$ rpki-client -vvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/AFF4E1F89EB711EC8210607DC4F9AE02.roa File: AFF4E1F89EB711EC8210607DC4F9AE02.roa (raw, json) Hash identifier: /TuZ9+B/iKL8Wdr/M4Xrg2SYzklBnsQLva2o/WSmeOQ= Subject key identifier: CB:D1:77:E2:C0:0D:DA:FF:25:81:6F:56:37:51:A7:2F:7E:30:AC:0E Certificate issuer: /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Certificate serial: 0277 Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/AFF4E1F89EB711EC8210607DC4F9AE02.roa Signing time: Sun 19 Nov 2023 03:04:51 +0000 ROA not before: Sun 19 Nov 2023 03:04:51 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 138678 IP address blocks: 103.144.0.0/24 maxlen: 24 103.144.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Validity Not Before: Nov 19 03:04:51 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65597b53-7b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8b:97:36:0b:18:fd:ca:00:99:c8:9a:ac:60: bb:54:7a:10:94:5b:68:c0:24:70:13:4c:dd:b0:7f: 79:df:68:80:ca:06:f7:72:33:2f:2d:b8:c9:6b:63: 7b:d3:11:09:c9:e3:3a:87:0b:fd:11:0a:4f:9a:13: 07:7f:d8:3d:b8:f0:ea:7e:0a:05:3b:6b:61:5f:a3: 9a:4b:a1:f4:61:65:b4:17:98:c1:b7:93:1d:8d:39: 4a:80:b8:06:5a:05:70:33:7f:56:c9:19:97:24:94: cf:ed:9a:21:af:2d:f3:0a:ca:b5:fd:1e:ca:e6:68: 93:d5:a0:1f:fd:9f:08:49:7e:3b:c5:3a:f3:01:87: ea:fc:44:7a:27:39:9d:3e:09:e3:b5:8f:15:6a:97: 13:5f:4c:4f:2e:d5:3c:ad:2c:6a:e3:df:4f:05:7b: 02:0d:16:3d:2b:d6:4f:1f:c7:68:74:03:69:e3:51: b3:15:39:60:3a:25:a7:8f:e5:56:f7:be:ce:47:0a: cc:c4:eb:20:8a:5e:7d:c1:42:aa:fb:d4:d3:a7:d2: e0:4a:c0:a4:25:cc:3e:2e:9f:2f:5f:ec:ad:0a:d1: e5:5d:0d:91:ef:1c:2a:30:86:9c:b1:53:3e:d0:84: 93:c1:3c:ef:e8:5a:a6:07:84:29:be:40:48:6a:67: b4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D1:77:E2:C0:0D:DA:FF:25:81:6F:56:37:51:A7:2F:7E:30:AC:0E X509v3 Authority Key Identifier: keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/AFF4E1F89EB711EC8210607DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.0.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:37:90:f9:85:4a:11:8e:61:63:49:64:53:d9:f4:95:94:8a: d8:19:47:61:20:49:9d:c3:9c:95:f1:c1:90:4c:34:c2:11:94: 11:89:3c:b2:63:24:50:00:98:00:df:44:d7:b4:9b:c3:27:83: f7:77:c4:8f:e1:cb:24:03:de:1f:8e:e1:d2:44:a7:ad:56:8a: 4f:6f:73:0f:e0:e1:6f:30:9e:b2:02:16:23:7f:8a:7d:f2:26: 7c:f5:62:ae:b5:86:93:04:1d:1d:71:29:eb:4a:f4:40:65:87: da:d3:c5:ee:29:bf:16:1d:7e:82:26:0a:13:be:13:3f:27:8f: cd:15:f2:b3:3b:9f:61:db:df:a2:09:e4:8c:57:53:ff:9b:14: e8:33:43:b4:dd:8e:00:fd:bb:44:fd:e4:32:56:fb:14:89:45: d8:1d:13:ad:10:d5:08:8a:17:31:4c:11:d8:30:db:e2:4e:fd: d2:63:c2:a1:61:5c:02:84:52:a6:a1:e7:9b:20:41:14:af:eb: 7c:df:e4:75:2e:27:73:a3:80:83:cf:e4:ce:36:ff:94:af:c9: 7a:19:ae:d1:8a:42:54:40:ea:f5:22:96:b5:51:40:96:2a:47: 90:31:29:a1:19:dd:8f:d2:91:23:a0:d4:81:c1:bd:2b:be:20: 0f:e0:db:a8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1QjkxMTAvBgNVBAUTKEMyQTJFQjRDRjkxMDI3NzhBNDJFMTVDQ0QyMEE1ODRF RENFREMyNzIwHhcNMjMxMTE5MDMwNDUxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTU5N2I1My03YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4uXNgsY/coAmciarGC7VHoQlFtowCRwE0zdsH9532iAygb3cjMvLbjJa2N7 0xEJyeM6hwv9EQpPmhMHf9g9uPDqfgoFO2thX6OaS6H0YWW0F5jBt5MdjTlKgLgG WgVwM39WyRmXJJTP7Zohry3zCsq1/R7K5miT1aAf/Z8ISX47xTrzAYfq/ER6Jzmd PgnjtY8VapcTX0xPLtU8rSxq499PBXsCDRY9K9ZPH8dodANp41GzFTlgOiWnj+VW 977ORwrMxOsgil59wUKq+9TTp9LgSsCkJcw+Lp8vX+ytCtHlXQ2R7xwqMIacsVM+ 0ISTwTzv6FqmB4QpvkBIame0jQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMvRd+LA Ddr/JYFvVjdRpy9+MKwOMB8GA1UdIwQYMBaAFMKi60z5ECd4pC4VzNIKWE7c7cJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjVCOS83NDVENzcwMjlF QjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUozaWtMaFhNMGdwWVR0enR3 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dxTHJUUGtRSjNpa0xoWE0wZ3BZVHR6dHduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzY1QjkvNzQ1RDc3MDI5RUI0MTFFQ0JGMEUxNDc3QzRGOUFFMDIvQUZGNEUxRjg5 RUI3MTFFQzgyMTA2MDdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnkAAwDQYJKoZIhvcNAQELBQADggEBAE03kPmFShGOYWNJ ZFPZ9JWUitgZR2EgSZ3DnJXxwZBMNMIRlBGJPLJjJFAAmADfRNe0m8Mng/d3xI/h yyQD3h+O4dJEp61Wik9vcw/g4W8wnrICFiN/in3yJnz1Yq61hpMEHR1xKetK9EBl h9rTxe4pvxYdfoImChO+Ez8nj80V8rM7n2Hb36IJ5IxXU/+bFOgzQ7TdjgD9u0T9 5DJW+xSJRdgdE60Q1QiKFzFMEdgw2+JO/dJjwqFhXAKEUqah55sgQRSv63zf5HUu J3OjgIPP5M42/5SvyXoZrtGKQlRA6vUilrVRQJYqR5AxKaEZ3Y/SkSOg1IHBvSu+ IA/g26g= -----END CERTIFICATE-----Generated at Tue May 21 04:10:44 2024 by rpki-client on console-fra.rpki-client.org