$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa File: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (raw, json) Hash identifier: 3kGetLo0/1T2TeuK7e4cz2fvy6XLEBwpuyaFMSSdmUI= Subject key identifier: 87:4B:2A:65:5E:69:F8:17:38:CB:80:20:41:32:33:22:45:D7:7B:D5 Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4 Certificate serial: 0B29 Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa Signing time: Wed 26 Jun 2024 19:51:44 +0000 ROA not before: Wed 26 Jun 2024 19:51:44 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 131270 IP address blocks: 103.68.160.0/22 maxlen: 24 103.232.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2857 (0xb29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4 Validity Not Before: Jun 26 19:51:44 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667c7150-158b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c1:78:7f:b1:bb:54:4f:00:6e:73:91:35:2f: 43:00:46:ab:0b:b1:8f:93:e2:ae:8c:39:d1:d5:91: 8f:cc:20:1d:cf:2f:65:06:6b:ce:9a:cd:0d:d6:75: 34:e6:c3:43:86:d2:09:4d:14:f0:bd:ad:98:f8:49: ff:2e:50:be:2d:5c:c1:d8:40:a5:3c:e4:5d:e4:b3: 73:2e:ac:60:f6:58:e9:85:73:04:a7:d3:3a:3c:4a: a9:47:91:fb:b9:3e:48:21:2a:66:0f:60:e3:df:c6: d9:74:ed:34:ad:80:84:74:45:5b:a3:da:cf:fe:9e: be:59:ed:4f:84:3b:63:e9:c0:46:9f:3a:3e:38:7e: a4:67:cf:fa:19:93:b6:92:48:38:e9:b5:ae:00:60: 30:bd:8a:68:3e:de:fc:ec:ae:d0:d5:8c:11:d4:17: ba:50:3d:29:7c:4c:77:89:3c:8c:70:18:c5:7c:7e: 5a:1a:08:16:bc:87:9e:79:eb:0f:17:c5:d1:ce:42: 57:94:68:04:02:bb:1b:85:6e:46:14:7e:87:d7:7a: 14:79:e8:e9:2b:7a:04:99:56:ae:6b:0f:2a:6f:1e: 07:20:ac:d2:d4:c4:84:2b:2b:24:d9:99:00:76:50: c8:73:75:3f:a3:e5:08:2b:11:3d:74:3c:3b:77:f2: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4B:2A:65:5E:69:F8:17:38:CB:80:20:41:32:33:22:45:D7:7B:D5 X509v3 Authority Key Identifier: keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.160.0/22 103.232.76.0/22 Signature Algorithm: sha256WithRSAEncryption 30:fa:17:9f:77:dd:96:bf:ff:4d:ff:9f:66:d1:61:84:af:8d: 2a:21:42:07:f2:39:53:88:f3:09:d1:cf:84:21:92:c4:8b:db: cf:9f:9b:1d:a7:de:ae:58:8d:53:1f:db:a3:c0:bb:5d:5a:77: 35:bf:a4:f1:c7:11:75:83:a9:90:a1:d7:dd:02:3a:09:57:9d: b9:f9:f8:c3:c2:e0:11:29:de:37:4b:ee:27:f1:f6:58:62:9a: ad:f9:62:ac:86:77:62:f6:7d:aa:8a:63:d0:24:2c:b4:9e:1f: a4:14:87:4e:29:7a:5c:42:c9:8a:b1:67:c6:25:6f:cc:e1:87: 01:5a:f2:30:d6:b7:29:e2:6d:cc:e6:27:54:dd:f1:1c:da:b5: 6e:d4:b2:c6:5c:72:22:bc:cb:fb:78:83:c5:4c:8c:43:a7:d2: 94:17:f7:a3:7e:fd:17:7a:79:af:64:d2:9b:5a:c8:d9:93:3c: 33:90:9a:62:ca:ca:31:0d:34:d1:03:4b:e0:00:fa:b9:a4:08: 0b:65:72:41:8f:56:23:9c:1c:fd:3d:2b:c4:92:9c:45:a8:8e: 48:bf:48:ad:77:3f:25:f8:0f:0c:aa:1e:4c:8d:75:f6:9e:e2: 1e:8d:d9:d1:e9:19:f5:2b:d7:22:01:03:a2:41:5c:85:6f:ed: 18:2d:18:93 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIyQkYxMTAvBgNVBAUTKDAzNzdCOTNDOTFGREFGNDY5QTU5MUI0QzUyRDI0Q0Ix NTU1RDJCRDQwHhcNMjQwNjI2MTk1MTQ0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdjNzE1MC0xNThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18F4f7G7VE8AbnORNS9DAEarC7GPk+KujDnR1ZGPzCAdzy9lBmvOms0N1nU0 5sNDhtIJTRTwva2Y+En/LlC+LVzB2EClPORd5LNzLqxg9ljphXMEp9M6PEqpR5H7 uT5IISpmD2Dj38bZdO00rYCEdEVbo9rP/p6+We1PhDtj6cBGnzo+OH6kZ8/6GZO2 kkg46bWuAGAwvYpoPt787K7Q1YwR1Be6UD0pfEx3iTyMcBjFfH5aGggWvIeeeesP F8XRzkJXlGgEArsbhW5GFH6H13oUeejpK3oEmVauaw8qbx4HIKzS1MSEKysk2ZkA dlDIc3U/o+UIKxE9dDw7d/L2AwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIdLKmVe afgXOMuAIEEyMyJF13vVMB8GA1UdIwQYMBaAFAN3uTyR/a9GmlkbTFLSTLFVXSvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjJCRi8xMDM5QkM0MDFB REIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIwYWFXUnRNVXRKTXNWVmRL OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzZTVQSkg5cjBhYVdSdE1VdEpNc1ZWZEs5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIyQkYvMTAzOUJDNDAxQURCMTFFQUFBM0E4MjM1QzRGOUFFMDIvMzdFQTNFMjYx QURDMTFFQThFQjQ2RjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnRKADBAJn6EwwDQYJKoZIhvcNAQELBQADggEBADD6F593 3Za//03/n2bRYYSvjSohQgfyOVOI8wnRz4QhksSL28+fmx2n3q5YjVMf26PAu11a dzW/pPHHEXWDqZCh190COglXnbn5+MPC4BEp3jdL7ifx9lhimq35YqyGd2L2faqK Y9AkLLSeH6QUh04pelxCyYqxZ8Ylb8zhhwFa8jDWtynibczmJ1Td8RzatW7UssZc ciK8y/t4g8VMjEOn0pQX96N+/Rd6ea9k0ptayNmTPDOQmmLKyjENNNEDS+AA+rmk CAtlckGPViOcHP09K8SSnEWojki/SK13PyX4DwyqHkyNdfae4h6N2dHpGfUr1yIB A6JBXIVv7RgtGJM= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org