$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/A2A7584ACA7F11EAB343722AC4F9AE02.roa File: A2A7584ACA7F11EAB343722AC4F9AE02.roa (raw, json) Hash identifier: kEA084SR0ta0b1G24adapFfLOyD00Ilrf1P53QmRPys= Subject key identifier: F0:A7:AB:C9:22:7B:61:08:90:81:85:1B:5E:27:2C:B2:4C:AE:44:BB Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0B47 Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/A2A7584ACA7F11EAB343722AC4F9AE02.roa Signing time: Mon 06 Nov 2023 19:27:11 +0000 ROA not before: Mon 06 Nov 2023 19:27:10 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 134750 IP address blocks: 103.106.201.0/24 maxlen: 24 103.199.168.0/23 maxlen: 23 103.199.168.0/24 maxlen: 24 103.199.169.0/24 maxlen: 24 2001:df1:3b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2887 (0xb47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: Nov 6 19:27:10 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65493e0e-b65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:6c:7d:af:6b:91:24:76:32:5a:06:a9:27: a7:4d:3c:ff:1c:c0:c7:22:61:3d:7d:e4:5a:64:f8: ed:e4:af:ce:7d:0e:65:58:ab:a4:fb:fc:38:1d:86: 60:44:6d:c5:cf:82:8a:d7:9a:51:5a:72:19:6c:f8: 10:d8:4c:1a:11:16:65:be:08:55:c5:21:29:36:a7: 2e:82:46:75:53:ce:7a:ee:8e:35:a0:2f:9d:b8:50: be:a3:6a:68:ca:72:00:3b:3d:fa:6a:de:03:28:f0: c6:6f:20:9f:66:b1:c9:29:85:35:8b:10:a5:48:38: be:8c:f7:e9:3a:18:6f:de:f8:f9:2c:2e:07:51:db: ac:f8:dd:04:f0:13:1c:b5:1b:70:5a:4a:54:73:60: d4:41:8d:52:79:e4:64:5f:c6:ae:65:25:a7:cb:59: ed:71:f3:d5:29:e4:4f:e2:5e:ac:c3:85:6e:2d:dd: c4:ea:f4:74:63:5b:c8:11:9b:7a:d5:fc:91:d0:ba: 04:53:90:7d:30:42:87:ad:e4:65:e6:4b:5b:e4:4b: 3c:d2:81:fc:cb:58:d2:83:66:3f:d1:7f:00:e2:82: 4f:6b:08:05:7d:c4:8d:ce:7a:05:2a:29:a3:5d:e9: 07:66:70:0e:5c:bb:0e:ae:c1:33:c2:d8:20:8e:45: 7d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A7:AB:C9:22:7B:61:08:90:81:85:1B:5E:27:2C:B2:4C:AE:44:BB X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/A2A7584ACA7F11EAB343722AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.201.0/24 103.199.168.0/23 IPv6: 2001:df1:3b00::/48 Signature Algorithm: sha256WithRSAEncryption 61:b0:1d:e4:05:b8:8d:d1:92:99:c7:5e:38:43:65:4c:4c:20: 63:93:87:3e:52:74:d0:b8:cd:cc:9f:87:5c:f3:05:1a:29:1e: 31:a6:67:79:de:6b:6b:4e:b9:d4:3e:17:ad:e4:40:06:72:ab: 8c:b7:cb:fb:68:34:8e:b0:22:d6:e7:4e:98:22:ac:11:06:ae: 1e:45:b9:d6:f6:0d:17:41:e4:36:70:f8:77:0d:f8:48:1c:72: 6e:0b:52:2d:97:eb:31:1d:95:05:6e:e7:ee:e4:67:b9:f3:c0: c4:39:f1:2c:2a:d1:c4:f8:67:1e:cd:96:b4:ac:2c:73:fd:a9: f7:4e:32:26:c2:34:2a:35:03:bb:1a:e9:a8:0e:be:44:31:74: 5e:32:59:d4:88:a3:5b:17:29:31:de:08:0c:ed:d4:b5:d1:8c: 31:7a:68:47:f0:44:99:f5:b7:38:ac:94:59:f1:18:d1:0f:b2: 00:f3:75:b4:90:4c:44:9e:f5:74:c5:bb:8f:7a:b8:be:09:c1: 34:f6:83:1b:01:76:2e:b2:1c:9d:96:23:03:3b:90:8c:fb:a3: 95:f9:0e:03:ad:e9:0e:18:83:d6:46:2b:74:d0:2e:42:8e:66: be:10:00:43:bb:97:88:6e:96:36:1f:de:26:47:1a:69:c5:30: f7:47:96:26 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICC0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjMxMTA2MTkyNzEwWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ5M2UwZS1iNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoP9sfa9rkSR2MloGqSenTTz/HMDHImE9feRaZPjt5K/OfQ5lWKuk+/w4HYZg RG3Fz4KK15pRWnIZbPgQ2EwaERZlvghVxSEpNqcugkZ1U8567o41oC+duFC+o2po ynIAOz36at4DKPDGbyCfZrHJKYU1ixClSDi+jPfpOhhv3vj5LC4HUdus+N0E8BMc tRtwWkpUc2DUQY1SeeRkX8auZSWny1ntcfPVKeRP4l6sw4VuLd3E6vR0Y1vIEZt6 1fyR0LoEU5B9MEKHreRl5ktb5Es80oH8y1jSg2Y/0X8A4oJPawgFfcSNznoFKimj XekHZnAOXLsOrsEzwtggjkV9oQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFPCnq8ki e2EIkIGFG14nLLJMrkS7MB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTQ5QzgvMkZDNDY1OTBGRjJCMTFFOUJGMjBCRjFEQzRGOUFFMDIvQTJBNzU4NEFD QTdGMTFFQUIzNDM3MjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnaskDBAFnx6gwDwQCAAIwCQMHACABDfE7ADANBgkqhkiG 9w0BAQsFAAOCAQEAYbAd5AW4jdGSmcdeOENlTEwgY5OHPlJ00LjNzJ+HXPMFGike MaZned5ra0651D4XreRABnKrjLfL+2g0jrAi1udOmCKsEQauHkW51vYNF0HkNnD4 dw34SBxybgtSLZfrMR2VBW7n7uRnufPAxDnxLCrRxPhnHs2WtKwsc/2p904yJsI0 KjUDuxrpqA6+RDF0XjJZ1IijWxcpMd4IDO3UtdGMMXpoR/BEmfW3OKyUWfEY0Q+y APN1tJBMRJ71dMW7j3q4vgnBNPaDGwF2LrIcnZYjAzuQjPujlfkOA63pDhiD1kYr dNAuQo5mvhAAQ7uXiG6WNh/eJkcaacUw90eWJg== -----END CERTIFICATE-----Generated at Fri May 10 20:05:20 2024 by rpki-client on console-fra.rpki-client.org