$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/392710CEEFFE11EEB55AD945C4F9AE02.roa File: 392710CEEFFE11EEB55AD945C4F9AE02.roa (raw, json) Hash identifier: WmcDzwAVXRQ3igKPV4qQQLFu9LxV+4dOdSVDSJP1tNU= Subject key identifier: 35:D2:EC:ED:43:FF:8C:70:FA:E9:B8:3E:C6:C1:92:A3:00:CA:D7:6F Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 02 Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/392710CEEFFE11EEB55AD945C4F9AE02.roa Signing time: Mon 01 Apr 2024 08:02:45 +0000 ROA not before: Mon 01 Apr 2024 08:02:45 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 137547 IP address blocks: 103.230.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Apr 1 08:02:45 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=660a6a25-8c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c5:be:c0:d3:bd:e3:6a:2a:01:cd:61:81:52: 5e:a8:e2:f4:0a:ea:55:36:1e:78:a6:62:82:e8:8c: b0:95:0f:04:2d:4c:08:7a:b5:d6:0b:56:f8:09:0f: 1d:2c:bd:e8:ef:ec:57:d6:f2:c0:d2:44:68:db:2d: 5b:b4:c5:fa:9d:d4:2f:b8:a4:57:ff:5d:41:cc:97: 58:2a:90:42:b8:23:d0:1b:e1:a6:be:ea:2a:5a:4f: b1:3a:8e:63:ab:26:17:9f:b8:e3:d2:8c:64:d9:fd: d1:fe:df:75:2c:4b:a5:13:e9:c1:25:6a:c3:ab:f3: 7d:fb:7e:34:56:6e:cc:f6:e5:4a:3f:df:39:ef:67: 7a:13:68:6e:09:c9:0a:c7:cb:1a:c8:9c:f7:a9:40: 5c:a6:82:eb:d7:26:86:df:04:20:cc:ff:43:52:51: b6:d6:7a:8a:74:b1:8b:d1:a9:97:22:b1:2d:13:e7: 0b:f5:cc:e2:57:30:a4:bd:68:a7:96:f5:7a:a1:df: e2:3b:3f:93:5a:ba:e5:7d:36:2a:02:91:28:be:2c: ad:17:85:23:6a:af:4a:b7:4e:f6:d9:a1:e1:9c:7c: cf:10:37:b5:02:41:79:bc:7a:5e:15:ae:0b:fe:52: 22:7c:b7:0a:dd:f0:e3:fa:54:ae:9f:00:1a:41:a9: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D2:EC:ED:43:FF:8C:70:FA:E9:B8:3E:C6:C1:92:A3:00:CA:D7:6F X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/392710CEEFFE11EEB55AD945C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.230.92.0/23 Signature Algorithm: sha256WithRSAEncryption 11:28:ed:f4:b2:f1:75:d5:0c:70:45:f6:78:9c:c6:81:39:85: a8:da:2a:28:33:60:97:e2:14:20:0f:58:59:72:fd:ad:5c:65: eb:0e:0d:56:64:88:df:8d:be:8a:8f:3f:8c:9e:a7:e2:88:d4: 0c:41:7e:55:6d:84:79:31:76:bc:0b:ae:53:b0:0e:43:7a:02: 03:7e:29:cf:f3:93:d6:ed:13:29:f6:f4:9b:9a:70:bb:90:a4: d9:3e:22:97:86:d2:20:3c:b3:5c:7c:f4:56:34:a0:31:b4:fc: 09:d4:a7:21:fa:bb:3f:b6:c2:e4:3a:ca:4e:0a:cd:2e:f5:77: f5:d7:8b:f8:96:9e:de:11:58:d6:e9:01:13:91:24:29:e1:9e: e1:4c:ab:01:2f:10:42:fe:63:8b:5a:3f:55:ab:f2:44:d3:01: 8a:dd:3c:da:c3:2e:80:21:cc:11:0b:b9:c4:0c:ef:d0:31:59: 20:fb:48:c8:bb:5d:19:e4:37:06:fa:fa:b4:27:65:0e:af:c5: 9b:91:cc:73:66:20:cb:d8:de:18:9d:97:40:18:fd:55:27:4d: 0c:17:e7:38:1d:54:d8:2a:11:8a:19:44:d8:10:0c:01:5d:ab: c3:6b:f8:7c:11:f1:d1:a6:48:86:24:eb:93:d2:08:e4:8b:18: 69:ae:f4:c8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RTlEQzExMC8GA1UEBRMoMEY5RjcxNThEQkRGRkEyQTU3QUUwMjQ4N0M5ODIwNkI3 ODM4MDQ5NjAeFw0yNDA0MDEwODAyNDVaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MGE2YTI1LThjNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCexb7A073jaioBzWGBUl6o4vQK6lU2HnimYoLojLCVDwQtTAh6tdYLVvgJDx0s vejv7FfW8sDSRGjbLVu0xfqd1C+4pFf/XUHMl1gqkEK4I9Ab4aa+6ipaT7E6jmOr JhefuOPSjGTZ/dH+33UsS6UT6cElasOr8337fjRWbsz25Uo/3znvZ3oTaG4JyQrH yxrInPepQFymguvXJobfBCDM/0NSUbbWeop0sYvRqZcisS0T5wv1zOJXMKS9aKeW 9Xqh3+I7P5NauuV9NioCkSi+LK0XhSNqr0q3TvbZoeGcfM8QN7UCQXm8el4Vrgv+ UiJ8twrd8OP6VK6fABpBqfpVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUNdLs7UP/ jHD66bg+xsGSowDK128wHwYDVR0jBBgwFoAUD59xWNvf+ipXrgJIfJgga3g4BJYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFOURDLzZFRUMxRjVDRUZG RDExRUU5MDI4OEE3MkM0RjlBRTAyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJK WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRDU5eFdOdmYtaXBYcmdKSWZKZ2dhM2c0QkpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi8zOTI3MTBDRUVG RkUxMUVFQjU1QUQ5NDVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWfmXDANBgkqhkiG9w0BAQsFAAOCAQEAESjt9LLxddUMcEX2 eJzGgTmFqNoqKDNgl+IUIA9YWXL9rVxl6w4NVmSI342+io8/jJ6n4ojUDEF+VW2E eTF2vAuuU7AOQ3oCA34pz/OT1u0TKfb0m5pwu5Ck2T4il4bSIDyzXHz0VjSgMbT8 CdSnIfq7P7bC5DrKTgrNLvV39deL+Jae3hFY1ukBE5EkKeGe4UyrAS8QQv5ji1o/ VavyRNMBit082sMugCHMEQu5xAzv0DFZIPtIyLtdGeQ3Bvr6tCdlDq/Fm5HMc2Yg y9jeGJ2XQBj9VSdNDBfnOB1U2CoRihlE2BAMAV2rw2v4fBHx0aZIhiTrk9II5IsY aa70yA== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:37 2024 by rpki-client on console-ams.rpki-client.org