$ rpki-client -vvf rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa File: FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa (raw, json) Hash identifier: I6vDZeTV0tO1kVtLGCaj1SwgxmJCQ+MVEeZJxjP4BeE= Subject key identifier: B4:80:96:01:5D:EA:97:5D:EF:EF:2E:40:4E:00:58:B9:72:52:9D:5C Certificate issuer: /CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F Certificate serial: 39 Authority key identifier: 2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa Signing time: Thu 01 Jun 2023 09:08:04 +0000 ROA not before: Thu 01 Jun 2023 09:08:04 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 10225 IP address blocks: 103.187.190.0/23 maxlen: 23 103.187.190.0/24 maxlen: 24 103.187.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F Validity Not Before: Jun 1 09:08:04 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64785ff3-a432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:35:67:e3:d9:c8:63:91:83:6a:2b:72:61: 0d:7b:70:cf:03:a2:a0:85:94:34:9f:2d:95:24:69: f1:d2:46:b6:88:38:40:33:48:c4:40:bd:1a:5e:6e: 97:ee:f3:11:39:83:0c:68:cf:7a:e1:d4:0c:4a:2b: 42:f5:cb:e0:b5:ca:c6:45:57:ad:3b:28:c5:12:22: de:b7:79:23:4c:f5:87:f3:8c:47:92:8a:96:51:ae: 05:4a:3f:54:27:fb:36:6a:38:84:19:8a:e8:68:46: 6a:e0:b1:1a:26:e9:ca:7b:e2:f9:d1:ab:d8:bc:7d: 91:b7:5f:cc:50:37:ae:78:c8:14:48:99:f8:da:53: 0d:f0:c7:a7:8d:56:4b:2b:92:ce:62:1d:50:81:05: d5:f8:67:6c:8a:40:ff:9e:3f:71:59:b3:10:c0:27: e5:4f:df:77:f3:2f:c9:d5:8b:18:f0:e9:83:a6:d4: 7b:54:81:7c:9f:b1:48:7b:f8:e5:38:21:4c:f2:b2: 59:cf:eb:74:07:dc:95:3b:98:5a:cd:d6:8e:31:af: 90:47:ed:ef:cd:92:52:4a:60:4b:3e:85:74:ae:eb: 71:c7:cf:b3:4d:52:16:c8:7c:57:3d:26:ed:50:3d: b3:94:ae:48:b7:20:43:d5:0a:9e:e4:bc:54:a9:8d: 6a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:80:96:01:5D:EA:97:5D:EF:EF:2E:40:4E:00:58:B9:72:52:9D:5C X509v3 Authority Key Identifier: keyid:2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.187.190.0/23 Signature Algorithm: sha256WithRSAEncryption 90:1c:6f:99:6d:6d:d5:18:14:a9:9c:15:46:9f:c9:bf:ef:0d: 7f:89:c3:ac:38:c7:6f:d8:8d:ab:cd:22:2e:7b:4f:8e:1a:f5: a6:2d:dd:13:64:05:67:b5:48:36:d8:53:43:6f:ab:a5:e5:cf: ab:51:a3:36:a8:fe:ce:61:00:3b:48:9e:4a:80:a9:04:1a:58: a9:af:5d:de:93:16:f9:3e:61:e5:18:7a:0d:0d:2a:85:59:aa: 06:03:f1:f5:61:07:b2:f7:79:71:32:69:d6:88:ac:d8:70:1a: 7e:4c:bb:5b:d6:d2:f8:16:82:9e:a3:4c:8b:64:12:fd:34:9e: 15:d5:04:e5:84:c1:a0:21:84:d5:5a:a5:66:c5:86:e1:a5:c6: 0b:81:03:b4:8f:fb:a9:ac:b8:35:f7:c6:35:68:ad:56:6d:98: 39:57:30:9d:a0:d3:d1:da:02:ca:7b:44:ab:c8:f8:93:7a:c0: 2a:e3:d3:99:47:5e:54:9b:40:31:5d:bb:55:aa:03:24:45:74: 3c:c1:6f:00:67:d3:4c:db:be:9c:18:fa:f5:54:42:45:ba:a3: 67:e1:25:4a:e7:09:5b:64:9a:2b:2f:c4:ca:ad:47:21:d4:a6: ee:31:3c:2e:e3:83:e4:3b:ea:11:4e:3e:ef:11:85:f3:22:32: de:5b:b3:f0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MTkyNzExMC8GA1UEBRMoMkE2OUQ2OTlGMTNDMDQxQkZEQTNEQUE1N0UyMUZGQUIz QzUzRUQ1RjAeFw0yMzA2MDEwOTA4MDRaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0Nzg1ZmYzLWE0MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC20TVn49nIY5GDaityYQ17cM8DoqCFlDSfLZUkafHSRraIOEAzSMRAvRpebpfu 8xE5gwxoz3rh1AxKK0L1y+C1ysZFV607KMUSIt63eSNM9YfzjEeSipZRrgVKP1Qn +zZqOIQZiuhoRmrgsRom6cp74vnRq9i8fZG3X8xQN654yBRImfjaUw3wx6eNVksr ks5iHVCBBdX4Z2yKQP+eP3FZsxDAJ+VP33fzL8nVixjw6YOm1HtUgXyfsUh7+OU4 IUzyslnP63QH3JU7mFrN1o4xr5BH7e/NklJKYEs+hXSu63HHz7NNUhbIfFc9Ju1Q PbOUrki3IEPVCp7kvFSpjWqZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUtICWAV3q l13v7y5ATgBYuXJSnVwwHwYDVR0jBBgwFoAUKmnWmfE8BBv9o9qlfiH/qzxT7V8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxOTI3L0ZEOEIyMkIwQkMy RjExRURBOEY3NjUzRUM0RjlBRTAyL0ttbldtZkU4QkJ2OW85cWxmaUhfcXp4VDdW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS21uV21mRThCQnY5bzlxbGZpSF9xenhUN1Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkyNy9GRDhCMjJCMEJDMkYxMUVEQThGNzY1M0VDNEY5QUUwMi9GRDQxRkM1RUVB NjgxMUVEQkUzRUUyM0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWe7vjANBgkqhkiG9w0BAQsFAAOCAQEAkBxvmW1t1RgUqZwV Rp/Jv+8Nf4nDrDjHb9iNq80iLntPjhr1pi3dE2QFZ7VINthTQ2+rpeXPq1GjNqj+ zmEAO0ieSoCpBBpYqa9d3pMW+T5h5Rh6DQ0qhVmqBgPx9WEHsvd5cTJp1ois2HAa fky7W9bS+BaCnqNMi2QS/TSeFdUE5YTBoCGE1VqlZsWG4aXGC4EDtI/7qay4NffG NWitVm2YOVcwnaDT0doCyntEq8j4k3rAKuPTmUdeVJtAMV27VaoDJEV0PMFvAGfT TNu+nBj69VRCRbqjZ+ElSucJW2SaKy/Eyq1HIdSm7jE8LuOD5DvqEU4+7xGF8yIy 3luz8A== -----END CERTIFICATE-----Generated at Tue May 7 06:29:48 2024 by rpki-client on console-ams.rpki-client.org