$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa File: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (raw, json) Hash identifier: mB8ToS9gyJIuPmUvgepoMsl4F2fpGVn/3oon7ZTZ6WQ= Subject key identifier: 41:61:8A:11:CB:CF:B8:12:4E:E9:45:FF:49:FF:DD:D9:40:E3:39:1B Certificate issuer: /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Certificate serial: 0FFB Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa Signing time: Tue 26 Sep 2023 17:55:28 +0000 ROA not before: Tue 26 Sep 2023 17:55:28 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 132372 IP address blocks: 103.28.90.0/24 maxlen: 24 103.28.91.0/24 maxlen: 24 103.72.162.0/23 maxlen: 24 103.117.20.0/24 maxlen: 24 103.122.164.0/24 maxlen: 24 2403:fd40:1001::/48 maxlen: 48 2403:fd40:1002::/48 maxlen: 48 2403:fd40:1003::/48 maxlen: 48 2403:fd40:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4091 (0xffb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Validity Not Before: Sep 26 17:55:28 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65131b10-1776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:af:9e:db:d5:bc:01:b9:13:55:6f:dd:60:25: 10:cd:5f:9b:f2:5c:78:87:1d:da:7f:a6:96:61:4a: 9a:3a:77:c9:fe:74:0c:56:a5:e0:84:6c:2b:f9:3d: f2:5d:72:6a:3b:04:a8:96:f0:d4:31:36:86:1c:b8: bb:ec:d6:2b:51:7b:af:88:08:68:87:90:34:a4:06: cd:38:48:2f:57:45:54:07:f2:4e:4e:11:23:d3:55: 06:c3:cd:82:78:6c:44:ee:d3:3e:ad:85:db:d5:d9: 4c:78:72:ce:43:f3:8f:ab:6d:b8:6a:0d:90:9a:92: 16:e2:46:a5:88:2f:41:79:a5:e4:66:f9:2f:a8:0c: 7b:83:0c:4c:65:d8:d0:35:c0:c6:de:7f:bf:31:c7: 3d:9e:41:29:be:46:cf:72:22:04:0e:7d:f2:08:5f: 06:54:66:e3:da:18:55:4f:be:54:70:65:58:ad:b4: 9e:71:59:e9:f6:f6:19:74:4b:bb:a8:f4:5f:8e:99: fe:6f:76:5f:e7:fe:25:46:12:03:d6:f2:e5:2a:89: 2a:27:77:07:97:91:75:dd:2f:9a:b4:0f:8f:54:83: c7:70:64:25:c2:15:cc:3b:6e:2b:08:27:c4:b3:46: 66:1d:55:30:ad:1a:fc:3c:c3:d4:04:13:78:35:8d: a8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:61:8A:11:CB:CF:B8:12:4E:E9:45:FF:49:FF:DD:D9:40:E3:39:1B X509v3 Authority Key Identifier: keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.90.0/23 103.72.162.0/23 103.117.20.0/24 103.122.164.0/24 IPv6: 2403:fd40:1001::-2403:fd40:1003:ffff:ffff:ffff:ffff:ffff 2403:fd40:a000::/48 Signature Algorithm: sha256WithRSAEncryption 85:c1:22:81:56:7b:d6:93:48:57:46:67:15:4c:6f:8d:13:8d: 25:79:18:35:e3:4d:a3:21:d7:c0:f0:8b:e1:dc:7a:ca:45:e0: 6c:2d:a3:22:a5:2d:c5:d3:71:fa:d2:f2:de:e4:2c:c5:e2:40: