$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/9DB6EBB4972E11E9B776A755C4F9AE02.roa File: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (raw, json) Hash identifier: 7YDcINujNdYWr5dyWzmAhMDEOPeeZscdVmCzJdffcqY= Subject key identifier: 14:F7:6D:6D:B5:F4:8B:A9:AB:CE:60:62:E1:C5:D5:8E:E3:9C:8C:DC Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 33EE Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/9DB6EBB4972E11E9B776A755C4F9AE02.roa Signing time: Tue 20 Jun 2023 14:50:35 +0000 ROA not before: Tue 20 Jun 2023 14:50:35 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 55407 IP address blocks: 103.19.104.0/24 maxlen: 24 103.19.105.0/24 maxlen: 24 103.19.106.0/24 maxlen: 24 203.209.97.0/24 maxlen: 24 203.209.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13294 (0x33ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jun 20 14:50:35 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6491bcba-b384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:16:29:04:7a:cf:34:d8:ac:61:4b:b9:f4:c3: 23:74:e2:51:37:5b:80:07:21:53:7f:e3:a7:16:15: b0:f8:71:f9:cb:59:a0:d8:4f:c7:11:af:7d:73:cb: 4c:13:61:da:58:41:1e:be:f3:16:c5:6b:10:d5:cd: cc:06:b0:bc:62:ae:0c:be:4a:55:a7:19:07:cd:e0: 19:0e:29:84:98:d7:4e:46:6d:c4:1b:10:94:41:91: 9a:f6:27:52:55:58:c0:2b:28:0b:d1:f9:74:c3:cd: af:13:70:b9:85:cf:c1:5a:8c:98:38:24:af:f8:5b: 30:47:b9:7a:5e:7e:de:cd:5d:4e:82:ed:fb:96:46: d8:13:52:a2:42:f1:72:5a:93:28:9f:a6:15:1e:73: 16:f6:0e:ab:11:d0:fb:09:2f:fe:34:d8:2a:80:aa: 8e:b3:75:6f:c1:b2:70:7a:e6:66:a6:d8:75:a0:a7: 92:f0:a7:be:0a:92:2c:9c:49:44:3f:5f:60:2d:fa: d6:dd:c2:e6:6d:cc:12:a3:b7:45:76:4b:1c:2c:0d: fd:74:0b:5f:16:4b:73:fb:48:9d:67:27:c2:69:5c: c0:94:bc:3b:c0:ff:42:cc:25:9d:aa:72:d1:fd:d3: 9b:50:b4:a1:c6:88:d6:80:5b:91:62:56:c4:9b:25: f3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F7:6D:6D:B5:F4:8B:A9:AB:CE:60:62:E1:C5:D5:8E:E3:9C:8C:DC X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/9DB6EBB4972E11E9B776A755C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.19.104.0-103.19.106.255 203.209.97.0-203.209.98.255 Signature Algorithm: sha256WithRSAEncryption b6:6b:31:45:ac:67:6a:d1:70:48:4d:f7:5b:39:d7:fc:c0:2c: 8b:8c:41:bd:7b:e5:55:4a:4b:06:f9:2a:80:27:63:c2:41:83: 35:55:76:fc:ed:fd:df:72:64:71:0f:d4:b9:16:45:ca:a1:94: c6:1a:33:f7:7d:56:5a:6d:37:98:cb:07:86:28:59:00:c6:3a: a9:81:76:82:86:41:29:e2:ce:db:1c:87:59:c3:ec:1c:95:59: fe:23:49:cf:26:3c:dc:30:18:00:86:cc:bf:97:16:70:ec:5c: 17:59:b7:7f:3a:7c:0f:a2:95:36:66:8b:af:50:37:fe:35:23: 33:52:0b:54:81:ed:b7:10:a6:e4:0c:88:34:7d:69:3e:75:ed: 20:55:6b:a6:0a:4b:40:f7:b8:e8:23:83:28:ae:55:b2:cd:6f: ab:be:9b:5b:a1:c7:72:0b:52:d7:b1:cb:30:e8:c8:a8:27:d1: 0d:2b:7f:72:f7:09:6d:ba:03:98:49:63:d5:d6:a7:8d:e9:78: 38:fd:c5:99:56:ff:be:e4:89:2e:9c:50:54:d3:ed:09:6e:4c: ed:bf:e0:87:65:ce:5e:79:10:d8:1f:fa:a7:3a:1e:9c:a5:5a: 75:8e:20:18:0f:ee:74:a5:bc:de:3f:91:09:6a:15:79:54:79: e0:c0:35:2e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICM+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjMwNjIwMTQ1MDM1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDkxYmNiYS1iMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BYpBHrPNNisYUu59MMjdOJRN1uAByFTf+OnFhWw+HH5y1mg2E/HEa99c8tM E2HaWEEevvMWxWsQ1c3MBrC8Yq4MvkpVpxkHzeAZDimEmNdORm3EGxCUQZGa9idS VVjAKygL0fl0w82vE3C5hc/BWoyYOCSv+FswR7l6Xn7ezV1Ogu37lkbYE1KiQvFy WpMon6YVHnMW9g6rEdD7CS/+NNgqgKqOs3VvwbJweuZmpth1oKeS8Ke+CpIsnElE P19gLfrW3cLmbcwSo7dFdkscLA39dAtfFktz+0idZyfCaVzAlLw7wP9CzCWdqnLR /dObULShxojWgFuRYlbEmyXzxwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFBT3bW21 9Iupq85gYuHF1Y7jnIzcMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvOURCNkVCQjQ5 NzJFMTFFOUI3NzZBNzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEA2cTaAMEAGcTajAMAwQAy9FhAwQAy9FiMA0GCSqGSIb3 DQEBCwUAA4IBAQC2azFFrGdq0XBITfdbOdf8wCyLjEG9e+VVSksG+SqAJ2PCQYM1 VXb87f3fcmRxD9S5FkXKoZTGGjP3fVZabTeYyweGKFkAxjqpgXaChkEp4s7bHIdZ w+wclVn+I0nPJjzcMBgAhsy/lxZw7FwXWbd/OnwPopU2ZouvUDf+NSMzUgtUge23 EKbkDIg0fWk+de0gVWumCktA97joI4MorlWyzW+rvptbocdyC1LXscsw6MioJ9EN K39y9wltugOYSWPV1qeN6Xg4/cWZVv++5IkunFBU0+0Jbkztv+CHZc5eeRDYH/qn Oh6cpVp1jiAYD+50pbzeP5EJahV5VHngwDUu -----END CERTIFICATE-----Generated at Fri May 31 15:08:09 2024 by rpki-client on console-fra.rpki-client.org