$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/37A0ACFC8FCD11EDB4772D55C4F9AE02.roa File: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (raw, json) Hash identifier: duo+Tr9ExND317n6ueK2nntCbyUHaVQEXgOHrLPTcf0= Subject key identifier: 32:30:8F:D5:81:22:B6:15:B2:B1:0F:0C:5C:53:E5:B1:87:C9:45:23 Certificate issuer: /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Certificate serial: 8B Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/37A0ACFC8FCD11EDB4772D55C4F9AE02.roa Signing time: Thu 05 Oct 2023 04:24:48 +0000 ROA not before: Thu 05 Oct 2023 04:24:48 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 137941 IP address blocks: 103.250.196.0/23 maxlen: 23 103.250.196.0/24 maxlen: 24 103.250.197.0/24 maxlen: 24 2400:aa60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Validity Not Before: Oct 5 04:24:48 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=651e3a90-6e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:38:db:06:c4:10:6a:74:98:2d:cf:1b:68: b1:96:ce:1c:ff:04:64:88:6e:56:c3:d8:e7:67:2b: 67:1c:ab:6d:5c:e2:5a:c7:6a:3a:95:95:18:3b:8c: 32:54:b1:87:8e:b9:bb:d0:92:52:11:a7:79:9b:1c: c7:cb:bb:15:52:5a:ed:41:61:98:d3:a9:97:6d:bd: 9c:d2:da:1e:6f:c7:7b:11:3c:28:31:0c:20:99:d6: f6:b9:eb:54:14:33:49:89:0c:67:52:e4:cd:4c:25: 5a:0d:c3:f9:b0:0c:22:83:f6:0d:eb:57:e5:68:e3: 2b:8c:76:ca:9b:fc:2b:7e:30:99:40:37:83:72:4f: 0b:45:2a:b6:0b:f6:66:db:8a:14:35:98:05:e7:0e: 28:da:69:dc:7b:55:12:39:0a:d1:6e:9f:16:df:28: 1a:f5:fc:a4:81:24:cd:fb:4c:bb:27:af:c1:77:04: eb:6a:33:fd:14:95:2c:76:8b:c7:06:3b:45:0e:64: b0:57:56:ac:d7:49:24:67:7f:d7:d7:3a:c6:20:47: ee:91:ba:ea:15:f1:e4:7b:8f:37:80:32:38:a0:be: cf:35:0f:35:37:32:03:a6:b2:79:fb:bd:fb:90:3a: f7:14:68:42:f9:c6:00:61:b8:99:21:d7:7c:ac:28: 4b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:30:8F:D5:81:22:B6:15:B2:B1:0F:0C:5C:53:E5:B1:87:C9:45:23 X509v3 Authority Key Identifier: keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/37A0ACFC8FCD11EDB4772D55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.250.196.0/23 IPv6: 2400:aa60::/32 Signature Algorithm: sha256WithRSAEncryption 00:f8:7d:18:b4:86:7a:b2:44:25:b6:90:e7:80:9b:0b:4d:8c: 15:d4:a1:32:88:4a:f1:c3:6d:22:cd:8f:29:98:9b:80:24:dc: 1f:58:bb:92:04:ec:91:e3:b2:07:f6:e6:65:ed:61:3a:e7:80: f0:08:5e:f8:a4:cc:b9:e0:cb:2d:52:23:83:22:b5:94:61:37: 3c:52:bc:13:db:fb:7d:c1:b4:52:ee:ca:05:76:04:79:54:dc: 1f:1e:cd:53:8e:05:c3:5e:c0:cc:06:20:aa:38:e3:4a:d5:91: ac:18:6c:4e:c2:fe:32:96:71:83:cf:b4:18:54:16:e8:8d:43: 13:dd:46:fe:e7:2e:34:de:79:d6:db:b9:3e:e8:f8:25:61:5b: dc:ed:43:56:16:77:67:80:ba:0d:84:d9:b7:ae:88:29:f2:3e: a8:a9:a0:ce:21:12:9d:3b:91:e0:ef:f1:a8:54:c5:64:33:f0: 25:e7:d0:ae:38:fa:43:fa:53:50:51:8c:4a:66:74:72:8a:b7: 2e:d2:92:1e:86:2c:6c:9f:3b:03:7e:1d:2d:dd:28:e1:10:4f: 0b:c3:3f:cf:2e:36:77:6f:9e:16:f4:ed:35:85:4c:51:9a:66: 90:1a:16:1b:7b:d2:26:e8:a9:b2:f4:e0:33:f9:ad:c7:e1:34: 55:71:b3:24 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2QzQxMTAvBgNVBAUTKDdDMzNDMjFFMUYzNkY2N0U0QzZBMDRFQjIzOTAxOUFE NzcyQkNCMkEwHhcNMjMxMDA1MDQyNDQ4WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFlM2E5MC02ZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoo42wbEEGp0mC3PG2ixls4c/wRkiG5Ww9jnZytnHKttXOJax2o6lZUYO4wy VLGHjrm70JJSEad5mxzHy7sVUlrtQWGY06mXbb2c0toeb8d7ETwoMQwgmdb2uetU FDNJiQxnUuTNTCVaDcP5sAwig/YN61flaOMrjHbKm/wrfjCZQDeDck8LRSq2C/Zm 24oUNZgF5w4o2mnce1USOQrRbp8W3yga9fykgSTN+0y7J6/BdwTrajP9FJUsdovH BjtFDmSwV1as10kkZ3/X1zrGIEfukbrqFfHke483gDI4oL7PNQ81NzIDprJ5+737 kDr3FGhC+cYAYbiZIdd8rChLnQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDIwj9WB IrYVsrEPDFxT5bGHyUUjMB8GA1UdIwQYMBaAFHwzwh4fNvZ+TGoE6yOQGa13K8sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZDNC85RDRCMTA2ODhG Q0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4MjluNU1hZ1RySTVBWnJYY3J5 eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZEUENIaDgyOW41TWFnVHJJNUFaclhjcnl5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODM2QzQvOUQ0QjEwNjg4RkNBMTFFREI3OTExMjU0QzRGOUFFMDIvMzdBMEFDRkM4 RkNEMTFFREI0NzcyRDU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFn+sQwDQQCAAIwBwMFACQAqmAwDQYJKoZIhvcNAQELBQAD ggEBAAD4fRi0hnqyRCW2kOeAmwtNjBXUoTKISvHDbSLNjymYm4Ak3B9Yu5IE7JHj sgf25mXtYTrngPAIXvikzLngyy1SI4MitZRhNzxSvBPb+33BtFLuygV2BHlU3B8e zVOOBcNewMwGIKo440rVkawYbE7C/jKWcYPPtBhUFuiNQxPdRv7nLjTeedbbuT7o +CVhW9ztQ1YWd2eAug2E2beuiCnyPqipoM4hEp07keDv8ahUxWQz8CXn0K44+kP6 U1BRjEpmdHKKty7Skh6GLGyfOwN+HS3dKOEQTwvDP88uNndvnhb07TWFTFGaZpAa Fht70iboqbL04DP5rcfhNFVxsyQ= -----END CERTIFICATE-----Generated at Fri May 17 06:46:24 2024 by rpki-client on console-ams.rpki-client.org