$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/FC1D8B7A9C7C11ED96690F39C4F9AE02.roa File: FC1D8B7A9C7C11ED96690F39C4F9AE02.roa (raw, json) Hash identifier: Vgze7UCK02r+PE+8KBm3vD1sf11foePNpCsdHwYSplE= Subject key identifier: 62:E0:63:1B:55:19:C8:ED:F2:CC:42:C7:95:CB:E3:06:92:14:1E:30 Certificate issuer: /CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE Certificate serial: 7E Authority key identifier: 83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/FC1D8B7A9C7C11ED96690F39C4F9AE02.roa Signing time: Thu 21 Sep 2023 00:42:22 +0000 ROA not before: Thu 21 Sep 2023 00:42:22 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 142605 IP address blocks: 103.170.204.0/23 maxlen: 23 103.170.204.0/24 maxlen: 24 103.170.205.0/24 maxlen: 24 2001:df7:2780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE Validity Not Before: Sep 21 00:42:22 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=650b916d-70d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:91:53:84:79:6c:8b:9f:07:89:ee:7e:5d: 38:ca:4a:2e:bc:7c:60:e1:01:96:76:4e:6b:13:e4: de:49:b5:d1:37:31:33:12:3e:16:35:13:57:f3:2d: 72:22:a7:ad:75:6c:3c:e0:51:9e:77:63:44:1f:84: 29:20:37:52:60:04:88:c1:1c:4e:21:6b:28:d1:bb: 3d:a4:35:f4:5c:9f:0b:8d:5f:6a:6e:25:7b:63:ef: 46:b9:ee:5c:f5:a2:01:c3:39:c8:62:40:3c:9d:a1: 75:43:86:15:58:03:bd:96:8b:e4:f3:06:5f:f8:16: 7a:99:4a:65:0f:fa:cd:07:3b:2c:4d:17:bd:4b:5f: 55:6f:7c:08:34:e9:dc:d7:25:81:f9:94:95:9b:1f: 76:39:0d:fd:b9:d0:8e:34:80:56:5c:cd:4f:f7:0a: 6d:7d:91:67:99:f6:6d:69:12:e4:a0:37:ae:af:23: e1:85:7c:ec:da:79:dc:8a:91:d0:e3:a8:d6:7c:91: 9c:14:ad:de:b7:d4:eb:77:54:23:c0:50:e1:4a:ed: 53:ad:2b:80:0c:b7:71:1a:61:e1:84:c9:58:76:cf: cf:67:f0:c8:7b:94:10:f2:76:77:f2:fa:4c:8b:25: b1:fc:f6:39:02:fa:e7:61:17:88:a1:84:a8:6c:99: ad:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E0:63:1B:55:19:C8:ED:F2:CC:42:C7:95:CB:E3:06:92:14:1E:30 X509v3 Authority Key Identifier: keyid:83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/FC1D8B7A9C7C11ED96690F39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.204.0/23 IPv6: 2001:df7:2780::/48 Signature Algorithm: sha256WithRSAEncryption 35:b4:42:e9:67:57:97:a5:d9:49:36:e6:b1:98:0f:50:50:e4: c8:fc:95:e9:3f:5d:2f:82:c2:bf:cf:47:d4:fc:6c:cf:40:9f: c1:ac:51:3d:38:02:f6:9c:7a:9f:43:15:57:82:d9:73:1e:74: fa:e7:8b:0f:99:d2:da:aa:ab:7f:6b:5d:1c:fc:ab:60:9d:a9: cf:65:75:6a:14:58:59:37:5d:93:45:61:9b:07:c1:ad:c5:80: 72:e5:58:0f:d9:ec:63:6e:55:08:9b:c4:43:7d:d8:77:57:26: c1:e6:97:6f:2f:3f:3e:07:7f:5b:2e:ce:5e:69:a1:a1:5c:d1: 98:e1:59:91:fa:4d:62:c2:f6:47:ff:a0:7a:25:bb:0a:cc:6d: c0:12:ca:88:28:6f:16:9c:d4:0a:3d:f4:b5:a4:dc:17:e6:b4: e6:b6:80:7d:4c:ad:df:88:7a:78:58:32:d9:f9:cc:34:54:8d: 39:91:a1:35:0c:2b:48:16:fd:c4:45:ae:b0:e1:a0:bf:5c:e6: 45:f0:11:46:9c:08:18:a7:44:d2:7c:32:fe:a1:22:ba:78:e4: 21:16:fd:81:07:ec:12:54:37:0b:62:52:67:37:57:ae:eb:bc: 10:04:e6:32:b6:21:01:44:e7:28:ce:fd:a5:83:d4:be:0b:d1: fa:bf:ba:20 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjdBMTExMC8GA1UEBRMoODNENjBDRjhERUE4MDIyNkI4MDcyNEJDREU2NzAzRDEw RDY1N0ZGRTAeFw0yMzA5MjEwMDQyMjJaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MGI5MTZkLTcwZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7MJFThHlsi58Hie5+XTjKSi68fGDhAZZ2TmsT5N5JtdE3MTMSPhY1E1fzLXIi p611bDzgUZ53Y0QfhCkgN1JgBIjBHE4hayjRuz2kNfRcnwuNX2puJXtj70a57lz1 ogHDOchiQDydoXVDhhVYA72Wi+TzBl/4FnqZSmUP+s0HOyxNF71LX1VvfAg06dzX JYH5lJWbH3Y5Df250I40gFZczU/3Cm19kWeZ9m1pEuSgN66vI+GFfOzaedyKkdDj qNZ8kZwUrd631Ot3VCPAUOFK7VOtK4AMt3EaYeGEyVh2z89n8Mh7lBDydnfy+kyL JbH89jkC+udhF4ihhKhsma1FAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUYuBjG1UZ yO3yzELHlcvjBpIUHjAwHwYDVR0jBBgwFoAUg9YM+N6oAia4ByS83mcD0Q1lf/4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGN0ExLzkxRThFMjg0RjQz NzExRUJCNUQ1NjkxQ0M0RjlBRTAyL2c5WU0tTjZvQWlhNEJ5UzgzbWNEMFExbGZf NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZzlZTS1ONm9BaWE0QnlTODNtY0QwUTFsZl80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9GQzFEOEI3QTlD N0MxMUVEOTY2OTBGMzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWeqzDAPBAIAAjAJAwcAIAEN9yeAMA0GCSqGSIb3DQEBCwUA A4IBAQA1tELpZ1eXpdlJNuaxmA9QUOTI/JXpP10vgsK/z0fU/GzPQJ/BrFE9OAL2 nHqfQxVXgtlzHnT654sPmdLaqqt/a10c/KtgnanPZXVqFFhZN12TRWGbB8GtxYBy 5VgP2exjblUIm8RDfdh3VybB5pdvLz8+B39bLs5eaaGhXNGY4VmR+k1iwvZH/6B6 JbsKzG3AEsqIKG8WnNQKPfS1pNwX5rTmtoB9TK3fiHp4WDLZ+cw0VI05kaE1DCtI Fv3ERa6w4aC/XOZF8BFGnAgYp0TSfDL+oSK6eOQhFv2BB+wSVDcLYlJnN1eu67wQ BOYytiEBROcozv2lg9S+C9H6v7og -----END CERTIFICATE-----Generated at Tue May 7 03:12:20 2024 by rpki-client on console-fra.rpki-client.org