$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/CA4C06CA976711EAA651F944C4F9AE02.roa File: CA4C06CA976711EAA651F944C4F9AE02.roa (raw, json) Hash identifier: bloQYzrAn+4ONkIrVOLLF4mqOoi8QLeVq0prE6sonCo= Subject key identifier: 09:2A:63:FA:20:6F:1F:AE:04:8F:23:D4:EE:A7:C4:56:21:68:00:85 Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Certificate serial: 0885 Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/CA4C06CA976711EAA651F944C4F9AE02.roa Signing time: Thu 04 Apr 2024 22:00:20 +0000 ROA not before: Thu 04 Apr 2024 22:00:20 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 138165 IP address blocks: 103.113.1.0/24 maxlen: 24 103.146.39.0/24 maxlen: 24 2407:40c0:2000::/36 maxlen: 36 2407:40c0:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2181 (0x885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Validity Not Before: Apr 4 22:00:20 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660f22f4-0685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1f:60:d4:d8:db:cf:40:d2:e3:67:5e:d9:02: 7f:74:a7:df:68:b1:7f:77:d3:2d:8c:b6:f5:d0:f1: 65:6c:7d:61:1a:f3:c1:0e:4f:d4:02:32:2f:2f:ce: f0:d6:67:ab:5c:7d:bb:c1:30:05:f1:f0:fd:47:5b: bc:c5:42:bc:56:e7:02:5a:85:df:ca:59:87:8a:ff: 84:9c:8b:48:cc:fb:8c:b7:0d:76:01:14:a1:62:35: 8e:f7:93:d9:43:95:2a:65:9b:51:74:10:db:3b:39: 3e:7b:09:87:0f:f4:b0:9f:c7:a4:ad:d7:20:e7:e8: c4:28:91:6f:94:82:f5:8f:7e:1e:f1:2f:51:1c:eb: 3b:7d:ed:2e:a2:1b:95:8a:c8:da:aa:91:d1:f7:46: 4c:b2:e3:b0:64:08:61:c2:b6:24:25:ff:92:5c:b5: bb:4a:d3:ee:5b:8f:7d:2b:65:62:e2:80:a9:c0:ed: 70:a8:5d:fd:5d:23:1b:ca:76:ab:5e:85:db:cf:50: 35:98:53:5a:5d:e8:f9:26:4e:f3:59:23:65:4f:83: 81:b0:c5:9d:b0:85:9d:31:78:a7:d7:0a:f3:a7:5e: 36:fc:b9:5c:23:08:17:6e:93:fe:27:30:d9:af:29: 05:91:75:7a:9a:8e:19:2a:1e:17:a1:88:6a:77:7c: 75:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2A:63:FA:20:6F:1F:AE:04:8F:23:D4:EE:A7:C4:56:21:68:00:85 X509v3 Authority Key Identifier: keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/CA4C06CA976711EAA651F944C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.1.0/24 103.146.39.0/24 IPv6: 2407:40c0:2000::/36 2407:40c0:4000::/36 Signature Algorithm: sha256WithRSAEncryption 9d:65:af:82:ce:bc:a0:9d:40:b0:53:6b:26:c1:d5:6f:fc:e4: f0:44:f5:53:df:e5:2b:4e:b8:73:a3:d9:38:a6:6b:96:24:1b: 88:a8:b4:14:d7:63:f7:8b:dd:dd:9b:92:70:d5:64:6f:52:fe: 02:27:5e:17:9d:4a:e1:01:83:2c:e5:16:ee:f7:d3:25:53:29: 72:a2:51:eb:97:3e:2a:b5:0a:c5:bd:ea:42:7f:85:a1:81:f9: 2e:4e:3a:1a:4b:af:5a:33:81:74:d5:c0:6d:bd:56:de:1e:81: bf:f6:f8:09:10:18:57:11:3a:4b:07:78:f6:8d:c4:62:ab:7c: 74:23:98:f2:0d:b0:9d:6c:f8:f5:e6:3a:93:fc:83:5b:4a:31: f9:d9:71:b8:ea:36:8b:74:c6:32:21:00:99:2e:16:f7:c5:49: 71:51:cf:32:92:7a:4d:13:9a:d2:05:40:a1:b6:6a:b6:23:92: 7b:25:25:8a:39:c3:87:95:c6:84:65:df:33:d8:82:1c:7a:f3: 60:42:ea:78:5a:36:18:f1:7b:b6:18:9c:5f:69:46:3e:02:63: 94:e8:a4:58:0f:37:3d:3b:89:5f:91:d2:b5:8a:60:3d:53:72: e1:7b:3a:b3:23:e2:fc:8e:df:1f:6c:dc:bb:92:57:c8:53:a8: 9d:0c:08:8c -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF MjEzMjIzNDkwHhcNMjQwNDA0MjIwMDIwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBmMjJmNC0wNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8B9g1Njbz0DS42de2QJ/dKffaLF/d9MtjLb10PFlbH1hGvPBDk/UAjIvL87w 1merXH27wTAF8fD9R1u8xUK8VucCWoXfylmHiv+EnItIzPuMtw12ARShYjWO95PZ Q5UqZZtRdBDbOzk+ewmHD/Swn8ekrdcg5+jEKJFvlIL1j34e8S9RHOs7fe0uohuV isjaqpHR90ZMsuOwZAhhwrYkJf+SXLW7StPuW499K2Vi4oCpwO1wqF39XSMbynar XoXbz1A1mFNaXej5Jk7zWSNlT4OBsMWdsIWdMXin1wrzp142/LlcIwgXbpP+JzDZ rykFkXV6mo4ZKh4XoYhqd3x1QwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFAkqY/og bx+uBI8j1O6nxFYhaACFMB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3 NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg5NjYvM0VGMjI0MDI5NzY2MTFFQTlFQjQ5NTQyQzRGOUFFMDIvQ0E0QzA2Q0E5 NzY3MTFFQUE2NTFGOTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMBIEAgABMAwDBABncQEDBABnkicwFgQCAAIwEAMGBCQHQMAgAwYEJAdAwEAw DQYJKoZIhvcNAQELBQADggEBAJ1lr4LOvKCdQLBTaybB1W/85PBE9VPf5StOuHOj 2Tima5YkG4iotBTXY/eL3d2bknDVZG9S/gInXhedSuEBgyzlFu730yVTKXKiUeuX Piq1CsW96kJ/haGB+S5OOhpLr1ozgXTVwG29Vt4egb/2+AkQGFcROksHePaNxGKr fHQjmPINsJ1s+PXmOpP8g1tKMfnZcbjqNot0xjIhAJkuFvfFSXFRzzKSek0TmtIF QKG2arYjknslJYo5w4eVxoRl3zPYghx682BC6nhaNhjxe7YYnF9pRj4CY5TopFgP Nz07iV+R0rWKYD1TcuF7OrMj4vyO3x9s3LuSV8hTqJ0MCIw= -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:33 2024 by rpki-client on console-ams.rpki-client.org