$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/88DA4EC83E3511ED8B05E85AC4F9AE02.roa File: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (raw, json) Hash identifier: m+UggDiKnlsr7oDYe2JvPaLjrumOSk4OCYStSoz32JE= Subject key identifier: BF:1B:B6:70:BB:39:FE:E9:CB:BB:C8:A4:2E:94:61:8C:1A:0E:FB:E5 Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Certificate serial: 0134 Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/88DA4EC83E3511ED8B05E85AC4F9AE02.roa Signing time: Sat 27 Apr 2024 05:18:30 +0000 ROA not before: Sat 27 Apr 2024 05:18:30 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132229 IP address blocks: 103.7.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Validity Not Before: Apr 27 05:18:30 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=662c8aa6-4514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:56:c6:d4:9c:5d:40:ab:cd:50:f6:41:03: 3c:29:bd:d3:10:1a:fa:06:58:c8:4f:b1:77:b7:29: ba:77:6e:2e:0a:65:3d:c9:21:87:95:ef:fb:22:49: f7:c1:db:7a:d4:f7:fb:2c:77:5d:17:79:f9:1a:bd: 51:23:d8:90:05:ac:37:55:50:9a:d3:f7:fd:ac:34: 7c:64:80:81:40:99:55:11:af:a1:72:26:a7:9a:a8: 6a:4f:ed:63:92:df:d8:7d:93:2d:e2:49:f4:84:4e: 56:62:76:f6:f6:ab:ff:d1:7b:23:37:a2:8f:ae:97: cf:e2:4f:09:94:8e:09:45:f7:66:d2:51:18:48:1c: 75:1c:6c:99:b9:c0:ff:d4:09:8b:e4:a7:f1:fd:5b: f2:95:18:54:ae:d7:21:d7:f2:60:e0:57:bf:9f:a1: 78:0a:bc:24:74:23:77:a7:bb:07:82:bc:55:a7:0f: 30:7e:2b:7b:3a:8f:8e:80:bc:78:7a:7d:56:dc:0a: 45:72:f1:0b:5a:79:be:15:5e:7e:7a:8a:26:82:95: 28:88:b1:a9:9b:01:a1:ce:fe:f0:a9:03:a1:af:9c: 56:33:60:2e:36:79:dd:e0:22:3f:d9:b3:2a:61:cf: 68:c0:f3:25:5b:47:82:af:fe:cc:2e:ee:c7:6f:a0: ce:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1B:B6:70:BB:39:FE:E9:CB:BB:C8:A4:2E:94:61:8C:1A:0E:FB:E5 X509v3 Authority Key Identifier: keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/88DA4EC83E3511ED8B05E85AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.7.224.0/24 Signature Algorithm: sha256WithRSAEncryption 82:e1:48:e9:79:f1:f1:0d:75:4e:df:9b:24:89:20:31:12:57: d1:e5:5c:ae:17:a3:72:be:ef:f6:ee:b2:7b:61:68:db:c6:07: 9c:71:ad:42:61:54:fa:5c:80:f4:06:0e:49:6b:16:6f:82:45: 1d:49:09:ae:9c:f6:41:7f:cf:95:f3:33:94:fb:50:97:58:c8: 21:6e:27:c3:e3:08:67:9c:86:11:cc:85:ad:1b:4b:7a:10:a9: 63:4a:51:98:75:48:5d:fa:0e:e2:73:b7:dc:da:55:04:54:b9: b6:00:ef:2c:c9:cf:f2:30:03:8b:aa:bf:5b:e4:d0:f4:ca:fd: 63:78:5f:9b:fe:92:73:df:d3:3b:97:e2:e8:1f:16:67:73:6b: 52:13:f9:8f:ef:0c:d4:4f:03:e5:43:ee:02:80:fa:74:18:72: 6d:0d:b3:86:1e:71:1a:c1:d8:88:2d:75:73:bf:20:2f:ad:e1: f4:2b:20:a5:46:ab:ae:e0:07:2f:47:56:bc:b3:1b:2f:49:fe: fa:c9:69:8d:0c:a1:58:86:cc:77:d6:5a:66:9e:5f:4b:fd:7f: 6b:3d:73:c8:12:3f:21:53:04:44:74:b3:96:eb:d9:48:49:71: 2e:8e:73:33:b3:59:70:59:26:78:07:95:3a:2d:cb:13:69:09: 1c:aa:f6:14 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0 MEZCNzIyOUEwHhcNMjQwNDI3MDUxODMwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjJjOGFhNi00NTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVBWxtScXUCrzVD2QQM8Kb3TEBr6BljIT7F3tym6d24uCmU9ySGHle/7Ikn3 wdt61Pf7LHddF3n5Gr1RI9iQBaw3VVCa0/f9rDR8ZICBQJlVEa+hcianmqhqT+1j kt/YfZMt4kn0hE5WYnb29qv/0XsjN6KPrpfP4k8JlI4JRfdm0lEYSBx1HGyZucD/ 1AmL5Kfx/VvylRhUrtch1/Jg4Fe/n6F4CrwkdCN3p7sHgrxVpw8wfit7Oo+OgLx4 en1W3ApFcvELWnm+FV5+eoomgpUoiLGpmwGhzv7wqQOhr5xWM2AuNnnd4CI/2bMq Yc9owPMlW0eCr/7MLu7Hb6DOwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL8btnC7 Of7py7vIpC6UYYwaDvvlMB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTJDNUEvMEFFRjBGRDgzRTMyMTFFRDhERDdFMDZBQzRGOUFFMDIvODhEQTRFQzgz RTM1MTFFRDhCMDVFODVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnB+AwDQYJKoZIhvcNAQELBQADggEBAILhSOl58fENdU7f mySJIDESV9HlXK4Xo3K+7/busnthaNvGB5xxrUJhVPpcgPQGDklrFm+CRR1JCa6c 9kF/z5XzM5T7UJdYyCFuJ8PjCGechhHMha0bS3oQqWNKUZh1SF36DuJzt9zaVQRU ubYA7yzJz/IwA4uqv1vk0PTK/WN4X5v+knPf0zuX4ugfFmdza1IT+Y/vDNRPA+VD 7gKA+nQYcm0Ns4YecRrB2IgtdXO/IC+t4fQrIKVGq67gBy9HVryzGy9J/vrJaY0M oViGzHfWWmaeX0v9f2s9c8gSPyFTBER0s5br2UhJcS6OczOzWXBZJngHlTotyxNp CRyq9hQ= -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org