$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/7CDCAF509CF211ED8BD2B02FC4F9AE02.roa File: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (raw, json) Hash identifier: p+ufr7iuPp3HMFVR+tYrXf+b7pzblZD7Phxle2huKCM= Subject key identifier: C8:EF:03:E5:DB:5D:E2:9E:6A:41:C2:D0:3A:07:58:EF:67:DC:48:41 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: D9 Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/7CDCAF509CF211ED8BD2B02FC4F9AE02.roa Signing time: Wed 13 Dec 2023 04:56:18 +0000 ROA not before: Wed 13 Dec 2023 04:56:18 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 150395 IP address blocks: 103.29.238.0/23 maxlen: 23 2001:df1:78c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Dec 13 04:56:18 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65793971-141c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:70:b1:6c:f0:4e:3e:49:13:d2:6e:db:a2: 95:d3:a8:73:e8:ec:2a:95:fe:86:ee:8f:15:1a:23: 7d:40:33:f9:e1:6d:57:78:15:ce:f0:c0:04:7d:36: 0f:8c:04:fc:4b:1d:b9:47:a0:44:29:25:24:eb:8c: bf:75:5b:da:c4:57:8f:d8:d7:c4:59:ff:5f:d3:db: c0:92:28:9a:1c:40:6d:d1:95:77:70:ea:b8:45:43: 9f:c5:a0:e8:1f:ec:fe:f6:ca:07:46:f6:42:47:69: 27:45:09:4a:c7:fb:99:e4:7b:11:67:6e:34:c8:0e: 2b:22:cd:92:2b:d4:bf:58:a5:12:7d:f3:a0:46:4b: 94:f9:83:f2:b8:82:5c:8d:49:93:98:4f:0c:01:4a: f8:4f:a2:9a:50:41:4a:d6:14:ea:2b:8a:a5:79:a1: 98:d0:93:5a:60:f9:2a:1f:18:0f:44:0b:f0:24:09: c0:2a:f8:30:ee:d0:1b:ef:c6:6d:63:43:7f:f4:08: 0d:9e:a1:56:72:cf:31:6b:c8:fc:e6:ce:5b:11:ad: fa:7e:d0:8a:e8:b0:17:35:e4:f7:70:59:17:56:35: a0:ba:f0:18:94:74:ea:53:ee:cf:4b:88:e7:0b:f9: aa:41:36:3c:d5:99:42:f0:69:16:e5:08:27:7c:89: 7d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EF:03:E5:DB:5D:E2:9E:6A:41:C2:D0:3A:07:58:EF:67:DC:48:41 X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/7CDCAF509CF211ED8BD2B02FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.29.238.0/23 IPv6: 2001:df1:78c0::/48 Signature Algorithm: sha256WithRSAEncryption 72:1a:a9:ef:f4:99:28:23:71:61:a0:af:87:37:7d:d0:ce:ca: 6a:48:c2:79:e7:56:00:46:b5:7f:4d:ec:39:5a:44:27:46:8b: 63:fe:f5:b8:88:71:d6:00:9f:a9:5e:b0:ef:d2:fb:2a:62:08: 9b:8d:fd:8d:47:33:43:72:18:bb:2d:84:9d:1f:39:51:18:b6: c0:0b:bb:06:70:38:15:a2:9d:37:03:f6:2f:43:39:26:1b:22: e6:72:5a:f4:cf:26:cf:e8:be:d6:0f:34:a3:f0:ff:49:0b:e6: 47:5c:62:4a:4e:4a:a1:64:bd:e1:cf:1e:fa:ad:1e:f8:b6:84: 75:ee:d5:8b:5b:ec:d5:d2:2e:80:80:7d:4d:da:26:5b:ad:29: 6f:ee:e7:6d:8d:33:c4:c7:6f:09:64:b5:e0:ee:38:20:bf:34: 33:6a:9a:41:66:0f:6f:9b:22:43:bc:2e:63:63:06:de:6f:e1: 17:fc:2c:95:89:52:6f:6c:6f:32:f8:3c:ce:8c:31:90:73:2e: 8c:eb:69:a0:a6:ae:f5:82:c2:c8:57:89:69:20:c7:63:a8:b3: 82:76:3c:94:15:68:37:15:98:c1:6c:15:86:4a:6b:ec:6d:bf: 97:54:4c:0f:0d:a8:59:83:be:c0:88:2a:85:f8:bc:48:c2:4c: fb:c5:1e:d9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjMxMjEzMDQ1NjE4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTc5Mzk3MS0xNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHRwsWzwTj5JE9Ju26KV06hz6Owqlf6G7o8VGiN9QDP54W1XeBXO8MAEfTYP jAT8Sx25R6BEKSUk64y/dVvaxFeP2NfEWf9f09vAkiiaHEBt0ZV3cOq4RUOfxaDo H+z+9soHRvZCR2knRQlKx/uZ5HsRZ240yA4rIs2SK9S/WKUSffOgRkuU+YPyuIJc jUmTmE8MAUr4T6KaUEFK1hTqK4qleaGY0JNaYPkqHxgPRAvwJAnAKvgw7tAb78Zt Y0N/9AgNnqFWcs8xa8j85s5bEa36ftCK6LAXNeT3cFkXVjWguvAYlHTqU+7PS4jn C/mqQTY81ZlC8GkW5QgnfIl98QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMjvA+Xb XeKeakHC0DoHWO9n3EhBMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQ1NEMvODFGQzk2NTA2QzEyMTFFRDg5RkM5MjBBQzRGOUFFMDIvN0NEQ0FGNTA5 Q0YyMTFFRDhCRDJCMDJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnHe4wDwQCAAIwCQMHACABDfF4wDANBgkqhkiG9w0BAQsF AAOCAQEAchqp7/SZKCNxYaCvhzd90M7KakjCeedWAEa1f03sOVpEJ0aLY/71uIhx 1gCfqV6w79L7KmIIm439jUczQ3IYuy2EnR85URi2wAu7BnA4FaKdNwP2L0M5Jhsi 5nJa9M8mz+i+1g80o/D/SQvmR1xiSk5KoWS94c8e+q0e+LaEde7Vi1vs1dIugIB9 TdomW60pb+7nbY0zxMdvCWS14O44IL80M2qaQWYPb5siQ7wuY2MG3m/hF/wslYlS b2xvMvg8zowxkHMujOtpoKau9YLCyFeJaSDHY6izgnY8lBVoNxWYwWwVhkpr7G2/ l1RMDw2oWYO+wIgqhfi8SMJM+8Ue2Q== -----END CERTIFICATE-----Generated at Sat Jun 1 07:09:21 2024 by rpki-client on console-fra.rpki-client.org