$ rpki-client -vvf rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C9FE370ECB4D11EB8EE48035C4F9AE02.roa File: C9FE370ECB4D11EB8EE48035C4F9AE02.roa (raw, json) Hash identifier: TyLHpZxtrsbvNAjuHbPVOkbwAxDeJrj6EAR9jI37KvE= Subject key identifier: 83:00:6E:F3:84:E0:9A:E2:E2:68:05:0C:B4:A5:B9:38:D1:71:A8:42 Certificate issuer: /CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5 Certificate serial: 0462 Authority key identifier: 64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C9FE370ECB4D11EB8EE48035C4F9AE02.roa Signing time: Tue 01 Aug 2023 01:01:52 +0000 ROA not before: Tue 01 Aug 2023 01:01:52 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 139640 IP address blocks: 103.66.56.0/22 maxlen: 24 103.228.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.crl rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5 Validity Not Before: Aug 1 01:01:52 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c85980-6cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:7b:d7:4d:ab:cd:8a:5a:54:94:91:85:bc: 0c:41:16:18:b3:47:45:df:d3:d6:29:d4:18:94:33: d9:9c:15:b0:2a:d1:d2:a1:36:75:7f:69:84:2a:72: fd:69:c6:9a:c7:99:46:43:10:79:1a:dd:de:41:2c: f8:59:1b:b3:56:c2:6c:c3:86:31:b6:cd:8e:7d:16: c6:f8:91:49:8e:69:ae:5a:35:8f:c9:05:d5:81:85: df:7d:c4:3e:84:28:70:d9:c4:8c:8d:f4:92:0e:3a: 37:6a:47:c5:51:b1:43:9f:45:0f:9c:a2:05:b8:f8: b4:c5:60:43:22:26:22:d5:00:45:2b:a0:5f:6c:a0: 23:c5:dc:1f:8d:ae:bf:53:72:14:05:a6:5f:59:05: e5:25:75:ae:e3:9d:ec:0a:49:bc:4a:2a:09:01:8c: 94:e4:eb:c7:0e:5b:e6:de:0b:82:a6:7f:30:99:b1: d1:22:a3:60:ee:90:8a:43:79:33:b2:20:0a:a3:63: ef:df:93:11:b3:33:59:63:5f:a9:7c:49:cf:58:3a: 35:49:46:c2:9c:1c:12:e6:73:e5:0e:b7:a1:2a:4e: 78:34:de:7b:80:42:bb:be:66:31:3a:44:09:95:8e: a2:20:54:98:af:25:55:e2:a0:f2:2e:cc:93:af:5f: d3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:00:6E:F3:84:E0:9A:E2:E2:68:05:0C:B4:A5:B9:38:D1:71:A8:42 X509v3 Authority Key Identifier: keyid:64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C9FE370ECB4D11EB8EE48035C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.56.0/22 103.228.168.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:b9:a2:0e:69:18:f1:b2:e8:51:90:01:7c:6c:ee:b3:c2:7c: 21:c3:9d:13:4a:16:cc:c3:7a:2e:ee:43:02:ba:c2:fc:6f:0a: 15:48:88:eb:20:38:58:34:6e:8c:00:f9:53:60:fc:9b:6e:cd: 0f:cf:4d:a1:60:c4:51:9c:19:5e:99:9f:f0:db:02:74:c1:0c: 21:95:62:05:55:30:6c:da:ee:b4:2f:43:77:84:8e:c8:11:09: 4a:81:35:6c:0e:eb:f9:a1:ba:f0:cd:ef:8e:99:67:39:04:0a: d6:e6:4f:d7:ef:a2:f2:a4:c0:4c:cf:2a:8c:df:72:c7:c9:f8: b0:91:90:a2:37:a3:4e:14:b0:3a:24:29:ce:8b:4d:90:d7:47: 90:04:21:d5:06:e8:2a:61:40:3b:db:ac:36:2c:8e:db:29:e3: 4e:0e:af:68:1b:a1:e3:ef:b7:10:f1:ec:d7:49:d3:7d:1a:6c: 4f:d5:16:dc:79:e4:9d:66:b1:6a:38:d2:5a:85:dd:f9:13:7c: f0:bd:9a:31:db:b5:d3:6f:13:37:38:78:12:78:b4:47:c2:33: 28:3d:2a:f7:c2:12:b4:28:88:a4:58:f5:46:ca:b6:e0:c6:ce: a7:64:69:e2:f9:46:05:c8:fb:bc:08:aa:0d:0f:85:98:f1:de: 11:77:bb:64 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2RjIxMTAvBgNVBAUTKDY0QjY4NkIwNURDQkU4QkVBOTI4MDc1MzJERTI5QTc3 OTA1MTU2RjUwHhcNMjMwODAxMDEwMTUyWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGM4NTk4MC02Y2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkF7102rzYpaVJSRhbwMQRYYs0dF39PWKdQYlDPZnBWwKtHSoTZ1f2mEKnL9 acaax5lGQxB5Gt3eQSz4WRuzVsJsw4Yxts2OfRbG+JFJjmmuWjWPyQXVgYXffcQ+ hChw2cSMjfSSDjo3akfFUbFDn0UPnKIFuPi0xWBDIiYi1QBFK6BfbKAjxdwfja6/ U3IUBaZfWQXlJXWu453sCkm8SioJAYyU5OvHDlvm3guCpn8wmbHRIqNg7pCKQ3kz siAKo2Pv35MRszNZY1+pfEnPWDo1SUbCnBwS5nPlDrehKk54NN57gEK7vmYxOkQJ lY6iIFSYryVV4qDyLsyTr1/THQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIMAbvOE 4Jri4mgFDLSluTjRcahCMB8GA1UdIwQYMBaAFGS2hrBdy+i+qSgHUy3imneQUVb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzZGMi8yQkU0M0RBMENC MkMxMUVCQkMzNUM0NDBDNEY5QUUwMi9aTGFHc0YzTDZMNnBLQWRUTGVLYWQ1QlJW dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pMYUdzRjNMNkw2cEtBZFRMZUthZDVCUlZ2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc2RjIvMkJFNDNEQTBDQjJDMTFFQkJDMzVDNDQwQzRGOUFFMDIvQzlGRTM3MEVD QjREMTFFQjhFRTQ4MDM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnQjgDBAJn5KgwDQYJKoZIhvcNAQELBQADggEBAD65og5p GPGy6FGQAXxs7rPCfCHDnRNKFszDei7uQwK6wvxvChVIiOsgOFg0bowA+VNg/Jtu zQ/PTaFgxFGcGV6Zn/DbAnTBDCGVYgVVMGza7rQvQ3eEjsgRCUqBNWwO6/mhuvDN 746ZZzkECtbmT9fvovKkwEzPKozfcsfJ+LCRkKI3o04UsDokKc6LTZDXR5AEIdUG 6CphQDvbrDYsjtsp404Or2gboePvtxDx7NdJ030abE/VFtx55J1msWo40lqF3fkT fPC9mjHbtdNvEzc4eBJ4tEfCMyg9KvfCErQoiKRY9UbKtuDGzqdkaeL5RgXI+7wI qg0PhZjx3hF3u2Q= -----END CERTIFICATE-----Generated at Sun May 5 02:13:01 2024 by rpki-client on console-ams.rpki-client.org