$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa File: 9E1721445CFB11EAA377D527C4F9AE02.roa (raw, json) Hash identifier: pH7b0ys+XcISKyXJv35PyZj0XOemqkDVPp/sVz3nGxQ= Subject key identifier: 32:F6:63:37:00:0F:4A:E1:0E:D9:8A:DE:25:F0:B5:A4:70:53:B0:74 Certificate issuer: /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Certificate serial: 093D Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa Signing time: Thu 24 Aug 2023 20:37:44 +0000 ROA not before: Thu 24 Aug 2023 20:37:44 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 138025 IP address blocks: 103.120.69.0/24 maxlen: 24 103.146.75.0/24 maxlen: 24 2001:df6:d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 20:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2365 (0x93d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Validity Not Before: Aug 24 20:37:44 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64e7bf98-375f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:7c:87:87:5a:04:72:27:85:76:4a:fd:bc: b5:91:7c:9f:7d:03:65:fe:54:f8:87:11:79:83:58: 75:7f:0a:68:01:2c:fa:cd:2a:f8:53:9d:0d:2e:46: 80:92:aa:38:92:72:5f:68:e7:a3:2d:66:6a:5e:c5: 10:4c:90:e9:3f:1c:a9:cb:4d:c1:a7:fd:59:b4:3c: 04:80:c3:07:e0:29:10:4e:3c:8c:62:71:7d:e9:ed: 95:5d:33:2b:42:47:12:39:2d:b9:44:c8:da:8d:67: 2c:b7:7d:ba:d8:f5:93:3f:6f:21:84:d8:06:00:4c: e4:98:36:bb:b7:25:a1:29:ab:e8:8c:9a:e5:40:1f: 9d:c9:1e:51:4e:73:7b:2f:ad:db:23:ac:06:03:48: 80:4d:38:40:8b:68:85:30:62:cf:58:55:9f:4b:55: 17:93:6a:d7:49:5f:00:ba:8e:e2:98:36:7a:af:ff: fc:b1:5b:3f:e7:e8:26:e9:a8:17:79:95:44:10:a3: 5d:33:86:0e:37:59:50:25:27:3f:0d:c6:50:78:72: fe:2a:30:dc:3f:c6:ef:0b:14:08:1a:ae:9f:82:fb: 57:2c:48:2b:2d:12:39:5a:c6:83:17:0d:47:5b:08: e2:cd:3a:1f:15:02:e1:d1:37:dd:16:1b:c7:f3:fc: 12:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F6:63:37:00:0F:4A:E1:0E:D9:8A:DE:25:F0:B5:A4:70:53:B0:74 X509v3 Authority Key Identifier: keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.69.0/24 103.146.75.0/24 IPv6: 2001:df6:d00::/48 Signature Algorithm: sha256WithRSAEncryption cc:49:9d:13:2e:06:f8:39:ff:32:c8:0e:fd:cb:f7:13:2b:58: cd:a4:26:07:b7:91:85:b8:61:69:e5:87:3f:79:43:62:b2:73: 7f:94:58:ab:f6:ab:82:38:68:e6:be:7f:0c:93:b1:c7:86:c3: 84:62:78:67:49:8d:00:99:0d:09:2e:73:28:a3:d4:cf:b8:44: 32:08:18:57:3d:5c:0e:4b:ba:c7:7e:c8:f5:6b:a8:c8:37:bc: 0e:49:b9:06:1b:d5:5a:0b:fb:e6:b9:f1:03:34:81:7c:93:ce: 5c:bf:df:44:e7:6d:ef:d0:17:cc:7d:46:3c:16:1f:f9:73:ec: 50:21:8c:b0:3c:8f:e7:bb:1d:59:0c:95:c8:ae:4d:a1:11:24: 18:fe:07:c0:0c:9b:50:c0:70:27:05:a3:ce:0e:00:43:de:64: fa:ee:0d:fd:39:65:38:95:bf:e1:6a:c0:79:46:f0:07:8c:78: 3f:66:b2:2a:9a:b3:a6:44:3f:14:5f:53:db:8f:8b:09:1a:3b: e3:db:90:0d:7b:45:f6:0e:37:e8:67:9f:fa:98:3a:12:6e:66: fc:c3:a1:7e:e9:9f:09:c9:e3:5a:d8:bb:84:a8:1d:d6:41:53: 9e:58:e8:9b:43:27:22:12:0d:76:fa:dc:74:4f:a4:a5:0b:77: 99:dc:4b:da -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBNEIxMTAvBgNVBAUTKEVGOUU1MkJGOUY0ODY1Q0FGODc4N0FEOTVDRTZERTRG NjQ3Njg0MEQwHhcNMjMwODI0MjAzNzQ0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGU3YmY5OC0zNzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCl8h4daBHInhXZK/by1kXyffQNl/lT4hxF5g1h1fwpoASz6zSr4U50NLkaA kqo4knJfaOejLWZqXsUQTJDpPxypy03Bp/1ZtDwEgMMH4CkQTjyMYnF96e2VXTMr QkcSOS25RMjajWcst3262PWTP28hhNgGAEzkmDa7tyWhKavojJrlQB+dyR5RTnN7 L63bI6wGA0iATThAi2iFMGLPWFWfS1UXk2rXSV8Auo7imDZ6r//8sVs/5+gm6agX eZVEEKNdM4YON1lQJSc/DcZQeHL+KjDcP8bvCxQIGq6fgvtXLEgrLRI5WsaDFw1H WwjizTofFQLh0TfdFhvH8/wSDwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFDL2YzcA D0rhDtmK3iXwtaRwU7B0MB8GA1UdIwQYMBaAFO+eUr+fSGXK+Hh62Vzm3k9kdoQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0E0Qi82RTY0QzQxMDVD RUMxMUVBQTZCNkU4NzhDNEY5QUUwMi83NTVTdjU5SVpjcjRlSHJaWE9iZVQyUjJo QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1NVN2NTlJWmNyNGVIclpYT2JlVDJSMmhBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkNBNEIvNkU2NEM0MTA1Q0VDMTFFQUE2QjZFODc4QzRGOUFFMDIvOUUxNzIxNDQ1 Q0ZCMTFFQUEzNzdENTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABneEUDBABnkkswDwQCAAIwCQMHACABDfYNADANBgkqhkiG 9w0BAQsFAAOCAQEAzEmdEy4G+Dn/MsgO/cv3EytYzaQmB7eRhbhhaeWHP3lDYrJz f5RYq/argjho5r5/DJOxx4bDhGJ4Z0mNAJkNCS5zKKPUz7hEMggYVz1cDku6x37I 9WuoyDe8Dkm5BhvVWgv75rnxAzSBfJPOXL/fROdt79AXzH1GPBYf+XPsUCGMsDyP 57sdWQyVyK5NoREkGP4HwAybUMBwJwWjzg4AQ95k+u4N/TllOJW/4WrAeUbwB4x4 P2ayKpqzpkQ/FF9T24+LCRo749uQDXtF9g436Gef+pg6Em5m/MOhfumfCcnjWti7 hKgd1kFTnljom0MnIhINdvrcdE+kpQt3mdxL2g== -----END CERTIFICATE-----Generated at Sun Jun 16 23:13:15 2024 by rpki-client on console-ams.rpki-client.org