$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/792CAB5E1F3B11EFB440F362C4F9AE02.roa File: 792CAB5E1F3B11EFB440F362C4F9AE02.roa (raw, json) Hash identifier: 3xedXGalmAKT4Eeeoulmjy9qpQAaom8Cr8PBxAB9ThU= Subject key identifier: 1F:E4:86:8E:96:4D:84:EA:1B:65:1F:36:69:59:DA:BC:5F:E8:EE:8D Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Certificate serial: 02 Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/792CAB5E1F3B11EFB440F362C4F9AE02.roa Signing time: Fri 31 May 2024 10:49:37 +0000 ROA not before: Fri 31 May 2024 10:49:37 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 149517 IP address blocks: 103.182.62.0/23 maxlen: 23 103.182.62.0/24 maxlen: 24 103.182.63.0/24 maxlen: 24 2001:df0:75c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 16:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Validity Not Before: May 31 10:49:37 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=6659ab41-0c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9f:31:94:a9:f6:5c:73:27:d8:aa:f7:6f:de: 04:4c:d4:c9:a0:1a:a0:c1:a9:f2:37:10:dc:9f:01: e0:13:11:c8:20:e4:db:d6:10:2b:7e:f5:cf:e3:48: 7b:3e:17:78:b2:23:9a:c8:01:15:a5:1e:4b:74:da: c0:ff:42:88:bc:7f:d2:21:32:62:0a:50:a2:03:0b: 48:0d:79:20:29:97:a1:47:7c:34:08:50:61:2e:d2: 17:a5:e9:43:4a:6e:2f:08:a0:6b:eb:93:06:86:81: a5:f8:7c:a7:b5:6e:1c:f9:26:72:9e:47:09:9b:a9: 44:4b:6a:de:b2:aa:69:96:c1:59:17:d2:ce:3f:a8: ed:45:f6:52:12:60:11:f4:9a:70:ba:7f:8c:1c:02: e5:f2:3d:2a:22:e6:78:71:81:27:14:c5:fc:f1:bc: cf:6e:e5:c1:80:fe:d2:53:57:fc:16:c7:05:d8:d6: a6:84:59:ab:fa:43:6b:09:d1:8c:bf:52:57:db:7e: a3:c1:a3:69:7d:5e:21:b1:c5:41:7b:e8:76:9a:11: 37:71:97:2e:19:ed:2b:4c:45:e4:7a:38:91:6d:dc: 80:85:dd:79:2b:df:37:0a:9a:a8:b2:ee:0e:b7:1c: ef:e4:e5:e9:3d:40:38:dd:60:2c:c8:8f:a4:34:cb: 67:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E4:86:8E:96:4D:84:EA:1B:65:1F:36:69:59:DA:BC:5F:E8:EE:8D X509v3 Authority Key Identifier: keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/792CAB5E1F3B11EFB440F362C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.62.0/23 IPv6: 2001:df0:75c0::/48 Signature Algorithm: sha256WithRSAEncryption 9b:c8:fb:00:12:0b:17:0c:28:90:4c:ce:5f:dd:d9:a0:f6:5c: 3c:ca:2c:72:a9:1a:0a:0b:4b:3f:34:45:44:88:ca:e9:b9:31: 20:b9:cc:bd:42:3b:a7:d4:be:97:73:c0:a8:76:63:b9:54:84: c0:c6:71:60:37:15:d8:7c:68:e3:f4:1b:50:44:83:a2:88:07: 46:ce:20:f9:7a:df:ba:a5:ed:0d:cf:e0:d4:dc:b5:a8:9d:fb: 74:db:e1:97:74:9f:93:e8:ca:10:3d:2c:3e:77:06:2c:00:32: 06:a7:30:a1:d1:fa:2a:46:4d:6a:92:5d:bb:74:07:f7:8d:fc: ff:06:9c:9e:01:00:a9:ca:01:3e:b0:4b:e9:01:c1:ee:35:31: 65:44:10:e3:f8:b8:ee:f2:65:a8:54:eb:9b:bf:f8:32:e7:13: 03:86:78:a6:52:70:0d:69:73:99:c5:e0:04:b8:1e:08:c4:5e: 2c:7c:34:ee:4e:b6:19:f3:42:14:99:77:9b:e0:bf:25:0f:d6: 6a:b6:02:48:ec:94:54:b3:55:d8:ba:3b:9a:ca:50:1d:16:38: 6c:7b:4a:55:4c:44:88:b7:d5:16:0e:15:7f:24:88:bf:f5:17: b3:86:c1:3a:fa:99:60:21:04:84:ff:71:5b:b5:4f:c5:a7:ea: c0:34:4f:04 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MEZDMDExMC8GA1UEBRMoMDNFRjBFMzkwQTMxNUU1RjNDNDYxQjBBNzJCMjE4QkVF MjIzRTAwRTAeFw0yNDA1MzExMDQ5MzdaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NTlhYjQxLTBjMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXnzGUqfZccyfYqvdv3gRM1MmgGqDBqfI3ENyfAeATEcgg5NvWECt+9c/jSHs+ F3iyI5rIARWlHkt02sD/Qoi8f9IhMmIKUKIDC0gNeSApl6FHfDQIUGEu0hel6UNK bi8IoGvrkwaGgaX4fKe1bhz5JnKeRwmbqURLat6yqmmWwVkX0s4/qO1F9lISYBH0 mnC6f4wcAuXyPSoi5nhxgScUxfzxvM9u5cGA/tJTV/wWxwXY1qaEWav6Q2sJ0Yy/ UlfbfqPBo2l9XiGxxUF76HaaETdxly4Z7StMReR6OJFt3ICF3Xkr3zcKmqiy7g63 HO/k5ek9QDjdYCzIj6Q0y2d7AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUH+SGjpZN hOobZR82aVnavF/o7o0wHwYDVR0jBBgwFoAUA+8OOQoxXl88RhsKcrIYvuIj4A4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwRkMwL0NERTA5ODc2OTU3 ODExRUNBMzJDQ0Y1NUM0RjlBRTAyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRB NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQS04T09Rb3hYbDg4UmhzS2NySVl2dUlqNEE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi83OTJDQUI1RTFG M0IxMUVGQjQ0MEYzNjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWe2PjAPBAIAAjAJAwcAIAEN8HXAMA0GCSqGSIb3DQEBCwUA A4IBAQCbyPsAEgsXDCiQTM5f3dmg9lw8yixyqRoKC0s/NEVEiMrpuTEgucy9Qjun 1L6Xc8CodmO5VITAxnFgNxXYfGjj9BtQRIOiiAdGziD5et+6pe0Nz+DU3LWonft0 2+GXdJ+T6MoQPSw+dwYsADIGpzCh0foqRk1qkl27dAf3jfz/BpyeAQCpygE+sEvp AcHuNTFlRBDj+Lju8mWoVOubv/gy5xMDhnimUnANaXOZxeAEuB4IxF4sfDTuTrYZ 80IUmXeb4L8lD9ZqtgJI7JRUs1XYujuaylAdFjhse0pVTESIt9UWDhV/JIi/9Rez hsE6+plgIQSE/3FbtU/Fp+rANE8E -----END CERTIFICATE-----Generated at Tue Jun 18 20:00:07 2024 by rpki-client on console-ams.rpki-client.org