d8:03:9f:79:83:61:7c:fb:34:ee:1e:be:8f:b5:f3:18:66:f3: 68:87:af:78:f7:31:7a:c3:aa:f3:5f:ba:93:26:7b:d2:85:c0: 4e:fb:15:c8:6f:e1:12:bd:79:f8:6f:9f:b1:3e:58:60:1e:2e: 3f:83:a8:46:44:17:34:be:8a:9e:a6:45:94:58:9c:de:3a:42: ca:9b:be:4a:3c:39:d2:fb:6b:4c:f6:28:b7:9f:82:fa:3b:6f: 35:d6:e9:66:50:c6:2f:3b:30:08:83:73:3c:b8:92:cf:9f:d4: a4:a6:8a:9f:09:8d:60:63:8e:8a:dd:a3:36:de:48:1b:f8:ba: 43:53:4a:76:fc:5d:86:a3:65:3b:ec:e8:1f:8f:31:d0:9c:0f: 0c:55:f4:04:a5:72:14:d3:09:59:03:3e:09:8e:05:dd:73:c6: 6f:2c:c8:3e:0a:dc:7a:43:78:06:6d:9f:4c:7b:c6:3d:4c:ee: ce:06:5c:84:5a:fa:95:ba:11:43:e2:81:8d:12:1f:7d:40:5b: c1:d7:e7:ee -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgICD/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4NjIxMTAvBgNVBAUTKEU4NTJBNThERTg3MTlGOEJDNkJENjQ5NDk4NTRCNDc0 NDdCODlDREUwHhcNMjMwOTI2MTc1NTI4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEzMWIxMC0xNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxK+e29W8AbkTVW/dYCUQzV+b8lx4hx3af6aWYUqaOnfJ/nQMVqXghGwr+T3y XXJqOwSolvDUMTaGHLi77NYrUXuviAhoh5A0pAbNOEgvV0VUB/JOThEj01UGw82C eGxE7tM+rYXb1dlMeHLOQ/OPq224ag2QmpIW4kaliC9BeaXkZvkvqAx7gwxMZdjQ NcDG3n+/Mcc9nkEpvkbPciIEDn3yCF8GVGbj2hhVT75UcGVYrbSecVnp9vYZdEu7 qPRfjpn+b3Zf5/4lRhID1vLlKokqJ3cHl5F13S+atA+PVIPHcGQlwhXMO24rCCfE s0ZmHVUwrRr8PMPUBBN4NY2ouwIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFEFhihHL z7gSTulF/0n/3dlA4zkbMB8GA1UdIwQYMBaAFOhSpY3ocZ+Lxr1klJhUtHRHuJze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg2Mi8xRTZGNkMxMjBG RjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40dkd2V1NVbUZTMGRFZTRu TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZGS2xqZWh4bjR2R3ZXU1VtRlMwZEVlNG5ONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY4NjIvMUU2RjZDMTIwRkY5MTFFOUEwRDkyQjBGQzRGOUFFMDIvRDFEN0Y5QUUw RkY5MTFFOUI0NUUzQjEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVgYIKwYBBQUHAQcBAf8E RzBFMB4EAgABMBgDBAFnHFoDBAFnSKIDBABndRQDBABneqQwIwQCAAIwHTASAwcA JAP9QBABAwcCJAP9QBAAAwcAJAP9QKAAMA0GCSqGSIb3DQEBCwUAA4IBAQCFwSKB VnvWk0hXRmcVTG+NE40leRg1402jIdfA8Ivh3HrKReBsLaMipS3F03H60vLe5CzF 4kDYA595g2F8+zTuHr6PtfMYZvNoh6949zF6w6rzX7qTJnvShcBO+xXIb+ESvXn4 b5+xPlhgHi4/g6hGRBc0voqepkWUWJzeOkLKm75KPDnS+2tM9ii3n4L6O2811ulm UMYvOzAIg3M8uJLPn9SkpoqfCY1gY46K3aM23kgb+LpDU0p2/F2Go2U77OgfjzHQ nA8MVfQEpXIU0wlZAz4JjgXdc8ZvLMg+Ctx6Q3gGbZ9Me8Y9TO7OBlyEWvqVuhFD 4oGNEh99QFvB1+fu -----END CERTIFICATE-----Generated at Fri May 31 20:34:08 2024 by rpki-client on console-ams.rpki-client.org