$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/F95633FE01EC11ED84469937C4F9AE02.roa File: F95633FE01EC11ED84469937C4F9AE02.roa (raw, json) Hash identifier: PAgf7XDeffE3KOwuZNUH7PCHSYuNPjMYJulxpgdyLbE= Subject key identifier: BA:A8:2D:C7:B1:35:A4:F4:58:74:24:6B:78:0C:CD:E1:53:2A:32:3C Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Certificate serial: 013F Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/F95633FE01EC11ED84469937C4F9AE02.roa Signing time: Tue 25 Jul 2023 03:23:56 +0000 ROA not before: Tue 25 Jul 2023 03:23:56 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 135602 IP address blocks: 103.67.244.0/24 maxlen: 24 103.67.245.0/24 maxlen: 24 103.67.246.0/24 maxlen: 24 103.67.247.0/24 maxlen: 24 2001:df3:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Validity Not Before: Jul 25 03:23:56 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64bf404c-ad9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:62:5a:19:0a:e1:9e:ab:27:ea:7c:fc:41: ee:ac:b6:1e:c5:3d:e3:6d:4b:c5:a1:61:ba:11:ab: 04:7b:c9:9b:bd:95:48:bb:04:5e:ff:ca:83:2d:1a: 08:c0:15:33:31:6c:13:77:fe:71:d8:27:0c:9c:b3: 41:0a:1f:71:ce:fb:65:54:ac:d5:fe:6b:c6:8f:14: 83:e2:75:41:68:14:8b:ab:e5:96:c4:19:07:82:91: 51:6e:22:46:0c:c4:1b:4a:32:71:3f:29:e8:4f:00: 7c:10:9d:f1:0d:02:bb:5a:9a:4b:25:07:fe:34:7c: d8:e5:3f:66:f8:12:1f:37:73:18:dd:8b:a9:59:96: 5b:32:53:bc:f0:24:fc:83:19:f0:c0:b5:e3:2b:85: a6:7b:3d:d1:a5:8e:e4:d4:2d:36:e0:4d:7c:ce:3c: 1f:9e:5d:ad:18:ac:d9:62:24:bb:d6:d2:51:b1:05: de:81:bd:83:44:43:80:3f:9f:fb:ba:66:17:ac:5a: ca:88:aa:26:68:4a:2a:81:cc:84:d4:64:fa:5c:b8: 83:6a:14:7c:bd:66:13:fe:67:e9:7b:00:58:92:fb: 92:97:cb:97:26:bd:e8:8f:7e:a3:3d:20:6a:b5:df: 5e:55:b7:3d:a0:ca:af:c5:fb:74:90:9f:63:94:bf: ef:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A8:2D:C7:B1:35:A4:F4:58:74:24:6B:78:0C:CD:E1:53:2A:32:3C X509v3 Authority Key Identifier: keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/F95633FE01EC11ED84469937C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.244.0/22 IPv6: 2001:df3:200::/48 Signature Algorithm: sha256WithRSAEncryption 7f:38:0b:9f:bc:64:19:6b:b7:2a:9d:19:bc:bf:36:df:05:00: e6:46:36:3d:89:bd:1d:d0:b6:14:c5:d9:a0:f6:59:34:ca:59: 74:28:80:5b:66:a3:21:f1:6f:65:04:76:4d:22:c5:59:43:a7: 5f:50:ce:3c:5c:76:ee:5e:4f:75:e8:88:26:3b:af:27:69:c9: f1:89:f1:00:18:db:d2:c8:53:2c:0a:44:e6:ce:b2:59:eb:0d: d9:af:34:9d:70:0f:ea:14:16:26:dc:d5:9a:61:4c:26:dd:c2: 53:80:6c:21:fc:77:df:0b:79:30:d1:95:7a:94:41:eb:f1:8f: 4d:31:09:0e:1d:1d:01:34:ee:ee:89:2a:94:c7:81:32:7c:c9: 6d:24:92:b6:ba:4d:b0:a4:48:d6:d4:57:ff:eb:1a:7a:4d:62: 40:9e:28:2f:8a:c5:e4:12:e6:5a:cb:e8:6e:a8:fb:c0:f0:2f: 14:b9:99:14:3d:18:e0:98:aa:93:95:31:ac:48:ef:aa:36:8b: f7:a0:e8:e6:a4:23:bb:91:72:cd:27:a9:fb:3e:42:31:57:27: 96:d6:ce:20:df:c8:a0:fa:21:10:ca:88:ce:ce:69:87:05:fb: 15:ab:23:76:e0:1d:ea:9e:9d:48:46:d8:52:b9:0c:19:d8:87: 10:32:b8:6e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey RkJGRDI2ODYwHhcNMjMwNzI1MDMyMzU2WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGJmNDA0Yy1hZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsE5iWhkK4Z6rJ+p8/EHurLYexT3jbUvFoWG6EasEe8mbvZVIuwRe/8qDLRoI wBUzMWwTd/5x2CcMnLNBCh9xzvtlVKzV/mvGjxSD4nVBaBSLq+WWxBkHgpFRbiJG DMQbSjJxPynoTwB8EJ3xDQK7WppLJQf+NHzY5T9m+BIfN3MY3YupWZZbMlO88CT8 gxnwwLXjK4Wmez3RpY7k1C024E18zjwfnl2tGKzZYiS71tJRsQXegb2DREOAP5/7 umYXrFrKiKomaEoqgcyE1GT6XLiDahR8vWYT/mfpewBYkvuSl8uXJr3oj36jPSBq td9eVbc9oMqvxft0kJ9jlL/vPQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLqoLcex NaT0WHQka3gMzeFTKjI8MB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE0N0MvN0UwRjU4NzIwMUU5MTFFREFGOEJERTMwQzRGOUFFMDIvRjk1NjMzRkUw MUVDMTFFRDg0NDY5OTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnQ/QwDwQCAAIwCQMHACABDfMCADANBgkqhkiG9w0BAQsF AAOCAQEAfzgLn7xkGWu3Kp0ZvL823wUA5kY2PYm9HdC2FMXZoPZZNMpZdCiAW2aj IfFvZQR2TSLFWUOnX1DOPFx27l5PdeiIJjuvJ2nJ8YnxABjb0shTLApE5s6yWesN 2a80nXAP6hQWJtzVmmFMJt3CU4BsIfx33wt5MNGVepRB6/GPTTEJDh0dATTu7okq lMeBMnzJbSSStrpNsKRI1tRX/+saek1iQJ4oL4rF5BLmWsvobqj7wPAvFLmZFD0Y 4Jiqk5UxrEjvqjaL96Do5qQju5FyzSep+z5CMVcnltbOIN/IoPohEMqIzs5phwX7 FasjduAd6p6dSEbYUrkMGdiHEDK4bg== -----END CERTIFICATE-----Generated at Sat Jun 1 06:27:38 2024 by rpki-client on console-fra.rpki-client.org