$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/DB78FCC4BB5211EE8EB48761C4F9AE02.roa File: DB78FCC4BB5211EE8EB48761C4F9AE02.roa (raw, json) Hash identifier: 8uBa3uCEtYLu25VsPJfC16vSyl8giD0DPRdNOXz5CGc= Subject key identifier: B6:30:6F:17:55:7B:73:99:0D:4D:30:7E:EC:6D:4A:D7:F9:E0:33:B4 Certificate issuer: /CN=A91BF781/serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E Certificate serial: 29 Authority key identifier: 27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/DB78FCC4BB5211EE8EB48761C4F9AE02.roa Signing time: Thu 25 Jan 2024 07:25:04 +0000 ROA not before: Thu 25 Jan 2024 07:25:04 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 151483 IP address blocks: 103.230.128.0/24 maxlen: 24 103.230.129.0/24 maxlen: 24 2401:11a0:10::/44 maxlen: 44 2401:11a0:150::/44 maxlen: 48 2401:11a0:1500::/40 maxlen: 40 2401:11a0:d150::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF781/serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E Validity Not Before: Jan 25 07:25:04 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=65b20cd0-9430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:66:e5:f3:d4:4d:40:ab:07:a3:9c:31:f1:be: 78:cb:87:33:75:2e:c6:6a:5b:e2:b0:a6:f1:1a:54: cf:d6:fe:15:cc:07:18:f8:60:59:01:61:99:f9:4e: 85:76:cb:9c:86:7c:88:8b:06:c1:94:53:99:0f:af: 58:76:9c:98:c1:a4:53:dc:d1:ea:51:40:56:77:63: e8:f3:c7:46:e9:59:5d:7c:ab:14:ef:a8:fc:57:72: f1:15:7c:56:dd:38:e9:bc:f9:4a:61:fb:4e:de:0b: f4:43:4e:23:91:00:93:33:10:13:e2:28:d3:a5:19: 60:b1:8d:d3:c7:e9:25:90:8b:8e:10:43:98:8e:c6: 07:2f:a8:b3:f6:27:78:e8:20:4f:3a:c5:d9:2f:6b: 32:18:01:8f:c9:0d:55:e3:0a:bd:64:99:d2:45:a5: f5:e8:0c:f1:5c:7a:df:07:dd:7c:9c:df:e4:af:7d: ae:53:c1:bb:0e:70:d8:06:f0:80:22:9c:8a:15:b3: 13:54:86:30:62:28:e3:20:2e:ff:d7:9f:77:5d:2a: 73:bb:d3:bc:8e:7b:c7:b1:0c:cd:24:95:b4:81:65: be:80:91:c5:d0:77:a8:25:1c:41:cd:7e:ea:a0:67: 9c:3b:0f:15:ff:f3:cf:a3:b3:33:48:05:e9:6f:7c: d2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:30:6F:17:55:7B:73:99:0D:4D:30:7E:EC:6D:4A:D7:F9:E0:33:B4 X509v3 Authority Key Identifier: keyid:27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/DB78FCC4BB5211EE8EB48761C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.230.128.0/23 IPv6: 2401:11a0:10::/44 2401:11a0:150::/44 2401:11a0:1500::/40 2401:11a0:d150::/44 Signature Algorithm: sha256WithRSAEncryption 9f:0c:28:45:10:bb:b8:9e:c7:09:89:e4:aa:4e:63:04:29:1e: 42:6a:d0:21:00:e7:7a:3d:6d:ce:3d:f6:6e:d2:5c:3c:66:3d: 