$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/902F47663C0111EAB6CB9936C4F9AE02.roa File: 902F47663C0111EAB6CB9936C4F9AE02.roa (raw, json) Hash identifier: gboNyYgIS6YvfAbfqVsjKY5cK/rMG1yxF8IlQtGsFAE= Subject key identifier: 7F:32:25:8C:21:9D:99:6C:4F:05:85:03:D4:93:4C:7C:AE:4B:27:90 Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 09AE Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/902F47663C0111EAB6CB9936C4F9AE02.roa Signing time: Tue 02 May 2023 21:38:16 +0000 ROA not before: Tue 02 May 2023 21:38:16 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 16509 IP address blocks: 103.136.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 20:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2478 (0x9ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: May 2 21:38:16 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645182c7-8cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:45:53:5a:f6:db:95:a8:df:de:04:e6:58: fc:d6:c9:3f:28:e6:c3:74:93:9e:88:13:08:fc:e4: 26:45:54:33:b1:b2:8f:e3:2e:3a:44:c9:f1:f1:43: 40:f7:0f:99:ce:80:44:12:92:e1:26:90:06:68:e9: 2e:15:b3:f2:5e:a5:92:af:a4:13:1a:9f:51:1b:a7: 6f:60:f8:2d:e5:d8:4f:d6:b0:b5:15:ce:08:67:60: 05:25:d3:f6:ec:4a:fa:d5:b8:39:09:ff:60:a9:d3: 70:be:c3:fc:56:39:41:c7:4d:0d:10:0a:ea:99:dc: 28:46:74:b7:c0:d5:1d:13:3c:08:b1:4e:bc:30:a8: 43:73:59:87:de:e2:e1:4c:9e:e7:da:c0:0a:17:c2: b5:43:56:e8:4a:57:5b:48:47:a2:aa:93:bc:b6:98: 23:c6:10:e8:6c:21:48:2a:3b:8a:5d:7d:9e:16:ca: 94:f8:d7:d1:ab:b3:37:5b:d6:d2:4f:18:2f:54:57: 97:dc:27:bb:56:c4:2c:9e:d7:d3:6e:c4:fe:23:a7: a3:42:19:a1:29:8e:f2:1b:49:6f:89:ab:de:60:0a: 93:3d:ff:0e:51:c3:15:b4:40:e8:70:29:14:8a:56: 0a:47:93:ca:b6:0b:63:03:d4:c7:26:bd:64:20:18: d7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:32:25:8C:21:9D:99:6C:4F:05:85:03:D4:93:4C:7C:AE:4B:27:90 X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/902F47663C0111EAB6CB9936C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.10.0/24 Signature Algorithm: sha256WithRSAEncryption 69:d9:c4:3a:99:8f:11:d9:4f:12:47:3a:f3:23:24:d6:9d:5d: 62:bc:2a:d1:ce:76:bb:37:10:62:19:0b:d5:68:6f:af:66:19: b7:62:e9:0c:b8:bd:06:11:4f:eb:7d:ec:31:4f:2b:42:27:ec: f1:96:02:6e:38:e5:be:9c:3a:41:dd:a2:ff:5f:02:9f:b2:60: 39:0a:7f:d6:27:a9:37:53:41:f6:51:ff:5b:df:bd:f1:32:02: 31:00:b7:01:e0:45:31:be:41:e9:e1:1c:b6:5b:02:5e:dd:0f: eb:51:21:6d:a8:24:ef:d2:55:af:b8:1c:8d:c6:d6:e6:ee:6e: be:74:b1:1f:88:3c:74:d2:2c:c9:6d:7d:c7:71:ff:3e:df:44: d1:b7:28:ae:d7:0c:21:2a:70:cb:7f:05:7d:9c:72:e6:33:3f: a8:4b:d3:c2:61:9d:72:a7:80:5b:89:3a:73:dc:4a:77:30:3c: 24:6f:34:e3:2f:f2:91:09:5c:db:87:ee:02:60:87:00:53:7e: ad:cc:95:be:af:3f:e3:8e:f0:d3:6d:31:73:52:25:4d:cf:70: bd:fa:45:69:26:3e:1b:c0:af:b7:18:2b:67:6d:20:92:39:0a: 25:40:db:cb:f0:66:79:4c:da:3e:b2:6f:46:98:fc:15:90:68: 59:cb:ca:11 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjMwNTAyMjEzODE2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDUxODJjNy04Y2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfdFU1r225Wo394E5lj81sk/KObDdJOeiBMI/OQmRVQzsbKP4y46RMnx8UNA 9w+ZzoBEEpLhJpAGaOkuFbPyXqWSr6QTGp9RG6dvYPgt5dhP1rC1Fc4IZ2AFJdP2 7Er61bg5Cf9gqdNwvsP8VjlBx00NEArqmdwoRnS3wNUdEzwIsU68MKhDc1mH3uLh TJ7n2sAKF8K1Q1boSldbSEeiqpO8tpgjxhDobCFIKjuKXX2eFsqU+NfRq7M3W9bS TxgvVFeX3Ce7VsQsntfTbsT+I6ejQhmhKY7yG0lviaveYAqTPf8OUcMVtEDocCkU ilYKR5PKtgtjA9THJr1kIBjXJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFH8yJYwh nZlsTwWFA9STTHyuSyeQMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM1QkIvNTc4OUIxQTQzQzAwMTFFQUI4MTc5NzM0QzRGOUFFMDIvOTAyRjQ3NjYz QzAxMTFFQUI2Q0I5OTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABniAowDQYJKoZIhvcNAQELBQADggEBAGnZxDqZjxHZTxJH OvMjJNadXWK8KtHOdrs3EGIZC9Vob69mGbdi6Qy4vQYRT+t97DFPK0In7PGWAm44 5b6cOkHdov9fAp+yYDkKf9YnqTdTQfZR/1vfvfEyAjEAtwHgRTG+QenhHLZbAl7d D+tRIW2oJO/SVa+4HI3G1ububr50sR+IPHTSLMltfcdx/z7fRNG3KK7XDCEqcMt/ BX2ccuYzP6hL08JhnXKngFuJOnPcSncwPCRvNOMv8pEJXNuH7gJghwBTfq3Mlb6v P+OO8NNtMXNSJU3PcL36RWkmPhvAr7cYK2dtIJI5CiVA28vwZnlM2j6yb0aY/BWQ aFnLyhE= -----END CERTIFICATE-----Generated at Thu Apr 18 23:10:17 2024 by rpki-client on console-ams.rpki-client.org