$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/9244682C7BD711EAA889485EC4F9AE02.roa File: 9244682C7BD711EAA889485EC4F9AE02.roa (raw, json) Hash identifier: 9ubLeIKH/kTnlE4cW/+I5O6o9Y6wEde7fUcw20Ci5Ck= Subject key identifier: 5F:C7:FA:9E:64:0B:D4:F7:98:47:11:88:64:96:A7:ED:1E:AE:51:2D Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Certificate serial: 0873 Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/9244682C7BD711EAA889485EC4F9AE02.roa Signing time: Fri 02 Jun 2023 22:33:56 +0000 ROA not before: Fri 02 Jun 2023 22:33:56 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 9554 IP address blocks: 103.219.172.0/22 maxlen: 22 103.219.172.0/24 maxlen: 24 103.219.173.0/24 maxlen: 24 103.219.174.0/24 maxlen: 24 103.219.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Validity Not Before: Jun 2 22:33:56 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=647a6e54-48c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:ae:98:49:65:1e:1a:8b:3e:f5:f6:00:f8: 15:34:68:96:ac:86:d1:75:49:26:24:b2:3a:ff:b1: e7:ae:d1:f7:db:78:a1:a9:b9:54:10:70:fc:52:51: bb:8f:85:3e:94:15:05:bf:17:d1:f6:8f:80:f8:70: 30:99:a3:20:ca:a9:a0:d7:d3:87:1f:08:bb:24:48: 3a:bb:01:57:48:4f:0a:c9:dd:fc:b5:c8:aa:f5:c3: 98:6d:f6:ec:c4:4f:80:e0:d8:4b:0b:5a:00:c7:7a: 82:74:37:4c:76:55:7b:a6:9f:86:cf:a0:80:88:7f: dc:e9:58:4e:bc:78:94:0d:b8:4e:cd:45:a6:a5:07: ef:19:ab:d1:a8:2f:81:0f:0b:76:d9:3b:cb:17:5a: 1e:59:23:84:eb:1e:65:23:07:9d:80:9c:59:99:fa: c6:f1:9f:4c:1e:9f:16:f5:a4:ca:8b:03:16:97:5b: e1:5f:a4:fd:93:41:e9:b2:b4:6c:93:ab:0a:0e:18: 7e:8c:4a:56:09:3b:36:27:1f:a4:c8:39:b2:3f:25: 1b:dc:77:8b:9a:62:55:b4:51:2c:8e:bd:03:60:0f: 4d:69:40:3e:03:b9:e5:a0:4f:8b:60:25:86:d7:f5: 4c:af:4c:a4:3d:e6:db:a8:b5:a2:30:80:ba:ae:44: b3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C7:FA:9E:64:0B:D4:F7:98:47:11:88:64:96:A7:ED:1E:AE:51:2D X509v3 Authority Key Identifier: keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/9244682C7BD711EAA889485EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.219.172.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:60:50:22:1b:ee:e9:1d:5d:30:a4:79:aa:ed:04:48:33:d6: 2b:9d:1e:c0:51:ae:49:52:92:e5:32:57:0f:0e:33:1b:03:5c: 3e:90:2f:ff:67:d0:27:92:fe:46:d5:b0:94:66:3b:1d:79:30: 6b:8b:83:90:7e:f9:b1:bf:0a:d6:e5:e5:7d:44:e9:33:60:b3: 85:dd:84:7b:0d:eb:6d:f4:ec:62:c2:c1:55:a5:35:3d:14:51: 23:cb:23:c9:34:1c:8f:e8:55:62:fb:21:7c:67:41:03:d8:a6: d3:9f:34:13:df:3f:25:14:09:bb:14:7b:d5:15:8f:4b:2c:62: fc:72:12:57:05:c6:67:37:e7:f5:2c:16:e5:f1:c3:f6:09:25: 28:61:2d:a8:93:50:ef:df:fa:01:67:2e:25:44:d3:36:d5:22: 48:f0:f1:3e:81:88:0e:1e:5b:83:33:f3:eb:a7:42:4d:4c:60: 09:c6:e0:a4:d2:e2:9c:ba:50:4a:d2:37:99:a3:ce:52:a4:84: f2:92:0c:89:67:fe:65:1c:6f:58:f4:5d:db:0a:6f:30:12:8d: b6:30:cc:c1:f2:1b:c4:0b:fb:2c:aa:f4:ac:10:f0:ee:60:11: de:e9:f0:c6:e0:7c:cf:2a:cc:4f:1a:39:90:e2:fe:9a:0c:34: 63:2a:11:e1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI2N0MxMTAvBgNVBAUTKDhBMjY1NkRCQkQ5MDAzMzY4NDFGRjUwMzUzNkZGOTkx OEZFQjI1QzYwHhcNMjMwNjAyMjIzMzU2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhNmU1NC00OGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsn2umEllHhqLPvX2APgVNGiWrIbRdUkmJLI6/7HnrtH323ihqblUEHD8UlG7 j4U+lBUFvxfR9o+A+HAwmaMgyqmg19OHHwi7JEg6uwFXSE8Kyd38tciq9cOYbfbs xE+A4NhLC1oAx3qCdDdMdlV7pp+Gz6CAiH/c6VhOvHiUDbhOzUWmpQfvGavRqC+B Dwt22TvLF1oeWSOE6x5lIwedgJxZmfrG8Z9MHp8W9aTKiwMWl1vhX6T9k0HpsrRs k6sKDhh+jEpWCTs2Jx+kyDmyPyUb3HeLmmJVtFEsjr0DYA9NaUA+A7nloE+LYCWG 1/VMr0ykPebbqLWiMIC6rkSzDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF/H+p5k C9T3mEcRiGSWp+0erlEtMB8GA1UdIwQYMBaAFIomVtu9kAM2hB/1A1Nv+ZGP6yXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjY3Qy81QjUzODk2NjdC RDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6YUVIX1VEVTJfNWtZX3JK Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpWlcyNzJRQXphRUhfVURVMl81a1lfckpjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTI2N0MvNUI1Mzg5NjY3QkQ2MTFFQTgwM0Y5QjVDQzRGOUFFMDIvOTI0NDY4MkM3 QkQ3MTFFQUE4ODk0ODVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn26wwDQYJKoZIhvcNAQELBQADggEBAC5gUCIb7ukdXTCk eartBEgz1iudHsBRrklSkuUyVw8OMxsDXD6QL/9n0CeS/kbVsJRmOx15MGuLg5B+ +bG/Ctbl5X1E6TNgs4XdhHsN62307GLCwVWlNT0UUSPLI8k0HI/oVWL7IXxnQQPY ptOfNBPfPyUUCbsUe9UVj0ssYvxyElcFxmc35/UsFuXxw/YJJShhLaiTUO/f+gFn LiVE0zbVIkjw8T6BiA4eW4Mz8+unQk1MYAnG4KTS4py6UErSN5mjzlKkhPKSDIln /mUcb1j0XdsKbzASjbYwzMHyG8QL+yyq9KwQ8O5gEd7p8MbgfM8qzE8aOZDi/poM NGMqEeE= -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org