9f:b7:09:0d:3f:79:09:0f:2a:3e:99:3b:0e:bc:4e:c0:62:66: 82:e3:8e:a5:a4:ef:26:93:94:35:69:56:1f:ff:28:b6:7f:ec: dc:3b:da:09:4e:7e:f9:b6:84:a1:70:0c:27:89:8e:69:23:f2: 50:7b:02:1e:04:a3:12:39:4f:07:82:9e:48:33:23:b6:80:13: 34:53:7f:7d:88:49:1a:56:1f:bc:fd:d4:b6:ef:5f:bd:14:7a: c8:49:7b:25:bb:80:41:3c:be:09:e2:e0:9b:98:39:bd:55:cf: 5c:e4:aa:db:0c:48:06:8f:df:f4:44:ee:70:fd:77:a7:2b:88: 18:03:38:43:9d:e3:d6:8d:fe:96:f8:1a:8f:ef:d1:f7:cc:cc: 79:ab:c5:7f:8f:1e:e8:4c:77:72:36:85:2e:97:53:85:92:d8: b2:7f:a1:bb:59:24:55:a4:e1:a5:47:ed:10:b3:e8:5c:73:3e: f2:af:81:af:77:8c:72:70:ea:18:60:86:0d:37:18:f5:8a:af: b6:b4:d5:73:fd:f1:ea:bc:67:a0:85:f4:36:ea:d7:c2:6f:a2: 0b:33:ec:c6 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Rjc4MTExMC8GA1UEBRMoMjc2OUE0RkE5MjI5N0RDQjFERjg5NkRBRTYzNzM5OTZG RDMxODA2RTAeFw0yNDAxMjUwNzI1MDRaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YjIwY2QwLTk0MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbZuXz1E1AqwejnDHxvnjLhzN1LsZqW+KwpvEaVM/W/hXMBxj4YFkBYZn5ToV2 y5yGfIiLBsGUU5kPr1h2nJjBpFPc0epRQFZ3Y+jzx0bpWV18qxTvqPxXcvEVfFbd OOm8+Uph+07eC/RDTiORAJMzEBPiKNOlGWCxjdPH6SWQi44QQ5iOxgcvqLP2J3jo IE86xdkvazIYAY/JDVXjCr1kmdJFpfXoDPFcet8H3Xyc3+Svfa5TwbsOcNgG8IAi nIoVsxNUhjBiKOMgLv/Xn3ddKnO707yOe8exDM0klbSBZb6AkcXQd6glHEHNfuqg Z5w7DxX/88+jszNIBelvfNKdAgMBAAGjggLAMIICvDAdBgNVHQ4EFgQUtjBvF1V7 c5kNTTB+7G1K1/ngM7QwHwYDVR0jBBgwFoAUJ2mk+pIpfcsd+Jba5jc5lv0xgG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGNzgxLzc1MDcwQTRBOTZB RDExRUU5RjVGODQ1REM0RjlBRTAyL0oybWstcElwZmNzZC1KYmE1amM1bHYweGdH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjJtay1wSXBmY3NkLUpiYTVqYzVsdjB4Z0c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc4MS83NTA3MEE0QTk2QUQxMUVFOUY1Rjg0NURDNEY5QUUwMi9EQjc4RkNDNEJC NTIxMUVFOEVCNDg3NjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBKBggrBgEFBQcBBwEB/wQ7 MDkwDAQCAAEwBgMEAWfmgDApBAIAAjAjAwcEJAERoAAQAwcEJAERoAFQAwYAJAER oBUDBwQkARGg0VAwDQYJKoZIhvcNAQELBQADggEBAJ8MKEUQu7iexwmJ5KpOYwQp HkJq0CEA53o9bc499m7SXDxmPZ+3CQ0/eQkPKj6ZOw68TsBiZoLjjqWk7yaTlDVp Vh//KLZ/7Nw72glOfvm2hKFwDCeJjmkj8lB7Ah4EoxI5TweCnkgzI7aAEzRTf32I SRpWH7z91LbvX70UeshJeyW7gEE8vgni4JuYOb1Vz1zkqtsMSAaP3/RE7nD9d6cr iBgDOEOd49aN/pb4Go/v0ffMzHmrxX+PHuhMd3I2hS6XU4WS2LJ/obtZJFWk4aVH 7RCz6FxzPvKvga93jHJw6hhghg03GPWKr7a01XP98eq8Z6CF9Dbq18Jvogsz7MY= -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:31 2024 by rpki-client on console-fra.rpki-client.org