$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/D45022C8CEC211EE80F08B36C4F9AE02.roa File: D45022C8CEC211EE80F08B36C4F9AE02.roa (raw, json) Hash identifier: xCA25wbkGD0fkIHcfCSDQazpiDazjD9RA7SrbORza4Q= Subject key identifier: 17:8C:A1:07:3A:1B:4C:92:51:AD:B6:B7:0E:0B:9A:85:A7:98:58:F2 Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Certificate serial: 02 Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/D45022C8CEC211EE80F08B36C4F9AE02.roa Signing time: Mon 19 Feb 2024 01:04:28 +0000 ROA not before: Mon 19 Feb 2024 01:04:28 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 24225 IP address blocks: 103.67.240.0/23 maxlen: 24 103.67.242.0/24 maxlen: 24 103.67.243.0/24 maxlen: 24 203.160.48.0/24 maxlen: 24 203.160.50.0/23 maxlen: 24 2405:da80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Validity Not Before: Feb 19 01:04:28 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=65d2a91b-fcec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:bd:b4:02:b6:b3:58:23:e4:8b:2f:40:e3: 1d:e4:99:03:ef:fe:4b:47:d2:73:f7:06:65:7d:11: a1:6c:05:bb:72:85:ad:42:fa:fe:94:7f:63:ef:2f: 54:d7:da:cf:a8:95:4e:34:d4:5d:ad:00:ca:3a:6e: 98:3a:de:db:18:4d:24:a5:60:4e:a9:12:66:0a:fa: 67:7d:cb:66:81:bf:67:05:4a:19:33:9b:86:e4:63: 01:dd:c3:e4:71:49:48:dd:ba:77:5d:dc:27:32:e6: 9e:ff:fb:ec:99:a9:c0:58:df:0b:b3:69:ad:aa:33: c4:e1:18:c9:da:09:ca:42:21:79:c4:f1:1a:50:9f: 85:de:73:6a:72:6a:a2:5f:00:6b:61:e9:00:9c:3b: 5c:d7:4b:a3:f9:53:49:b4:b1:0c:d2:19:f7:97:60: 0a:9a:b3:77:f3:19:18:6b:4b:f1:4a:f4:67:52:d3: da:81:df:09:dd:5e:05:82:5d:4d:6f:d6:7c:08:64: 1a:11:d2:4a:fb:57:5d:75:72:de:de:92:1e:83:be: 53:b2:ce:b0:1a:99:bb:07:22:b0:ed:11:87:37:07: cc:a1:de:37:14:e7:24:d9:30:24:76:14:3e:ff:36: 75:42:ae:6e:df:d6:6e:63:da:99:52:c5:cb:13:85: 94:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8C:A1:07:3A:1B:4C:92:51:AD:B6:B7:0E:0B:9A:85:A7:98:58:F2 X509v3 Authority Key Identifier: keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/D45022C8CEC211EE80F08B36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.240.0/22 203.160.48.0/24 203.160.50.0/23 IPv6: 2405:da80::/32 Signature Algorithm: sha256WithRSAEncryption 1b:bd:33:7f:02:fb:49:72:1a:5b:c1:2b:1d:9f:c2:b7:65:58: c2:66:f3:16:57:a6:ae:25:ff:92:fa:7c:a6:20:46:68:b6:40: 0e:28:7f:df:25:1b:43:56:59:9f:98:e5:69:5e:41:5b:b7:76: cb:60:53:8e:f8:9b:90:8a:b6:48:68:98:8d:81:cb:d9:ba:05: 12:4f:75:91:df:94:d2:a7:6d:e2:05:87:46:eb:50:71:aa:cb: 10:0b:d4:e9:9c:86:87:80:61:0f:95:13:4a:f1:f7:a4:98:b8: dd:11:a0:25:38:8d:d7:16:08:3b:f6:d5:70:5f:d3:de:77:00: e0:9e:83:b1:9c:71:1e:1e:d5:71:5a:23:36:08:8b:fd:76:49: 71:4e:85:ad:3f:dc:f1:0c:90:97:a4:be:f3:72:50:25:5c:9a: 32:49:fc:9d:4f:b5:fe:f5:57:90:c0:72:18:fc:43:d8:d0:c1: 91:8d:48:79:fd:43:53:fb:4c:0b:71:b4:6a:d9:2b:b0:62:c2: 69:ca:58:68:48:7d:ec:ee:82:a2:ec:28:05:f7:82:cf:25:76: 09:c7:34:c8:36:1a:a1:93:10:ab:5a:6d:b7:ca:d5:4c:e9:0c: 46:10:77:7d:2c:10:51:76:ae:02:e7:dd:2c:8e:49:bd:35:06: f4:d5:bf:5e -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDdCNjExMC8GA1UEBRMoMENEOTA0QzdFQjM5MEFEMUE1NURCQUY0RkM1MDA1NEMw ODU0NkUyQjAeFw0yNDAyMTkwMTA0MjhaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZDJhOTFiLWZjZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5k720ArazWCPkiy9A4x3kmQPv/ktH0nP3BmV9EaFsBbtyha1C+v6Uf2PvL1TX 2s+olU401F2tAMo6bpg63tsYTSSlYE6pEmYK+md9y2aBv2cFShkzm4bkYwHdw+Rx SUjdundd3Ccy5p7/++yZqcBY3wuzaa2qM8ThGMnaCcpCIXnE8RpQn4Xec2pyaqJf AGth6QCcO1zXS6P5U0m0sQzSGfeXYAqas3fzGRhrS/FK9GdS09qB3wndXgWCXU1v 1nwIZBoR0kr7V111ct7ekh6DvlOyzrAambsHIrDtEYc3B8yh3jcU5yTZMCR2FD7/ NnVCrm7f1m5j2plSxcsThZQ5AgMBAAGjggKwMIICrDAdBgNVHQ4EFgQUF4yhBzob TJJRrba3DguahaeYWPIwHwYDVR0jBBgwFoAUDNkEx+s5CtGlXbr0/FAFTAhUbisw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0N0I2LzkwNUQ3RkVFQ0VD MTExRUU4Q0YwMTc0MEM0RjlBRTAyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJp cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRE5rRXgtczVDdEdsWGJyMF9GQUZUQWhVYmlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDdCNi85MDVEN0ZFRUNFQzExMUVFOENGMDE3NDBDNEY5QUUwMi9ENDUwMjJDOENF QzIxMUVFODBGMDhCMzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA6BggrBgEFBQcBBwEB/wQr MCkwGAQCAAEwEgMEAmdD8AMEAMugMAMEAcugMjANBAIAAjAHAwUAJAXagDANBgkq hkiG9w0BAQsFAAOCAQEAG70zfwL7SXIaW8ErHZ/Ct2VYwmbzFlemriX/kvp8piBG aLZADih/3yUbQ1ZZn5jlaV5BW7d2y2BTjvibkIq2SGiYjYHL2boFEk91kd+U0qdt 4gWHRutQcarLEAvU6ZyGh4BhD5UTSvH3pJi43RGgJTiN1xYIO/bVcF/T3ncA4J6D sZxxHh7VcVojNgiL/XZJcU6FrT/c8QyQl6S+83JQJVyaMkn8nU+1/vVXkMByGPxD 2NDBkY1Ief1DU/tMC3G0atkrsGLCacpYaEh97O6CouwoBfeCzyV2Ccc0yDYaoZMQ q1ptt8rVTOkMRhB3fSwQUXauAufdLI5JvTUG9NW/Xg== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:29 2024 by rpki-client on console-ams.rpki-client.org