$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/0D5F2416B5B811EEA8ACF557C4F9AE02.roa File: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (raw, json) Hash identifier: 02yX7wylzSvAqODHOOq2bhEVbO+mgUt1nCgsJsh9nWQ= Subject key identifier: 9E:27:6C:84:69:86:B6:E4:71:0D:C3:63:02:2D:50:02:21:0B:1A:B1 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 1D Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/0D5F2416B5B811EEA8ACF557C4F9AE02.roa Signing time: Thu 18 Jan 2024 04:46:34 +0000 ROA not before: Thu 18 Jan 2024 04:46:34 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 135069 IP address blocks: 103.63.92.0/22 maxlen: 22 103.63.92.0/23 maxlen: 23 103.63.92.0/24 maxlen: 24 103.63.94.0/23 maxlen: 23 103.63.94.0/24 maxlen: 24 103.63.95.0/24 maxlen: 24 103.153.120.0/23 maxlen: 23 103.153.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: Jan 18 04:46:34 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65a8ad2a-3af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:fe:c6:de:88:00:e9:07:2e:79:53:91:91: 1a:4f:11:63:5c:7a:f6:f0:fe:1c:d6:ac:c0:09:25: e1:19:94:32:25:78:0b:8c:65:fd:23:8b:0b:dc:ab: f9:a1:05:1c:02:d1:88:29:6b:bf:46:7c:73:98:c9: 51:c4:5e:a6:04:00:39:56:b3:26:17:bf:44:2c:3f: 73:bc:5a:18:59:96:47:3a:fb:90:f6:76:d0:50:d0: 39:90:38:53:48:f8:cc:86:62:33:79:d5:28:2d:03: 45:54:9b:c6:38:cd:3a:34:00:e1:cb:70:f9:f3:97: 72:4d:cc:91:3c:65:01:22:73:86:7a:04:1e:0e:9e: 8d:33:1e:a5:e2:7d:bb:da:86:a2:f9:3e:20:1e:69: ff:a4:45:13:a5:1c:49:39:f2:c3:33:60:aa:e1:ba: 53:60:6b:f4:d5:a0:72:59:3d:9a:e3:2c:b7:22:81: 0c:72:76:3a:04:2c:41:dd:a5:34:b5:8f:b1:0f:da: 4d:76:ef:f6:25:b6:ff:22:27:6b:70:1b:66:e3:f4: 56:fb:86:25:53:72:82:58:6b:0d:81:5b:e8:10:0e: 1a:c4:1e:e6:20:33:db:ab:bd:d6:b1:19:d5:df:30: c1:28:83:5a:06:50:32:3f:95:29:17:1f:f1:46:5a: e6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:27:6C:84:69:86:B6:E4:71:0D:C3:63:02:2D:50:02:21:0B:1A:B1 X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/0D5F2416B5B811EEA8ACF557C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.63.92.0/22 103.153.120.0/23 Signature Algorithm: sha256WithRSAEncryption 54:c1:ae:29:a4:d9:b3:1a:b9:c1:d8:a9:34:a5:a5:9e:18:3c: cd:0a:35:85:01:83:10:e1:91:34:bc:ba:4f:a7:88:dd:a3:c3: a3:b5:20:89:50:8d:96:48:22:0a:ff:cf:06:9a:fc:35:3e:12: 35:7c:ec:45:ce:c5:a0:81:f8:1b:85:08:10:d5:bc:df:3f:b7: b4:9e:e2:ed:39:f5:d9:77:0c:3a:29:0c:ac:80:ee:ad:69:16: 6a:c5:4a:73:bd:e9:17:f9:39:5f:fd:9b:8c:83:29:7c:d8:6f: 04:c1:30:6d:60:15:d2:e3:fa:52:1c:e0:48:cf:98:13:cf:81: 81:e2:66:32:63:81:a4:fa:b0:d3:a5:fb:9f:9f:51:96:6a:0b: 1b:e8:9f:0c:3f:7a:ac:45:f6:37:39:a3:45:c7:4b:a6:86:ae: f7:5d:ce:61:44:12:b9:d1:e6:0c:64:42:91:b6:03:5e:8c:19: f6:ff:85:a5:86:d5:68:b5:39:e0:80:19:e5:36:01:f0:d7:ac: 3c:b3:5e:fa:ea:c6:80:7b:31:eb:7a:7c:d3:a9:d1:fd:6f:fc: c4:bb:41:f0:37:18:f7:f4:40:f9:1b:4d:62:59:f3:d0:49:df: ca:58:19:06:37:0f:09:47:af:21:85:c9:26:05:55:ba:2a:18: bd:a6:64:ee -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEYzNDExMC8GA1UEBRMoNjQ5NDNCMUQyQkUyRjkzREQ2NDBFMDI0RUI5NEQ4RDM4 RENFNkE4MzAeFw0yNDAxMTgwNDQ2MzRaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YThhZDJhLTNhZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsWv7G3ogA6QcueVORkRpPEWNcevbw/hzWrMAJJeEZlDIleAuMZf0jiwvcq/mh BRwC0Ygpa79GfHOYyVHEXqYEADlWsyYXv0QsP3O8WhhZlkc6+5D2dtBQ0DmQOFNI +MyGYjN51SgtA0VUm8Y4zTo0AOHLcPnzl3JNzJE8ZQEic4Z6BB4Ono0zHqXifbva hqL5PiAeaf+kRROlHEk58sMzYKrhulNga/TVoHJZPZrjLLcigQxydjoELEHdpTS1 j7EP2k127/Yltv8iJ2twG2bj9Fb7hiVTcoJYaw2BW+gQDhrEHuYgM9urvdaxGdXf MMEog1oGUDI/lSkXH/FGWua5AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUnidshGmG tuRxDcNjAi1QAiELGrEwHwYDVR0jBBgwFoAUZJQ7HSvi+T3WQOAk65TY043OaoMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4RjM0LzgxREFFQzVBQjU5 ODExRUU5QTE4Rjk1RkM0RjlBRTAyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2Fv TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkpRN0hTdmktVDNXUU9BazY1VFkwNDNPYW9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi8wRDVGMjQxNkI1 QjgxMUVFQThBQ0Y1NTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmc/XAMEAWeZeDANBgkqhkiG9w0BAQsFAAOCAQEAVMGuKaTZ sxq5wdipNKWlnhg8zQo1hQGDEOGRNLy6T6eI3aPDo7UgiVCNlkgiCv/PBpr8NT4S NXzsRc7FoIH4G4UIENW83z+3tJ7i7Tn12XcMOikMrIDurWkWasVKc73pF/k5X/2b jIMpfNhvBMEwbWAV0uP6UhzgSM+YE8+BgeJmMmOBpPqw06X7n59RlmoLG+ifDD96 rEX2NzmjRcdLpoau913OYUQSudHmDGRCkbYDXowZ9v+FpYbVaLU54IAZ5TYB8Nes PLNe+urGgHsx63p806nR/W/8xLtB8DcY9/RA+RtNYlnz0EnfylgZBjcPCUevIYXJ JgVVuioYvaZk7g== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:31 2024 by rpki-client on console-ams.rpki-client.org