$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/DA7E3CA6E19811E8822B8E5CC4F9AE02.roa File: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (raw, json) Hash identifier: uKb0CD161FjgAIVCPD2XTQx6ds9Glzmbbj5YPi3I1QY= Subject key identifier: 88:1E:97:AE:CD:7F:DD:54:6D:F0:AA:51:D1:7D:35:D5:4F:98:FB:F1 Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Certificate serial: 10A8 Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/DA7E3CA6E19811E8822B8E5CC4F9AE02.roa Signing time: Sun 02 Jul 2023 17:44:23 +0000 ROA not before: Sun 02 Jul 2023 17:44:23 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 137947 IP address blocks: 103.118.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4264 (0x10a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Validity Not Before: Jul 2 17:44:23 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64a1b777-013f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:00:84:88:d3:d7:b2:a1:3c:9c:7a:84:a8:94: 13:e9:ff:3c:b0:f9:43:cd:16:26:fd:02:54:6c:36: 2d:56:3e:e3:99:02:57:8f:0d:57:4c:46:6d:cf:02: 28:b3:33:e6:b2:af:30:dc:e9:63:55:c8:8a:d1:cc: 99:cf:f4:d4:7b:e1:6a:77:65:c6:1e:3e:7c:08:bb: 11:60:fb:26:57:7f:85:1d:a9:55:13:6e:17:82:6e: e5:0b:03:95:71:21:7c:a1:83:f1:15:d6:69:3b:c7: e1:58:c4:51:03:e9:a2:08:57:46:b1:43:59:96:dd: 1a:1b:21:a5:f0:4f:dc:e2:0b:cb:29:0d:84:f1:f3: 74:25:f7:0b:ec:62:07:88:0a:d6:0c:30:23:c6:a4: f4:fb:61:58:d1:7d:a3:6e:ca:eb:34:fa:4c:83:b9: 89:52:cc:55:5b:5b:dd:cd:37:4e:d8:54:d4:d4:24: 12:2a:94:10:21:da:9b:7f:ad:68:27:14:c9:08:0f: 5e:92:14:5b:e2:31:b9:d1:05:d1:e3:bc:a9:76:77: 93:5f:b0:7b:fb:95:61:b0:aa:8f:93:e7:ef:ee:0c: 28:61:82:b9:82:9d:1b:2b:79:ad:26:b9:05:ad:07: 98:21:f4:71:45:f6:2a:6a:96:f4:d9:a9:05:2d:87: c5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1E:97:AE:CD:7F:DD:54:6D:F0:AA:51:D1:7D:35:D5:4F:98:FB:F1 X509v3 Authority Key Identifier: keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/DA7E3CA6E19811E8822B8E5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.0.0/23 Signature Algorithm: sha256WithRSAEncryption d0:f9:89:05:6a:a9:8a:33:ff:64:b8:1f:0f:d5:0c:c5:8b:69: 9a:e7:c0:ae:23:92:6f:96:a3:9a:50:63:19:a6:fa:0b:69:31: fc:a8:d7:5a:85:8c:55:09:e7:86:d6:49:b3:e1:12:67:74:12: 0d:2b:3d:7c:c4:82:82:44:b6:79:6c:49:4a:30:b0:79:f1:22: 28:d7:ce:d1:58:e2:4a:d3:57:ff:db:6c:e6:83:06:d4:9f:da: c2:cb:f5:61:0d:01:25:4e:8b:44:95:87:b3:54:95:0e:0a:48: d0:95:c6:63:5b:43:48:2d:52:7a:43:44:41:c4:37:8a:2e:75: 87:b8:2d:c4:ab:9f:3c:3a:11:5b:b2:24:47:7f:61:13:45:d5: ab:be:45:a0:6c:1f:db:6f:20:03:65:0f:33:f1:b3:a3:1b:a7: e5:c0:cb:f7:a3:9d:d5:8a:de:a9:08:a6:77:6e:39:f9:61:01: e2:5a:6e:86:cc:e6:9e:94:1a:d0:65:53:62:b2:b0:bc:56:b4: 87:3a:70:54:5b:6e:6e:26:71:2d:78:d2:7d:dc:fe:4a:4a:ba: 08:10:91:7a:17:aa:f5:83:5e:0c:a0:38:b3:51:07:df:2a:93: 30:cc:d3:d9:bc:8a:d0:5d:59:83:c7:ed:a4:79:f0:af:75:94: aa:cf:1a:19 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0QTkxMTAvBgNVBAUTKDMwOTkzODcwRTkxMkNEMTkxRDgwQUNFRjMwMzU3QTU0 RkYzNEY4MkUwHhcNMjMwNzAyMTc0NDIzWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGExYjc3Ny0wMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyACEiNPXsqE8nHqEqJQT6f88sPlDzRYm/QJUbDYtVj7jmQJXjw1XTEZtzwIo szPmsq8w3OljVciK0cyZz/TUe+Fqd2XGHj58CLsRYPsmV3+FHalVE24Xgm7lCwOV cSF8oYPxFdZpO8fhWMRRA+miCFdGsUNZlt0aGyGl8E/c4gvLKQ2E8fN0JfcL7GIH iArWDDAjxqT0+2FY0X2jbsrrNPpMg7mJUsxVW1vdzTdO2FTU1CQSKpQQIdqbf61o JxTJCA9ekhRb4jG50QXR47ypdneTX7B7+5VhsKqPk+fv7gwoYYK5gp0bK3mtJrkF rQeYIfRxRfYqapb02akFLYfFvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIgel67N f91UbfCqUdF9NdVPmPvxMB8GA1UdIwQYMBaAFDCZOHDpEs0ZHYCs7zA1elT/NPgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODRBOS82QTkwQTlDMEUx OTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pSa2RnS3p2TURWNlZQODAt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KazRjT2tTelJrZGdLenZNRFY2VlA4MC1DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg0QTkvNkE5MEE5QzBFMTk3MTFFOEI5NEMwNTU4QzRGOUFFMDIvREE3RTNDQTZF MTk4MTFFODgyMkI4RTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFndgAwDQYJKoZIhvcNAQELBQADggEBAND5iQVqqYoz/2S4 Hw/VDMWLaZrnwK4jkm+Wo5pQYxmm+gtpMfyo11qFjFUJ54bWSbPhEmd0Eg0rPXzE goJEtnlsSUowsHnxIijXztFY4krTV//bbOaDBtSf2sLL9WENASVOi0SVh7NUlQ4K SNCVxmNbQ0gtUnpDREHEN4oudYe4LcSrnzw6EVuyJEd/YRNF1au+RaBsH9tvIANl DzPxs6Mbp+XAy/ejndWK3qkIpnduOflhAeJabobM5p6UGtBlU2KysLxWtIc6cFRb bm4mcS140n3c/kpKuggQkXoXqvWDXgygOLNRB98qkzDM09m8itBdWYPH7aR58K91 lKrPGhk= -----END CERTIFICATE-----Generated at Fri May 31 19:47:53 2024 by rpki-client on console-fra.rpki-client.org