$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/1C93BF747CD011EB9F876E78C4F9AE02.roa File: 1C93BF747CD011EB9F876E78C4F9AE02.roa (raw, json) Hash identifier: 1nhYzuuN3iiBPUuYvjPfED8ITVM34g4WPuGCXKX1a14= Subject key identifier: 59:37:47:8A:6A:49:C0:C8:BB:DC:D7:FE:30:3D:47:50:38:49:42:BA Certificate issuer: /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C Certificate serial: 05B3 Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/1C93BF747CD011EB9F876E78C4F9AE02.roa Signing time: Sun 21 Apr 2024 00:13:20 +0000 ROA not before: Sun 21 Apr 2024 00:13:20 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 0 IP address blocks: 103.10.57.0/24 maxlen: 24 103.163.20.0/24 maxlen: 24 2001:deb:c000::/48 maxlen: 48 2001:deb:c001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C Validity Not Before: Apr 21 00:13:20 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66245a20-352e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:7f:e7:a3:62:ae:eb:98:db:85:32:79:8a: 5d:84:7c:3a:d5:d0:2b:62:df:d9:b6:e1:21:8f:64: 67:7d:cf:2c:71:94:ed:4e:a1:04:3d:42:eb:6f:3d: 83:37:15:c1:ef:92:b8:34:04:9e:70:ed:33:fb:0d: 18:8d:df:2e:d1:d7:d0:a4:74:ad:c6:d3:92:31:39: ef:d5:af:ea:cf:e4:dd:f9:6f:25:19:66:2a:a0:30: 4b:22:bf:38:09:f4:38:47:6e:83:c4:47:34:e2:49: ab:64:06:c6:42:31:5f:47:75:ab:34:ba:ae:f0:99: fc:1f:db:2c:88:91:bc:54:04:22:bf:9d:37:86:9b: ec:25:30:93:d8:4a:9c:52:40:a3:99:d3:02:64:2e: 31:d2:24:c5:53:f5:90:a4:cf:90:5f:dc:48:b8:94: 96:d9:ba:f9:76:88:7f:8b:00:05:0c:6b:cf:35:0a: d7:87:fa:8a:52:31:0e:0e:3e:9b:45:02:46:f6:b2: 62:4c:da:9c:96:96:98:6f:f5:fa:6f:09:cb:6d:79: 58:16:e5:ac:ee:a7:42:69:f2:2d:69:3a:f6:9f:16: 53:bf:79:90:e9:1d:36:e2:86:90:ca:04:ca:52:cc: 19:c7:b8:45:42:a1:4c:9d:a7:40:9e:87:2c:d6:83: 56:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:37:47:8A:6A:49:C0:C8:BB:DC:D7:FE:30:3D:47:50:38:49:42:BA X509v3 Authority Key Identifier: keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/1C93BF747CD011EB9F876E78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.57.0/24 103.163.20.0/24 IPv6: 2001:deb:c000::/47 Signature Algorithm: sha256WithRSAEncryption 00:95:c1:07:8a:67:47:97:ea:5a:02:c3:6b:bb:24:33:ae:98: 24:14:dd:00:2b:14:55:94:39:fb:d3:79:e1:96:b6:5b:05:0c: 38:9f:14:07:a3:79:0b:9b:af:73:f4:a1:99:18:1a:50:c4:6e: 0d:a7:a8:dc:9e:8f:6d:57:b4:8e:f9:f8:1c:15:3b:ba:bc:7c: 46:a1:8c:70:ad:86:a8:1b:62:58:cc:fe:e2:85:de:19:51:4f: 3c:70:59:2c:3f:7c:f7:42:b5:e5:46:4b:de:5d:1b:6e:e4:cc: 59:d9:b9:0a:5c:dc:5e:e8:b5:19:35:f6:54:fc:f4:df:7c:67: a4:2a:7c:7a:4c:ed:17:b2:f4:76:cd:f5:39:72:f0:5a:3d:99: 7c:11:a7:45:1e:a8:c4:c4:1d:db:99:ed:35:06:81:41:d3:8f: f3:d2:6d:0f:f5:78:a8:3f:27:b5:7b:53:79:31:e8:c8:f7:c3: 44:d9:a1:aa:5a:94:05:91:6b:e9:ed:d1:e8:4c:59:cf:b0:6e: 05:39:8f:bc:51:91:b4:21:36:8e:5f:22:f3:bd:d8:28:d6:ca: 81:c3:c8:1a:19:28:f3:7e:43:64:93:e2:aa:77:7f:9a:20:a5: 9d:a9:70:ea:7f:d7:46:c7:4f:62:02:c3:9e:98:df:85:7f:6e: e4:c6:9d:52 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGODAxMTAvBgNVBAUTKDZDQTJDRkE2ODhCREY5RTJENjU2MTYwODY3N0EzMEM5 MTUyNDNEMEMwHhcNMjQwNDIxMDAxMzIwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjI0NWEyMC0zNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAss5/56NiruuY24UyeYpdhHw61dArYt/ZtuEhj2Rnfc8scZTtTqEEPULrbz2D NxXB75K4NASecO0z+w0Yjd8u0dfQpHStxtOSMTnv1a/qz+Td+W8lGWYqoDBLIr84 CfQ4R26DxEc04kmrZAbGQjFfR3WrNLqu8Jn8H9ssiJG8VAQiv503hpvsJTCT2Eqc UkCjmdMCZC4x0iTFU/WQpM+QX9xIuJSW2br5doh/iwAFDGvPNQrXh/qKUjEODj6b RQJG9rJiTNqclpaYb/X6bwnLbXlYFuWs7qdCafItaTr2nxZTv3mQ6R024oaQygTK UswZx7hFQqFMnadAnocs1oNWEwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFFk3R4pq ScDIu9zX/jA9R1A4SUK6MB8GA1UdIwQYMBaAFGyiz6aIvfni1lYWCGd6MMkVJD0M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY4MC8wNzFERUE0MDdD Q0UxMUVCQkI4ODI5NzZDNEY5QUUwMi9iS0xQcG9pOS1lTFdWaFlJWjNvd3lSVWtQ UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLTFBwb2k5LWVMV1ZoWUlaM293eVJVa1BRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhGODAvMDcxREVBNDA3Q0NFMTFFQkJCODgyOTc2QzRGOUFFMDIvMUM5M0JGNzQ3 Q0QwMTFFQjlGODc2RTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnCjkDBABnoxQwDwQCAAIwCQMHASABDevAADANBgkqhkiG 9w0BAQsFAAOCAQEAAJXBB4pnR5fqWgLDa7skM66YJBTdACsUVZQ5+9N54Za2WwUM OJ8UB6N5C5uvc/ShmRgaUMRuDaeo3J6PbVe0jvn4HBU7urx8RqGMcK2GqBtiWMz+ 4oXeGVFPPHBZLD9890K15UZL3l0bbuTMWdm5ClzcXui1GTX2VPz033xnpCp8ekzt F7L0ds31OXLwWj2ZfBGnRR6oxMQd25ntNQaBQdOP89JtD/V4qD8ntXtTeTHoyPfD RNmhqlqUBZFr6e3R6ExZz7BuBTmPvFGRtCE2jl8i873YKNbKgcPIGhko835DZJPi qnd/miClnalw6n/XRsdPYgLDnpjfhX9u5MadUg== -----END CERTIFICATE-----Generated at Fri May 3 03:10:47 2024 by rpki-client on console-ams.rpki-client.org