$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/D628208AFB7611EC96592431C4F9AE02.roa File: D628208AFB7611EC96592431C4F9AE02.roa (raw, json) Hash identifier: V8vWxpZQHTe4bEgYXHGNOT4WbmjvJ2CQz2pLr1HqlCc= Subject key identifier: A8:37:98:59:06:0F:43:83:C7:FB:A1:53:F0:E3:56:EA:C8:5D:55:03 Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Certificate serial: 0192 Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/D628208AFB7611EC96592431C4F9AE02.roa Signing time: Fri 01 Dec 2023 04:34:34 +0000 ROA not before: Fri 01 Dec 2023 04:34:34 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 147177 IP address blocks: 103.174.10.0/23 maxlen: 24 2407:f8c0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 04:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Validity Not Before: Dec 1 04:34:34 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6569625a-c6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4e:87:32:06:b9:6b:71:e0:21:64:9b:40:96: 37:a7:c2:c6:1f:36:b5:af:8b:5b:6c:66:ff:de:7e: d7:3a:ee:0b:7a:d4:4a:7f:67:7b:0b:3f:a4:f5:f7: dd:0d:37:d3:c9:9b:3b:32:64:66:0b:55:7e:e5:88: b1:c7:d4:ac:e3:1b:a0:52:7a:00:f1:95:e5:b2:36: 75:1e:b1:f0:97:64:5f:ec:c7:2b:de:6a:52:d5:d9: 8d:02:05:f4:41:98:2d:90:12:9b:89:25:6c:d9:84: d7:64:a5:a7:c8:00:59:07:a3:d3:9d:11:8f:c6:a1: 94:c5:b4:3a:53:91:a5:49:72:87:e3:ed:ff:be:49: ff:bd:b5:4d:6a:7f:d2:eb:5c:d6:27:4a:e7:22:0c: f9:bd:27:34:ce:9e:97:b6:4d:49:71:ff:5d:2b:ed: 57:ea:33:91:16:b5:d9:cf:d3:22:7a:84:1d:d0:9e: eb:c9:9b:14:29:ae:0d:ee:7e:d2:c6:26:9d:60:f1: e3:0c:39:73:c3:9a:26:1e:61:46:1e:53:b5:ef:c4: f8:4d:17:4d:b9:61:cb:8f:10:e1:8b:da:ce:4d:f0: 94:9c:73:49:66:99:a7:23:76:3d:dc:df:8a:ca:6b: cc:e2:30:e0:7b:ac:6b:b9:d1:3d:ff:91:30:67:ed: c9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:37:98:59:06:0F:43:83:C7:FB:A1:53:F0:E3:56:EA:C8:5D:55:03 X509v3 Authority Key Identifier: keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/D628208AFB7611EC96592431C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.10.0/23 IPv6: 2407:f8c0::/40 Signature Algorithm: sha256WithRSAEncryption 78:b7:51:63:02:e1:07:93:e6:8f:83:a6:40:e0:35:63:2a:08: 29:e0:8d:c8:e4:fd:94:6b:5b:4a:47:f7:4f:aa:26:05:4d:71: 3d:7f:38:4d:8a:cd:34:63:d3:0f:6e:ea:f0:e4:df:b4:19:6f: 51:8c:43:32:59:d4:6f:d6:24:19:51:81:51:f3:d2:71:b2:53: 1d:4b:5b:a1:db:d3:65:1c:03:a4:83:64:83:d1:2b:4a:6f:fa: db:b7:b7:6c:ad:0f:c0:34:82:83:07:0d:87:16:29:1f:a3:0a: b9:d4:58:f7:b6:14:d8:81:03:62:80:41:29:53:72:5c:a2:01: 31:e1:09:09:12:8b:6f:ae:a3:0f:b4:8e:31:20:13:cf:bf:da: db:24:42:ab:c1:ac:3d:ca:ab:af:eb:b6:1b:f9:75:88:6f:63: 72:5e:48:a7:46:c1:97:e0:ca:7c:ff:f6:b7:01:aa:b9:a2:29: aa:8a:b1:36:e1:e5:c6:36:7c:17:69:2f:5a:95:bc:5a:6f:23: fd:77:0b:5c:37:e5:0e:7b:fc:d1:07:ab:30:6d:93:03:e5:85: 0c:a2:10:65:b8:cb:3a:7c:8a:b2:0a:9b:c5:78:a0:d6:a6:a6: 86:c6:36:91:58:fb:7b:75:13:77:cf:2d:2d:fe:55:e9:c5:36: 45:6f:ad:35 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ3MDUxMTAvBgNVBAUTKDc0N0NDN0NCREIyMkJEOUE0ODJEMzM1MTgwOURFQTlC QzE0NjAyODQwHhcNMjMxMjAxMDQzNDM0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY5NjI1YS1jNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA806HMga5a3HgIWSbQJY3p8LGHza1r4tbbGb/3n7XOu4LetRKf2d7Cz+k9ffd DTfTyZs7MmRmC1V+5Yixx9Ss4xugUnoA8ZXlsjZ1HrHwl2Rf7Mcr3mpS1dmNAgX0 QZgtkBKbiSVs2YTXZKWnyABZB6PTnRGPxqGUxbQ6U5GlSXKH4+3/vkn/vbVNan/S 61zWJ0rnIgz5vSc0zp6Xtk1Jcf9dK+1X6jORFrXZz9MieoQd0J7ryZsUKa4N7n7S xiadYPHjDDlzw5omHmFGHlO178T4TRdNuWHLjxDhi9rOTfCUnHNJZpmnI3Y93N+K ymvM4jDge6xrudE9/5EwZ+3JRQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKg3mFkG D0ODx/uhU/DjVurIXVUDMB8GA1UdIwQYMBaAFHR8x8vbIr2aSC0zUYCd6pvBRgKE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDcwNS9CQTFEQjc2MkZC NzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZacElMVE5SZ0ozcW04RkdB b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIekh5OXNpdlpwSUxUTlJnSjNxbThGR0FvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUQ3MDUvQkExREI3NjJGQjc0MTFFQzk2QTVCNDMwQzRGOUFFMDIvRDYyODIwOEFG Qjc2MTFFQzk2NTkyNDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAFnrgowDgQCAAIwCAMGACQH+MAAMA0GCSqGSIb3DQEBCwUA A4IBAQB4t1FjAuEHk+aPg6ZA4DVjKggp4I3I5P2Ua1tKR/dPqiYFTXE9fzhNis00 Y9MPburw5N+0GW9RjEMyWdRv1iQZUYFR89JxslMdS1uh29NlHAOkg2SD0StKb/rb t7dsrQ/ANIKDBw2HFikfowq51Fj3thTYgQNigEEpU3JcogEx4QkJEotvrqMPtI4x IBPPv9rbJEKrwaw9yquv67Yb+XWIb2NyXkinRsGX4Mp8//a3Aaq5oimqirE24eXG NnwXaS9albxabyP9dwtcN+UOe/zRB6swbZMD5YUMohBluMs6fIqyCpvFeKDWpqaG xjaRWPt7dRN3zy0t/lXpxTZFb601 -----END CERTIFICATE-----Generated at Tue May 21 04:45:53 2024 by rpki-client on console-fra.rpki-client.org