$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa File: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (raw, json) Hash identifier: CdejYox3BV6EKy7rSMjwH4v5mRzFb0N6duLMtMnZvdQ= Subject key identifier: BD:DD:BC:01:B1:B3:E2:37:7D:F2:FB:49:52:28:EC:A2:73:24:7A:99 Certificate issuer: /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Certificate serial: 04FC Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa Signing time: Fri 31 May 2024 01:47:10 +0000 ROA not before: Fri 31 May 2024 01:47:10 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 135378 IP address blocks: 103.167.120.0/23 maxlen: 23 103.167.120.0/24 maxlen: 24 103.167.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 01:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1276 (0x4fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Validity Not Before: May 31 01:47:10 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66592c1e-e41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:84:89:ee:72:c7:51:bf:66:8b:89:d8:19:21: ab:c8:22:1e:e1:46:dc:9a:32:22:10:37:4e:3e:d2: ab:78:a0:4d:d5:ed:a2:78:75:a6:37:45:23:e1:ba: a0:96:49:00:88:c1:04:fa:5f:c1:b8:e5:8b:02:dd: 8e:82:dc:69:67:b1:c1:39:d3:14:2f:eb:6b:32:b1: 91:4d:02:0a:af:d5:9e:9d:6a:53:3f:b6:48:ab:31: d8:4a:cd:df:e8:51:8b:f4:69:9c:51:4f:f2:d6:38: 5f:12:b2:0c:c3:b8:b3:fd:26:81:f2:06:b0:0a:fa: fa:56:f9:fe:f6:75:3a:ca:55:69:51:46:30:b5:8c: a1:81:99:79:68:97:d1:94:b6:69:00:b1:62:45:46: f0:59:b6:1b:77:16:62:20:b2:31:07:30:ab:fd:3f: 09:71:99:9c:3c:c9:af:2a:5e:99:81:e8:ea:cc:0e: fd:68:3b:c3:28:da:e2:ca:8e:dc:0b:43:60:8c:f8: d6:5d:17:21:02:1c:1f:10:9a:fe:9d:fa:c1:63:02: b0:36:db:a0:a2:39:57:b4:a7:9e:18:c2:80:47:c9: 49:fa:57:84:fe:66:8d:8c:e7:cb:4f:be:d6:58:8b: 02:d2:f0:73:8f:4a:d6:7c:8e:b3:4d:c4:56:3f:ec: fb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DD:BC:01:B1:B3:E2:37:7D:F2:FB:49:52:28:EC:A2:73:24:7A:99 X509v3 Authority Key Identifier: keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.120.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:66:7c:d2:e7:72:75:71:f7:79:6c:0c:de:db:02:45:f2:5c: a9:81:8f:9b:9f:ae:a4:1c:51:d6:4b:21:c7:80:34:ae:4d:b0: 05:c6:ca:f2:e1:d7:19:8c:7a:6a:3c:e1:dc:ec:ed:a9:55:20: 9e:4c:95:87:4a:f4:c4:63:ae:c7:6d:cd:fb:cb:02:5c:c8:52: c6:13:db:d5:2c:bb:cc:0a:ac:32:7e:ea:7c:b1:2a:c2:f7:72: ce:8a:f3:60:9e:12:a4:f2:4f:44:17:e8:be:5b:88:49:46:e1: 53:13:3d:f0:29:7c:a7:d2:a4:61:79:5a:65:6e:da:0b:64:b1: ff:ee:4d:29:c0:e3:a3:5a:de:94:89:e8:2c:46:36:6c:a0:57: 9b:38:35:a4:0f:9f:e2:44:e0:97:53:0f:7f:19:4b:7d:0d:53: d8:e6:fb:38:93:cf:79:1b:dc:8e:09:ea:cd:78:e4:25:e4:62: 3f:94:98:86:5f:73:6e:cd:f7:bb:b7:fe:48:29:16:49:58:fb: 07:04:d4:19:d7:f3:1d:45:e6:42:e5:ec:0f:10:a9:d1:bd:7b: c0:40:a7:83:9d:dc:e7:d5:94:d5:9a:ee:d9:7d:0b:b2:ed:fd: 6f:67:f1:d9:20:62:ca:b5:c3:ff:26:e8:43:f4:3f:42:8a:09: 1b:89:a6:42 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxN0IxMTAvBgNVBAUTKEJFQjBBMzIyMzREMTk3NkRFM0RFMjI1QTU1MTc4MDJE QjYxM0E4QjYwHhcNMjQwNTMxMDE0NzEwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU5MmMxZS1lNDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoSJ7nLHUb9mi4nYGSGryCIe4UbcmjIiEDdOPtKreKBN1e2ieHWmN0Uj4bqg lkkAiMEE+l/BuOWLAt2OgtxpZ7HBOdMUL+trMrGRTQIKr9WenWpTP7ZIqzHYSs3f 6FGL9GmcUU/y1jhfErIMw7iz/SaB8gawCvr6Vvn+9nU6ylVpUUYwtYyhgZl5aJfR lLZpALFiRUbwWbYbdxZiILIxBzCr/T8JcZmcPMmvKl6ZgejqzA79aDvDKNriyo7c C0NgjPjWXRchAhwfEJr+nfrBYwKwNtugojlXtKeeGMKAR8lJ+leE/maNjOfLT77W WIsC0vBzj0rWfI6zTcRWP+z7wwIDAQABo4IClTCCApEwHQYDVR0OBBYEFL3dvAGx s+I3ffL7SVIo7KJzJHqZMB8GA1UdIwQYMBaAFL6woyI00Zdt494iWlUXgC22E6i2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE3Qi9FQjAyNzdGQ0M3 N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwyM2ozaUphVlJlQUxiWVRx TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyQ2pJalRSbDIzajNpSmFWUmVBTGJZVHFMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYxN0IvRUIwMjc3RkNDNzdBMTFFQkJCODBCODc4QzRGOUFFMDIvOUM5NTU0NTBD NzdFMTFFQjlERjY4QjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnp3gwDQYJKoZIhvcNAQELBQADggEBAApmfNLncnVx93ls DN7bAkXyXKmBj5ufrqQcUdZLIceANK5NsAXGyvLh1xmMemo84dzs7alVIJ5MlYdK 9MRjrsdtzfvLAlzIUsYT29Usu8wKrDJ+6nyxKsL3cs6K82CeEqTyT0QX6L5biElG 4VMTPfApfKfSpGF5WmVu2gtksf/uTSnA46Na3pSJ6CxGNmygV5s4NaQPn+JE4JdT D38ZS30NU9jm+ziTz3kb3I4J6s145CXkYj+UmIZfc27N97u3/kgpFklY+wcE1BnX 8x1F5kLl7A8QqdG9e8BAp4Od3OfVlNWa7tl9C7Lt/W9n8dkgYsq1w/8m6EP0P0KK CRuJpkI= -----END CERTIFICATE-----Generated at Fri Jun 7 02:21:18 2024 by rpki-client on console-fra.rpki-client.org