$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/84AC17989B0811EDB5FDAF75C4F9AE02.roa File: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (raw, json) Hash identifier: an8QcsqIykDysnx8UEP31FBu3+zGjozR3RM/gYXKosU= Subject key identifier: 2A:3E:96:8F:25:05:9A:10:7B:FA:7C:94:7A:05:F7:41:B4:EF:6E:CD Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0A0E Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/84AC17989B0811EDB5FDAF75C4F9AE02.roa Signing time: Wed 06 Sep 2023 20:07:47 +0000 ROA not before: Wed 06 Sep 2023 20:07:47 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 136978 IP address blocks: 103.101.48.0/24 maxlen: 24 103.101.49.0/24 maxlen: 24 2401:ca40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2574 (0xa0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Sep 6 20:07:47 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=64f8dc13-e5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:34:a7:a0:96:71:04:f6:68:32:4d:ff:ce:12: 70:16:97:a8:bc:4a:bf:4a:1c:d0:22:f4:c8:dd:55: e6:7d:bb:68:bb:d9:10:7f:a9:d7:a5:4f:57:2d:b3: a9:27:13:72:f3:ab:84:04:af:fe:62:09:02:8b:f5: 39:52:16:82:73:d0:83:29:ba:1c:8d:f4:40:41:a7: ae:ba:db:3d:f4:b1:ea:17:4a:03:05:62:03:b6:74: 5c:6c:dd:b7:65:86:44:8d:c3:57:dc:84:4c:30:76: bd:eb:31:98:56:14:63:b2:f2:7f:3a:a1:5c:28:d3: 25:c7:d5:c5:2a:41:9c:60:95:d9:92:e9:bb:34:7a: 5b:8f:6c:e9:5a:e2:3f:34:26:16:79:ac:10:85:36: 82:99:a6:7b:76:3e:f3:25:e7:ec:e0:98:4c:55:1f: 79:3a:23:42:35:1b:11:7b:a9:96:a8:83:df:f7:bb: d0:9a:f2:32:49:5a:dc:e2:6e:02:80:69:51:5d:73: b4:7a:dc:6b:9b:7f:53:65:ac:18:74:c9:2b:07:83: bd:fe:d3:9e:82:3c:1c:d0:f7:65:ef:ba:19:68:d2: 87:d4:66:89:61:d7:c5:45:db:53:f3:85:33:db:d6: 26:4f:01:21:34:61:43:e7:cf:50:7d:0e:c0:cc:ff: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3E:96:8F:25:05:9A:10:7B:FA:7C:94:7A:05:F7:41:B4:EF:6E:CD X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/84AC17989B0811EDB5FDAF75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.48.0/23 IPv6: 2401:ca40::/32 Signature Algorithm: sha256WithRSAEncryption af:04:d2:e3:7f:66:a9:db:87:2d:a6:26:14:23:fd:ac:6f:14: ea:bb:4d:54:8b:88:e4:3e:08:66:d9:a8:73:57:6b:bb:da:de: cb:e8:dd:14:dc:a8:e2:7e:22:1e:27:54:52:ad:5f:ec:a8:4e: 35:a9:ce:dd:25:61:f3:5f:74:6f:f4:f5:ee:8a:7d:30:4a:7a: 79:e3:d9:75:8e:a9:8b:bf:e4:ca:85:ce:59:1d:1e:9f:84:7a: af:9a:a6:d2:14:34:d5:b8:9e:e4:8e:65:49:24:65:8f:f8:0d: d8:f5:36:6a:f8:d8:c2:1f:03:82:2e:eb:02:c6:b1:27:cd:dd: 60:f1:d9:00:f2:cc:19:62:ed:16:24:b6:11:62:35:41:de:1e: 21:c1:f0:b6:f8:89:0e:97:00:16:7a:6a:70:62:b9:bb:ac:59: b4:bf:cf:a8:eb:30:65:c1:9b:2c:bf:04:27:d6:c7:ca:f5:29: 50:f7:be:a8:13:ab:6f:1a:d1:d5:5f:2d:4d:62:fd:75:c1:78: 94:dd:b3:61:d4:83:db:ab:60:f2:ad:90:75:d0:aa:0c:24:31: dd:d8:88:f9:3c:1c:83:ed:d3:5c:7c:ec:ff:e8:7c:4d:12:72: 4b:8b:1b:48:b9:e7:60:39:f7:97:f0:22:3e:17:ce:9e:f0:ad: 10:a3:01:99 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjMwOTA2MjAwNzQ3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY4ZGMxMy1lNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jSnoJZxBPZoMk3/zhJwFpeovEq/ShzQIvTI3VXmfbtou9kQf6nXpU9XLbOp JxNy86uEBK/+YgkCi/U5UhaCc9CDKbocjfRAQaeuuts99LHqF0oDBWIDtnRcbN23 ZYZEjcNX3IRMMHa96zGYVhRjsvJ/OqFcKNMlx9XFKkGcYJXZkum7NHpbj2zpWuI/ NCYWeawQhTaCmaZ7dj7zJefs4JhMVR95OiNCNRsRe6mWqIPf97vQmvIySVrc4m4C gGlRXXO0etxrm39TZawYdMkrB4O9/tOegjwc0Pdl77oZaNKH1GaJYdfFRdtT84Uz 29YmTwEhNGFD589QfQ7AzP/d8QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCo+lo8l BZoQe/p8lHoF90G0727NMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU2RjAvN0Q2N0U0RDQzODRDMTFFQUJFQTJEQjcxQzRGOUFFMDIvODRBQzE3OTg5 QjA4MTFFREI1RkRBRjc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnZTAwDQQCAAIwBwMFACQBykAwDQYJKoZIhvcNAQELBQAD ggEBAK8E0uN/Zqnbhy2mJhQj/axvFOq7TVSLiOQ+CGbZqHNXa7va3svo3RTcqOJ+ Ih4nVFKtX+yoTjWpzt0lYfNfdG/09e6KfTBKennj2XWOqYu/5MqFzlkdHp+Eeq+a ptIUNNW4nuSOZUkkZY/4Ddj1Nmr42MIfA4Iu6wLGsSfN3WDx2QDyzBli7RYkthFi NUHeHiHB8Lb4iQ6XABZ6anBiubusWbS/z6jrMGXBmyy/BCfWx8r1KVD3vqgTq28a 0dVfLU1i/XXBeJTds2HUg9urYPKtkHXQqgwkMd3YiPk8HIPt01x87P/ofE0SckuL G0i552A595fwIj4Xzp7wrRCjAZk= -----END CERTIFICATE-----Generated at Fri May 31 22:13:10 2024 by rpki-client on console-fra.rpki-client.org