$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/39FCB4EC4F4E11EDB169BF33C4F9AE02.roa File: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (raw, json) Hash identifier: rFO46GYscxwwtDgi0BfU6cPl0G3bTppvMjDr7alnCuA= Subject key identifier: 57:80:55:46:E8:33:F3:49:73:C7:4A:73:B7:31:36:1E:AD:BB:2A:D7 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 016D Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/39FCB4EC4F4E11EDB169BF33C4F9AE02.roa Signing time: Wed 29 Nov 2023 04:14:53 +0000 ROA not before: Wed 29 Nov 2023 04:14:53 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 212238 IP address blocks: 103.102.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 04:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: Nov 29 04:14:53 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6566babd-7d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:44:aa:32:70:64:48:82:d3:71:69:75:1e: 9c:78:f1:e5:84:d6:63:18:fe:21:7c:13:71:19:b6: 13:53:68:0a:06:0e:2e:41:13:30:42:3e:89:02:b6: 7b:a4:5d:c3:46:0b:0b:10:da:e5:17:ed:56:4b:fb: db:f9:fc:b2:34:2e:54:7b:45:dc:92:9e:6b:39:b2: 9b:34:c7:d1:bc:2c:fa:0d:fb:c7:2f:b3:eb:79:83: 3a:22:1f:d9:26:3a:76:56:1b:4c:ee:42:2b:21:43: c9:a7:a5:2f:3d:c4:3d:7c:af:5f:c1:4d:23:30:2f: 64:c1:55:f9:e0:00:5a:0c:a3:f3:46:fa:d6:ec:5d: 2f:a3:6e:df:c4:83:a0:32:c5:5f:8b:34:9b:48:23: 12:5e:04:1a:47:be:da:93:78:84:30:4d:9a:98:6d: c1:49:70:26:5e:27:65:70:1c:cb:95:6f:57:6c:9d: f1:07:55:fc:4e:0f:22:6e:e9:8e:5d:3b:9c:e0:8c: a1:db:52:74:62:75:36:82:d6:8b:89:c5:b0:9e:64: e9:27:5d:61:4c:e6:40:bd:3b:f0:26:02:59:57:4c: 3d:09:e3:05:81:3a:b6:3d:c5:4f:0c:7a:7d:07:7b: 7c:e0:d2:46:c5:5f:c2:1e:af:57:8c:fb:85:f3:3f: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:80:55:46:E8:33:F3:49:73:C7:4A:73:B7:31:36:1E:AD:BB:2A:D7 X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/39FCB4EC4F4E11EDB169BF33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.127.0/24 Signature Algorithm: sha256WithRSAEncryption a0:59:ac:00:5b:41:c8:c1:47:5b:7d:fd:1b:9f:2a:2f:cd:1a: 3c:a4:d4:27:e7:a7:33:f1:db:5b:18:1e:d3:69:4c:22:85:c7: fe:9a:d4:70:37:a6:81:26:73:87:32:32:8e:fc:e1:95:3b:00: 37:48:bf:86:cd:8f:a8:30:d4:6d:74:71:76:8a:a2:f8:09:cc: a3:1a:69:f9:e1:c3:bc:32:a3:14:6e:30:ff:0b:36:3b:fb:2d: ff:2b:91:12:71:a1:89:3e:3a:92:f1:7b:1f:dd:d7:e8:9c:62: 3a:7a:c7:32:1c:a7:be:61:4d:55:30:8a:5f:54:18:8e:26:72: 18:0a:ac:ee:00:10:a7:35:d2:98:06:5c:e2:62:3d:df:63:04: 19:13:65:27:f1:e8:a0:fc:6a:97:76:5f:5b:7f:49:38:40:02: 20:eb:7e:d3:02:51:b4:01:3a:b3:ed:88:b3:c0:ed:6d:57:18: cc:27:e8:2b:ac:05:40:3a:76:ef:d4:2d:d0:1f:a1:2e:9d:a6: 47:38:15:24:9f:1e:a4:5f:b7:61:81:ca:7d:3a:95:91:11:42: 39:7f:d9:0f:25:8a:19:9e:a1:05:d4:b7:79:99:d0:6f:a8:d4: 2e:54:b2:49:9f:2c:6a:60:f4:8a:d6:b9:e0:ac:69:59:a9:d6: 4c:9c:f6:72 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjMxMTI5MDQxNDUzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY2YmFiZC03ZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IpEqjJwZEiC03FpdR6cePHlhNZjGP4hfBNxGbYTU2gKBg4uQRMwQj6JArZ7 pF3DRgsLENrlF+1WS/vb+fyyNC5Ue0Xckp5rObKbNMfRvCz6DfvHL7PreYM6Ih/Z Jjp2VhtM7kIrIUPJp6UvPcQ9fK9fwU0jMC9kwVX54ABaDKPzRvrW7F0vo27fxIOg MsVfizSbSCMSXgQaR77ak3iEME2amG3BSXAmXidlcBzLlW9XbJ3xB1X8Tg8ibumO XTuc4Iyh21J0YnU2gtaLicWwnmTpJ11hTOZAvTvwJgJZV0w9CeMFgTq2PcVPDHp9 B3t84NJGxV/CHq9XjPuF8z/HKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFeAVUbo M/NJc8dKc7cxNh6tuyrXMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgwRDIvRUJDMUFDMkMxODRGMTFFREFEQkMzQzY1QzRGOUFFMDIvMzlGQ0I0RUM0 RjRFMTFFREIxNjlCRjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnZn8wDQYJKoZIhvcNAQELBQADggEBAKBZrABbQcjBR1t9 /RufKi/NGjyk1CfnpzPx21sYHtNpTCKFx/6a1HA3poEmc4cyMo784ZU7ADdIv4bN j6gw1G10cXaKovgJzKMaafnhw7wyoxRuMP8LNjv7Lf8rkRJxoYk+OpLxex/d1+ic Yjp6xzIcp75hTVUwil9UGI4mchgKrO4AEKc10pgGXOJiPd9jBBkTZSfx6KD8apd2 X1t/SThAAiDrftMCUbQBOrPtiLPA7W1XGMwn6CusBUA6du/ULdAfoS6dpkc4FSSf HqRft2GByn06lZERQjl/2Q8lihmeoQXUt3mZ0G+o1C5UskmfLGpg9IrWueCsaVmp 1kyc9nI= -----END CERTIFICATE-----Generated at Tue Apr 23 18:42:51 2024 by rpki-client on console-ams.rpki-client.org