$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/9E393ADA657011EB96AF8F49C4F9AE02.roa File: 9E393ADA657011EB96AF8F49C4F9AE02.roa (raw, json) Hash identifier: +lsdC+fwtnTzlTCV6YDXnmGfIk3Fb7T0/raMV7Fe0O0= Subject key identifier: 93:38:4B:B6:AD:2B:E6:EF:1D:2E:11:89:F0:A7:D9:7D:AC:6C:8E:AC Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Certificate serial: 068E Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/9E393ADA657011EB96AF8F49C4F9AE02.roa Signing time: Tue 31 Oct 2023 23:10:28 +0000 ROA not before: Tue 31 Oct 2023 23:10:28 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 139648 IP address blocks: 103.156.22.0/23 maxlen: 23 103.156.22.0/24 maxlen: 24 103.156.23.0/24 maxlen: 24 2001:df4:f780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Validity Not Before: Oct 31 23:10:28 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65418964-eb04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8b:3c:2e:8f:55:0a:8f:84:35:44:14:c8:bc: 08:29:ed:0c:24:8a:0f:a7:23:43:12:09:21:f5:41: a8:4b:b8:07:b5:b3:b5:2a:f1:05:31:fd:5d:ad:ce: ad:e8:db:fa:a1:16:f7:b1:34:a5:c0:da:d1:42:76: 2a:bd:94:e1:2c:96:f1:3a:b8:6c:54:a9:d6:78:7c: bb:10:85:dd:f9:2a:dc:ca:06:ac:13:ca:65:0c:30: a9:a8:3d:68:03:2a:27:b9:4d:22:7c:7d:78:92:36: 14:37:0d:96:e7:5f:f9:8e:2d:c5:23:e4:68:a2:de: c1:a9:b4:62:5c:ec:3b:5a:8a:77:8e:b3:50:23:27: 58:52:57:f7:3c:50:e0:d9:62:09:37:7a:de:55:f2: 7b:a8:81:15:8e:41:76:e5:36:0e:e9:66:ca:18:b2: d4:59:00:2b:76:bd:b1:cb:05:d6:93:05:92:5e:67: f4:b9:dc:99:31:0b:9c:28:e4:3d:b3:ec:5e:34:b8: bd:33:5b:e9:c2:d1:21:dd:9e:d6:5e:1d:d3:c5:a0: 2b:d3:3b:07:79:00:18:5a:b5:71:29:24:f9:cd:a9: 65:e4:17:6f:0e:db:a0:24:34:fa:92:07:a9:6f:fe: d5:17:a6:59:3f:5b:a6:c2:58:48:37:7c:85:1b:c8: 2b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:38:4B:B6:AD:2B:E6:EF:1D:2E:11:89:F0:A7:D9:7D:AC:6C:8E:AC X509v3 Authority Key Identifier: keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/9E393ADA657011EB96AF8F49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.22.0/23 IPv6: 2001:df4:f780::/48 Signature Algorithm: sha256WithRSAEncryption a3:95:36:93:f8:fe:4d:42:b6:b9:ed:4c:b2:ab:40:fb:83:53: 1d:45:1b:11:0b:23:da:d9:75:dc:03:de:9f:11:c7:1b:72:fc: 12:50:e8:8b:4f:52:57:35:3c:70:34:fe:80:5a:c1:2b:88:b1: b3:6e:80:06:8a:b3:01:67:73:9a:2a:e8:3b:9f:73:ca:10:f1: 29:48:55:b9:09:94:48:9c:21:2f:91:04:a7:8d:df:e3:05:10: 89:69:b8:6f:20:05:0c:54:54:9f:da:4a:32:2f:1b:18:59:d7: c5:83:72:b8:cf:ac:de:a6:05:7d:f7:7b:24:ac:68:da:7a:91: f8:6e:1e:78:cb:3d:b0:71:e2:36:db:94:20:7c:f9:8c:56:17: 50:92:cb:96:ad:3c:3a:b7:78:9f:d9:56:ec:fe:8b:04:90:b7: a1:7f:70:dd:8f:01:6a:da:37:1e:68:77:0a:69:fd:92:95:fc: 5a:b2:c5:bb:19:17:5e:98:cc:58:2c:e0:c9:2f:9c:bb:0d:f4: 89:36:f4:55:47:4f:4b:6d:64:15:c0:3e:d3:e2:17:75:77:01: dc:5a:8e:57:57:e1:1f:29:f7:12:c4:12:32:d9:b0:50:4d:55: b1:b9:31:97:d3:70:2d:74:f0:f6:60:e0:86:36:dd:1c:4f:b0: c1:9d:9d:cd -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVDOTI5Mzc5RUVG QUQ1QkNCQzAwHhcNMjMxMDMxMjMxMDI4WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQxODk2NC1lYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ys8Lo9VCo+ENUQUyLwIKe0MJIoPpyNDEgkh9UGoS7gHtbO1KvEFMf1drc6t 6Nv6oRb3sTSlwNrRQnYqvZThLJbxOrhsVKnWeHy7EIXd+SrcygasE8plDDCpqD1o AyonuU0ifH14kjYUNw2W51/5ji3FI+Root7BqbRiXOw7Wop3jrNQIydYUlf3PFDg 2WIJN3reVfJ7qIEVjkF25TYO6WbKGLLUWQArdr2xywXWkwWSXmf0udyZMQucKOQ9 s+xeNLi9M1vpwtEh3Z7WXh3TxaAr0zsHeQAYWrVxKST5zall5BdvDtugJDT6kgep b/7VF6ZZP1umwlhIN3yFG8gruwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJM4S7at K+bvHS4RifCn2X2sbI6sMB8GA1UdIwQYMBaAFDqF1EfhhnX+1a4FySk3nu+tW8vA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODM4Ri9BOUY3NzM5ODA2 RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2RmN1ZyZ1hKS1RlZTc2MWJ5 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vWFVSLUdHZGY3VnJnWEpLVGVlNzYxYnk4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTgzOEYvQTlGNzczOTgwNkUxMTFFQjlCMzM1QzZEQzRGOUFFMDIvOUUzOTNBREE2 NTcwMTFFQjk2QUY4RjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnBYwDwQCAAIwCQMHACABDfT3gDANBgkqhkiG9w0BAQsF AAOCAQEAo5U2k/j+TUK2ue1MsqtA+4NTHUUbEQsj2tl13APenxHHG3L8ElDoi09S VzU8cDT+gFrBK4ixs26ABoqzAWdzmiroO59zyhDxKUhVuQmUSJwhL5EEp43f4wUQ iWm4byAFDFRUn9pKMi8bGFnXxYNyuM+s3qYFffd7JKxo2nqR+G4eeMs9sHHiNtuU IHz5jFYXUJLLlq08Ord4n9lW7P6LBJC3oX9w3Y8Bato3Hmh3Cmn9kpX8WrLFuxkX XpjMWCzgyS+cuw30iTb0VUdPS21kFcA+0+IXdXcB3FqOV1fhHyn3EsQSMtmwUE1V sbkxl9NwLXTw9mDghjbdHE+wwZ2dzQ== -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:24 2024 by rpki-client on console-ams.rpki-client.org