$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/A4FC1E34519311EE85CE2811C4F9AE02.roa File: A4FC1E34519311EE85CE2811C4F9AE02.roa (raw, json) Hash identifier: rxyz7R7XEZ0StcHzWcM5qmNZrUP1LQOdlSjbVIVUXQ8= Subject key identifier: 96:13:56:55:3A:F0:A2:48:4C:41:AB:EB:79:E5:0A:33:F5:C2:F5:93 Certificate issuer: /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE Certificate serial: 71 Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/A4FC1E34519311EE85CE2811C4F9AE02.roa Signing time: Mon 15 Apr 2024 12:55:34 +0000 ROA not before: Mon 15 Apr 2024 12:55:34 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 151798 IP address blocks: 103.77.212.0/23 maxlen: 23 103.77.212.0/24 maxlen: 24 103.77.213.0/24 maxlen: 24 2001:df2:ea40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 07:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE Validity Not Before: Apr 15 12:55:34 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=661d23c6-b9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a7:13:9c:06:f5:93:af:76:be:db:98:0c:3c: 56:53:b0:a8:55:51:a6:5d:91:21:01:b1:ff:5e:b5: 5a:df:f5:65:86:0b:30:72:32:8c:04:07:a2:d0:29: a3:cb:26:dd:bb:aa:c4:e9:e3:ce:07:81:14:1e:5e: eb:37:ac:c6:88:20:3a:59:7a:8e:9c:0b:e3:9d:e1: c8:c9:a8:ae:f3:d2:68:75:79:47:96:80:37:99:e1: 5d:1c:40:a5:35:fe:c2:30:7b:c3:d1:03:f0:62:41: 17:8f:3e:2a:1a:cf:f0:81:5d:53:c9:41:8d:29:50: a7:27:e1:83:2e:a8:55:45:dc:9d:6a:eb:37:49:c2: 61:f9:bd:76:69:84:47:e7:1b:e0:3b:4a:01:71:de: c6:03:68:30:aa:f7:b5:71:c1:43:d4:12:01:d3:fb: a2:fa:31:b0:e1:82:0f:82:0d:2c:d2:aa:c9:57:74: 8e:5d:fe:e6:fb:79:ce:b4:40:4c:9c:d3:28:6c:45: a8:fd:51:58:f4:a9:39:ad:14:b8:2e:e4:b7:03:a7: ac:bf:a5:eb:34:73:e0:11:ec:c2:46:2c:b7:9c:dd: 16:c5:81:64:dc:be:85:3d:0c:91:06:da:2d:b3:1c: 2d:8c:12:b1:43:0a:4c:fe:17:8e:da:e8:ed:15:d2: fc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:13:56:55:3A:F0:A2:48:4C:41:AB:EB:79:E5:0A:33:F5:C2:F5:93 X509v3 Authority Key Identifier: keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/A4FC1E34519311EE85CE2811C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.77.212.0/23 IPv6: 2001:df2:ea40::/48 Signature Algorithm: sha256WithRSAEncryption cf:8e:91:0d:cd:9b:55:5c:55:10:08:37:28:8b:0c:f1:30:bd: fd:86:e4:e8:fe:65:26:d6:93:cc:04:3c:2c:35:03:3f:d9:a5: 7a:0c:ef:64:0c:6a:df:0f:72:84:b0:10:7b:f1:b5:5b:85:2f: 3b:d5:37:bd:13:d2:fb:fd:5a:ce:87:96:a4:bd:c6:42:c8:c3: 45:ce:92:7e:5d:c5:38:37:9e:97:d1:bf:84:f9:85:d4:04:d7: 89:62:e6:f4:69:8c:41:13:5c:60:7d:75:89:3a:41:9b:b3:50: 62:c4:01:44:d6:76:d9:72:2f:26:33:03:4e:a0:cf:47:69:93: 02:2b:df:99:18:40:be:37:3d:9d:15:9f:74:ec:30:a4:40:05: 79:e9:b1:79:eb:a0:a7:08:5d:ed:31:2f:8d:77:08:f2:c6:44: 34:56:ed:8a:fe:f1:1c:9d:e6:c4:35:6b:28:7e:7b:a2:b2:71: bd:62:dc:74:3b:2c:3f:4f:57:67:a3:86:5c:37:7a:2a:a8:e1: 84:ae:e5:b6:34:11:ba:d2:77:01:19:75:61:b5:d3:3b:0d:c9: d2:f0:d5:4a:57:e1:b0:e3:2d:9d:82:20:34:44:94:58:fc:ae: 0a:49:ea:2f:3c:f8:ce:0d:71:77:43:50:ba:86:08:08:27:eb: e4:50:5e:25 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MEJFMjExMC8GA1UEBRMoRDM5QTEwRTYxQThDQTk1MDRFREIxNTQ4NjkzNkIzNzc0 M0EyNERDRTAeFw0yNDA0MTUxMjU1MzRaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MWQyM2M2LWI5ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUpxOcBvWTr3a+25gMPFZTsKhVUaZdkSEBsf9etVrf9WWGCzByMowEB6LQKaPL Jt27qsTp484HgRQeXus3rMaIIDpZeo6cC+Od4cjJqK7z0mh1eUeWgDeZ4V0cQKU1 /sIwe8PRA/BiQRePPioaz/CBXVPJQY0pUKcn4YMuqFVF3J1q6zdJwmH5vXZphEfn G+A7SgFx3sYDaDCq97VxwUPUEgHT+6L6MbDhgg+CDSzSqslXdI5d/ub7ec60QEyc 0yhsRaj9UVj0qTmtFLgu5LcDp6y/pes0c+AR7MJGLLec3RbFgWTcvoU9DJEG2i2z HC2MErFDCkz+F47a6O0V0vx9AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUlhNWVTrw okhMQavreeUKM/XC9ZMwHwYDVR0jBBgwFoAU05oQ5hqMqVBO2xVIaTazd0OiTc4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwQkUyLzZDQjlBOTY2NTE5 MjExRUVCOTBBMzMwQkM0RjlBRTAyLzA1b1E1aHFNcVZCTzJ4VklhVGF6ZDBPaVRj NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMDVvUTVocU1xVkJPMnhWSWFUYXpkME9pVGM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJFMi82Q0I5QTk2NjUxOTIxMUVFQjkwQTMzMEJDNEY5QUUwMi9BNEZDMUUzNDUx OTMxMUVFODVDRTI4MTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWdN1DAPBAIAAjAJAwcAIAEN8upAMA0GCSqGSIb3DQEBCwUA A4IBAQDPjpENzZtVXFUQCDcoiwzxML39huTo/mUm1pPMBDwsNQM/2aV6DO9kDGrf D3KEsBB78bVbhS871Te9E9L7/VrOh5akvcZCyMNFzpJ+XcU4N56X0b+E+YXUBNeJ Yub0aYxBE1xgfXWJOkGbs1BixAFE1nbZci8mMwNOoM9HaZMCK9+ZGEC+Nz2dFZ90 7DCkQAV56bF566CnCF3tMS+NdwjyxkQ0Vu2K/vEcnebENWsofnuisnG9Ytx0Oyw/ T1dno4ZcN3oqqOGEruW2NBG60ncBGXVhtdM7DcnS8NVKV+Gw4y2dgiA0RJRY/K4K SeovPPjODXF3Q1C6hggIJ+vkUF4l -----END CERTIFICATE-----Generated at Thu Jun 13 08:01:32 2024 by rpki-client on console-ams.rpki-client.org