$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/ED49BD3C649A11ECBDAC9565C4F9AE02.roa File: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (raw, json) Hash identifier: cNRv+O+UHMJJwZ7A8b7GetUToYv/8mD7q+/kV/e3ZlQ= Subject key identifier: 6F:80:C4:E7:66:0D:E5:3D:1E:21:FF:35:CE:47:80:BE:7B:0F:71:58 Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 0464 Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/ED49BD3C649A11ECBDAC9565C4F9AE02.roa Signing time: Fri 03 Nov 2023 01:32:57 +0000 ROA not before: Fri 03 Nov 2023 01:32:57 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 42960 IP address blocks: 103.39.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Nov 3 01:32:57 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65444dc8-cbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:05:e8:53:d5:44:d5:b3:41:73:34:d6:05:c9: 70:7d:08:3a:1e:33:3b:e3:5a:42:2b:62:1a:73:6f: 8b:d6:76:76:85:01:34:3d:ae:9c:ad:f7:45:f0:d0: cb:95:31:83:e3:4f:a7:0c:4e:cf:b9:c2:08:40:f0: 44:8c:9d:75:09:9d:6b:67:88:bb:1d:c0:08:a2:55: 23:90:a6:d7:64:59:d3:be:09:c8:82:75:fb:6f:ca: 79:e9:0a:f1:cd:a5:4a:7e:4c:8f:ad:cd:a0:24:4e: 82:ee:46:1e:28:03:88:c2:32:9c:b1:c0:f2:b5:38: 39:f1:c8:f2:52:72:ba:03:2b:1c:b8:e8:39:eb:56: 70:90:0d:33:94:7a:3f:d1:cd:f5:a5:04:04:fd:31: dc:44:de:4c:4c:4b:62:47:c4:ea:95:62:bb:0f:2c: 51:eb:f5:c5:8e:a3:5b:6a:b1:54:68:d7:57:9b:2b: 51:20:55:c9:ba:39:3f:94:25:18:56:66:5f:33:21: 2b:86:36:ca:15:0b:48:b7:50:c1:d0:b0:2a:52:82: d0:7f:e8:aa:1c:d7:b8:f5:84:e5:24:ff:7f:1a:54: 82:fe:1d:53:5b:fa:a3:8c:3c:e8:5d:37:88:df:3c: 00:ee:ff:72:e6:4c:d3:cf:60:8c:4e:fc:a6:6c:0a: 23:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:80:C4:E7:66:0D:E5:3D:1E:21:FF:35:CE:47:80:BE:7B:0F:71:58 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/ED49BD3C649A11ECBDAC9565C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.39.78.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:62:ea:4b:83:5a:1d:e7:3a:93:cd:02:6e:1d:60:3f:c6:0c: e0:a9:53:bc:13:85:66:4d:12:42:06:22:03:90:b0:1a:04:88: 25:dd:59:92:7f:b7:9b:ac:77:a4:3b:f1:b5:4b:23:06:7b:88: f0:43:bc:8b:78:a3:31:95:1a:2c:54:18:7f:68:50:23:7f:2a: e7:4a:d1:d1:73:c9:cf:41:80:91:09:7c:68:e8:93:db:3e:36: 1b:9a:3f:12:8c:04:5c:d0:c0:53:e7:5b:dc:8d:f2:0b:f8:9b: b4:d3:71:f4:b8:d9:b8:96:f8:41:a8:19:08:5b:ca:bd:2c:01: 0d:55:03:36:80:55:9a:30:b0:48:d0:30:82:89:74:58:3c:4a: f1:61:b6:b2:b3:8b:96:ac:92:15:65:c0:47:44:ef:d7:bc:a4: 8a:ff:35:89:ce:69:51:c3:a9:6b:f7:a1:b7:f6:31:16:d4:2c: c9:1f:29:79:cf:d3:8f:6c:28:cc:a0:c7:13:76:33:d3:97:1d: db:b7:3c:31:9f:66:32:24:57:4d:ca:0c:62:9d:ec:fa:81:61: ca:27:98:b7:4f:3a:5c:f6:25:13:14:ec:1a:50:4d:95:1e:93: 47:df:5a:77:d0:18:0d:8e:99:3c:8f:30:11:0f:98:ff:90:25: b1:2b:fb:67 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjMxMTAzMDEzMjU3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ0NGRjOC1jYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAXoU9VE1bNBczTWBclwfQg6HjM741pCK2Iac2+L1nZ2hQE0Pa6crfdF8NDL lTGD40+nDE7PucIIQPBEjJ11CZ1rZ4i7HcAIolUjkKbXZFnTvgnIgnX7b8p56Qrx zaVKfkyPrc2gJE6C7kYeKAOIwjKcscDytTg58cjyUnK6AyscuOg561ZwkA0zlHo/ 0c31pQQE/THcRN5MTEtiR8TqlWK7DyxR6/XFjqNbarFUaNdXmytRIFXJujk/lCUY VmZfMyErhjbKFQtIt1DB0LAqUoLQf+iqHNe49YTlJP9/GlSC/h1TW/qjjDzoXTeI 3zwA7v9y5kzTz2CMTvymbAojpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG+AxOdm DeU9HiH/Nc5HgL57D3FYMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTA5NEQvNDBCNzM4NkVERTgxMTFFQkE5RkM3RDcyQzRGOUFFMDIvRUQ0OUJEM0M2 NDlBMTFFQ0JEQUM5NTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnJ04wDQYJKoZIhvcNAQELBQADggEBAC5i6kuDWh3nOpPN Am4dYD/GDOCpU7wThWZNEkIGIgOQsBoEiCXdWZJ/t5usd6Q78bVLIwZ7iPBDvIt4 ozGVGixUGH9oUCN/KudK0dFzyc9BgJEJfGjok9s+NhuaPxKMBFzQwFPnW9yN8gv4 m7TTcfS42biW+EGoGQhbyr0sAQ1VAzaAVZowsEjQMIKJdFg8SvFhtrKzi5askhVl wEdE79e8pIr/NYnOaVHDqWv3obf2MRbULMkfKXnP049sKMygxxN2M9OXHdu3PDGf ZjIkV03KDGKd7PqBYconmLdPOlz2JRMU7BpQTZUek0ffWnfQGA2OmTyPMBEPmP+Q JbEr+2c= -----END CERTIFICATE-----Generated at Sat Jun 1 02:55:18 2024 by rpki-client on console-fra.rpki-client.org