$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa File: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (raw, json) Hash identifier: 9b6iL+tiTyfSwzROgZslQ1z42UtLvtwJif/NNFdULZM= Subject key identifier: F8:0A:F8:73:68:FD:B9:47:D4:56:9A:46:51:6F:4E:1A:84:28:65:12 Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Certificate serial: 0C09 Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa Signing time: Tue 12 Sep 2023 09:18:40 +0000 ROA not before: Tue 12 Sep 2023 09:18:40 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 137828 IP address blocks: 103.115.72.0/22 maxlen: 22 103.115.72.0/23 maxlen: 23 103.115.72.0/24 maxlen: 24 103.115.73.0/24 maxlen: 24 103.115.74.0/23 maxlen: 23 103.115.74.0/24 maxlen: 24 103.115.75.0/24 maxlen: 24 2402:e1c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 18:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3081 (0xc09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Validity Not Before: Sep 12 09:18:40 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65002cef-39af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:55:d7:07:eb:fd:86:4b:79:d2:97:73:37:b9: c8:1e:8a:ea:b8:51:71:6d:28:2d:27:88:d4:3c:f2: bc:04:01:bb:61:90:e9:cd:4a:6c:9a:b6:c7:35:3c: 4f:42:d0:6d:c9:05:52:d2:32:ac:13:ed:fa:e9:4b: 77:1b:23:5d:5e:9d:40:33:8a:38:ef:ce:6c:60:db: b9:a9:b7:5b:ac:69:14:da:58:8f:25:e0:74:f6:d0: d3:44:17:5b:a5:88:41:92:82:46:4e:ec:3c:70:b2: 4b:bc:37:d8:83:3d:e2:39:a1:1b:5a:85:af:89:69: 39:7d:d6:f5:07:8e:98:ee:8f:2d:e4:42:cb:b1:31: 11:f8:4e:25:31:eb:7b:67:98:55:6b:71:c7:d5:9e: 6e:3d:f3:54:ce:45:fe:57:70:02:73:d4:57:30:61: 4b:0e:e2:a8:94:11:80:7e:0b:ce:bb:fe:ec:db:13: da:35:d0:9b:1e:1d:03:af:20:bd:4b:d4:24:c7:42: ce:9e:9f:56:4c:0f:53:db:59:3f:58:03:46:29:c6: 55:4f:6e:4e:b3:60:a3:3a:84:f8:d8:26:c0:05:f8: fe:fa:2e:8e:51:a8:3e:56:e4:84:5c:1f:d4:ac:b0: bb:41:d4:dd:ba:f2:d6:55:eb:61:46:e2:56:a2:a0: e7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0A:F8:73:68:FD:B9:47:D4:56:9A:46:51:6F:4E:1A:84:28:65:12 X509v3 Authority Key Identifier: keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.72.0/22 IPv6: 2402:e1c0::/32 Signature Algorithm: sha256WithRSAEncryption 51:a6:b2:94:b2:76:12:8d:64:2c:9e:c4:fd:b4:16:6d:6a:6e: 7e:2d:a6:d0:87:b0:fd:5f:b7:2f:2d:fd:36:24:b1:b8:96:ab: de:4d:b6:48:55:58:fc:30:a6:5a:81:8f:9f:73:93:2f:4b:0d: ac:0e:a8:39:2b:41:e0:49:9c:b9:10:3e:11:29:ba:ed:c7:62: e9:c3:53:3a:f9:e1:d0:f1:b7:50:1b:17:98:e0:b1:1a:dd:70: 10:2b:03:42:0d:46:30:10:7e:2b:a2:9a:37:de:f2:f3:7a:2d: b8:bd:af:e0:db:26:e5:0b:d3:bf:5e:3a:e5:73:eb:d2:5d:27: ad:56:cb:93:54:96:71:1b:83:2c:66:77:6e:40:99:e0:48:04: 86:7b:a1:46:e4:4f:1a:39:69:3c:fc:7c:3a:f6:22:ee:4a:5a: 5d:c7:1e:2a:d8:fd:f6:78:c5:55:70:71:08:19:08:f1:ab:5a: a9:f9:41:fd:18:e3:55:72:e0:5a:97:61:52:36:86:59:84:65: bc:e0:72:4f:0b:29:87:ce:59:e9:9a:de:dc:6d:b1:46:51:c7: 07:21:a5:3f:ec:01:e1:16:cb:88:1a:e4:ec:72:ac:49:b7:a4: f5:f6:cb:a3:cf:ce:8b:c0:c9:a2:ae:07:2a:07:4d:19:79:4f: d6:81:bd:2e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY5QTExMTAvBgNVBAUTKEE3RjlBRjI4RDI0QTQzMjQ5M0I0QjJCQTlCNTU3MjlC QzA5NzdDQzgwHhcNMjMwOTEyMDkxODQwWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTAwMmNlZi0zOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FXXB+v9hkt50pdzN7nIHorquFFxbSgtJ4jUPPK8BAG7YZDpzUpsmrbHNTxP QtBtyQVS0jKsE+366Ut3GyNdXp1AM4o4785sYNu5qbdbrGkU2liPJeB09tDTRBdb pYhBkoJGTuw8cLJLvDfYgz3iOaEbWoWviWk5fdb1B46Y7o8t5ELLsTER+E4lMet7 Z5hVa3HH1Z5uPfNUzkX+V3ACc9RXMGFLDuKolBGAfgvOu/7s2xPaNdCbHh0DryC9 S9Qkx0LOnp9WTA9T21k/WANGKcZVT25Os2CjOoT42CbABfj++i6OUag+VuSEXB/U rLC7QdTduvLWVethRuJWoqDntQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPgK+HNo /blH1FaaRlFvThqEKGUSMB8GA1UdIwQYMBaAFKf5ryjSSkMkk7SyuptVcpvAl3zI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjlBMS9EMjYwMTVDQUQz N0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5U1R0TEs2bTFWeW04Q1hm TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfbXZLTkpLUXlTVHRMSzZtMVZ5bThDWGZNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUY5QTEvRDI2MDE1Q0FEMzdFMTFFOThBMTk2QjY3QzRGOUFFMDIvNkREQUJGQjI2 Q0Q1MTFFRDlFQzlDRjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnc0gwDQQCAAIwBwMFACQC4cAwDQYJKoZIhvcNAQELBQAD ggEBAFGmspSydhKNZCyexP20Fm1qbn4tptCHsP1fty8t/TYksbiWq95NtkhVWPww plqBj59zky9LDawOqDkrQeBJnLkQPhEpuu3HYunDUzr54dDxt1AbF5jgsRrdcBAr A0INRjAQfiuimjfe8vN6Lbi9r+DbJuUL079eOuVz69JdJ61Wy5NUlnEbgyxmd25A meBIBIZ7oUbkTxo5aTz8fDr2Iu5KWl3HHirY/fZ4xVVwcQgZCPGrWqn5Qf0Y41Vy 4FqXYVI2hlmEZbzgck8LKYfOWema3txtsUZRxwchpT/sAeEWy4ga5OxyrEm3pPX2 y6PPzovAyaKuByoHTRl5T9aBvS4= -----END CERTIFICATE-----Generated at Mon May 20 20:02:30 2024 by rpki-client on console-fra.rpki-client.org