$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/74BDB7D0B96C11EB956C1D2DC4F9AE02.roa File: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (raw, json) Hash identifier: duFZi6Q3XuqBf2Nz0a24WEfK0dRXBPa2XCTdnAEvoe0= Subject key identifier: 9A:68:BF:4E:40:4E:67:23:7A:EA:C2:37:55:C4:90:E0:43:EF:B5:01 Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Certificate serial: 0464 Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/74BDB7D0B96C11EB956C1D2DC4F9AE02.roa Signing time: Thu 01 Jun 2023 03:20:03 +0000 ROA not before: Thu 01 Jun 2023 03:20:03 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 142138 IP address blocks: 103.166.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Validity Not Before: Jun 1 03:20:03 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64780e63-eb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:6e:62:10:27:21:3c:a2:61:6b:29:74:24: 9f:be:a8:29:64:7e:16:86:54:e7:c7:6d:2f:6a:1d: 14:56:43:ff:ef:12:63:32:6b:77:ff:72:d2:9c:29: e3:61:b4:c7:fa:2b:6e:cd:05:4f:e3:f9:1c:6b:80: d3:19:cc:fd:53:e1:dc:9f:a6:81:44:31:54:d3:aa: fd:16:29:1e:18:cd:89:5c:bb:66:0a:64:af:22:8e: 9a:d6:e6:2a:53:85:db:ec:32:08:88:61:f7:84:f8: be:dd:47:98:c7:af:5c:fe:ab:df:6c:6c:b3:74:25: da:f8:de:f1:fa:64:ae:28:06:2c:37:36:62:e3:f2: db:35:e5:60:ce:a9:1a:52:77:70:71:e7:e8:ba:03: da:0a:f4:e1:35:24:a5:45:9a:d8:ac:fe:0b:fe:cf: 21:c4:a1:db:42:28:5e:11:53:49:ae:d1:ff:c3:8c: 0f:ff:9d:27:ee:bc:cb:b2:23:65:00:49:fa:1c:b6: f1:d8:63:47:e7:03:77:24:03:fb:57:4a:c0:e8:18: 69:7d:88:a2:b1:41:65:46:a7:31:e6:f6:f1:52:cb: 1f:04:63:68:6d:85:d0:c6:16:b0:d7:b5:79:ba:aa: a9:be:29:7d:f7:a2:a2:59:fe:86:90:32:ea:69:a4: 3e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:68:BF:4E:40:4E:67:23:7A:EA:C2:37:55:C4:90:E0:43:EF:B5:01 X509v3 Authority Key Identifier: keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/74BDB7D0B96C11EB956C1D2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.202.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:0c:a7:f8:fc:dd:ac:3d:2d:e5:79:a1:b6:a2:3a:29:3b:71: 2e:d4:b4:52:70:8a:f2:a1:eb:b0:7b:49:e7:0c:63:d9:6b:ac: 60:39:9e:c4:c9:f1:ef:a1:ca:5b:59:49:4e:cc:fe:d0:26:4b: 3d:a9:a0:80:cf:fb:07:44:e2:70:73:ef:82:10:71:41:7c:a4: 5e:47:35:26:ae:c1:b9:8e:bd:e9:e9:6e:24:a6:98:bb:5a:13: 69:22:8c:fa:46:21:8e:04:48:4d:78:f3:d9:dd:9a:83:8e:23: 92:20:a1:84:89:79:86:e1:26:2f:27:89:0b:53:c7:90:6b:fb: f1:57:1c:32:c9:13:c8:4a:76:7b:05:75:50:cf:a1:45:df:aa: df:88:eb:10:7f:98:2c:bd:7b:ea:0a:70:03:42:48:59:ec:52: d8:00:b2:8e:07:5a:b2:8f:b2:b1:2c:35:0b:9a:5c:9c:2d:da: b3:da:55:54:9b:0e:63:e9:48:85:21:37:c9:4a:04:28:24:b4: 57:b9:f0:c4:a0:4b:29:8e:3f:6c:bb:c0:f7:73:21:d3:30:e7: 57:2a:b9:d4:85:4b:5f:ce:6b:f9:9d:69:c0:16:63:89:6d:8a: 71:ee:4a:93:cd:b5:2e:9a:7e:bf:01:30:d3:24:03:6e:a1:ae: 67:fe:4c:63 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QjUxMTAvBgNVBAUTKDkxQUVFOTYwREM0MUZGOThFRDFCMzcyMzM0MzE3Mzkz ODEyNkRDOUYwHhcNMjMwNjAxMDMyMDAzWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDc4MGU2My1lYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1JuYhAnITyiYWspdCSfvqgpZH4WhlTnx20vah0UVkP/7xJjMmt3/3LSnCnj YbTH+ituzQVP4/kca4DTGcz9U+Hcn6aBRDFU06r9FikeGM2JXLtmCmSvIo6a1uYq U4Xb7DIIiGH3hPi+3UeYx69c/qvfbGyzdCXa+N7x+mSuKAYsNzZi4/LbNeVgzqka UndwcefougPaCvThNSSlRZrYrP4L/s8hxKHbQiheEVNJrtH/w4wP/50n7rzLsiNl AEn6HLbx2GNH5wN3JAP7V0rA6BhpfYiisUFlRqcx5vbxUssfBGNobYXQxhaw17V5 uqqpvil996KiWf6GkDLqaaQ+WQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJpov05A TmcjeurCN1XEkOBD77UBMB8GA1UdIwQYMBaAFJGu6WDcQf+Y7Rs3IzQxc5OBJtyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhCNS8zRUJDRDFEQUI5 NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81anRHemNqTkRGems0RW0z SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thN3BZTnhCXzVqdEd6Y2pOREZ6azRFbTNKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI4QjUvM0VCQ0QxREFCOTZCMTFFQkIxNkVFRjJDQzRGOUFFMDIvNzRCREI3RDBC OTZDMTFFQjk1NkMxRDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnpsowDQYJKoZIhvcNAQELBQADggEBAC4Mp/j83aw9LeV5 obaiOik7cS7UtFJwivKh67B7SecMY9lrrGA5nsTJ8e+hyltZSU7M/tAmSz2poIDP +wdE4nBz74IQcUF8pF5HNSauwbmOvenpbiSmmLtaE2kijPpGIY4ESE1489ndmoOO I5IgoYSJeYbhJi8niQtTx5Br+/FXHDLJE8hKdnsFdVDPoUXfqt+I6xB/mCy9e+oK cANCSFnsUtgAso4HWrKPsrEsNQuaXJwt2rPaVVSbDmPpSIUhN8lKBCgktFe58MSg SymOP2y7wPdzIdMw51cqudSFS1/Oa/mdacAWY4ltinHuSpPNtS6afr8BMNMkA26h rmf+TGM= -----END CERTIFICATE-----Generated at Fri May 17 02:01:39 2024 by rpki-client on console-ams.rpki-client.org