$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/9FD12146ED7211ED8A92041CC4F9AE02.roa File: 9FD12146ED7211ED8A92041CC4F9AE02.roa (raw, json) Hash identifier: PL+MdMpe7QWO0nJJsSHMp4qiIEiznAficRKoTm9IDLU= Subject key identifier: 2C:9D:BE:86:D6:52:0B:01:3B:8E:1A:9D:2A:E4:7B:26:6B:90:C8:25 Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Certificate serial: 74 Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/9FD12146ED7211ED8A92041CC4F9AE02.roa Signing time: Sat 02 Dec 2023 16:43:26 +0000 ROA not before: Sat 02 Dec 2023 16:43:26 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 133866 IP address blocks: 103.76.44.0/22 maxlen: 22 103.76.44.0/24 maxlen: 24 103.76.45.0/24 maxlen: 24 103.76.46.0/24 maxlen: 24 103.76.47.0/24 maxlen: 24 116.206.88.0/22 maxlen: 22 116.206.88.0/24 maxlen: 24 116.206.89.0/24 maxlen: 24 116.206.90.0/24 maxlen: 24 116.206.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Validity Not Before: Dec 2 16:43:26 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=656b5eae-110e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:ec:82:25:89:df:0a:ce:cc:f9:2a:80:71: 1a:c4:22:a6:97:39:0d:6c:a1:13:c9:38:4a:57:e5: 1d:62:6e:fe:d7:a5:11:9e:5d:b0:4f:d6:81:7f:26: fd:cf:6d:20:af:15:ad:31:21:53:7d:36:1c:f5:59: ca:6a:a1:f4:b9:8c:f2:44:a7:1f:b6:78:e3:ad:76: 28:fb:91:a0:6b:67:40:74:fc:8a:40:b9:a7:d0:1b: d5:39:7f:b3:2c:ac:1b:89:5c:79:67:ca:2a:f8:9f: 7b:22:b1:eb:af:f1:d9:16:92:1d:00:ad:08:f9:6d: 40:c5:ce:de:7e:43:3a:c4:53:45:90:bb:44:78:89: bd:b1:7a:59:f2:0c:bf:b4:d2:9d:66:bf:8c:f0:cb: 50:4c:3b:4e:58:2b:4d:78:a2:39:78:35:01:a0:67: 07:f6:df:c6:98:31:f3:47:77:6f:11:04:23:29:f6: d9:fc:18:24:b8:04:d4:3e:d5:01:75:06:1c:86:97: 41:2e:7c:ca:3a:99:4a:89:b1:9c:72:2b:4d:82:df: e9:e2:ed:8d:b2:34:fe:79:24:e9:70:34:fe:f9:65: 77:fa:ea:bf:50:03:da:89:70:a8:27:6c:71:f5:ea: 99:a4:ab:bb:6f:25:ed:b1:e0:d2:8c:b0:2a:a0:59: b2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9D:BE:86:D6:52:0B:01:3B:8E:1A:9D:2A:E4:7B:26:6B:90:C8:25 X509v3 Authority Key Identifier: keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/9FD12146ED7211ED8A92041CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.44.0/22 116.206.88.0/22 Signature Algorithm: sha256WithRSAEncryption b5:34:2f:2f:f9:a7:5c:d5:29:dd:8d:c2:40:21:77:67:34:a5: 10:46:d2:34:ac:a5:28:e0:55:78:72:e3:7e:25:3a:c9:07:89: a2:a7:4a:73:83:e3:35:68:65:dc:37:11:f2:01:86:55:37:31: fd:b3:b3:7d:bd:02:0d:1d:aa:5e:f2:3d:b7:4b:a7:03:b4:8a: c6:35:d5:6d:59:0c:2d:14:28:3d:b2:08:67:a9:d9:50:c2:77: 3e:14:ab:57:b3:52:aa:88:7e:c6:4c:c0:f2:12:83:b4:c8:eb: ec:96:43:e7:26:b6:fb:4d:23:e6:7e:1c:f8:5d:ea:b6:ac:fa: 6d:4b:a2:d2:5f:8b:1d:77:e9:48:3d:5a:84:62:0c:a0:c5:71: 04:a7:80:4a:25:fc:a6:43:58:2f:54:87:a7:02:eb:ea:5e:c1: cd:d3:9d:05:57:d9:4c:b2:49:95:9f:e5:1f:4b:9e:0c:32:bf: de:83:73:91:18:a9:47:92:e1:51:f1:52:17:cf:03:b5:25:25: 0d:2b:92:f6:1f:c5:5f:29:40:50:8c:46:af:fb:38:b4:c5:4e: c5:2e:a6:d4:89:0d:ba:1a:6c:ec:21:2d:b6:ae:1e:e4:ce:9f: 30:c4:92:19:f6:81:0b:60:e5:d5:a5:be:56:e5:89:18:83:b4: a3:69:fe:7e -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDJFQTExMC8GA1UEBRMoMzcyRjFDNzc2MUIxRERDODMyOEM1MEJBRDBFRUVEQ0Q5 OUYyRTRGMjAeFw0yMzEyMDIxNjQzMjZaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NmI1ZWFlLTExMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgQeyCJYnfCs7M+SqAcRrEIqaXOQ1soRPJOEpX5R1ibv7XpRGeXbBP1oF/Jv3P bSCvFa0xIVN9Nhz1WcpqofS5jPJEpx+2eOOtdij7kaBrZ0B0/IpAuafQG9U5f7Ms rBuJXHlnyir4n3siseuv8dkWkh0ArQj5bUDFzt5+QzrEU0WQu0R4ib2xelnyDL+0 0p1mv4zwy1BMO05YK014ojl4NQGgZwf238aYMfNHd28RBCMp9tn8GCS4BNQ+1QF1 BhyGl0EufMo6mUqJsZxyK02C3+ni7Y2yNP55JOlwNP75ZXf66r9QA9qJcKgnbHH1 6pmkq7tvJe2x4NKMsCqgWbJhAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQULJ2+htZS CwE7jhqdKuR7JmuQyCUwHwYDVR0jBBgwFoAUNy8cd2Gx3cgyjFC60O7tzZny5PIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0MkVBL0Y1MzMyRDdFODRD MzExRTZCOTgyMUE4MUM0RjlBRTAyL055OGNkMkd4M2NneWpGQzYwTzd0elpueTVQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnk4Y2QyR3gzY2d5akZDNjBPN3R6Wm55NVBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi85RkQxMjE0NkVE NzIxMUVEOEE5MjA0MUNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmdMLAMEAnTOWDANBgkqhkiG9w0BAQsFAAOCAQEAtTQvL/mn XNUp3Y3CQCF3ZzSlEEbSNKylKOBVeHLjfiU6yQeJoqdKc4PjNWhl3DcR8gGGVTcx /bOzfb0CDR2qXvI9t0unA7SKxjXVbVkMLRQoPbIIZ6nZUMJ3PhSrV7NSqoh+xkzA 8hKDtMjr7JZD5ya2+00j5n4c+F3qtqz6bUui0l+LHXfpSD1ahGIMoMVxBKeASiX8 pkNYL1SHpwLr6l7BzdOdBVfZTLJJlZ/lH0ueDDK/3oNzkRipR5LhUfFSF88DtSUl DSuS9h/FXylAUIxGr/s4tMVOxS6m1IkNuhps7CEttq4e5M6fMMSSGfaBC2Dl1aW+ VuWJGIO0o2n+fg== -----END CERTIFICATE-----Generated at Thu May 16 17:51:17 2024 by rpki-client on console-ams.rpki-client.org