$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/ABA6DCF0030F11EFB12D8A18C4F9AE02.roa File: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (raw, json) Hash identifier: TZTlx2RN/i7twE4j8GF5P6E8ZxFuFcAjWja4o7wTH9A= Subject key identifier: 43:20:F0:09:D4:CE:5A:01:0E:F7:BD:7A:F1:6A:E6:F1:3C:03:06:83 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 72 Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/ABA6DCF0030F11EFB12D8A18C4F9AE02.roa Signing time: Thu 25 Apr 2024 14:26:11 +0000 ROA not before: Thu 25 Apr 2024 14:26:11 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 151350 IP address blocks: 103.209.74.0/23 maxlen: 24 2401:2a0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Apr 25 14:26:11 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=662a6803-0f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:92:b4:14:9b:07:e8:b3:b9:26:56:f7:c3:87: 43:0b:30:a6:21:24:e0:fa:59:97:ad:25:0c:e1:c2: 61:5c:17:84:f7:0d:cd:b1:25:17:cd:f0:be:ba:bb: d0:ba:0c:f3:8a:97:49:d7:ea:f3:9c:9b:26:66:14: 71:9d:d2:9f:02:65:27:56:19:33:5a:ea:e8:31:f1: 1b:7e:7d:16:1f:b1:21:aa:d1:6d:a2:ae:7f:8d:1d: 88:27:cc:6c:f4:50:d8:25:66:98:e4:ff:36:b1:d8: 7b:ad:ee:85:8c:96:ce:f2:27:fb:2a:22:a3:df:93: 22:bd:57:1e:59:4f:4f:f8:cf:4a:4f:f8:87:9a:c0: 61:67:02:8a:76:5a:c0:63:51:e5:de:60:cc:67:59: a3:ea:75:a4:a9:8c:df:c6:14:f6:94:59:bf:51:04: 21:99:f2:12:75:c1:94:95:7e:06:15:8d:c8:bd:6f: 7f:69:1e:f9:2c:88:78:00:6f:e9:24:b8:71:5e:08: 7c:f6:71:07:52:7b:3a:7d:15:13:6c:72:66:4d:43: 8d:de:2b:b2:45:26:17:97:df:76:8b:d1:26:c0:cb: b2:99:ee:a5:72:e7:50:4c:86:10:e8:52:37:ad:78: fe:b0:67:57:f9:08:0e:97:8c:60:2d:18:c5:e8:31: 6c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:20:F0:09:D4:CE:5A:01:0E:F7:BD:7A:F1:6A:E6:F1:3C:03:06:83 X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/ABA6DCF0030F11EFB12D8A18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.74.0/23 IPv6: 2401:2a0:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 63:51:64:8d:2a:52:79:2e:f0:9e:fe:2b:af:09:26:46:0d:53: 26:5f:a0:d5:1e:39:aa:81:cb:4e:30:ce:16:61:dc:a8:1f:49: 03:b4:af:85:ef:7c:26:bb:5f:01:8a:6d:b9:96:c6:90:40:6e: ab:d4:78:90:3d:8b:68:4a:dc:06:e7:89:28:ea:d3:26:01:73: 26:1f:73:fd:e0:17:61:e6:37:f5:e3:dc:b0:2e:25:1d:77:05: c0:73:6d:71:53:5b:76:1b:58:65:a9:b4:a1:1b:95:58:fd:79: 0c:9e:09:03:c2:da:d0:30:d1:1a:81:f9:4d:be:ca:f6:dc:f2: 68:a9:26:1d:8a:45:2a:90:ef:f1:95:81:cc:43:17:f1:8b:60: 43:4a:c5:eb:ed:df:fc:4c:15:03:55:cb:8d:e8:4e:e8:8c:ea: 91:cf:cc:e8:3a:57:cf:05:0b:4d:a3:4b:5c:0e:24:b8:0d:d8: b1:39:61:69:7d:76:1f:c8:d1:a0:c0:62:57:26:d0:44:9e:e6: 89:11:ab:a4:73:10:ee:69:7c:43:82:1c:56:4a:ab:72:8a:46: ae:78:41:a4:e2:5b:79:3c:9b:3e:2a:53:09:2b:9c:07:3a:7e: 01:82:a6:f0:53:f6:4c:e0:d0:e0:c9:04:bf:a6:91:20:28:4a: 1f:20:71:1c -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QUUwNDExMC8GA1UEBRMoQjM2MjQzN0FCNjdEMjkwQzVDREZFRjJGNjJCNzdFREQ4 QTlGRkE0NDAeFw0yNDA0MjUxNDI2MTFaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MmE2ODAzLTBmMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnkrQUmwfos7kmVvfDh0MLMKYhJOD6WZetJQzhwmFcF4T3Dc2xJRfN8L66u9C6 DPOKl0nX6vOcmyZmFHGd0p8CZSdWGTNa6ugx8Rt+fRYfsSGq0W2irn+NHYgnzGz0 UNglZpjk/zax2Hut7oWMls7yJ/sqIqPfkyK9Vx5ZT0/4z0pP+IeawGFnAop2WsBj UeXeYMxnWaPqdaSpjN/GFPaUWb9RBCGZ8hJ1wZSVfgYVjci9b39pHvksiHgAb+kk uHFeCHz2cQdSezp9FRNscmZNQ43eK7JFJheX33aL0SbAy7KZ7qVy51BMhhDoUjet eP6wZ1f5CA6XjGAtGMXoMWz/AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUQyDwCdTO WgEO97168Wrm8TwDBoMwHwYDVR0jBBgwFoAUs2JDerZ9KQxc3+8vYrd+3Yqf+kQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBRTA0LzlEOEY3NzJBNUY5 NjExRUU4MzYzOEYzRUM0RjlBRTAyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1r US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvczJKRGVyWjlLUXhjMy04dllyZC0zWXFmLWtRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9BQkE2RENGMDAz MEYxMUVGQjEyRDhBMThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWfRSjAPBAIAAjAJAwcAJAECoP//MA0GCSqGSIb3DQEBCwUA A4IBAQBjUWSNKlJ5LvCe/iuvCSZGDVMmX6DVHjmqgctOMM4WYdyoH0kDtK+F73wm u18Bim25lsaQQG6r1HiQPYtoStwG54ko6tMmAXMmH3P94Bdh5jf149ywLiUddwXA c21xU1t2G1hlqbShG5VY/XkMngkDwtrQMNEagflNvsr23PJoqSYdikUqkO/xlYHM Qxfxi2BDSsXr7d/8TBUDVcuN6E7ojOqRz8zoOlfPBQtNo0tcDiS4DdixOWFpfXYf yNGgwGJXJtBEnuaJEaukcxDuaXxDghxWSqtyikaueEGk4lt5PJs+KlMJK5wHOn4B gqbwU/ZM4NDgyQS/ppEgKEofIHEc -----END CERTIFICATE-----Generated at Fri May 31 10:02:43 2024 by rpki-client on console-ams.rpki-client.org