$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/0204FD5A2E5311EC9FD3C928C4F9AE02.roa File: 0204FD5A2E5311EC9FD3C928C4F9AE02.roa (raw, json) Hash identifier: 7PE7DYYa7meRaR1aaNr3FRKTsIxNAK1UDss4nQGKt8k= Subject key identifier: 23:66:5A:A4:41:FC:C6:18:A3:B3:CB:3B:5F:09:DC:C0:00:6E:A0:A0 Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Certificate serial: 0397 Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/0204FD5A2E5311EC9FD3C928C4F9AE02.roa Signing time: Thu 16 Nov 2023 06:42:25 +0000 ROA not before: Thu 16 Nov 2023 06:42:25 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 17483 IP address blocks: 103.73.220.0/24 maxlen: 24 103.73.221.0/24 maxlen: 24 103.73.222.0/24 maxlen: 24 103.73.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 02:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 919 (0x397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Validity Not Before: Nov 16 06:42:25 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6555b9d1-4a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:66:2e:7c:b4:64:76:93:a4:ad:7e:a9:9a:6d: 3e:d3:e4:9d:e3:fc:95:2b:ca:5f:7f:da:a3:d6:12: 06:72:44:3b:54:ef:89:fd:e5:df:03:60:15:d8:dc: bf:be:64:69:de:99:87:ba:e1:46:59:d4:83:48:36: 88:13:c6:ec:b4:eb:10:f6:6d:64:ac:ac:77:34:13: 7a:52:35:a8:95:8a:57:54:a4:bd:b4:95:04:f8:e0: ca:aa:9f:60:f7:61:53:ff:e2:ef:0f:00:f3:c7:92: a3:af:a5:1a:92:ad:2d:7f:7a:e0:0f:d4:bc:ec:3b: 19:df:16:82:51:c6:63:05:b2:da:25:23:f8:53:67: 2f:1b:db:56:cc:18:72:c7:18:9b:30:f5:41:dd:1c: b6:f5:58:df:b6:e7:49:31:38:b3:1c:37:63:1c:93: 5a:2a:11:9e:47:7a:08:8f:78:ac:85:39:78:5f:65: d2:ba:63:86:5d:47:d1:98:59:18:19:69:78:10:b4: 33:d8:b7:9c:f9:dc:88:c2:ca:14:df:cd:71:56:cf: 4d:94:d8:80:27:6b:58:c6:88:a5:31:95:b6:44:d7: 3b:80:64:7f:4d:0f:de:36:0b:6a:c4:bd:7e:14:04: 02:d7:18:88:a7:eb:e1:a9:7a:05:10:25:fd:09:ed: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:66:5A:A4:41:FC:C6:18:A3:B3:CB:3B:5F:09:DC:C0:00:6E:A0:A0 X509v3 Authority Key Identifier: keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/0204FD5A2E5311EC9FD3C928C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.220.0/22 Signature Algorithm: sha256WithRSAEncryption 67:94:4d:12:57:01:ec:a4:38:05:13:d8:b5:97:be:5a:ee:dc: c0:95:7e:9d:dc:a8:2e:ae:99:6a:45:45:14:21:ec:35:1d:08: 8b:6b:0a:95:5f:c0:58:6f:3a:86:35:a2:1c:b2:d1:50:0e:18: aa:f8:53:54:cd:40:c7:60:cf:a5:2a:ca:34:6a:fb:20:3b:9e: ab:de:99:7d:91:d0:42:3a:78:11:bd:47:92:ea:3d:48:6a:5c: 7c:5b:9d:bb:2c:c7:4f:d7:97:71:65:3f:8d:b9:73:1b:46:b3: 85:b3:db:c8:14:d7:ef:8d:03:f4:95:32:ae:3a:42:5c:d5:d3: f7:d2:aa:32:85:cf:92:13:ee:e2:34:bb:51:e5:f3:cf:3e:17: 2b:e3:05:cd:76:8d:94:be:fc:61:4a:a8:88:65:b4:0c:0d:c5: e7:91:2b:57:4e:54:64:1c:c3:72:89:9a:c5:9f:55:80:6a:6e: e0:93:56:d3:9c:84:58:b1:4c:e3:98:ce:9b:a7:91:e3:38:02: ac:89:58:0e:37:37:5b:e7:6b:eb:ef:ba:64:3d:d6:ce:82:5c: e2:3b:d3:79:c3:51:41:93:c3:58:8e:61:08:2b:9a:be:b2:09: 9e:f5:4d:97:c3:e1:02:31:74:00:92:a9:db:68:cd:c9:65:36: 39:84:42:01 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew OTA2RkVEODIwHhcNMjMxMTE2MDY0MjI1WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTU1YjlkMS00YTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2YufLRkdpOkrX6pmm0+0+Sd4/yVK8pff9qj1hIGckQ7VO+J/eXfA2AV2Ny/ vmRp3pmHuuFGWdSDSDaIE8bstOsQ9m1krKx3NBN6UjWolYpXVKS9tJUE+ODKqp9g 92FT/+LvDwDzx5Kjr6Uakq0tf3rgD9S87DsZ3xaCUcZjBbLaJSP4U2cvG9tWzBhy xxibMPVB3Ry29VjftudJMTizHDdjHJNaKhGeR3oIj3ishTl4X2XSumOGXUfRmFkY GWl4ELQz2Lec+dyIwsoU381xVs9NlNiAJ2tYxoilMZW2RNc7gGR/TQ/eNgtqxL1+ FAQC1xiIp+vhqXoFECX9Ce0cpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCNmWqRB /MYYo7PLO18J3MAAbqCgMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg4RDQvMkY1OEU0NzIyRTUwMTFFQ0EwNEI2QzI1QzRGOUFFMDIvMDIwNEZENUEy RTUzMTFFQzlGRDNDOTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnSdwwDQYJKoZIhvcNAQELBQADggEBAGeUTRJXAeykOAUT 2LWXvlru3MCVfp3cqC6umWpFRRQh7DUdCItrCpVfwFhvOoY1ohyy0VAOGKr4U1TN QMdgz6UqyjRq+yA7nqvemX2R0EI6eBG9R5LqPUhqXHxbnbssx0/Xl3FlP425cxtG s4Wz28gU1++NA/SVMq46QlzV0/fSqjKFz5IT7uI0u1Hl888+FyvjBc12jZS+/GFK qIhltAwNxeeRK1dOVGQcw3KJmsWfVYBqbuCTVtOchFixTOOYzpunkeM4AqyJWA43 N1vna+vvumQ91s6CXOI703nDUUGTw1iOYQgrmr6yCZ71TZfD4QIxdACSqdtozcll NjmEQgE= -----END CERTIFICATE-----Generated at Wed May 15 03:49:56 2024 by rpki-client on console-fra.rpki-client.org