$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/910A49AAB5CC11ECAE337E78C4F9AE02.roa File: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (raw, json) Hash identifier: HYJ+7z69MIraClPpIQO6ffUZkveZt22iINEv/WRg3NI= Subject key identifier: 48:D8:F4:65:CB:DC:1C:08:38:69:FA:7C:28:85:CF:E7:8F:97:7F:67 Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Certificate serial: 05F4 Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/910A49AAB5CC11ECAE337E78C4F9AE02.roa Signing time: Mon 18 Sep 2023 22:59:48 +0000 ROA not before: Mon 18 Sep 2023 22:59:48 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 139270 IP address blocks: 103.140.166.0/23 maxlen: 23 103.140.167.0/24 maxlen: 24 2001:df0:ca80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Validity Not Before: Sep 18 22:59:48 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=6508d664-f9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6b:ca:8d:a0:9d:05:11:4f:48:c3:16:d1:ac: f7:74:97:bc:44:0c:c6:32:c8:17:fc:aa:b7:79:66: 5a:23:b2:d3:b7:13:35:80:5d:86:b4:1b:66:aa:d2: dc:49:3b:31:c8:7b:1b:29:74:6a:0a:58:57:65:c9: b5:bd:03:42:c0:46:ad:e0:85:56:17:a1:ea:ee:bc: a8:85:5a:5e:eb:68:11:4f:14:3e:17:57:74:82:5a: ef:0a:d8:0d:80:61:26:2b:7f:40:41:3c:73:ee:0a: ad:49:f0:b2:43:b2:8b:08:fd:6c:30:d6:f6:64:78: 70:fe:0a:13:8b:9a:52:dc:cf:84:36:71:e8:50:c2: 7c:99:eb:3a:3b:72:d3:63:d3:4f:d1:c5:cf:4b:b5: 11:1d:44:5c:79:13:b1:f7:0c:d0:88:71:27:ee:f7: 19:1a:7e:c7:ec:32:4d:68:ec:5d:77:13:d1:74:8b: 97:70:47:bc:f3:fe:55:b5:96:1a:79:da:f6:cf:57: 95:17:ee:9f:e0:79:07:fd:2a:e4:a6:df:0b:e1:9e: ff:29:fd:e7:f4:34:fd:53:aa:39:87:aa:52:b6:72: eb:2a:67:2a:87:85:5a:11:d8:ed:76:c0:8c:a8:7d: 2c:bd:2b:77:9d:68:84:41:43:a6:72:fe:e4:0b:8a: 30:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D8:F4:65:CB:DC:1C:08:38:69:FA:7C:28:85:CF:E7:8F:97:7F:67 X509v3 Authority Key Identifier: keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/910A49AAB5CC11ECAE337E78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.166.0/23 IPv6: 2001:df0:ca80::/48 Signature Algorithm: sha256WithRSAEncryption 8a:11:96:c9:8a:6e:20:86:0b:15:f2:98:57:e2:ee:3e:43:c9: e9:df:53:5a:92:72:a9:5b:d4:9d:02:34:2a:7f:62:b4:a1:f5: cb:49:c2:3a:6d:29:63:12:35:14:b6:bc:ff:fb:2a:ce:9d:0c: 09:c7:02:3c:af:3b:dc:99:56:e8:15:0c:f3:36:46:61:a0:8e: 23:bc:9d:1e:74:86:90:3f:2a:fe:61:9e:3a:b8:d0:ef:f9:79: 81:9f:d3:d6:0d:7e:36:e5:a0:1a:a1:13:84:4e:ec:8f:f5:47: 32:f2:07:a6:ab:3e:1a:ae:51:85:64:a3:77:e4:84:cc:54:95: 07:b7:10:7c:38:5a:6e:2d:4b:06:4f:13:fd:0f:b5:e7:0d:fc: ea:99:67:24:7b:45:78:16:46:1e:3d:c4:93:d1:f1:2b:c8:a5: 37:b3:25:19:4a:27:72:76:ca:96:f8:c7:c1:0d:da:df:ab:e4: c1:d3:73:9b:0a:31:a7:e3:29:1e:7e:58:ff:8f:f4:fc:a8:4c: 6f:8b:48:c3:e0:eb:e7:ca:9c:ec:d3:47:f7:8f:b6:d8:c8:f9: ce:6a:df:64:1b:b6:4e:1a:6b:7d:aa:aa:49:a8:f3:46:53:98: 31:58:97:25:0a:89:e3:87:dd:0b:2e:f1:67:a0:45:b1:31:b9: 8c:9f:a1:5d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy Qjk1NkNGRDcwHhcNMjMwOTE4MjI1OTQ4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTA4ZDY2NC1mOWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGvKjaCdBRFPSMMW0az3dJe8RAzGMsgX/Kq3eWZaI7LTtxM1gF2GtBtmqtLc STsxyHsbKXRqClhXZcm1vQNCwEat4IVWF6Hq7ryohVpe62gRTxQ+F1d0glrvCtgN gGEmK39AQTxz7gqtSfCyQ7KLCP1sMNb2ZHhw/goTi5pS3M+ENnHoUMJ8mes6O3LT Y9NP0cXPS7URHURceROx9wzQiHEn7vcZGn7H7DJNaOxddxPRdIuXcEe88/5VtZYa edr2z1eVF+6f4HkH/Srkpt8L4Z7/Kf3n9DT9U6o5h6pStnLrKmcqh4VaEdjtdsCM qH0svSt3nWiEQUOmcv7kC4owlQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEjY9GXL 3BwIOGn6fCiFz+ePl39nMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6 OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ExQTYvMzhEOTNFMUUzRDMwMTFFQkIzQjJENjZFQzRGOUFFMDIvOTEwQTQ5QUFC NUNDMTFFQ0FFMzM3RTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjKYwDwQCAAIwCQMHACABDfDKgDANBgkqhkiG9w0BAQsF AAOCAQEAihGWyYpuIIYLFfKYV+LuPkPJ6d9TWpJyqVvUnQI0Kn9itKH1y0nCOm0p YxI1FLa8//sqzp0MCccCPK873JlW6BUM8zZGYaCOI7ydHnSGkD8q/mGeOrjQ7/l5 gZ/T1g1+NuWgGqEThE7sj/VHMvIHpqs+Gq5RhWSjd+SEzFSVB7cQfDhabi1LBk8T /Q+15w386plnJHtFeBZGHj3Ek9HxK8ilN7MlGUoncnbKlvjHwQ3a36vkwdNzmwox p+MpHn5Y/4/0/KhMb4tIw+Dr58qc7NNH94+22Mj5zmrfZBu2ThprfaqqSajzRlOY MViXJQqJ44fdCy7xZ6BFsTG5jJ+hXQ== -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:46 2024 by rpki-client on console-fra.rpki-client.org