$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/76DB2480090511EA8FFC6812C4F9AE02.roa File: 76DB2480090511EA8FFC6812C4F9AE02.roa (raw, json) Hash identifier: 3WaMXjV5r4nSW1yYwxDFwZ3faXnEdVurZ589z5o1ing= Subject key identifier: 63:88:1C:E5:3A:B0:55:74:86:E6:A1:C0:71:18:B5:2C:46:63:44:9E Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0AEF Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/76DB2480090511EA8FFC6812C4F9AE02.roa Signing time: Thu 24 Aug 2023 19:16:26 +0000 ROA not before: Thu 24 Aug 2023 19:16:26 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 137987 IP address blocks: 103.119.94.0/23 maxlen: 23 103.119.94.0/24 maxlen: 24 103.119.95.0/24 maxlen: 24 2405:db40::/32 maxlen: 32 2405:db40::/48 maxlen: 48 2405:db40:1::/48 maxlen: 48 2405:db40:2::/48 maxlen: 48 2405:db40:3::/48 maxlen: 48 2405:db40:4::/48 maxlen: 48 2405:db40:5::/48 maxlen: 48 2405:db40:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: Aug 24 19:16:26 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64e7ac8a-de81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:e8:e0:af:e2:1b:96:78:36:dc:a3:4a:57: 02:93:60:e3:b2:37:00:9f:af:6b:14:75:16:b9:4b: 1a:07:16:cc:dd:0f:35:28:33:02:01:df:bf:09:54: 55:b3:9c:b9:0a:9b:64:76:ee:6b:31:86:35:3b:54: 6a:dc:76:3e:24:72:2f:e1:1f:66:39:ec:b5:82:94: bd:4a:64:7d:10:a8:e4:8b:d0:8c:5b:7e:10:3a:b3: f6:71:c9:de:e1:ff:19:29:4a:71:78:86:d3:5d:9c: 78:eb:71:7a:fd:70:be:83:d9:61:73:59:ec:d5:33: 17:ad:7b:7d:a4:f8:0c:b0:70:8f:47:c0:ea:5f:d4: 38:a6:06:10:35:b0:0d:95:9a:dd:f3:ef:15:7d:f5: 64:3f:f9:b2:07:c3:6b:90:0a:ac:bb:06:46:e6:08: 3a:96:17:a2:f7:90:6d:f4:2f:82:c5:aa:bf:a9:ea: 0b:e1:f4:f5:fa:e9:f6:f4:a6:e2:12:2e:06:b1:af: 10:53:31:df:0d:cc:e9:53:0e:c2:79:c5:2a:51:18: 2b:20:36:2c:a2:b0:2a:19:25:b5:e1:d9:32:fd:f6: f2:10:b4:e4:3e:af:fc:07:35:16:8c:e1:bf:f5:17: bf:18:64:99:73:ee:7f:b8:27:ca:5d:4a:9d:f7:d0: 7c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:88:1C:E5:3A:B0:55:74:86:E6:A1:C0:71:18:B5:2C:46:63:44:9E X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/76DB2480090511EA8FFC6812C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.94.0/23 IPv6: 2405:db40::/32 Signature Algorithm: sha256WithRSAEncryption ac:ea:c0:72:87:9d:34:b4:c9:3a:f1:25:e7:12:4d:0f:a9:aa: 21:c3:10:4c:28:4e:94:fb:b7:1d:a4:5b:b0:de:31:70:02:29: 0a:6f:1c:47:be:4c:84:84:de:d8:95:0e:cb:d7:2a:c0:0d:22: ae:22:d6:0c:3b:81:0b:89:4e:bd:46:1c:5f:c2:16:57:06:f9: b7:35:ad:8e:6a:f7:4a:28:32:05:cf:d2:e6:48:eb:74:b2:c6: b8:fe:12:1e:85:e6:d7:61:bd:cc:e0:c8:32:dc:22:19:58:9d: b9:db:61:f7:f7:85:fa:57:b6:8e:88:8e:c9:e8:fb:dd:ba:47: ce:4e:cc:b6:2c:0e:75:a6:4a:d9:8e:c7:fd:26:e5:e7:1b:a7: 9d:d7:f5:c3:58:42:72:c1:a7:11:8a:02:4d:f6:3c:7a:e0:ca: 74:bb:ac:0d:f5:98:5e:9e:ba:48:18:4c:f1:a1:5c:0b:fa:5f: c6:86:a6:d1:65:a9:da:2f:7c:3f:94:91:a7:e4:74:e2:1a:4d: 8e:c0:b7:67:07:c4:17:e6:e4:9c:3f:5e:dd:ed:09:fb:df:bc: df:a1:08:a2:12:7f:65:46:26:21:a8:9a:e1:27:ae:ab:5b:01: 13:15:a4:f1:02:d6:af:40:e4:43:13:ce:53:02:be:d3:60:06: 2c:55:44:e8 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjMwODI0MTkxNjI2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGU3YWM4YS1kZTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIro4K/iG5Z4NtyjSlcCk2DjsjcAn69rFHUWuUsaBxbM3Q81KDMCAd+/CVRV s5y5Cptkdu5rMYY1O1Rq3HY+JHIv4R9mOey1gpS9SmR9EKjki9CMW34QOrP2ccne 4f8ZKUpxeIbTXZx463F6/XC+g9lhc1ns1TMXrXt9pPgMsHCPR8DqX9Q4pgYQNbAN lZrd8+8VffVkP/myB8NrkAqsuwZG5gg6lhei95Bt9C+Cxaq/qeoL4fT1+un29Kbi Ei4Gsa8QUzHfDczpUw7CecUqURgrIDYsorAqGSW14dky/fbyELTkPq/8BzUWjOG/ 9Re/GGSZc+5/uCfKXUqd99B8RwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGOIHOU6 sFV0huahwHEYtSxGY0SeMB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQwMjYvQkM3NEMxMEEwOTA0MTFFQUIyMEQ1OTExQzRGOUFFMDIvNzZEQjI0ODAw OTA1MTFFQThGRkM2ODEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnd14wDQQCAAIwBwMFACQF20AwDQYJKoZIhvcNAQELBQAD ggEBAKzqwHKHnTS0yTrxJecSTQ+pqiHDEEwoTpT7tx2kW7DeMXACKQpvHEe+TISE 3tiVDsvXKsANIq4i1gw7gQuJTr1GHF/CFlcG+bc1rY5q90ooMgXP0uZI63Syxrj+ Eh6F5tdhvczgyDLcIhlYnbnbYff3hfpXto6Ijsno+926R85OzLYsDnWmStmOx/0m 5ecbp53X9cNYQnLBpxGKAk32PHrgynS7rA31mF6eukgYTPGhXAv6X8aGptFlqdov fD+UkafkdOIaTY7At2cHxBfm5Jw/Xt3tCfvfvN+hCKISf2VGJiGomuEnrqtbARMV pPEC1q9A5EMTzlMCvtNgBixVROg= -----END CERTIFICATE-----Generated at Sat May 18 19:56:06 2024 by rpki-client on console-fra.rpki-client.org