:2d:be:96:ac:56:4e:9b:8f:3a:56: c9:a6:6b:69:fb:de:e6:af:f7:c7:14:19:35:1e:ec: 09:ea:45:4d:6f:ee:b3:ce:d7:4a:d4:a7:15:60:4e: 4f:ba:06:37:15:dd:23:f5:bc:b9:fb:cf:e3:4a:4c: 41:9c:a5:8d:be:d5:77:da:ec:93:80:86:46:15:9d: b0:a2:83:b3:73:c4:c8:30:e0:30:98:69:4f:23:e4: 85:29:52:22:a3:52:6b:6a:a7:29:a3:27:6c:12:38: 64:de:0a:35:ff:ea:70:2a:af:a5:94:00:2e:c0:27: d7:1d:19:9e:a3:12:3a:3b:4b:00:16:0a:09:86:4f: 1e:e6:82:e1:fc:60:56:44:9e:08:f2:1a:63:06:cf: e5:d7:92:f7:ed:b3:0f:d5:36:ca:ea:eb:07:b9:80: cc:d6:dd:f5:24:6a:61:48:c9:06:51:57:b7:e0:8a: 71:d1:52:36:ce:a4:75:d4:58:16:1a:84:fc:6e:6b: 85:2e:0b:a4:33:08:7d:60:f7:68:c9:1b:de:20:c1: 5e:e4:af:af:6d:f5:a1:02:bf:21:8c:8f:d2:58:9c: d8:98:26:75:00:0f:fb:d7:17:28:83:ed:cc:47:01: 7e:ac:40:39:17:be:18:52:1e:7f:c9:d0:a1:ee:43: 63:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:63:50:93:02:D5:55:0A:D0:7A:A1:06:0C:33:6E:26:38:25:98:82 X509v3 Authority Key Identifier: keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/0B3B85D63A1B11EDAE662B14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.156.0/22 202.49.144.0/24 202.126.80.0/21 Signature Algorithm: sha256WithRSAEncryption 58:02:09:06:bc:59:17:db:ac:14:84:c5:53:2d:7e:7b:34:dd: bb:f6:fd:44:85:ac:4f:b4:2d:f7:92:32:da:32:2b:a8:93:74: af:ea:cc:49:b3:7d:ac:3e:f4:c5:f4:6d:e1:d9:00:92:94:a0: e6:ed:46:a7:f5:db:6e:2e:56:53:80:be:6b:79:26:de:18:8c: 40:19:1b:dc:db:6b:92:7a:d7:cd:14:7a:f2:bf:50:08:d0:e5: e6:28:70:80:90:db:22:27:d9:ec:68:bb:0d:1e:4c:b9:f6:f6: c5:fc:d9:ca:bc:03:91:ee:ef:ea:e8:89:c1:9a:06:58:32:71: 9c:4b:71:bc:2b:15:7f:2c:5c:cd:a7:9f:07:c9:bd:f8:38:a1: f7:ab:4a:79:82:1e:b5:23:41:ad:96:e9:0e:ff:8f:cd:b6:ff: ba:e4:a6:a0:62:c9:33:f6:14:9d:d4:3a:d7:8c:93:6f:61:53: 52:54:ab:75:fe:cc:5e:fd:f7:43:d6:39:d9:52:f6:f3:9a:95: ce:99:ee:b5:ae:9c:b5:1c:76:fe:b3:40:f5:01:38:40:1a:c4: dc:89:56:6e:ba:87:8a:3e:57:90:b5:9f:04:09:63:36:d8:fa: ef:4a:da:ba:31:95:77:3e:ae:86:4f:4a:83:d2:c5:80:f6:92: 32:8a:33:d3 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB MTk3QjlEN0MwHhcNMjQwNDAzMDUzNzQyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjZWIyNi1lMTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA54BapC2+lqxWTpuPOlbJpmtp+97mr/fHFBk1HuwJ6kVNb+6zztdK1KcVYE5P ugY3Fd0j9by5+8/jSkxBnKWNvtV32uyTgIZGFZ2wooOzc8TIMOAwmGlPI+SFKVIi o1JraqcpoydsEjhk3go1/+pwKq+llAAuwCfXHRmeoxI6O0sAFgoJhk8e5oLh/GBW RJ4I8hpjBs/l15L37bMP1TbK6usHuYDM1t31JGphSMkGUVe34Ipx0VI2zqR11FgW GoT8bmuFLgukMwh9YPdoyRveIMFe5K+vbfWhAr8hjI/SWJzYmCZ1AA/71xcog+3M RwF+rEA5F74YUh5/ydCh7kNjZwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFC9jUJMC 1VUK0HqhBgwzbiY4JZiCMB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkIwM0EvREZDNjhENjQzQTE2MTFFRDkxNTJCRjBFQzRGOUFFMDIvMEIzQjg1RDYz QTFCMTFFREFFNjYyQjE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnBZwDBADKMZADBAPKflAwDQYJKoZIhvcNAQELBQADggEB AFgCCQa8WRfbrBSExVMtfns03bv2/USFrE+0LfeSMtoyK6iTdK/qzEmzfaw+9MX0 beHZAJKUoObtRqf1224uVlOAvmt5Jt4YjEAZG9zba5J6180UevK/UAjQ5eYocICQ 2yIn2exouw0eTLn29sX82cq8A5Hu7+roicGaBlgycZxLcbwrFX8sXM2nnwfJvfg4 oferSnmCHrUjQa2W6Q7/j822/7rkpqBiyTP2FJ3UOteMk29hU1JUq3X+zF7990PW OdlS9vOalc6Z7rWunLUcdv6zQPUBOEAaxNyJVm66h4o+V5C1nwQJYzbY+u9K2rox lXc+roZPSoPSxYD2kjKKM9M= -----END CERTIFICATE-----Generated at Fri May 17 06:18:12 2024 by rpki-client on console-fra.rpki-client.org