$ rpki-client -vvf rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/E4E3EAE2072811EDBA8A9D59C4F9AE02.roa File: E4E3EAE2072811EDBA8A9D59C4F9AE02.roa (raw, json) Hash identifier: LLNeZrW3CBCVXy28BfWv8VsAowPVfQUoEN7dlZ1GLmI= Subject key identifier: A0:9F:4B:FB:CB:90:BE:59:1B:3F:0D:BD:B9:03:C0:58:34:F0:69:22 Certificate issuer: /CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B Certificate serial: 1344 Authority key identifier: D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/E4E3EAE2072811EDBA8A9D59C4F9AE02.roa Signing time: Tue 06 Jun 2023 18:27:07 +0000 ROA not before: Tue 06 Jun 2023 18:27:07 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 140096 IP address blocks: 103.116.72.0/23 maxlen: 24 103.116.74.0/24 maxlen: 24 2402:f740:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jul 2023 17:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4932 (0x1344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B Validity Not Before: Jun 6 18:27:07 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=647f7a7a-8ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:21:85:2d:00:3f:0e:b7:8d:3c:39:87:83: 42:6b:62:10:15:b5:4b:09:43:d3:c0:b0:46:ec:d5: 0a:9a:87:53:63:b0:e6:52:e6:c0:7c:cb:cd:d8:f6: bd:f9:ae:ec:b4:cd:75:ed:7d:33:40:12:8a:16:37: 46:22:b6:25:95:ee:81:ff:1d:e1:37:f6:61:2b:bc: bc:47:8b:d5:2d:1b:ca:45:04:17:5b:68:80:5e:63: 06:05:3f:0f:fb:86:b5:bb:fd:9e:68:aa:13:8b:bb: 87:4f:62:20:62:e6:e3:ae:e9:25:d5:7d:b8:69:42: a9:4f:75:7f:4c:44:c2:62:36:98:e5:79:6b:27:ef: 28:02:8a:61:d3:f7:bd:b2:b0:34:dc:88:97:af:2a: 0b:3a:5b:a1:42:0e:8e:6c:3f:90:28:b7:3d:d2:e4: 5c:58:b8:61:fb:24:09:b7:3c:57:e2:83:1b:18:3d: 92:b5:82:da:a7:81:a9:20:ca:b6:23:d1:81:cd:ab: 20:20:e9:f9:52:9a:e7:e1:b3:48:2e:9b:12:58:fe: bd:9d:51:27:e1:f4:81:f4:15:4e:2b:e9:fb:7d:2a: 0a:db:3c:85:ff:5b:a3:25:75:cd:00:be:a6:e9:1a: 40:1e:22:85:e7:80:9b:06:8b:d4:b1:79:56:10:ee: 4a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9F:4B:FB:CB:90:BE:59:1B:3F:0D:BD:B9:03:C0:58:34:F0:69:22 X509v3 Authority Key Identifier: keyid:D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/E4E3EAE2072811EDBA8A9D59C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.72.0-103.116.74.255 IPv6: 2402:f740:2000::/36 Signature Algorithm: sha256WithRSAEncryption a4:fe:90:eb:11:c0:0e:fe:4d:59:c3:c2:e3:87:a6:67:ff:0d: 81:37:61:c5:6a:de:71:bc:d1:40:2b:a6:96:e9:db:fd:47:35: ae:47:33:7b:5f:74:c2:26:ea:10:e5:e4:92:98:6d:e6:ed:15: dd:79:a8:b0:57:b7:ce:b5:d9:08:95:7a:b6:a6:83:8e:69:f8: 0e:e2:59:3b:52:4f:8d:f4:91:d3:ca:e7:00:a2:24:f2:d0:34: c5:94:24:02:6e:7e:d5:c6:4e:9c:33:a0:ff:9a:46:79:c7:ba: 49:9c:d3:38:4e:98:94:f3:ef:37:92:2e:d2:10:44:b6:64:59: 5b:99:0e:30:11:28:f4:55:c3:4d:a6:0f:3a:f0:07:a1:13:5e: 4d:99:c3:1f:17:cb:25:3c:98:be:4f:2d:1c:d1:f9:10:26:ba: ed:6e:ce:b8:c3:29:f3:74:c9:a2:98:91:3b:25:e4:e7:e3:aa: 76:19:7b:a1:24:c0:e5:ef:b1:e2:b7:a4:53:8e:2b:60:3d:91: 4c:4f:94:d9:9b:38:f2:21:dc:25:6b:d4:1d:02:18:90:ca:7a: 9b:78:7d:50:ca:fd:c3:96:bc:a5:f9:b1:80:fb:d8:da:64:c9: 36:ae:22:8f:e9:6f:6d:2f:c0:a6:6b:fc:33:20:82:b2:39:f5: 62:82:82:e1 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICE0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3QUYxMTAvBgNVBAUTKEQ4MEZBOUZBODQxMjU1RDVCREE3MkU1MkVDMDRGREZF RDdGRTJENUIwHhcNMjMwNjA2MTgyNzA3WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdmN2E3YS04ZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYMhhS0APw63jTw5h4NCa2IQFbVLCUPTwLBG7NUKmodTY7DmUubAfMvN2Pa9 +a7stM117X0zQBKKFjdGIrYlle6B/x3hN/ZhK7y8R4vVLRvKRQQXW2iAXmMGBT8P +4a1u/2eaKoTi7uHT2IgYubjrukl1X24aUKpT3V/TETCYjaY5XlrJ+8oAoph0/e9 srA03IiXryoLOluhQg6ObD+QKLc90uRcWLhh+yQJtzxX4oMbGD2StYLap4GpIMq2 I9GBzasgIOn5Uprn4bNILpsSWP69nVEn4fSB9BVOK+n7fSoK2zyF/1ujJXXNAL6m 6RpAHiKF54CbBovUsXlWEO5KIQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKCfS/vL kL5ZGz8NvbkDwFg08GkiMB8GA1UdIwQYMBaAFNgPqfqEElXVvacuUuwE/f7X/i1b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdBRi81NzlBOEJDMDY4 NjAxMUU4QUFCMTI1MUZDNEY5QUUwMi8yQS1wLW9RU1ZkVzlweTVTN0FUOV90Zi1M VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBLXAtb1FTVmRXOXB5NVM3QVQ5X3RmLUxWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI3QUYvNTc5QThCQzA2ODYwMTFFOEFBQjEyNTFGQzRGOUFFMDIvRTRFM0VBRTIw NzI4MTFFREJBOEE5RDU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMBQEAgABMA4wDAMEA2d0SAMEAGd0SjAOBAIAAjAIAwYEJAL3QCAwDQYJKoZI hvcNAQELBQADggEBAKT+kOsRwA7+TVnDwuOHpmf/DYE3YcVq3nG80UArppbp2/1H Na5HM3tfdMIm6hDl5JKYbebtFd15qLBXt8612QiVeramg45p+A7iWTtST430kdPK 5wCiJPLQNMWUJAJuftXGTpwzoP+aRnnHukmc0zhOmJTz7zeSLtIQRLZkWVuZDjAR KPRVw02mDzrwB6ETXk2Zwx8XyyU8mL5PLRzR+RAmuu1uzrjDKfN0yaKYkTsl5Ofj qnYZe6EkwOXvseK3pFOOK2A9kUxPlNmbOPIh3CVr1B0CGJDKept4fVDK/cOWvKX5 sYD72NpkyTauIo/pb20vwKZr/DMggrI59WKCguE= -----END CERTIFICATE-----Generated at Wed Jul 19 22:33:42 2023 by rpki-client on console-fra.rpki-client.org