$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/D1DEC18AB5B711EEB1FB8657C4F9AE02.roa File: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (raw, json) Hash identifier: vVNH40XtkiHAzgaJbll3kToyBC/aui+ZXTdh2wT62KA= Subject key identifier: C1:DE:D8:10:9F:4F:E8:0A:02:DB:75:7D:2D:05:11:7F:49:8D:55:76 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 1C Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/D1DEC18AB5B711EEB1FB8657C4F9AE02.roa Signing time: Thu 18 Jan 2024 04:46:33 +0000 ROA not before: Thu 18 Jan 2024 04:46:33 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 134378 IP address blocks: 103.63.92.0/22 maxlen: 22 103.63.92.0/23 maxlen: 23 103.63.92.0/24 maxlen: 24 103.63.93.0/24 maxlen: 24 103.63.94.0/23 maxlen: 23 103.63.94.0/24 maxlen: 24 103.63.95.0/24 maxlen: 24 103.153.120.0/23 maxlen: 23 103.153.120.0/24 maxlen: 24 103.153.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: Jan 18 04:46:33 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65a8ad28-9e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:c6:9c:81:d4:5f:24:dd:c9:6e:13:20:47: 02:d4:d0:3f:9b:6f:3e:83:ff:cb:b9:c1:2d:5f:59: 0a:a2:70:bb:44:51:12:a0:dd:2e:65:10:8d:28:03: 10:f1:7e:a0:f9:da:30:1b:85:b0:91:2d:4c:ca:e9: a5:73:40:29:c3:14:e5:c1:72:80:0e:f0:9e:28:5a: d9:e8:fc:7e:14:63:79:df:82:77:a2:56:d4:46:b4: 7c:80:69:de:22:3d:3a:6a:15:fb:43:ff:b4:86:52: 41:92:55:22:64:8c:c7:95:f6:4e:99:4a:93:5a:fc: 56:19:84:97:4f:01:d2:8c:83:71:5a:d0:dc:92:53: d3:b6:ae:4d:01:70:ee:c0:45:1c:e9:59:ca:a6:71: fe:4b:49:d4:69:a6:83:34:b8:f8:33:2d:77:10:96: 6f:b5:5c:69:82:0f:99:a5:f9:a4:33:f1:6c:d4:b2: 95:5a:f5:ef:ad:5f:0d:c7:5e:17:6b:b6:56:59:58: 00:bb:c2:d3:a6:5e:66:ef:25:08:5f:4f:00:0d:22: 12:72:77:79:89:a9:56:f2:2f:fd:99:95:a3:5b:4f: bd:3a:13:40:fe:fd:9a:11:c9:f6:d4:b4:7a:0b:2e: 48:5e:b3:56:7a:ad:df:bf:5e:dc:cc:30:bf:11:dd: 2c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DE:D8:10:9F:4F:E8:0A:02:DB:75:7D:2D:05:11:7F:49:8D:55:76 X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/D1DEC18AB5B711EEB1FB8657C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.63.92.0/22 103.153.120.0/23 Signature Algorithm: sha256WithRSAEncryption 17:2d:e3:6b:82:f9:25:48:1f:7e:01:b0:59:18:b3:25:9b:a3: 83:39:c0:15:63:f1:2b:46:75:7d:0d:49:9c:47:e0:d9:9a:44: 00:82:a1:d2:ea:70:a6:fd:29:4d:44:28:c7:9e:53:ca:0f:90: 42:0f:87:dc:4a:33:3b:5a:99:7f:cf:47:0d:77:c5:f6:97:47: b1:70:bb:c3:12:60:64:5c:0f:44:61:93:9e:22:6f:4f:d7:0c: a7:ad:8d:35:90:c3:04:cf:d2:79:80:a0:f0:ff:97:7a:b3:30: 97:f5:d2:e4:6a:9e:be:76:28:b6:82:77:12:50:22:24:ac:a2: b8:10:fe:60:98:e3:3c:c9:4c:d5:ea:05:dd:e5:47:ed:70:99: 1c:e6:d3:36:a5:97:ee:18:c9:8f:35:e2:51:0d:fd:41:d5:77: 25:1a:0e:04:a8:18:1d:5f:1d:af:e0:a8:a8:63:6d:80:f6:99: 2b:a3:7b:00:db:a0:ec:87:1e:db:07:91:4a:ba:12:a7:87:a8: 26:23:a6:a8:a0:e9:b5:20:4a:ba:60:e1:a3:36:74:d7:b2:54: af:7a:aa:3c:36:31:96:bb:e3:7b:df:5d:0d:1c:79:f4:ac:7a: 4a:97:a2:5a:b5:83:db:2a:39:d0:99:0d:4b:70:84:8a:88:49: 48:f3:e3:4b -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEYzNDExMC8GA1UEBRMoNjQ5NDNCMUQyQkUyRjkzREQ2NDBFMDI0RUI5NEQ4RDM4 RENFNkE4MzAeFw0yNDAxMTgwNDQ2MzNaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YThhZDI4LTllMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtgcacgdRfJN3JbhMgRwLU0D+bbz6D/8u5wS1fWQqicLtEURKg3S5lEI0oAxDx fqD52jAbhbCRLUzK6aVzQCnDFOXBcoAO8J4oWtno/H4UY3nfgneiVtRGtHyAad4i PTpqFftD/7SGUkGSVSJkjMeV9k6ZSpNa/FYZhJdPAdKMg3Fa0NySU9O2rk0BcO7A RRzpWcqmcf5LSdRppoM0uPgzLXcQlm+1XGmCD5ml+aQz8WzUspVa9e+tXw3HXhdr tlZZWAC7wtOmXmbvJQhfTwANIhJyd3mJqVbyL/2ZlaNbT706E0D+/ZoRyfbUtHoL Lkhes1Z6rd+/XtzMML8R3SxPAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUwd7YEJ9P 6AoC23V9LQURf0mNVXYwHwYDVR0jBBgwFoAUZJQ7HSvi+T3WQOAk65TY043OaoMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4RjM0LzgxREFFQzVBQjU5 ODExRUU5QTE4Rjk1RkM0RjlBRTAyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2Fv TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkpRN0hTdmktVDNXUU9BazY1VFkwNDNPYW9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9EMURFQzE4QUI1 QjcxMUVFQjFGQjg2NTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmc/XAMEAWeZeDANBgkqhkiG9w0BAQsFAAOCAQEAFy3ja4L5 JUgffgGwWRizJZujgznAFWPxK0Z1fQ1JnEfg2ZpEAIKh0upwpv0pTUQox55Tyg+Q Qg+H3EozO1qZf89HDXfF9pdHsXC7wxJgZFwPRGGTniJvT9cMp62NNZDDBM/SeYCg 8P+XerMwl/XS5GqevnYotoJ3ElAiJKyiuBD+YJjjPMlM1eoF3eVH7XCZHObTNqWX 7hjJjzXiUQ39QdV3JRoOBKgYHV8dr+CoqGNtgPaZK6N7ANug7Ice2weRSroSp4eo JiOmqKDptSBKumDhozZ017JUr3qqPDYxlrvje99dDRx59Kx6SpeiWrWD2yo50JkN S3CEiohJSPPjSw== -----END CERTIFICATE-----Generated at Fri Jun 7 11:02:54 2024 by rpki-client on console-fra.rpki-client.org