$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/7474F998377111EE8AFEB74DC4F9AE02.roa File: 7474F998377111EE8AFEB74DC4F9AE02.roa (raw, json) Hash identifier: Oc6FnVfPTuGFLrdjCboTDLNxDvcGFQDTupYNuLVUDEI= Subject key identifier: A5:65:3C:6E:12:21:7B:28:BB:ED:A6:BD:71:A8:79:47:9F:E8:D5:10 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 02 Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/7474F998377111EE8AFEB74DC4F9AE02.roa Signing time: Thu 10 Aug 2023 11:31:32 +0000 ROA not before: Thu 10 Aug 2023 11:31:32 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 38136 IP address blocks: 103.229.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 06:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Aug 10 11:31:32 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64d4ca94-55ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b8:d5:08:4d:3e:70:b0:a1:38:99:43:ea:fc: e4:e6:ab:c3:35:10:47:60:f0:29:20:55:ac:06:90: 9e:d5:33:1f:7d:c6:f0:5e:39:8b:88:f6:0d:e5:a0: 5d:35:dd:f7:90:85:b0:4b:74:1e:7a:59:83:25:e4: 73:41:e9:35:b2:91:17:23:28:b5:16:4f:ac:e4:54: 32:78:e1:7d:f0:f3:d6:36:ef:0d:0c:f6:eb:93:e3: 61:8d:7f:88:e3:c7:83:c3:c8:5c:bf:d3:f3:6c:72: 49:cf:7c:ac:e8:fc:95:22:32:36:dc:bc:d9:60:0a: f6:11:77:d2:23:84:b5:88:b0:0d:aa:5c:85:3d:34: 37:29:00:6f:a4:e4:42:fd:6b:28:a8:33:53:3c:cc: 49:1b:42:96:2a:13:98:c1:d6:cd:f5:24:86:d7:49: 40:e8:d7:ce:37:c7:55:58:89:df:a0:cb:0b:32:5a: 40:ae:d7:ca:cb:6d:e2:99:28:21:bf:bb:a5:0b:53: 4a:60:3f:8c:d9:c9:5f:a2:c0:07:c9:97:4b:05:0b: 0a:a5:76:d7:a7:41:07:14:e8:10:c6:c7:5c:48:85: 02:90:30:ca:43:b7:76:96:17:78:3b:9d:3c:05:b7: 25:97:00:3c:a9:b5:48:a7:55:f3:ae:b7:46:db:2d: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:65:3C:6E:12:21:7B:28:BB:ED:A6:BD:71:A8:79:47:9F:E8:D5:10 X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/7474F998377111EE8AFEB74DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.54.0/23 Signature Algorithm: sha256WithRSAEncryption df:3e:c7:53:04:4d:36:59:3f:be:ad:ba:84:1f:50:4c:eb:c9: 71:4a:26:47:8d:0d:bf:17:b3:b3:80:43:cb:0b:c2:d2:d7:5f: 7d:bc:cf:9e:33:c1:33:64:9a:b4:a5:2c:91:ad:f2:87:6b:d8: e4:de:10:fd:51:83:2c:b3:b0:06:a5:e5:40:f7:1a:70:6b:c5: ab:f0:b3:7d:b1:5f:2f:cd:ce:57:9a:d9:57:01:87:ee:8e:9f: 45:30:23:16:ea:1d:aa:26:20:47:36:5e:a4:6c:2a:a3:a4:b8: b2:82:5a:d6:90:8a:d0:c3:36:59:62:ce:5c:64:49:64:9c:c2: f2:33:ea:05:ae:c5:fa:c4:79:31:6b:47:1c:2b:27:fb:2e:15: fa:53:c8:fb:d8:f8:42:49:ab:84:da:9b:a2:2c:69:99:f4:bb: d4:7e:3e:66:93:c3:03:6d:1c:97:4d:9d:3c:b2:97:51:e0:3f: 57:4e:09:19:f2:41:88:df:a0:60:19:cd:5f:e8:a6:b9:a6:ec: 09:86:17:38:ea:a3:d5:ca:34:09:2d:d3:68:36:84:41:7f:e5: f3:af:12:2e:19:98:b1:e7:b2:00:e1:18:f3:a7:1d:c4:87:05: 35:56:1c:5c:55:12:a7:46:ca:92:06:08:fd:17:d3:df:38:d9: b3:85:45:de -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0I5NDExMC8GA1UEBRMoMzEyNkY0RUYwNUUzQUU3NUEwOTE0NEI2NjdEMzkzNDdE NERBQTg5MDAeFw0yMzA4MTAxMTMxMzJaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY0ZDRjYTk0LTU1ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNuNUITT5wsKE4mUPq/OTmq8M1EEdg8CkgVawGkJ7VMx99xvBeOYuI9g3loF01 3feQhbBLdB56WYMl5HNB6TWykRcjKLUWT6zkVDJ44X3w89Y27w0M9uuT42GNf4jj x4PDyFy/0/NscknPfKzo/JUiMjbcvNlgCvYRd9IjhLWIsA2qXIU9NDcpAG+k5EL9 ayioM1M8zEkbQpYqE5jB1s31JIbXSUDo1843x1VYid+gywsyWkCu18rLbeKZKCG/ u6ULU0pgP4zZyV+iwAfJl0sFCwqldtenQQcU6BDGx1xIhQKQMMpDt3aWF3g7nTwF tyWXADyptUinVfOut0bbLTe5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUpWU8bhIh eyi77aa9cah5R5/o1RAwHwYDVR0jBBgwFoAUMSb07wXjrnWgkUS2Z9OTR9TaqJAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3Qjk0L0NDNzQxQkI2Mzc3 MDExRUU4REM4QkIzNEM0RjlBRTAyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFK QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVNiMDd3WGpybldna1VTMlo5T1RSOVRhcUpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi83NDc0Rjk5ODM3 NzExMUVFOEFGRUI3NERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWflNjANBgkqhkiG9w0BAQsFAAOCAQEA3z7HUwRNNlk/vq26 hB9QTOvJcUomR40Nvxezs4BDywvC0tdffbzPnjPBM2SatKUska3yh2vY5N4Q/VGD LLOwBqXlQPcacGvFq/CzfbFfL83OV5rZVwGH7o6fRTAjFuodqiYgRzZepGwqo6S4 soJa1pCK0MM2WWLOXGRJZJzC8jPqBa7F+sR5MWtHHCsn+y4V+lPI+9j4QkmrhNqb oixpmfS71H4+ZpPDA20cl02dPLKXUeA/V04JGfJBiN+gYBnNX+imuabsCYYXOOqj 1co0CS3TaDaEQX/l868SLhmYseeyAOEY86cdxIcFNVYcXFUSp0bKkgYI/RfT3zjZ s4VF3g== -----END CERTIFICATE-----Generated at Tue May 21 10:12:53 2024 by rpki-client on console-ams.rpki-client.org