$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/90AE61AC595711EC8761C361C4F9AE02.roa File: 90AE61AC595711EC8761C361C4F9AE02.roa (raw, json) Hash identifier: MHLkIrG8OE5UOit08v3EdsiD1KiljA4jon27VqLiskc= Subject key identifier: 9D:5E:1B:2E:AD:C0:C2:12:CF:BE:8B:49:82:02:5C:1E:E7:E3:E4:F9 Certificate issuer: /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Certificate serial: 0342 Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/90AE61AC595711EC8761C361C4F9AE02.roa Signing time: Sun 07 Jan 2024 02:24:32 +0000 ROA not before: Sun 07 Jan 2024 02:24:32 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 58580 IP address blocks: 103.177.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 834 (0x342) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Validity Not Before: Jan 7 02:24:32 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=659a0b5f-f9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7c:c3:07:cf:5b:88:f4:de:79:9f:9c:77:70: 79:ad:9a:6f:a0:06:b1:11:3e:87:51:a3:1e:c8:e6: 23:7c:62:83:60:ad:3d:9f:8d:71:0e:eb:bd:0e:52: c8:61:85:24:44:62:c8:f0:33:66:2f:4e:2f:92:e4: 2b:9d:83:cf:29:06:fa:af:e0:33:46:8a:03:21:bf: f7:cf:37:ae:79:e4:ff:6c:dc:25:61:01:e9:86:b1: dc:c0:fc:95:a5:fd:c9:4f:15:3b:af:99:58:c3:ff: 57:86:ba:89:71:e4:86:64:3a:5a:2c:fa:65:d7:61: 97:2d:e7:ba:7c:b3:1c:8a:e2:bf:23:03:43:33:7a: 01:72:12:97:5e:94:09:2d:f7:d2:c7:8e:30:20:c8: 54:b7:a1:e0:30:ee:8a:6a:a4:56:15:1b:53:6f:6f: e8:0d:97:90:07:22:73:69:76:71:dc:f6:22:5e:99: 0e:1d:3e:e4:81:2d:3f:34:1d:ba:85:f4:6a:66:d6: 70:d9:4a:4e:bf:87:26:52:cb:c3:43:12:9c:3e:30: 72:6e:dc:50:10:24:72:b9:bf:73:22:50:4b:2b:2d: 15:fb:a9:dd:54:81:f6:96:ae:6f:f8:73:79:12:91: 29:14:87:9e:ca:d3:5d:72:37:58:a5:3b:c9:09:d6: 36:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5E:1B:2E:AD:C0:C2:12:CF:BE:8B:49:82:02:5C:1E:E7:E3:E4:F9 X509v3 Authority Key Identifier: keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/90AE61AC595711EC8761C361C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.46.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:b8:20:59:10:9f:54:5e:75:b4:de:a4:bc:01:4c:16:b0:97: 0e:b5:fb:13:c9:8f:f3:61:8c:f2:8c:6f:8e:df:05:9d:b5:eb: 80:0b:2c:a3:29:2f:bb:14:bf:1e:12:3b:1a:c2:52:3a:e7:04: 41:87:04:9d:e5:43:5a:14:48:a9:93:81:bd:46:77:9d:77:69: 94:b4:54:f1:49:e7:b4:2c:f7:71:23:81:90:04:70:fd:70:bf: 03:f0:1f:f2:57:1c:09:7e:4b:f1:2f:70:d6:be:3b:34:26:51: 0c:92:69:cc:65:99:ac:e2:7d:32:3e:fd:0f:28:83:33:c5:39: f8:86:9d:cd:84:06:ae:0b:6b:80:c8:35:89:2b:7b:f3:69:0a: 0c:e5:3d:37:f4:54:e7:15:62:5f:ef:b7:78:ba:a9:dd:ba:e5: 68:f9:90:71:7c:c9:88:95:76:4a:87:24:9b:f0:a4:21:04:d2: 68:5f:26:5f:de:e0:09:3d:97:76:42:fa:41:bc:52:b6:0e:71: 99:c0:8d:67:27:b2:8e:28:5e:77:90:4d:5d:0f:22:80:53:d4: 2c:a5:2a:c7:ea:47:a9:39:0a:e1:55:60:38:fa:e7:77:7d:7c: 60:7d:3d:1e:f8:3f:c5:e6:5d:23:d4:c9:8f:9d:76:7c:ec:68: 92:77:0e:53 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3MEQxMTAvBgNVBAUTKDc4NzY2RDYwMkE0MEVGNTcwMTQyNjg0QTcyM0U4QTM0 MEM2RkYzODIwHhcNMjQwMTA3MDIyNDMyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTlhMGI1Zi1mOWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmXzDB89biPTeeZ+cd3B5rZpvoAaxET6HUaMeyOYjfGKDYK09n41xDuu9DlLI YYUkRGLI8DNmL04vkuQrnYPPKQb6r+AzRooDIb/3zzeueeT/bNwlYQHphrHcwPyV pf3JTxU7r5lYw/9XhrqJceSGZDpaLPpl12GXLee6fLMciuK/IwNDM3oBchKXXpQJ LffSx44wIMhUt6HgMO6KaqRWFRtTb2/oDZeQByJzaXZx3PYiXpkOHT7kgS0/NB26 hfRqZtZw2UpOv4cmUsvDQxKcPjBybtxQECRyub9zIlBLKy0V+6ndVIH2lq5v+HN5 EpEpFIeeytNdcjdYpTvJCdY2vwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ1eGy6t wMISz76LSYICXB7n4+T5MB8GA1UdIwQYMBaAFHh2bWAqQO9XAUJoSnI+ijQMb/OC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTcwRC8xMTE0QzlCQTU5 NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcxY0JRbWhLY2o2S05BeHY4 NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIWnRZQ3BBNzFjQlFtaEtjajZLTkF4djg0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkE3MEQvMTExNEM5QkE1OTUwMTFFQ0FFMDkzMjgyQzRGOUFFMDIvOTBBRTYxQUM1 OTU3MTFFQzg3NjFDMzYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnsS4wDQYJKoZIhvcNAQELBQADggEBAF24IFkQn1RedbTe pLwBTBawlw61+xPJj/NhjPKMb47fBZ2164ALLKMpL7sUvx4SOxrCUjrnBEGHBJ3l Q1oUSKmTgb1Gd513aZS0VPFJ57Qs93EjgZAEcP1wvwPwH/JXHAl+S/EvcNa+OzQm UQySacxlmazifTI+/Q8ogzPFOfiGnc2EBq4La4DINYkre/NpCgzlPTf0VOcVYl/v t3i6qd265Wj5kHF8yYiVdkqHJJvwpCEE0mhfJl/e4Ak9l3ZC+kG8UrYOcZnAjWcn so4oXneQTV0PIoBT1CylKsfqR6k5CuFVYDj653d9fGB9PR74P8XmXSPUyY+ddnzs aJJ3DlM= -----END CERTIFICATE-----Generated at Sat May 25 03:45:26 2024 by rpki-client on console-fra.rpki-client.org