$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa File: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (raw, json) Hash identifier: 3wfHJkQJq7BbqeUmywofZ0MsnnQpJ3mY5CnT0Sqh690= Subject key identifier: 76:1B:C8:C6:00:E7:AF:4D:12:4C:10:62:8C:F9:C3:AF:13:2D:4C:0F Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4 Certificate serial: 0A6D Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa Signing time: Fri 30 Jun 2023 19:39:49 +0000 ROA not before: Fri 30 Jun 2023 19:39:49 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 131270 IP address blocks: 103.68.160.0/22 maxlen: 24 103.232.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2669 (0xa6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4 Validity Not Before: Jun 30 19:39:49 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=649f2f85-d426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:b7:0c:2c:ed:73:0f:0c:f8:8b:4d:b2:0c: 0a:23:10:4a:d9:c3:d9:51:ae:ca:43:5d:fc:76:23: 55:3e:c7:bb:f1:99:41:7d:fb:db:99:fb:56:5e:0b: bd:5d:12:56:2d:81:bf:1a:fa:2b:68:33:e2:b9:6b: e0:54:f3:0d:66:08:de:e3:6e:b1:34:27:7a:0d:fa: a1:e5:6e:5b:5a:21:fa:43:fb:53:27:ec:fe:0c:7e: 5e:83:86:4b:d5:ff:ba:d6:6d:5d:31:0a:ba:79:f6: 5e:be:4a:d4:ac:39:13:39:b0:7e:5c:09:ac:f0:80: 35:fb:fa:ba:6c:ec:d4:5f:1b:8c:06:63:48:73:14: ce:28:05:05:04:29:1b:f3:34:32:67:d5:1e:3f:28: 7d:25:2a:91:29:c5:4f:1f:c8:72:65:05:5c:29:ad: 62:08:a5:49:8d:88:5c:d0:14:2a:fc:16:28:85:70: d3:5e:4b:fb:6d:cc:89:3e:b0:4a:fb:ac:f0:97:64: a4:9c:c4:3b:d4:13:18:88:3f:67:35:13:d6:22:fd: 99:23:59:5b:67:86:68:2c:74:02:1e:86:96:d2:4e: 24:40:be:b1:8e:d4:a5:30:e8:61:3d:04:2b:51:69: aa:3a:62:e7:7a:be:d6:f1:76:d6:58:bf:c2:1a:de: f4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1B:C8:C6:00:E7:AF:4D:12:4C:10:62:8C:F9:C3:AF:13:2D:4C:0F X509v3 Authority Key Identifier: keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.160.0/22 103.232.76.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:88:63:df:6c:61:92:59:b0:22:5a:fc:c7:05:ba:5d:f5:82: d0:19:40:48:c2:0f:27:b3:02:1c:92:5d:91:17:28:d6:66:c8: 42:b7:30:30:70:91:56:a8:af:02:cb:cd:e2:55:e9:94:53:37: 06:b6:c1:e2:4b:a7:89:c0:e0:1a:d5:ae:03:f9:ee:b0:96:f5: 97:df:9e:3f:2f:71:29:84:56:25:4b:7e:57:24:ae:ad:7f:a0: f4:f5:9a:47:37:27:81:05:44:c8:81:eb:f7:93:6a:23:65:13: 08:54:0b:cd:74:b7:23:67:cf:78:c2:38:c5:5a:a7:d7:98:b5: 33:38:81:07:d4:bc:53:af:70:a8:92:00:80:24:d4:2b:b3:e8: d9:c9:e3:62:98:47:e1:bf:1a:37:a4:bd:b9:01:d9:e5:85:e3: 4b:f7:55:f1:85:a8:b1:aa:7d:ac:d9:ef:3f:ff:30:9f:81:e6: 80:76:88:e2:38:25:ec:3c:5b:9c:da:97:0f:c9:88:fa:83:ba: 3b:19:ad:91:3f:2c:a5:94:e1:66:07:9b:3f:4d:f0:66:bd:a8: f5:e2:05:88:a0:4d:a8:e7:f1:e1:30:c7:fc:cc:ca:39:18:a1: 1b:7e:95:41:53:2a:9b:ea:a2:13:2c:66:0f:20:d2:43:1a:6f: 0c:0e:b9:66 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIyQkYxMTAvBgNVBAUTKDAzNzdCOTNDOTFGREFGNDY5QTU5MUI0QzUyRDI0Q0Ix NTU1RDJCRDQwHhcNMjMwNjMwMTkzOTQ5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDlmMmY4NS1kNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyP23DCztcw8M+ItNsgwKIxBK2cPZUa7KQ138diNVPse78ZlBffvbmftWXgu9 XRJWLYG/GvoraDPiuWvgVPMNZgje426xNCd6Dfqh5W5bWiH6Q/tTJ+z+DH5eg4ZL 1f+61m1dMQq6efZevkrUrDkTObB+XAms8IA1+/q6bOzUXxuMBmNIcxTOKAUFBCkb 8zQyZ9UePyh9JSqRKcVPH8hyZQVcKa1iCKVJjYhc0BQq/BYohXDTXkv7bcyJPrBK +6zwl2SknMQ71BMYiD9nNRPWIv2ZI1lbZ4ZoLHQCHoaW0k4kQL6xjtSlMOhhPQQr UWmqOmLner7W8XbWWL/CGt70wQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHYbyMYA 569NEkwQYoz5w68TLUwPMB8GA1UdIwQYMBaAFAN3uTyR/a9GmlkbTFLSTLFVXSvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjJCRi8xMDM5QkM0MDFB REIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIwYWFXUnRNVXRKTXNWVmRL OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzZTVQSkg5cjBhYVdSdE1VdEpNc1ZWZEs5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIyQkYvMTAzOUJDNDAxQURCMTFFQUFBM0E4MjM1QzRGOUFFMDIvMzdFQTNFMjYx QURDMTFFQThFQjQ2RjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnRKADBAJn6EwwDQYJKoZIhvcNAQELBQADggEBAGyIY99s YZJZsCJa/McFul31gtAZQEjCDyezAhySXZEXKNZmyEK3MDBwkVaorwLLzeJV6ZRT Nwa2weJLp4nA4BrVrgP57rCW9Zffnj8vcSmEViVLflckrq1/oPT1mkc3J4EFRMiB 6/eTaiNlEwhUC810tyNnz3jCOMVap9eYtTM4gQfUvFOvcKiSAIAk1Cuz6NnJ42KY R+G/GjekvbkB2eWF40v3VfGFqLGqfazZ7z//MJ+B5oB2iOI4Jew8W5zalw/JiPqD ujsZrZE/LKWU4WYHmz9N8Ga9qPXiBYigTajn8eEwx/zMyjkYoRt+lUFTKpvqohMs Zg8g0kMabwwOuWY= -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org