$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa File: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (raw, json) Hash identifier: SN8H+wlNRKYrCxUHxIAyf/X+hOgrSPj705PxLlFgAuI= Subject key identifier: FC:8F:F7:E9:FF:8D:F9:9C:7C:94:0E:8A:84:6A:7E:2A:11:F4:59:4E Certificate issuer: /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Certificate serial: 07F7 Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa Signing time: Mon 10 Jun 2024 22:59:36 +0000 ROA not before: Mon 10 Jun 2024 22:59:36 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 136533 IP address blocks: 103.91.240.0/22 maxlen: 22 123.253.72.0/22 maxlen: 22 123.253.74.0/24 maxlen: 24 2401:17c0::/32 maxlen: 32 2401:17c0::/48 maxlen: 48 2401:17c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 22:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Validity Not Before: Jun 10 22:59:36 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66678558-b22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:43:76:99:ea:3f:c1:b0:f0:72:8d:a3:67:95: 97:ad:e3:f9:e6:61:3b:77:f3:5a:73:ff:75:8f:00: 72:01:fd:39:6b:b0:1a:cb:a2:3f:ac:ce:3a:23:84: 05:39:73:05:7f:0e:a4:60:2a:18:4e:37:6e:22:e4: 0d:ad:67:eb:32:ca:10:37:32:fb:d2:fc:68:bf:d8: 7a:ff:32:4d:85:13:28:a7:f0:36:d8:96:b5:3d:cd: ee:78:0b:e9:fa:9e:04:dd:32:34:5a:f6:f4:83:42: c4:76:c5:46:55:08:4d:6b:b1:73:1e:34:9b:00:62: 26:cc:9a:a7:33:f3:bd:be:53:02:0a:96:8c:71:7d: bb:9f:51:ad:6a:61:ed:ed:8b:7d:88:75:51:bb:fe: 35:27:18:db:80:ba:65:c3:5d:41:16:17:35:62:4c: 19:01:60:08:56:67:1f:e1:98:9f:be:39:fc:e8:53: ae:50:73:e7:bb:ef:0a:0d:ea:31:c4:16:6e:71:3d: 8d:d8:be:93:96:3c:2a:aa:c7:e6:d5:0e:b6:a5:59: ac:de:8a:50:d7:1d:15:26:d1:8f:9e:64:d7:67:ff: c6:f8:a1:5b:71:51:cc:cb:c9:69:c7:01:3d:b9:7d: 09:d2:89:6a:96:79:32:16:b1:dc:4c:b4:01:2d:b6: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8F:F7:E9:FF:8D:F9:9C:7C:94:0E:8A:84:6A:7E:2A:11:F4:59:4E X509v3 Authority Key Identifier: keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.240.0/22 123.253.72.0/22 IPv6: 2401:17c0::/32 Signature Algorithm: sha256WithRSAEncryption b7:ec:a8:1e:0f:c6:e9:ad:5e:4c:97:c7:8c:25:24:e7:f5:10: c7:df:fe:20:35:0a:a2:b4:0c:44:32:9a:54:1f:67:a6:a5:ac: 7f:b3:7e:cb:a9:30:16:b4:aa:9c:ba:ca:a6:99:a6:bb:d6:02: b2:da:de:50:28:05:b1:26:90:bd:0d:ce:f7:cf:f0:c4:a7:3f: b0:f5:51:80:b7:f4:9b:02:30:fa:cc:89:39:8c:0a:c9:95:c4: 57:df:27:84:5f:78:5b:ab:34:2c:32:7b:e8:08:79:98:07:a9: 34:19:ca:af:b8:9b:08:86:d9:ad:a9:b4:37:64:a2:82:b0:39: 1e:36:b9:d9:4c:bc:f6:34:38:5e:96:cf:7c:f0:00:63:67:e7: e8:25:c7:98:cb:75:89:28:67:ce:06:07:e6:7b:cf:ac:3f:60: 29:e2:f1:43:fd:46:04:bb:31:d8:4c:d9:85:79:c8:89:3a:5b: 8f:f0:d4:2d:81:fa:cd:1d:c9:ac:ad:1f:14:5e:ce:7f:97:f0: c9:24:ac:fe:1c:69:5f:6f:d6:0d:49:22:f4:0d:7e:58:3b:e4: 57:de:0f:7c:60:6f:a9:41:a1:80:fa:8e:f2:26:d4:ed:53:6d: 82:c8:8f:1c:aa:e3:a1:99:35:a5:d5:76:8b:7a:c6:68:e2:9a: 7d:bc:21:c2 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwOUIxMTAvBgNVBAUTKDFGRjRFMzNFRDc3MzBEQ0UzMjMxRDJFREI1NEQ5NkQ5 RUFCNUY3RjYwHhcNMjQwNjEwMjI1OTM2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjY3ODU1OC1iMjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0N2meo/wbDwco2jZ5WXreP55mE7d/Nac/91jwByAf05a7Aay6I/rM46I4QF OXMFfw6kYCoYTjduIuQNrWfrMsoQNzL70vxov9h6/zJNhRMop/A22Ja1Pc3ueAvp +p4E3TI0Wvb0g0LEdsVGVQhNa7FzHjSbAGImzJqnM/O9vlMCCpaMcX27n1GtamHt 7Yt9iHVRu/41JxjbgLplw11BFhc1YkwZAWAIVmcf4Zifvjn86FOuUHPnu+8KDeox xBZucT2N2L6Tljwqqsfm1Q62pVms3opQ1x0VJtGPnmTXZ//G+KFbcVHMy8lpxwE9 uX0J0olqlnkyFrHcTLQBLbbCPQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPyP9+n/ jfmcfJQOioRqfioR9FlOMB8GA1UdIwQYMBaAFB/04z7Xcw3OMjHS7bVNltnqtff2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA5Qi83Njc4RjJGRUJB OTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRjNHlNZEx0dFUyVzJlcTE5 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hfVGpQdGR6RGM0eU1kTHR0VTJXMmVxMTlfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgwOUIvNzY3OEYyRkVCQTkxMTFFQUFBQjVDQzU3QzRGOUFFMDIvMkQ0QkREQTI5 RDhFMTFFREJFQkVDRTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnW/ADBAJ7/UgwDQQCAAIwBwMFACQBF8AwDQYJKoZIhvcN AQELBQADggEBALfsqB4PxumtXkyXx4wlJOf1EMff/iA1CqK0DEQymlQfZ6alrH+z fsupMBa0qpy6yqaZprvWArLa3lAoBbEmkL0NzvfP8MSnP7D1UYC39JsCMPrMiTmM CsmVxFffJ4RfeFurNCwye+gIeZgHqTQZyq+4mwiG2a2ptDdkooKwOR42udlMvPY0 OF6Wz3zwAGNn5+glx5jLdYkoZ84GB+Z7z6w/YCni8UP9RgS7MdhM2YV5yIk6W4/w 1C2B+s0dyaytHxRezn+X8MkkrP4caV9v1g1JIvQNflg75FfeD3xgb6lBoYD6jvIm 1O1TbYLIjxyq46GZNaXVdot6xmjimn28IcI= -----END CERTIFICATE-----Generated at Fri Jun 14 23:20:09 2024 by rpki-client on console-fra.rpki-client.org