$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/7883418E943A11EBB6706530C4F9AE02.roa File: 7883418E943A11EBB6706530C4F9AE02.roa (raw, json) Hash identifier: JnE8YOt8k5stLHGvhUXv9i++NuiB7eRDBXg4yo9a9/8= Subject key identifier: C7:14:74:80:BC:C1:4F:65:7B:DD:9F:6C:F2:75:AE:B8:76:16:89:DC Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Certificate serial: 057F Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/7883418E943A11EBB6706530C4F9AE02.roa Signing time: Sat 03 Feb 2024 00:12:42 +0000 ROA not before: Sat 03 Feb 2024 00:12:42 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 141427 IP address blocks: 103.158.248.0/23 maxlen: 23 103.158.248.0/24 maxlen: 24 103.158.249.0/24 maxlen: 24 2001:df5:6d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Validity Not Before: Feb 3 00:12:42 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65bd84f9-05fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2e:43:10:ef:96:01:a7:ea:17:e5:66:e8:ca: f7:a2:8f:1c:bc:33:ea:52:a8:aa:01:bc:8a:9d:6a: 39:14:0d:52:f0:a7:cb:19:fb:03:f1:d9:ba:b8:7e: 2c:11:56:7c:e9:c5:74:42:2d:5e:9b:af:44:5f:9f: 96:fa:1c:a8:25:6c:a5:e1:f8:40:e7:d1:c3:e3:f9: 01:56:29:1c:e3:15:ee:cd:d0:72:4e:ae:30:6e:1f: 14:f6:c6:d7:74:2d:37:2c:d2:51:4c:00:29:2f:cb: ff:b3:e8:04:6c:08:83:7e:94:73:93:4b:ad:67:8f: c4:b9:48:bc:2e:97:44:80:4c:03:13:4a:83:e8:a2: cc:cb:01:53:a7:4f:3a:e2:e6:d6:f4:25:ea:1e:48: 0c:cb:bf:32:84:30:25:8f:13:42:9b:00:eb:7a:22: 62:36:73:b8:74:62:79:04:6d:a0:f2:8a:fd:05:6d: 86:29:8f:39:66:c3:5d:1f:22:ad:5e:86:b7:9b:82: c1:5c:71:d5:98:16:01:94:63:b4:87:d9:6d:26:f6: f0:d0:4f:54:68:d2:d2:96:a5:d3:f3:61:88:bf:61: 57:99:2c:8e:fe:7d:4f:e0:2f:a4:f9:24:81:dc:76: 2c:20:31:c4:fd:f7:85:ac:9b:49:a0:30:d4:81:64: 0c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:14:74:80:BC:C1:4F:65:7B:DD:9F:6C:F2:75:AE:B8:76:16:89:DC X509v3 Authority Key Identifier: keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/7883418E943A11EBB6706530C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.248.0/23 IPv6: 2001:df5:6d80::/48 Signature Algorithm: sha256WithRSAEncryption 64:98:9f:58:4f:e0:28:d7:4c:06:bc:d4:c9:de:fc:7e:18:2a: b5:7c:0b:4f:ea:49:80:ae:e1:51:42:45:94:6b:5f:34:c0:e7: fe:85:83:45:bd:39:90:a9:a9:66:c8:0e:a3:05:27:8f:21:5d: 41:0b:c3:31:a5:ef:ee:19:c8:5f:6b:b2:e0:a5:6a:62:83:5d: 9b:59:8b:79:4f:5e:9f:c3:fb:97:4e:ef:20:73:60:ea:2a:07: 3a:de:27:93:60:50:63:7c:41:66:bb:d9:a7:d6:20:df:5f:35: 37:9d:63:bd:f6:4c:78:85:7a:55:38:55:46:ff:9a:74:02:01: f2:cd:88:ab:24:fb:c8:e0:e0:59:66:ea:cc:a4:3e:ab:50:fc: 25:af:ea:aa:c1:ea:2f:b6:6a:9a:f8:9c:c4:0d:c2:b3:f1:79: 87:68:2e:a5:fa:ad:da:5c:4f:93:d9:ac:f3:60:d9:f5:13:93: bb:99:60:7a:4e:23:fb:cb:fe:58:b4:7b:37:3f:00:1f:0e:b4: ce:d4:a1:f0:5f:5f:83:d5:57:b2:59:53:7a:74:c7:c4:1c:96: e1:4e:04:6c:86:48:54:3f:22:be:be:9f:64:c6:1c:85:a4:10: f8:6b:e6:ce:bf:ff:ae:e8:87:be:0c:d9:ff:52:4b:00:2d:b4: 25:66:b7:73 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyRUQxMTAvBgNVBAUTKDI4NzUyOURDMjBDQTBFQ0U5NUE3QTU1NkUxMEJDREZE NzIzN0Q4RDgwHhcNMjQwMjAzMDAxMjQyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWJkODRmOS0wNWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4y5DEO+WAafqF+Vm6Mr3oo8cvDPqUqiqAbyKnWo5FA1S8KfLGfsD8dm6uH4s EVZ86cV0Qi1em69EX5+W+hyoJWyl4fhA59HD4/kBVikc4xXuzdByTq4wbh8U9sbX dC03LNJRTAApL8v/s+gEbAiDfpRzk0utZ4/EuUi8LpdEgEwDE0qD6KLMywFTp086 4ubW9CXqHkgMy78yhDAljxNCmwDreiJiNnO4dGJ5BG2g8or9BW2GKY85ZsNdHyKt Xoa3m4LBXHHVmBYBlGO0h9ltJvbw0E9UaNLSlqXT82GIv2FXmSyO/n1P4C+k+SSB 3HYsIDHE/feFrJtJoDDUgWQMmQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMcUdIC8 wU9le92fbPJ1rrh2FoncMB8GA1UdIwQYMBaAFCh1Kdwgyg7OlaelVuELzf1yN9jY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDJFRC8xNjdCQzYzQzdD MUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0RzNlZwNlZXNFF2Tl9YSTMy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIVXAzQ0RLRHM2VnA2Vlc0UXZOX1hJMzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjAyRUQvMTY3QkM2M0M3QzFCMTFFQjlGM0YzQzY1QzRGOUFFMDIvNzg4MzQxOEU5 NDNBMTFFQkI2NzA2NTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnvgwDwQCAAIwCQMHACABDfVtgDANBgkqhkiG9w0BAQsF AAOCAQEAZJifWE/gKNdMBrzUyd78fhgqtXwLT+pJgK7hUUJFlGtfNMDn/oWDRb05 kKmpZsgOowUnjyFdQQvDMaXv7hnIX2uy4KVqYoNdm1mLeU9en8P7l07vIHNg6ioH Ot4nk2BQY3xBZrvZp9Yg3181N51jvfZMeIV6VThVRv+adAIB8s2IqyT7yODgWWbq zKQ+q1D8Ja/qqsHqL7ZqmvicxA3Cs/F5h2gupfqt2lxPk9ms82DZ9ROTu5lgek4j +8v+WLR7Nz8AHw60ztSh8F9fg9VXsllTenTHxByW4U4EbIZIVD8ivr6fZMYchaQQ +Gvmzr//ruiHvgzZ/1JLAC20JWa3cw== -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-ams.rpki-client.org