$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/E390F83EC1CD11EB86A00568C4F9AE02.roa File: E390F83EC1CD11EB86A00568C4F9AE02.roa (raw, json) Hash identifier: 8fmP3q/tRlUiuDRZxlZ0fXa+w3jsV7pt1fVklolWc1A= Subject key identifier: 5D:18:CA:7C:5F:B2:B3:7C:CE:80:06:D9:1E:BB:23:BA:34:2B:4E:3B Certificate issuer: /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Certificate serial: 046C Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/E390F83EC1CD11EB86A00568C4F9AE02.roa Signing time: Thu 27 Jul 2023 00:21:51 +0000 ROA not before: Thu 27 Jul 2023 00:21:51 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 142298 IP address blocks: 103.167.190.0/23 maxlen: 23 103.167.190.0/24 maxlen: 24 103.167.191.0/24 maxlen: 24 2001:df6:bd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1132 (0x46c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Validity Not Before: Jul 27 00:21:51 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64c1b89f-34ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:65:70:23:4f:5f:ec:d0:8e:47:48:81:7e: 65:44:63:29:79:f7:cf:b4:07:16:15:f2:da:18:ef: 54:9b:4f:5c:27:f1:3d:69:7a:69:88:f4:ba:44:83: 04:4c:79:79:d5:41:4f:cc:0f:b7:11:7a:14:f6:ba: 54:62:58:ed:d8:33:9e:59:08:93:84:8b:e0:0b:ec: bd:ab:d3:2f:49:9f:60:cb:bd:c2:69:48:84:7a:a9: c3:d2:e0:86:cd:ad:11:1d:c4:49:b9:c7:bd:0a:5b: ec:dc:df:0d:70:21:66:ea:a7:fb:04:a6:2d:57:8c: 3d:a5:48:14:c1:c0:0b:37:d3:0d:6a:5a:d9:33:f1: f6:be:83:c9:1a:60:7f:53:d8:43:e1:5b:8b:d3:15: dd:dc:61:a5:47:ee:1d:0c:a6:d3:7f:cf:52:8a:19: 05:49:ef:03:76:c6:6c:00:7d:22:90:b4:6f:04:e3: 3c:c2:7c:95:5f:af:68:44:68:9d:ab:e5:15:6c:66: cc:13:d6:37:4d:0f:6a:3c:30:6b:12:7a:94:52:d9: da:81:f8:ae:bf:05:b4:c8:7b:65:8e:e2:58:63:46: 5d:17:ef:3a:f1:1a:5e:08:3e:57:c7:c6:0d:7f:67: 57:7d:41:05:93:4d:aa:5e:56:a0:fa:e8:e4:76:8b: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:18:CA:7C:5F:B2:B3:7C:CE:80:06:D9:1E:BB:23:BA:34:2B:4E:3B X509v3 Authority Key Identifier: keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/E390F83EC1CD11EB86A00568C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.190.0/23 IPv6: 2001:df6:bd80::/48 Signature Algorithm: sha256WithRSAEncryption 9f:6c:be:ef:0f:be:10:a0:6a:0f:68:cd:dd:e7:89:d8:ac:9d: 1f:08:81:49:e6:d6:45:16:15:c7:9f:4e:36:e1:94:47:04:ee: 1d:c5:36:b8:84:9e:12:97:1e:a8:ae:70:66:e8:e5:7e:5d:2c: cb:b9:fc:f4:39:bc:45:2b:39:91:cb:f7:fc:2e:a9:c4:e6:9d: 8a:11:82:23:b6:cb:0d:be:55:33:ab:9c:73:41:52:6c:3f:09: 0f:7f:37:0c:11:67:4e:9b:2f:7d:a3:99:a9:cb:11:48:72:aa: 5d:c1:a3:10:6e:a1:1e:2e:bb:06:a5:4e:7a:8c:3f:2e:88:f6: 6e:28:fa:b7:92:35:67:bb:f6:2e:95:c9:d0:dd:c2:85:f3:94: db:45:18:79:23:fb:94:f6:c7:b1:42:b6:b0:aa:c1:91:70:ca: a7:d0:1c:62:8a:d5:8c:a0:fe:06:36:d7:fb:80:92:31:f8:14: 9c:64:24:b8:2e:c9:2c:b9:02:d5:87:14:97:76:a7:a0:b7:9c: 4f:39:65:46:96:c2:4e:95:04:6e:74:81:aa:5f:ce:00:2f:5e: 40:86:a0:c2:a5:bb:d1:42:5f:22:bc:a5:63:18:22:9c:b2:ef: ed:79:90:52:16:0f:0f:a6:71:f9:97:b1:a2:74:84:11:a5:e4: cc:2e:ba:34 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1OUExMTAvBgNVBAUTKDVDMEQxNzZBODAyQjJFNDU1N0U4ODVBNkMwRUFCNUQw RDA3MEQ3QTcwHhcNMjMwNzI3MDAyMTUxWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGMxYjg5Zi0zNGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoVlcCNPX+zQjkdIgX5lRGMpeffPtAcWFfLaGO9Um09cJ/E9aXppiPS6RIME THl51UFPzA+3EXoU9rpUYljt2DOeWQiThIvgC+y9q9MvSZ9gy73CaUiEeqnD0uCG za0RHcRJuce9Clvs3N8NcCFm6qf7BKYtV4w9pUgUwcALN9MNalrZM/H2voPJGmB/ U9hD4VuL0xXd3GGlR+4dDKbTf89SihkFSe8DdsZsAH0ikLRvBOM8wnyVX69oRGid q+UVbGbME9Y3TQ9qPDBrEnqUUtnagfiuvwW0yHtljuJYY0ZdF+868RpeCD5Xx8YN f2dXfUEFk02qXlag+ujkdovm+QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFF0Yynxf srN8zoAG2R67I7o0K047MB8GA1UdIwQYMBaAFFwNF2qAKy5FV+iFpsDqtdDQcNen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU5QS8yRjhEQ0IwMkMx Q0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9BckxrVlg2SVdtd09xMTBOQncx NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBMFhhb0FyTGtWWDZJV213T3ExME5CdzE2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTk1OUEvMkY4RENCMDJDMUNCMTFFQjkxNzVDRTY2QzRGOUFFMDIvRTM5MEY4M0VD MUNEMTFFQjg2QTAwNTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnp74wDwQCAAIwCQMHACABDfa9gDANBgkqhkiG9w0BAQsF AAOCAQEAn2y+7w++EKBqD2jN3eeJ2KydHwiBSebWRRYVx59ONuGURwTuHcU2uISe EpceqK5wZujlfl0sy7n89Dm8RSs5kcv3/C6pxOadihGCI7bLDb5VM6ucc0FSbD8J D383DBFnTpsvfaOZqcsRSHKqXcGjEG6hHi67BqVOeow/Loj2bij6t5I1Z7v2LpXJ 0N3ChfOU20UYeSP7lPbHsUK2sKrBkXDKp9AcYorVjKD+BjbX+4CSMfgUnGQkuC7J LLkC1YcUl3anoLecTzllRpbCTpUEbnSBql/OAC9eQIagwqW70UJfIrylYxginLLv 7XmQUhYPD6Zx+ZexonSEEaXkzC66NA== -----END CERTIFICATE-----Generated at Fri May 17 02:01:40 2024 by rpki-client on console-ams.rpki-client.org