$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/128DFF02E14611EE80D6C425C4F9AE02.roa File: 128DFF02E14611EE80D6C425C4F9AE02.roa (raw, json) Hash identifier: RsFkDrsaWXrs+2HHRJtN4KDTMNXXJoHjiyFQ4t/Nt5k= Subject key identifier: 44:BD:CE:70:20:26:74:D1:AC:29:20:57:AE:A2:17:2F:FC:EB:37:58 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 0493 Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/128DFF02E14611EE80D6C425C4F9AE02.roa Signing time: Wed 13 Mar 2024 14:29:17 +0000 ROA not before: Wed 13 Mar 2024 14:29:17 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 142565 IP address blocks: 103.78.28.0/22 maxlen: 22 103.78.28.0/24 maxlen: 24 103.78.29.0/24 maxlen: 24 103.78.30.0/24 maxlen: 24 103.169.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 01:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1171 (0x493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Mar 13 14:29:17 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=65f1b83d-65ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:99:d9:96:7c:4a:c4:21:a1:56:d8:79:e0: 85:2a:26:c6:80:b8:2a:f5:1e:42:2e:8d:5c:d4:c3: 30:1c:52:52:3c:54:98:6f:91:9f:cf:d7:17:5e:e1: 5e:88:9f:06:97:51:eb:36:56:a7:31:c9:2b:26:db: 51:5b:8b:9e:3c:3d:e1:e7:78:10:6a:5b:0f:9a:de: 26:ae:34:4b:0f:fe:f4:77:80:c3:d9:af:28:4d:4b: 2b:4a:6a:b9:fe:d4:77:2f:af:d5:c3:e6:40:1e:46: 27:9d:ef:17:7c:22:68:29:d3:a0:89:f1:bb:1f:c5: f5:1b:f0:92:32:cd:99:0a:7d:5d:e8:02:17:9e:61: 24:23:d8:ca:ed:45:6a:14:70:93:0d:30:2e:ad:89: 09:2f:cf:11:05:b9:f4:bd:12:2c:14:98:35:7b:50: 8e:8b:19:dc:cc:5c:96:91:b4:90:4c:36:d1:9c:b0: 97:49:9c:42:73:fd:83:84:97:3a:45:e3:c8:bc:df: 3d:67:a7:23:2e:26:0d:99:a1:33:66:e6:c9:6e:2c: 50:a8:c2:74:f6:da:83:05:e7:ae:3f:97:6a:29:46: ba:34:b4:3f:fc:de:5a:8f:d8:8b:e2:75:ce:42:9a: 37:ec:e4:e6:c0:cc:cf:fa:31:0e:3c:42:87:c7:df: 7c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BD:CE:70:20:26:74:D1:AC:29:20:57:AE:A2:17:2F:FC:EB:37:58 X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/128DFF02E14611EE80D6C425C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.78.28.0/22 103.169.66.0/24 Signature Algorithm: sha256WithRSAEncryption 27:e5:45:97:7b:53:87:68:21:a2:cf:72:c6:e4:cc:f8:7e:4d: 53:af:55:66:1e:6c:91:a0:37:74:6f:54:8a:2b:03:a8:95:9c: 3f:fc:f1:ea:c5:91:54:5c:dd:8b:0d:a7:50:ba:7c:4a:8c:5e: 22:dc:1f:c7:b5:aa:50:b9:18:e1:df:1a:f6:42:7e:bb:5d:10: 27:66:25:3e:71:4f:8f:06:55:ff:68:ad:e1:93:87:63:af:e4: e5:2b:04:ea:7e:4d:15:e5:f2:d1:71:8b:ee:0b:17:75:13:e4: ec:75:c5:6a:71:9c:d9:cd:17:fe:c5:0f:7b:77:9b:3d:56:85: 96:81:8c:9a:31:28:5b:3f:a9:b2:6c:06:28:ec:e1:47:92:ac: f1:b2:df:ec:07:b6:f5:6d:68:2b:57:8a:78:13:e5:84:e5:f2: d2:90:3f:2f:c3:d4:08:ce:ba:1d:93:ec:ce:bc:5a:24:29:b5: e1:cc:f6:98:f8:40:4b:12:92:a4:5d:e4:70:8c:05:5a:3e:db: 37:cc:47:63:0d:cc:3b:d8:fd:75:29:7e:18:76:3c:89:e4:c7: b1:a4:d3:5e:60:7a:98:10:12:5a:c4:d0:ae:b0:71:c2:e3:18: c9:ea:a9:ec:2d:3d:46:06:51:ff:0c:77:43:05:b9:60:ed:d3: 73:19:2b:78 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjQwMzEzMTQyOTE3WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWYxYjgzZC02NWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMCZ2ZZ8SsQhoVbYeeCFKibGgLgq9R5CLo1c1MMwHFJSPFSYb5Gfz9cXXuFe iJ8Gl1HrNlanMckrJttRW4uePD3h53gQalsPmt4mrjRLD/70d4DD2a8oTUsrSmq5 /tR3L6/Vw+ZAHkYnne8XfCJoKdOgifG7H8X1G/CSMs2ZCn1d6AIXnmEkI9jK7UVq FHCTDTAurYkJL88RBbn0vRIsFJg1e1COixnczFyWkbSQTDbRnLCXSZxCc/2DhJc6 RePIvN89Z6cjLiYNmaEzZubJbixQqMJ09tqDBeeuP5dqKUa6NLQ//N5aj9iL4nXO Qpo37OTmwMzP+jEOPEKHx998gwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFES9znAg JnTRrCkgV66iFy/86zdYMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURERDUvOEIwRDBGRjJFM0Y4MTFFQjlFMDhEQjE0QzRGOUFFMDIvMTI4REZGMDJF MTQ2MTFFRTgwRDZDNDI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnThwDBABnqUIwDQYJKoZIhvcNAQELBQADggEBACflRZd7 U4doIaLPcsbkzPh+TVOvVWYebJGgN3RvVIorA6iVnD/88erFkVRc3YsNp1C6fEqM XiLcH8e1qlC5GOHfGvZCfrtdECdmJT5xT48GVf9oreGTh2Ov5OUrBOp+TRXl8tFx i+4LF3UT5Ox1xWpxnNnNF/7FD3t3mz1WhZaBjJoxKFs/qbJsBijs4UeSrPGy3+wH tvVtaCtXingT5YTl8tKQPy/D1AjOuh2T7M68WiQpteHM9pj4QEsSkqRd5HCMBVo+ 2zfMR2MNzDvY/XUpfhh2PInkx7Gk015gepgQElrE0K6wccLjGMnqqewtPUYGUf8M d0MFuWDt03MZK3g= -----END CERTIFICATE-----Generated at Fri Jun 7 03:19:09 2024 by rpki-client on console-ams.rpki-client.org