$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/99191AA404E911EAA9C20A60C4F9AE02.roa File: 99191AA404E911EAA9C20A60C4F9AE02.roa (raw, json) Hash identifier: 1WethnxF/F05QSoIjAHFrflpjzsmzP2OzQZ710INxZY= Subject key identifier: 28:4F:94:59:7D:AF:E6:1E:A0:91:AA:9F:7B:61:2C:A9:FA:FD:B4:15 Certificate issuer: /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Certificate serial: 0AF8 Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/99191AA404E911EAA9C20A60C4F9AE02.roa Signing time: Sun 02 Jul 2023 19:05:44 +0000 ROA not before: Sun 02 Jul 2023 19:05:44 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 136165 IP address blocks: 103.77.224.0/24 maxlen: 24 103.100.107.0/24 maxlen: 24 103.249.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2808 (0xaf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Validity Not Before: Jul 2 19:05:44 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64a1ca88-b43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:75:0b:99:6c:6d:9f:ce:2d:20:62:3b:44: 67:d8:97:c6:11:15:10:45:60:88:2a:d9:9b:f9:c9: ae:a0:62:25:32:00:60:89:4e:f4:aa:68:e4:65:5a: a4:cb:d1:8f:94:e2:d2:a9:39:96:09:d0:46:e4:b7: 2b:24:cc:15:5d:68:87:c9:48:99:05:1c:11:0d:ce: 09:cb:1a:c9:65:9c:92:42:3e:26:73:6f:d9:42:d7: d4:ba:e6:1e:5d:5f:3c:f4:7f:9c:ba:ff:1d:43:b0: 18:de:e2:ea:e4:38:7c:c0:36:45:48:43:67:ac:a7: d8:b4:0a:57:7f:c2:45:53:b9:8e:03:47:f3:28:8a: 84:2d:91:d0:cc:52:af:6b:9c:61:0a:01:6d:c7:3e: f3:59:3f:33:40:cb:e1:27:55:64:28:c5:91:c2:72: a2:03:44:82:8e:69:89:d9:62:2e:44:c5:f7:22:85: 61:6f:29:f5:91:f6:8d:2a:3b:19:f5:3a:46:12:49: 30:f5:f1:21:df:f5:cb:9d:63:f4:6a:98:b7:5a:ba: bf:21:f3:61:ff:b5:44:ba:7e:46:e3:58:65:16:f5: e1:6a:28:4a:bc:30:cd:c7:59:43:6d:22:d8:44:3b: f6:15:44:cf:06:1d:8e:2e:20:e4:a0:63:74:32:5d: 9e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4F:94:59:7D:AF:E6:1E:A0:91:AA:9F:7B:61:2C:A9:FA:FD:B4:15 X509v3 Authority Key Identifier: keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/99191AA404E911EAA9C20A60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.77.224.0/24 103.100.107.0/24 103.249.71.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:cf:e5:43:a4:6f:e4:85:8b:84:2d:46:9a:aa:04:24:14:fb: 29:bf:02:c9:7a:65:53:8e:92:1d:75:a5:50:97:f5:e4:92:d2: fd:8a:f1:97:1f:45:eb:bc:99:0a:8a:10:3e:81:d5:24:8e:02: 7b:bc:0a:fe:4d:8f:cf:bc:e1:05:f5:19:b0:35:01:32:f0:89: ca:54:fb:52:2b:53:6d:de:1b:5c:34:55:ef:bf:34:e0:17:76: 4b:9a:17:9f:c9:2b:c1:be:33:d4:91:ed:67:2f:ab:5f:b9:b9: 78:6e:87:75:0b:c0:4b:82:e5:93:22:4a:12:78:ec:82:f5:1a: 49:0c:ba:b4:6b:0e:d9:b8:84:4c:ec:e8:28:0d:e0:3e:35:fc: e6:22:0f:d5:8d:3a:4b:e9:db:03:82:be:c1:26:e2:27:e1:4b: af:e7:8b:d2:e8:50:fa:11:53:2a:3a:d1:65:d5:f3:6e:1e:8b: 44:8b:0e:6b:a9:a4:79:44:07:1b:5f:77:ce:4e:ab:0d:17:a2: 92:0e:56:b5:cf:96:34:80:76:20:ee:26:0b:b2:af:7d:76:08: a7:3b:b2:65:a5:68:77:e2:ee:2d:59:84:8f:5a:cb:da:30:f1: 02:33:b2:5f:03:0d:99:10:1f:3c:ba:a7:e1:0f:af:7f:06:ec: 01:14:79:7c -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQkQxMTAvBgNVBAUTKDJFOUM5MUY0RTM5NEE0QUZBOTc2RDZCQzNGNjVERjJE OUYwNzlFQkQwHhcNMjMwNzAyMTkwNTQ0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGExY2E4OC1iNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTB1C5lsbZ/OLSBiO0Rn2JfGERUQRWCIKtmb+cmuoGIlMgBgiU70qmjkZVqk y9GPlOLSqTmWCdBG5LcrJMwVXWiHyUiZBRwRDc4JyxrJZZySQj4mc2/ZQtfUuuYe XV889H+cuv8dQ7AY3uLq5Dh8wDZFSENnrKfYtApXf8JFU7mOA0fzKIqELZHQzFKv a5xhCgFtxz7zWT8zQMvhJ1VkKMWRwnKiA0SCjmmJ2WIuRMX3IoVhbyn1kfaNKjsZ 9TpGEkkw9fEh3/XLnWP0api3Wrq/IfNh/7VEun5G41hlFvXhaihKvDDNx1lDbSLY RDv2FUTPBh2OLiDkoGN0Ml2etQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFChPlFl9 r+YeoJGqn3thLKn6/bQVMB8GA1UdIwQYMBaAFC6ckfTjlKSvqXbWvD9l3y2fB569 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCRC8yMEU4RjlBMDA0 RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBLLXBkdGE4UDJYZkxaOEhu cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xweVI5T09VcEstcGR0YThQMlhmTFo4SG5yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzFBQkQvMjBFOEY5QTAwNEU5MTFFQThEMjBFRTVGQzRGOUFFMDIvOTkxOTFBQTQw NEU5MTFFQUE5QzIwQTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnTeADBABnZGsDBABn+UcwDQYJKoZIhvcNAQELBQADggEB AC7P5UOkb+SFi4QtRpqqBCQU+ym/Asl6ZVOOkh11pVCX9eSS0v2K8ZcfReu8mQqK ED6B1SSOAnu8Cv5Nj8+84QX1GbA1ATLwicpU+1IrU23eG1w0Ve+/NOAXdkuaF5/J K8G+M9SR7Wcvq1+5uXhuh3ULwEuC5ZMiShJ47IL1GkkMurRrDtm4hEzs6CgN4D41 /OYiD9WNOkvp2wOCvsEm4ifhS6/ni9LoUPoRUyo60WXV824ei0SLDmuppHlEBxtf d85Oqw0XopIOVrXPljSAdiDuJguyr312CKc7smWlaHfi7i1ZhI9ay9ow8QIzsl8D DZkQHzy6p+EPr38G7AEUeXw= -----END CERTIFICATE-----Generated at Sat May 4 21:19:27 2024 by rpki-client on console-ams.rpki-client.org