$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/38EC4D321F2711EB93A71042C4F9AE02.roa File: 38EC4D321F2711EB93A71042C4F9AE02.roa (raw, json) Hash identifier: OKqVFD1uZroQnXYiHQdFbraVnh1GYUqvC3EFoMwpZqM= Subject key identifier: 1D:13:F2:22:F3:17:29:D7:82:EC:60:40:F5:BB:7F:E7:AB:21:B0:83 Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Certificate serial: 0881 Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/38EC4D321F2711EB93A71042C4F9AE02.roa Signing time: Sun 31 Mar 2024 22:30:23 +0000 ROA not before: Sun 31 Mar 2024 22:30:23 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 393954 IP address blocks: 103.149.76.0/24 maxlen: 24 2405:e640:c0fd::/48 maxlen: 48 2405:e640:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177 (0x881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Validity Not Before: Mar 31 22:30:23 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6609e3ff-ee49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:17:50:ab:c9:63:8d:2d:d8:42:0d:5d:d6: d2:4d:80:50:2b:33:4a:62:d0:11:55:2f:30:87:21: 47:92:09:75:22:ec:f1:29:68:47:10:fe:ab:70:e3: 93:f8:fb:3d:96:6c:30:3f:ed:ac:ad:4a:e0:65:e9: 0f:d0:af:98:cf:02:5e:73:d4:60:ba:e6:6b:fd:3e: 38:70:83:7a:65:a4:b9:a6:89:9e:25:a5:67:18:2d: 15:06:c0:44:8a:fa:35:81:da:35:5f:df:cd:f8:2e: 9c:c6:96:d8:c2:61:52:2e:b8:e0:98:41:dc:2f:4f: 85:fd:d0:91:b6:de:9f:7e:c3:bc:f5:17:3c:47:b9: 78:91:2c:78:f3:bb:19:53:bd:b6:bc:22:a3:97:db: 85:ba:a2:a7:89:a6:eb:b1:fd:75:f7:c9:70:16:5f: f9:32:b4:8b:d8:41:43:b9:a6:09:61:d3:c2:51:9b: f5:1c:83:6f:79:bf:57:84:3a:96:94:35:44:83:2e: d6:d5:4e:47:f3:6f:82:9e:01:71:3d:be:1f:40:9e: b4:48:ee:2a:a7:bb:d0:e8:92:d2:44:d0:1e:9c:b3: c4:77:65:99:a6:23:af:e6:9c:f8:64:90:8f:91:6d: 4d:99:b1:fc:00:49:4f:b6:29:d5:d6:82:23:74:3c: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:13:F2:22:F3:17:29:D7:82:EC:60:40:F5:BB:7F:E7:AB:21:B0:83 X509v3 Authority Key Identifier: keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/38EC4D321F2711EB93A71042C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.76.0/24 IPv6: 2405:e640:c0fd::/48 2405:e640:d000::/36 Signature Algorithm: sha256WithRSAEncryption 8b:37:9d:bf:d5:cb:d7:c1:a3:19:a1:bc:ce:b2:39:6f:e1:40: a7:3e:15:bf:86:98:58:87:2a:eb:98:33:5e:9b:45:ef:15:eb: 52:64:b0:c0:b5:ab:69:64:52:b6:83:32:d3:ba:1e:74:af:77: 50:54:5e:94:fb:54:52:79:f4:24:23:72:1b:55:da:7a:4b:ef: 8b:82:5d:22:f5:8b:fc:22:4e:81:f1:3f:d7:45:ae:3d:93:f0: 9d:98:7a:ef:d5:bf:97:d4:0d:8f:a3:50:13:25:c5:83:48:5a: 33:48:75:3e:d2:4f:b5:57:68:2d:33:bf:d5:c1:e9:31:32:fd: 14:37:f1:ac:ae:e3:70:ae:0f:f5:2a:ff:c2:be:79:8d:e8:08: 31:f6:92:85:d6:51:54:aa:ca:fe:11:38:4f:82:ab:b6:7c:17: 99:71:ff:0b:5b:69:82:09:98:0f:41:96:8c:65:a9:20:3a:a2: 22:a9:20:5a:34:d5:eb:18:35:02:f6:f9:d5:cc:4b:43:4b:0f: 9b:0e:c3:6e:ed:b5:c8:19:c9:f1:2a:9e:99:7d:e9:87:a9:f9: 82:30:74:f0:10:ae:ec:a1:7f:e8:6d:49:c1:96:a4:35:d1:74: 43:be:4b:82:e4:9a:24:ba:30:98:f6:27:91:72:d9:d0:94:a1: 91:db:ab:00 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ3RUYxMTAvBgNVBAUTKDAyMTU1MDJBQThGRkRDNzIxRDdGODRGNzRDRDA3MEI3 NTYzOTAwMTYwHhcNMjQwMzMxMjIzMDIzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjA5ZTNmZi1lZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrsXUKvJY40t2EINXdbSTYBQKzNKYtARVS8whyFHkgl1IuzxKWhHEP6rcOOT +Ps9lmwwP+2srUrgZekP0K+YzwJec9RguuZr/T44cIN6ZaS5pomeJaVnGC0VBsBE ivo1gdo1X9/N+C6cxpbYwmFSLrjgmEHcL0+F/dCRtt6ffsO89Rc8R7l4kSx487sZ U722vCKjl9uFuqKniabrsf1198lwFl/5MrSL2EFDuaYJYdPCUZv1HINveb9XhDqW lDVEgy7W1U5H82+CngFxPb4fQJ60SO4qp7vQ6JLSRNAenLPEd2WZpiOv5pz4ZJCP kW1NmbH8AElPtinV1oIjdDyw2QIDAQABo4ICrjCCAqowHQYDVR0OBBYEFB0T8iLz FynXguxgQPW7f+erIbCDMB8GA1UdIwQYMBaAFAIVUCqo/9xyHX+E90zQcLdWOQAW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDdFRi84QTI5MTA0Njk5 MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNISWRmNFQzVE5Cd3QxWTVB QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FoVlFLcWpfM0hJZGY0VDNUTkJ3dDFZNUFCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTQ3RUYvOEEyOTEwNDY5OTE2MTFFQTk5NTVENTBCQzRGOUFFMDIvMzhFQzREMzIx RjI3MTFFQjkzQTcxMDQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOAYIKwYBBQUHAQcBAf8E KTAnMAwEAgABMAYDBABnlUwwFwQCAAIwEQMHACQF5kDA/QMGBCQF5kDQMA0GCSqG SIb3DQEBCwUAA4IBAQCLN52/1cvXwaMZobzOsjlv4UCnPhW/hphYhyrrmDNem0Xv FetSZLDAtatpZFK2gzLTuh50r3dQVF6U+1RSefQkI3IbVdp6S++Lgl0i9Yv8Ik6B 8T/XRa49k/CdmHrv1b+X1A2Po1ATJcWDSFozSHU+0k+1V2gtM7/VwekxMv0UN/Gs ruNwrg/1Kv/CvnmN6Agx9pKF1lFUqsr+EThPgqu2fBeZcf8LW2mCCZgPQZaMZakg OqIiqSBaNNXrGDUC9vnVzEtDSw+bDsNu7bXIGcnxKp6ZfemHqfmCMHTwEK7soX/o bUnBlqQ10XRDvkuC5JokujCY9ieRctnQlKGR26sA -----END CERTIFICATE-----Generated at Thu May 2 22:13:14 2024 by rpki-client on console-fra.rpki-client.org