$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/7A629E90303211EA9DAB6581C4F9AE02.roa File: 7A629E90303211EA9DAB6581C4F9AE02.roa (raw, json) Hash identifier: RkDmfgQMwwny9x9xlb//KIEAOQmfjHqeRQZx8EIpneY= Subject key identifier: 66:16:83:F1:D6:FA:A1:F9:95:C3:93:63:B1:55:CC:16:7D:1A:16:D8 Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Certificate serial: 0A59 Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/7A629E90303211EA9DAB6581C4F9AE02.roa Signing time: Wed 06 Dec 2023 20:07:40 +0000 ROA not before: Wed 06 Dec 2023 20:07:40 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 139804 IP address blocks: 103.145.120.0/23 maxlen: 23 103.145.120.0/24 maxlen: 24 103.145.121.0/24 maxlen: 24 2001:df2:b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Validity Not Before: Dec 6 20:07:40 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6570d48c-3272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f3:11:4b:8f:14:06:b9:8c:f5:0f:99:66:af: 9c:23:18:fb:d4:4e:97:fb:4b:c2:75:f9:ff:cb:82: 08:68:1f:98:9e:24:b5:40:ff:27:2b:e6:65:d0:58: 39:58:28:77:4c:c1:2b:66:58:12:b6:7d:6a:fe:28: 64:e5:17:40:e4:fb:0f:c8:c3:8e:44:a2:c6:2c:82: f8:c6:2c:35:82:ad:a0:28:8c:72:b3:6a:06:a7:e6: 0b:64:e1:c8:f2:85:93:53:10:da:35:d7:62:26:de: 2b:e5:a4:fc:cd:aa:48:0b:69:ab:34:c2:8f:cd:11: 5b:79:c2:e2:20:3d:b6:94:60:64:74:76:1f:eb:87: a3:a3:ca:c4:be:9f:5e:4b:88:44:c9:da:c8:f6:2a: 1e:75:c5:69:f1:2b:ca:13:4f:82:58:dc:11:9b:2f: 70:62:2e:25:96:02:af:50:35:01:ff:4d:e3:5d:a1: f1:4d:a9:1b:f7:6a:aa:75:e4:93:3d:f6:b1:fc:a9: 86:46:eb:bc:6f:67:0c:48:de:08:6c:c0:88:cf:72: 7c:55:31:6c:08:04:62:a9:ae:a4:8f:25:d1:e0:89: 12:4b:33:a0:96:a4:e3:51:7d:b7:ff:cb:f3:db:0a: 6f:50:4f:2b:c7:72:6f:dd:8a:b5:a6:81:9f:04:0b: 9d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:16:83:F1:D6:FA:A1:F9:95:C3:93:63:B1:55:CC:16:7D:1A:16:D8 X509v3 Authority Key Identifier: keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/7A629E90303211EA9DAB6581C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.120.0/23 IPv6: 2001:df2:b80::/48 Signature Algorithm: sha256WithRSAEncryption 62:bb:e2:1e:6a:c7:ce:53:a1:1d:13:aa:c1:f4:d9:b1:82:28: 5d:4e:df:c3:c0:a4:40:c3:dd:2d:62:b7:b1:61:c5:67:a6:60: 1e:9c:a9:a5:1f:b9:0d:41:62:99:58:c4:60:f1:c6:a0:06:a3: 13:c1:40:e6:ba:cc:6d:e1:08:a2:10:c7:42:f1:dd:d7:e0:a2: 3a:dd:a7:03:7b:e0:31:37:b4:99:8c:9e:28:54:db:93:73:3c: 07:31:36:84:37:18:f9:54:05:78:b8:9e:04:c4:83:23:51:35: 73:f5:21:b1:44:2c:43:6b:0f:49:29:01:aa:d0:34:fb:40:96: b7:f4:3a:d4:a9:71:79:a3:f1:ea:e5:03:31:a4:a9:e3:a8:38: 10:4d:59:68:77:47:77:51:bc:9d:66:1b:b6:ab:b3:c2:89:f0: 57:80:98:6e:b7:c7:7d:3c:a3:07:61:4c:6b:2e:ed:a3:4c:78: eb:93:f5:0b:90:1c:12:78:95:1a:07:c0:13:8f:25:d2:b2:3b: af:20:69:23:22:82:0f:04:35:59:79:69:02:0f:0a:0a:4d:92: 74:27:88:c7:95:c8:51:d0:4b:3b:89:78:68:c1:02:f0:bc:b7: 8e:79:b7:e2:81:dc:c7:bb:e5:bc:c6:bf:a3:de:55:44:c0:28: 49:d0:f8:12 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICClkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1NDkxMTAvBgNVBAUTKDJCQzhBOEFDQjUyQ0YwQ0Y3RjMxMzY5NDMwMEY1Mzg2 Njg2MjM3QUQwHhcNMjMxMjA2MjAwNzQwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTcwZDQ4Yy0zMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9/MRS48UBrmM9Q+ZZq+cIxj71E6X+0vCdfn/y4IIaB+YniS1QP8nK+Zl0Fg5 WCh3TMErZlgStn1q/ihk5RdA5PsPyMOORKLGLIL4xiw1gq2gKIxys2oGp+YLZOHI 8oWTUxDaNddiJt4r5aT8zapIC2mrNMKPzRFbecLiID22lGBkdHYf64ejo8rEvp9e S4hEydrI9ioedcVp8SvKE0+CWNwRmy9wYi4llgKvUDUB/03jXaHxTakb92qqdeST Pfax/KmGRuu8b2cMSN4IbMCIz3J8VTFsCARiqa6kjyXR4IkSSzOglqTjUX23/8vz 2wpvUE8rx3Jv3Yq1poGfBAudIwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGYWg/HW +qH5lcOTY7FVzBZ9GhbYMB8GA1UdIwQYMBaAFCvIqKy1LPDPfzE2lDAPU4ZoYjet MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDU0OS8xQzZGNEFEQzMw MzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhNOV9NVGFVTUE5VGhtaGlO NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4aW9yTFVzOE05X01UYVVNQTlUaG1oaU42MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA1NDkvMUM2RjRBREMzMDMxMTFFQTg4NkQ1MTdDQzRGOUFFMDIvN0E2MjlFOTAz MDMyMTFFQTlEQUI2NTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnkXgwDwQCAAIwCQMHACABDfILgDANBgkqhkiG9w0BAQsF AAOCAQEAYrviHmrHzlOhHROqwfTZsYIoXU7fw8CkQMPdLWK3sWHFZ6ZgHpyppR+5 DUFimVjEYPHGoAajE8FA5rrMbeEIohDHQvHd1+CiOt2nA3vgMTe0mYyeKFTbk3M8 BzE2hDcY+VQFeLieBMSDI1E1c/UhsUQsQ2sPSSkBqtA0+0CWt/Q61KlxeaPx6uUD MaSp46g4EE1ZaHdHd1G8nWYbtquzwonwV4CYbrfHfTyjB2FMay7to0x465P1C5Ac EniVGgfAE48l0rI7ryBpIyKCDwQ1WXlpAg8KCk2SdCeIx5XIUdBLO4l4aMEC8Ly3 jnm34oHcx7vlvMa/o95VRMAoSdD4Eg== -----END CERTIFICATE-----Generated at Mon May 6 23:05:47 2024 by rpki-client on console-fra.rpki-client.org