$ rpki-client -vvf rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C874A7C0058511ECA3212F6DC4F9AE02.roa File: C874A7C0058511ECA3212F6DC4F9AE02.roa (raw, json) Hash identifier: z49+u/e9Qzw0URRUJ5rYwV+x/vwulH5hlL/4ijR8w9c= Subject key identifier: 3F:57:BC:7F:48:14:60:D0:EA:E0:7A:39:36:67:87:26:49:50:4F:51 Certificate issuer: /CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5 Certificate serial: 0311 Authority key identifier: 64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C874A7C0058511ECA3212F6DC4F9AE02.roa Signing time: Wed 06 Jul 2022 02:11:00 +0000 ROA not before: Wed 06 Jul 2022 02:11:00 +0000 ROA not after: Sat 30 Sep 2023 00:00:00 +0000 asID: 399955 IP address blocks: 103.66.56.0/22 maxlen: 24 103.228.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.crl rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 May 2023 02:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 785 (0x311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5 Validity Not Before: Jul 6 02:11:00 2022 GMT Not After : Sep 30 00:00:00 2023 GMT Subject: CN=62c4ef33-3db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:63:76:2e:38:01:b4:fb:72:1e:60:7e:30: 65:82:cc:11:69:dc:99:a9:01:7f:0d:cf:65:cd:9c: 30:45:92:d6:9d:7c:aa:fe:d9:81:4d:5c:ad:b4:7c: 02:95:60:0a:9a:d4:d9:9b:23:0e:5c:6d:f3:23:6c: f9:f0:12:98:b8:19:f7:e1:71:34:18:0b:f9:89:8b: 29:11:d1:31:d4:dd:57:36:7a:75:06:38:2e:d1:3a: 57:c6:c3:03:df:9d:82:f4:60:69:1b:05:5b:dc:c1: 84:a6:9d:50:b9:c3:8b:15:c5:9e:ab:31:c0:28:c6: 86:30:58:02:c1:48:48:c4:33:cd:82:2c:9d:e2:ca: ad:22:b2:b7:0f:69:2d:7b:8f:a6:22:8b:7e:33:67: 12:7e:3f:13:d7:7f:a8:f9:63:2f:cc:4f:21:9e:c3: a1:cf:99:df:dd:02:ec:92:d7:15:04:c5:18:e0:30: 01:4c:ef:3c:e8:08:5a:58:ba:33:1d:57:3a:ef:91: 14:60:c7:50:03:73:9b:03:75:52:61:07:fa:95:dd: 76:95:0d:a3:88:13:9e:f1:79:df:53:83:25:f3:38: 27:f1:43:70:33:74:7c:a6:1a:b0:46:70:04:6c:ca: d6:21:a7:ff:b7:b0:20:53:ae:58:f7:ed:c3:23:99: 17:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:57:BC:7F:48:14:60:D0:EA:E0:7A:39:36:67:87:26:49:50:4F:51 X509v3 Authority Key Identifier: keyid:64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C874A7C0058511ECA3212F6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.56.0/22 103.228.168.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:e7:a0:f0:4e:5a:f5:99:7f:09:f7:a6:c4:8f:f8:04:c8:9b: 43:75:25:dc:aa:f0:10:51:1b:7f:b5:6d:ad:a1:90:e6:53:cc: d4:ea:27:b0:e7:1f:2e:f9:1d:cd:14:a1:07:42:2c:d5:73:13: 85:b6:fc:4c:a8:f8:5d:34:82:98:5c:dc:2b:89:98:73:7e:6e: 58:63:7a:d5:fb:ac:06:fa:70:94:e3:ee:52:7f:c5:a9:72:e9: fc:06:04:d0:15:08:0e:d2:4b:3d:31:c7:74:54:a9:97:78:b8: 8c:3b:31:f0:a3:e9:52:83:99:f9:53:dc:e7:7c:39:95:3c:9b: 50:1e:87:2a:6a:5b:5b:ac:f4:f5:a1:f9:1c:e8:0b:fd:44:47: d3:12:48:33:94:c3:53:ef:40:6a:f9:a4:6d:fa:6a:8c:b6:88: 76:c4:d0:10:9a:db:32:52:64:55:a8:59:a1:fd:79:45:b3:81: 35:b9:28:9a:4b:2f:3d:e5:43:c7:52:a8:b1:26:2a:50:5f:3c: ac:67:40:e6:3d:c1:07:44:df:3e:eb:6d:09:e9:4d:df:05:42: 70:dd:a1:56:cc:43:85:b3:9b:d0:be:07:22:63:51:37:f2:67: 4a:63:18:24:ee:03:48:c9:e3:4c:71:ee:78:74:a3:fb:e3:94: ff:04:92:bd -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2RjIxMTAvBgNVBAUTKDY0QjY4NkIwNURDQkU4QkVBOTI4MDc1MzJERTI5QTc3 OTA1MTU2RjUwHhcNMjIwNzA2MDIxMTAwWhcNMjMwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02MmM0ZWYzMy0zZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtT9jdi44AbT7ch5gfjBlgswRadyZqQF/Dc9lzZwwRZLWnXyq/tmBTVyttHwC lWAKmtTZmyMOXG3zI2z58BKYuBn34XE0GAv5iYspEdEx1N1XNnp1Bjgu0TpXxsMD 352C9GBpGwVb3MGEpp1QucOLFcWeqzHAKMaGMFgCwUhIxDPNgiyd4sqtIrK3D2kt e4+mIot+M2cSfj8T13+o+WMvzE8hnsOhz5nf3QLsktcVBMUY4DABTO886AhaWLoz HVc675EUYMdQA3ObA3VSYQf6ld12lQ2jiBOe8XnfU4Ml8zgn8UNwM3R8phqwRnAE bMrWIaf/t7AgU65Y9+3DI5kX0QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFD9XvH9I FGDQ6uB6OTZnhyZJUE9RMB8GA1UdIwQYMBaAFGS2hrBdy+i+qSgHUy3imneQUVb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzZGMi8yQkU0M0RBMENC MkMxMUVCQkMzNUM0NDBDNEY5QUUwMi9aTGFHc0YzTDZMNnBLQWRUTGVLYWQ1QlJW dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pMYUdzRjNMNkw2cEtBZFRMZUthZDVCUlZ2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc2RjIvMkJFNDNEQTBDQjJDMTFFQkJDMzVDNDQwQzRGOUFFMDIvQzg3NEE3QzAw NTg1MTFFQ0EzMjEyRjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnQjgDBAJn5KgwDQYJKoZIhvcNAQELBQADggEBAB/noPBO WvWZfwn3psSP+ATIm0N1Jdyq8BBRG3+1ba2hkOZTzNTqJ7DnHy75Hc0UoQdCLNVz E4W2/Eyo+F00gphc3CuJmHN+blhjetX7rAb6cJTj7lJ/xaly6fwGBNAVCA7SSz0x x3RUqZd4uIw7MfCj6VKDmflT3Od8OZU8m1AehypqW1us9PWh+RzoC/1ER9MSSDOU w1PvQGr5pG36aoy2iHbE0BCa2zJSZFWoWaH9eUWzgTW5KJpLLz3lQ8dSqLEmKlBf PKxnQOY9wQdE3z7rbQnpTd8FQnDdoVbMQ4Wzm9C+ByJjUTfyZ0pjGCTuA0jJ40xx 7nh0o/vjlP8Ekr0= -----END CERTIFICATE-----Generated at Wed May 3 13:18:08 2023 by rpki-client on console-ams.rpki-client.org