$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/577FD5BE067C11ED882FC127C4F9AE02.roa File: 577FD5BE067C11ED882FC127C4F9AE02.roa (raw, json) Hash identifier: rj1Y2oKQRykUrgTjFIBgGOC0IpBQnYNCHuR++XSYwQ8= Subject key identifier: 9E:78:C0:71:76:FB:11:7F:34:9B:08:79:EA:72:E5:E2:38:86:9C:D3 Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Certificate serial: 0777 Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/577FD5BE067C11ED882FC127C4F9AE02.roa Signing time: Tue 02 Jan 2024 22:20:19 +0000 ROA not before: Tue 02 Jan 2024 22:20:19 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 137409 IP address blocks: 103.125.144.0/24 maxlen: 24 103.125.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1911 (0x777) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Validity Not Before: Jan 2 22:20:19 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65948c22-948a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:89:00:fa:18:9a:19:c8:af:fe:4f:db:61: 3c:b9:8c:03:0a:2a:3e:ba:7a:b7:69:ea:49:dd:84: 6b:90:14:13:07:b6:64:28:29:09:dd:23:dc:0f:d1: c9:03:cc:8c:a0:c9:0c:d3:fd:38:3c:42:99:cc:b3: 19:58:61:e9:fd:cf:56:43:5c:d3:ec:42:3c:18:fd: 82:1a:69:83:6e:db:34:24:d8:18:fc:97:66:c1:38: d3:2e:a3:40:43:4b:4b:8f:01:94:2f:db:31:30:e4: ed:07:9e:3c:b6:cc:20:40:ab:e4:00:8c:92:44:e0: 63:b2:fe:f3:d1:aa:98:b9:09:14:3c:40:3b:9b:d6: 9d:0a:43:f8:29:b2:4b:eb:9a:77:73:61:60:f0:8f: 29:98:e5:6f:a8:3b:01:ff:90:25:2d:46:0b:a4:9d: 16:a4:6f:47:ca:b0:5b:ac:3e:ef:5f:02:e1:d6:b5: f0:ca:2d:25:da:6a:71:e8:24:27:89:68:7a:bc:76: 71:c6:9f:ce:f0:9e:2e:6c:cb:fe:02:0f:b5:a3:55: 5d:fd:11:3d:f2:2c:2a:94:fe:bd:8e:47:5d:3c:94: ee:7c:b2:00:d4:25:43:63:d1:74:d2:ff:da:c5:f0: 3b:09:25:b3:50:a0:c0:b1:e5:d6:55:dc:e8:a5:8e: 6f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:78:C0:71:76:FB:11:7F:34:9B:08:79:EA:72:E5:E2:38:86:9C:D3 X509v3 Authority Key Identifier: keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/577FD5BE067C11ED882FC127C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.125.144.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:b1:d3:a7:23:16:c6:a2:95:b2:da:76:dc:9b:d8:ce:b9:6a: 9a:90:a4:11:0b:09:77:af:d5:de:fd:00:b4:03:9c:57:31:69: b3:c7:f6:c4:a1:b4:f1:bb:41:4a:ba:f6:8c:30:4a:49:fc:60: c5:79:9e:0d:a0:27:73:6d:1b:fb:98:c8:a4:a6:e2:fa:ad:ff: 50:fe:32:32:d5:6e:b5:45:3b:2c:50:d5:3a:dd:09:f1:4b:e4: 70:b7:f2:df:48:8f:d6:b4:64:87:59:94:8e:ec:f1:db:02:45: 3c:49:01:99:c9:fc:72:ce:62:33:11:ce:fe:e7:71:af:08:6e: e8:4a:8c:50:3d:90:0f:df:a8:80:d3:4f:1f:6b:75:7a:91:9b: 43:70:10:81:8a:61:78:3c:04:66:59:9f:f6:69:78:a8:22:f3: 37:49:ca:fa:98:dd:71:ee:b2:cf:17:3a:7c:5d:64:b2:64:4c: 93:52:7d:48:50:35:6d:9a:90:fc:77:3e:0b:d8:a2:9c:52:3e: 9b:b5:4e:b6:ea:dd:0f:bf:5f:e0:21:33:a3:35:e8:86:9a:24: 1b:14:b4:a6:a3:66:5e:c8:ca:51:55:7e:62:65:a8:9e:6e:1a: 74:2b:97:16:fd:9f:c2:8b:40:81:93:90:93:37:25:e9:32:a3: fa:4f:c5:e5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw NTYwMTc0QTIwHhcNMjQwMTAyMjIyMDE5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk0OGMyMi05NDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwKJAPoYmhnIr/5P22E8uYwDCio+unq3aepJ3YRrkBQTB7ZkKCkJ3SPcD9HJ A8yMoMkM0/04PEKZzLMZWGHp/c9WQ1zT7EI8GP2CGmmDbts0JNgY/JdmwTjTLqNA Q0tLjwGUL9sxMOTtB548tswgQKvkAIySROBjsv7z0aqYuQkUPEA7m9adCkP4KbJL 65p3c2Fg8I8pmOVvqDsB/5AlLUYLpJ0WpG9HyrBbrD7vXwLh1rXwyi0l2mpx6CQn iWh6vHZxxp/O8J4ubMv+Ag+1o1Vd/RE98iwqlP69jkddPJTufLIA1CVDY9F00v/a xfA7CSWzUKDAseXWVdzopY5vzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ54wHF2 +xF/NJsIeepy5eI4hpzTMB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTk4QkUvMTUwRTU3QzZDRjQ5MTFFQTlDQzkzNTNFQzRGOUFFMDIvNTc3RkQ1QkUw NjdDMTFFRDg4MkZDMTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnfZAwDQYJKoZIhvcNAQELBQADggEBADyx06cjFsailbLa dtyb2M65apqQpBELCXev1d79ALQDnFcxabPH9sShtPG7QUq69owwSkn8YMV5ng2g J3NtG/uYyKSm4vqt/1D+MjLVbrVFOyxQ1TrdCfFL5HC38t9Ij9a0ZIdZlI7s8dsC RTxJAZnJ/HLOYjMRzv7nca8IbuhKjFA9kA/fqIDTTx9rdXqRm0NwEIGKYXg8BGZZ n/ZpeKgi8zdJyvqY3XHuss8XOnxdZLJkTJNSfUhQNW2akPx3PgvYopxSPpu1Trbq 3Q+/X+AhM6M16IaaJBsUtKajZl7IylFVfmJlqJ5uGnQrlxb9n8KLQIGTkJM3Jeky o/pPxeU= -----END CERTIFICATE-----Generated at Thu May 2 23:03:12 2024 by rpki-client on console-fra.rpki-client.org