$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/AAAAE566E8AA11E78A615315C4F9AE02.roa File: AAAAE566E8AA11E78A615315C4F9AE02.roa (raw, json) Hash identifier: 2luNT163jGit1kl8MTVctdeerld4oGjojZF7DMgFU0s= Subject key identifier: 79:1D:6D:88:16:67:F4:BB:30:DE:C3:82:74:A8:A7:36:F1:C8:5A:0E Certificate issuer: /CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Certificate serial: 1611 Authority key identifier: EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/AAAAE566E8AA11E78A615315C4F9AE02.roa Signing time: Fri 12 Jan 2024 17:24:42 +0000 ROA not before: Fri 12 Jan 2024 17:24:42 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 137079 IP address blocks: 103.104.32.0/23 maxlen: 23 103.107.246.0/23 maxlen: 23 116.206.130.0/23 maxlen: 23 2402:5d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 17:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5649 (0x1611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Validity Not Before: Jan 12 17:24:42 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65a175da-78e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:59:43:f8:2f:70:b4:16:f9:1f:3a:1c:3f:1c: cc:70:f2:9f:f2:ab:6a:89:1d:69:48:33:58:47:a4: 06:4d:0d:d8:d6:bb:b8:b2:70:ae:23:02:0a:ec:2e: 48:1a:84:e2:be:ec:a3:55:de:f7:c1:84:7a:20:4d: d0:ae:0a:d2:2c:63:03:37:b8:8f:5c:7b:2f:2e:9e: 1e:cf:56:6f:20:7b:ff:e2:ec:7e:91:86:5c:40:0a: be:af:8b:2d:46:18:0f:a5:58:51:c5:96:69:5c:91: 0b:3c:79:c6:80:88:11:ca:f3:da:0c:6b:73:b0:2b: b1:3b:ef:42:ae:35:8c:27:02:23:5f:89:34:12:d2: 0d:91:a9:92:9e:71:81:25:a4:cf:a9:36:7e:ea:27: a4:76:9e:a8:33:6a:6f:8d:ff:a1:2a:3c:de:c1:05: 49:03:66:e6:4e:04:38:fb:26:d1:a9:4c:b3:88:93: 35:58:35:94:f5:5d:72:40:1e:23:5d:70:24:7b:f4: 88:10:32:66:3a:21:70:2a:dd:af:22:25:d6:41:3a: ae:20:01:33:a4:6a:db:ae:4b:40:e2:b3:2c:40:7c: 09:2f:c8:1a:20:56:8c:d5:77:f6:d2:93:30:d6:4b: 00:b2:02:b5:55:0c:f4:06:d7:a3:bd:ba:b3:c4:22: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1D:6D:88:16:67:F4:BB:30:DE:C3:82:74:A8:A7:36:F1:C8:5A:0E X509v3 Authority Key Identifier: keyid:EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/AAAAE566E8AA11E78A615315C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.32.0/23 103.107.246.0/23 116.206.130.0/23 IPv6: 2402:5d40::/32 Signature Algorithm: sha256WithRSAEncryption 0a:2c:15:e4:2b:b7:90:e7:c2:33:03:a0:bc:a5:da:db:cc:ab: 47:ef:86:07:03:59:a3:81:fa:55:7c:9e:55:28:e0:c0:6f:c9: a0:16:c7:2a:e2:dc:b2:9e:e0:8c:59:f4:79:21:fa:04:c1:53: d2:95:37:a9:8a:1a:4c:b3:59:18:60:9d:6d:54:36:44:d3:21: 89:6f:01:de:5c:ec:4f:93:9d:93:f0:0b:f4:fb:92:a6:14:73: 18:20:92:d0:db:d9:2b:e5:8c:cd:84:14:b5:7f:84:f4:c5:7e: 74:51:f3:99:8f:a3:39:ae:f9:b8:e0:32:6f:8e:01:2b:f5:32: 39:10:d3:41:83:9d:69:cd:f7:37:29:ff:02:bc:b8:91:ad:3f: 46:02:eb:67:92:a6:b3:51:88:b1:1f:26:4b:07:af:d9:91:8c: 02:93:ca:88:6e:4b:52:c5:a9:0b:fc:9e:26:ef:18:47:d2:6e: 70:51:8c:aa:07:73:d3:61:bb:ca:d4:43:16:d1:ce:fc:04:47: 3a:8c:cf:c8:fc:d8:8c:a3:62:b1:2c:bc:1d:e2:77:e1:85:a0: 8c:e4:ee:7a:d3:89:c6:45:7c:1c:41:ca:17:72:24:e3:41:a9: 36:97:87:7d:22:99:45:e4:ac:31:83:aa:26:49:17:88:74:45: 3b:5b:e2:8b -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICFhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3N0MxMTAvBgNVBAUTKEVCMDE2MUFBOENEQjFGMjRDRDdGRTEzRDVFNUNFNTIx N0JBNThGODIwHhcNMjQwMTEyMTcyNDQyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWExNzVkYS03OGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6llD+C9wtBb5HzocPxzMcPKf8qtqiR1pSDNYR6QGTQ3Y1ru4snCuIwIK7C5I GoTivuyjVd73wYR6IE3QrgrSLGMDN7iPXHsvLp4ez1ZvIHv/4ux+kYZcQAq+r4st RhgPpVhRxZZpXJELPHnGgIgRyvPaDGtzsCuxO+9CrjWMJwIjX4k0EtINkamSnnGB JaTPqTZ+6iekdp6oM2pvjf+hKjzewQVJA2bmTgQ4+ybRqUyziJM1WDWU9V1yQB4j XXAke/SIEDJmOiFwKt2vIiXWQTquIAEzpGrbrktA4rMsQHwJL8gaIFaM1Xf20pMw 1ksAsgK1VQz0BtejvbqzxCIX2QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHkdbYgW Z/S7MN7DgnSopzbxyFoOMB8GA1UdIwQYMBaAFOsBYaqM2x8kzX/hPV5c5SF7pY+C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzc3Qy8xQzMyRDRCMEU4 QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5VE5mLUU5WGx6bElYdWxq NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3Rmhxb3piSHlUTmYtRTlYbHpsSVh1bGo0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkM3N0MvMUMzMkQ0QjBFOEFBMTFFN0EyMzBERjE0QzRGOUFFMDIvQUFBQUU1NjZF OEFBMTFFNzhBNjE1MzE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAFnaCADBAFna/YDBAF0zoIwDQQCAAIwBwMFACQCXUAwDQYJ KoZIhvcNAQELBQADggEBAAosFeQrt5DnwjMDoLyl2tvMq0fvhgcDWaOB+lV8nlUo 4MBvyaAWxyri3LKe4IxZ9Hkh+gTBU9KVN6mKGkyzWRhgnW1UNkTTIYlvAd5c7E+T nZPwC/T7kqYUcxggktDb2SvljM2EFLV/hPTFfnRR85mPozmu+bjgMm+OASv1MjkQ 00GDnWnN9zcp/wK8uJGtP0YC62eSprNRiLEfJksHr9mRjAKTyohuS1LFqQv8nibv GEfSbnBRjKoHc9Nhu8rUQxbRzvwERzqMz8j82IyjYrEsvB3id+GFoIzk7nrTicZF fBxByhdyJONBqTaXh30imUXkrDGDqiZJF4h0RTtb4os= -----END CERTIFICATE-----Generated at Fri Jun 14 19:10:41 2024 by rpki-client on console-ams.rpki-client.org