$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/08181C0C646D11EE82448758C4F9AE02.roa File: 08181C0C646D11EE82448758C4F9AE02.roa (raw, json) Hash identifier: 8a5ZRm1LVNAdcWEKWLEP5piw+TuPFpxK+Y4aTH1OyA0= Subject key identifier: 71:7F:00:2B:C8:6C:76:87:7C:CF:30:CD:D3:74:B5:AD:16:A3:9B:99 Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Certificate serial: 07 Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/08181C0C646D11EE82448758C4F9AE02.roa Signing time: Fri 06 Oct 2023 17:23:15 +0000 ROA not before: Fri 06 Oct 2023 17:23:15 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 151843 IP address blocks: 103.242.102.0/23 maxlen: 23 103.242.102.0/24 maxlen: 24 103.242.103.0/24 maxlen: 24 2001:df2:fec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 07:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Validity Not Before: Oct 6 17:23:15 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65204282-98bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:40:04:9b:eb:d7:1a:d7:25:29:80:b7:65: f5:06:7c:9e:65:52:a0:79:73:66:45:e6:b0:40:ab: 04:7e:61:08:cc:f7:b6:37:fd:69:9c:08:ef:46:d0: 0b:9f:bf:28:79:8f:aa:d1:c6:4f:5f:5e:9b:2a:db: 37:08:91:4f:c8:b5:3d:96:66:ed:13:0c:01:b8:21: 2a:10:cf:58:c9:d8:ef:0b:b5:0a:1a:29:61:5a:a6: 87:a3:b1:ff:01:ae:9a:03:a7:93:fc:51:15:0f:e0: 7b:6e:8b:e5:98:44:9d:cf:7e:4c:a0:91:9c:15:08: e3:a7:12:26:b6:09:24:ed:cf:ea:d7:2b:d3:b6:f4: b0:fd:98:50:5d:90:b8:70:5e:6f:67:55:24:cb:13: fa:78:c8:b8:74:99:fe:31:77:93:9f:14:97:69:45: 99:35:f2:fb:8d:f2:44:c9:7c:e3:a0:83:af:10:6f: 98:ee:77:3a:32:6b:65:9e:d5:9e:a7:57:7c:b5:c4: be:5f:30:82:20:2b:17:7b:96:0e:e7:06:94:cd:91: e6:a5:77:7f:86:ef:a1:dd:15:6d:ea:e8:11:93:cc: d9:fe:34:3b:31:75:e3:72:36:5b:6e:0d:9d:1f:de: 8c:a6:cc:35:58:cf:86:6f:63:73:5f:b3:08:40:72: c9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7F:00:2B:C8:6C:76:87:7C:CF:30:CD:D3:74:B5:AD:16:A3:9B:99 X509v3 Authority Key Identifier: keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/08181C0C646D11EE82448758C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.242.102.0/23 IPv6: 2001:df2:fec0::/48 Signature Algorithm: sha256WithRSAEncryption 59:9b:15:2a:17:97:f8:e1:d3:70:1c:eb:a2:1c:12:cc:77:9e: 00:43:73:8f:a6:79:ee:5b:d7:69:0f:48:3f:34:2c:b4:52:36: 7a:d8:cd:f4:be:7b:54:ae:40:4e:8f:61:83:ed:44:b2:c0:9c: bd:9d:ed:50:db:3b:bc:fb:6a:2b:2d:4f:7c:31:c4:05:67:0f: 4a:99:11:f6:ea:ad:f8:d3:86:fd:81:e0:e9:c1:d4:d7:1f:5b: c3:88:60:6c:8c:03:c2:a8:08:9b:18:ed:96:ad:56:b0:52:6e: c3:ee:37:22:c0:f1:5f:63:f8:dc:cf:3a:90:ed:42:23:12:2f: b2:b8:81:20:06:b2:a4:f4:64:d1:b9:b0:51:85:03:b1:80:97: a3:0c:38:fb:0b:f6:d0:14:e9:51:27:ea:6f:b1:12:e0:07:eb: 3c:eb:1b:ce:a9:f9:04:09:24:c9:1f:f2:5f:07:9b:cf:93:af: ce:a1:e6:5d:d3:27:7e:38:35:44:12:14:c4:98:c7:17:23:85: 52:b0:e2:c3:4c:a0:a7:bf:9e:21:8b:f0:2d:f3:73:50:4e:fb: c9:9c:91:76:59:cc:f5:5a:e1:a2:2f:09:b4:f3:43:50:29:8a: 04:26:c1:eb:ae:f7:93:d3:5c:68:74:66:ca:7e:55:be:d9:7b: e4:ee:e2:d8 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDdDNDExMC8GA1UEBRMoNDlEQjYxRkYwM0M1NTE2Nzk1Q0Y3ODUwOUVBMzdBMDYw RjQ1NDdCRjAeFw0yMzEwMDYxNzIzMTVaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MjA0MjgyLTk4YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC89UAEm+vXGtclKYC3ZfUGfJ5lUqB5c2ZF5rBAqwR+YQjM97Y3/WmcCO9G0Auf vyh5j6rRxk9fXpsq2zcIkU/ItT2WZu0TDAG4ISoQz1jJ2O8LtQoaKWFapoejsf8B rpoDp5P8URUP4Htui+WYRJ3PfkygkZwVCOOnEia2CSTtz+rXK9O29LD9mFBdkLhw Xm9nVSTLE/p4yLh0mf4xd5OfFJdpRZk18vuN8kTJfOOgg68Qb5judzoya2We1Z6n V3y1xL5fMIIgKxd7lg7nBpTNkeald3+G76HdFW3q6BGTzNn+NDsxdeNyNltuDZ0f 3oymzDVYz4ZvY3NfswhAcsmhAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUcX8AK8hs dod8zzDN03S1rRajm5kwHwYDVR0jBBgwFoAUSdth/wPFUWeVz3hQnqN6Bg9FR78w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0N0M0LzU5NUJFODJDNjM1 QjExRUU4ODRDQUQ0RkM0RjlBRTAyL1NkdGhfd1BGVVdlVnozaFFucU42Qmc5RlI3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2R0aF93UEZVV2VWejNoUW5xTjZCZzlGUjc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDdDNC81OTVCRTgyQzYzNUIxMUVFODg0Q0FENEZDNEY5QUUwMi8wODE4MUMwQzY0 NkQxMUVFODI0NDg3NThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWfyZjAPBAIAAjAJAwcAIAEN8v7AMA0GCSqGSIb3DQEBCwUA A4IBAQBZmxUqF5f44dNwHOuiHBLMd54AQ3OPpnnuW9dpD0g/NCy0UjZ62M30vntU rkBOj2GD7USywJy9ne1Q2zu8+2orLU98McQFZw9KmRH26q3404b9geDpwdTXH1vD iGBsjAPCqAibGO2WrVawUm7D7jciwPFfY/jczzqQ7UIjEi+yuIEgBrKk9GTRubBR hQOxgJejDDj7C/bQFOlRJ+pvsRLgB+s86xvOqfkECSTJH/JfB5vPk6/OoeZd0yd+ ODVEEhTEmMcXI4VSsOLDTKCnv54hi/At83NQTvvJnJF2Wcz1WuGiLwm080NQKYoE JsHrrveT01xodGbKflW+2Xvk7uLY -----END CERTIFICATE-----Generated at Thu Jun 13 08:02:29 2024 by rpki-client on console-ams.rpki-client.org