$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/F9E21144D90F11EDB2DBEA49C4F9AE02.roa File: F9E21144D90F11EDB2DBEA49C4F9AE02.roa (raw, json) Hash identifier: iTzoakUoaVNdTqGJxVmIzhqLbUwoGqXoPnqROEzOhSs= Subject key identifier: 5A:1A:E3:B5:EE:57:E6:3F:5D:90:A8:48:90:A8:93:AD:CC:14:3C:46 Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Certificate serial: 15CF Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/F9E21144D90F11EDB2DBEA49C4F9AE02.roa Signing time: Thu 22 Feb 2024 17:24:55 +0000 ROA not before: Thu 22 Feb 2024 17:24:55 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 136970 IP address blocks: 103.107.236.0/24 maxlen: 24 103.107.237.0/24 maxlen: 24 103.107.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5583 (0x15cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Validity Not Before: Feb 22 17:24:55 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d78367-443d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:73:5d:49:2f:d1:16:b1:75:b8:27:c9:1f:81: cf:f5:e0:2b:76:7a:29:77:51:f8:b7:1f:c2:7f:f5: f1:eb:b0:84:76:80:f1:de:bb:a9:3b:c7:2e:a2:a7: fc:9a:6b:42:74:1f:41:cd:10:34:33:ce:73:e1:fb: 34:2d:8d:a9:61:25:c0:06:0d:8a:a8:93:e8:fb:ed: a7:07:54:bf:93:b3:5e:85:11:e9:55:9f:34:b8:8d: a7:b2:38:10:37:4f:9d:20:9d:45:ce:3d:fd:98:d0: 4f:f0:76:8c:32:c1:48:cd:d2:ae:6e:c5:a2:3b:4c: 0b:be:9b:67:d9:46:41:ea:38:b2:a1:a6:33:e3:1b: 1c:f3:5a:8f:ad:ce:70:79:68:73:80:83:f5:4f:19: 60:b5:90:d0:a2:e8:b7:cc:49:7c:9f:e0:1a:62:8a: b2:cf:57:d9:02:b1:07:d2:47:1a:5c:9e:77:33:c0: d8:7c:c8:66:e7:fd:85:bc:15:f5:ca:06:1b:4a:ac: ff:fd:e7:98:7b:25:78:6a:d4:54:98:23:6f:74:18: 1e:f5:f9:77:4d:05:98:38:8d:d3:f4:df:ca:ac:1d: ff:b0:f8:af:a8:44:42:9e:51:0f:9f:8c:fc:f1:42: 4c:c7:cd:70:4d:77:3d:1a:6f:54:f3:22:52:01:15: 95:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1A:E3:B5:EE:57:E6:3F:5D:90:A8:48:90:A8:93:AD:CC:14:3C:46 X509v3 Authority Key Identifier: keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/F9E21144D90F11EDB2DBEA49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.107.236.0-103.107.238.255 Signature Algorithm: sha256WithRSAEncryption 8f:89:db:9b:42:80:5d:71:d2:e0:88:b5:a5:a2:32:f0:8b:30: 94:e4:12:ce:42:b3:62:d6:f6:42:27:40:47:ee:d3:68:72:c5: ed:4f:ca:9f:96:ec:b2:11:ac:1c:30:d4:83:1e:1a:95:47:51: a4:40:89:88:9c:d3:00:4d:4d:3e:c2:27:17:f7:63:15:ed:e4: 15:40:0b:9f:b8:8f:7b:e5:f7:78:14:53:d4:a0:07:fe:74:a1: 4c:6d:bd:bd:6d:80:5b:66:9c:76:01:e4:bd:3b:05:74:ce:d5: fb:de:25:a8:36:0e:64:78:e8:b4:41:93:eb:81:a1:e0:3d:d8: 81:82:75:f8:ab:49:d1:4d:db:18:23:6a:aa:3a:16:69:25:ef: f6:1e:f2:e5:fe:8e:b2:c3:60:c0:46:d0:34:ad:5a:d6:d4:92: 49:e5:85:f3:65:0e:d0:0a:b0:7f:0e:e1:75:ca:d2:62:c5:35: 2a:98:67:13:6c:79:8a:79:66:33:56:e4:60:be:a3:d2:d1:0c: 98:c5:0e:5c:04:17:6b:4e:d2:a2:c8:7f:9b:9e:79:4f:63:4f: 9f:81:ea:22:b8:43:d2:d3:ea:03:a3:0b:b3:4b:89:23:9e:f7: 77:60:77:dd:9e:b2:22:89:5d:e3:f1:8b:be:bd:48:18:1a:a0: f8:fb:9f:4e -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICFc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw QUVEREJCNkIwHhcNMjQwMjIyMTcyNDU1WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ3ODM2Ny00NDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XNdSS/RFrF1uCfJH4HP9eArdnopd1H4tx/Cf/Xx67CEdoDx3rupO8cuoqf8 mmtCdB9BzRA0M85z4fs0LY2pYSXABg2KqJPo++2nB1S/k7NehRHpVZ80uI2nsjgQ N0+dIJ1Fzj39mNBP8HaMMsFIzdKubsWiO0wLvptn2UZB6jiyoaYz4xsc81qPrc5w eWhzgIP1TxlgtZDQoui3zEl8n+AaYoqyz1fZArEH0kcaXJ53M8DYfMhm5/2FvBX1 ygYbSqz//eeYeyV4atRUmCNvdBge9fl3TQWYOI3T9N/KrB3/sPivqERCnlEPn4z8 8UJMx81wTXc9Gm9U8yJSARWVmQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFFoa47Xu V+Y/XZCoSJCok63MFDxGMB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1 MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY1QTkvMDBCNzE1MUNGRDA4MTFFN0E0MjhGRjBGQzRGOUFFMDIvRjlFMjExNDRE OTBGMTFFREIyREJFQTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAmdr7AMEAGdr7jANBgkqhkiG9w0BAQsFAAOCAQEAj4nb m0KAXXHS4Ii1paIy8IswlOQSzkKzYtb2QidAR+7TaHLF7U/Kn5bsshGsHDDUgx4a lUdRpECJiJzTAE1NPsInF/djFe3kFUALn7iPe+X3eBRT1KAH/nShTG29vW2AW2ac dgHkvTsFdM7V+94lqDYOZHjotEGT64Gh4D3YgYJ1+KtJ0U3bGCNqqjoWaSXv9h7y 5f6OssNgwEbQNK1a1tSSSeWF82UO0Aqwfw7hdcrSYsU1KphnE2x5inlmM1bkYL6j 0tEMmMUOXAQXa07Sosh/m555T2NPn4HqIrhD0tPqA6MLs0uJI573d2B33Z6yIold 4/GLvr1IGBqg+PufTg== -----END CERTIFICATE-----Generated at Thu May 2 20:50:40 2024 by rpki-client on console-fra.rpki-client.org