$ rpki-client -vvf rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/9F9FD574758811EA93AADD3FC4F9AE02.roa File: 9F9FD574758811EA93AADD3FC4F9AE02.roa (raw, json) Hash identifier: 0/VlMuMP0p7VgSYZY3H9ZBX+TYmyeoapGB5SuVBiWI0= Subject key identifier: AF:1A:9C:B1:EC:22:39:E8:FB:1E:FD:74:FA:2E:9B:F1:7C:55:3B:2D Certificate issuer: /CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA Certificate serial: 09D4 Authority key identifier: 3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/9F9FD574758811EA93AADD3FC4F9AE02.roa Signing time: Fri 04 Aug 2023 19:57:31 +0000 ROA not before: Fri 04 Aug 2023 19:57:31 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 135312 IP address blocks: 103.116.180.0/22 maxlen: 22 103.116.180.0/23 maxlen: 23 103.116.182.0/23 maxlen: 24 2402:fec0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2516 (0x9d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA Validity Not Before: Aug 4 19:57:31 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cd582b-2af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:f4:6e:f9:95:80:72:8a:89:03:ac:99:03: ca:93:96:31:1c:e1:10:db:64:86:65:2f:41:2d:ca: cf:a0:e8:78:72:a1:b5:d6:bf:e3:94:95:70:ca:2a: 06:6b:59:69:1d:ad:f5:c6:06:95:5d:f3:3f:af:02: ca:50:d4:f2:3a:29:76:02:36:bc:ca:4d:3a:a9:62: 22:ae:f9:75:38:57:0c:89:82:a1:e3:d3:46:20:73: 85:f4:31:5d:96:f3:f8:c1:d4:87:fb:10:35:18:60: d4:89:d2:42:2e:e6:22:d7:01:ed:bd:56:5c:bc:ac: 43:e7:05:28:34:56:97:16:4e:16:a9:fe:0b:c7:bc: 1a:1a:26:4e:37:71:61:41:44:10:a4:45:0c:24:96: f5:6a:17:6d:7b:ed:0d:5f:7e:4c:61:50:2a:8a:ca: 1e:89:c7:66:db:e2:a9:da:14:6f:8d:39:71:86:28: 12:dd:92:79:60:d5:48:0b:6f:5d:d4:90:3a:8b:b8: f3:fa:5c:d7:05:fc:6b:a2:c0:e0:3a:7f:66:73:68: 1c:e9:19:12:33:9a:d1:cc:cd:d3:0d:74:7a:b2:f9: aa:75:74:6d:ba:fe:cb:ab:c1:99:96:4d:9c:53:5f: f1:7d:bf:8e:fb:7e:c9:18:0d:18:a7:7b:9f:6f:7b: 9e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1A:9C:B1:EC:22:39:E8:FB:1E:FD:74:FA:2E:9B:F1:7C:55:3B:2D X509v3 Authority Key Identifier: keyid:3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/9F9FD574758811EA93AADD3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.180.0/22 IPv6: 2402:fec0::/32 Signature Algorithm: sha256WithRSAEncryption 2e:7f:56:93:3b:f1:95:ad:d5:e4:04:4c:a2:22:92:68:9f:ae: 78:7f:72:21:9a:39:02:4c:74:47:d2:39:87:e7:6c:1d:99:cd: f3:20:60:a2:37:f9:9c:68:91:b7:3a:a8:0f:41:7b:ba:c3:8a: 63:cb:08:a6:b6:71:56:76:99:7a:fd:78:e8:d4:21:eb:6d:9f: 97:15:c5:a3:72:65:a2:44:dc:70:c1:46:57:d0:31:a4:51:52: 94:28:ee:5d:f3:8b:77:08:6a:03:cb:28:f1:43:62:73:77:f5: db:02:2f:7d:2f:65:bd:a2:ac:bc:6c:c8:3a:08:d6:02:9e:2c: 3f:a5:6c:aa:b4:af:05:0d:1d:7c:04:f9:93:64:d4:8d:f7:7a: d9:67:d9:45:35:0e:f2:5e:8a:71:73:f0:71:5b:c7:71:85:de: ec:80:e1:40:3b:34:f3:06:42:3b:eb:c7:1f:8d:c7:c5:80:d3: 8a:6b:a1:ce:96:e4:a8:70:68:d6:ca:15:27:14:46:47:fc:5e: 4d:4b:2a:a6:40:49:14:47:da:cf:ab:2e:08:4c:9a:a0:75:d3: 07:b5:19:d9:02:8f:86:d6:74:5c:ae:6b:48:81:6e:fb:ae:c9: 90:ab:24:1c:72:de:aa:92:9e:67:fb:06:6c:9c:56:96:77:24: 15:b2:50:cd -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE3MUMxMTAvBgNVBAUTKDNGQjZGNkQwNjY1ODM4NkMyMzdCOEQxNDBEQUQxNUIy ODM4QkI1Q0EwHhcNMjMwODA0MTk1NzMxWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNkNTgyYi0yYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfv0bvmVgHKKiQOsmQPKk5YxHOEQ22SGZS9BLcrPoOh4cqG11r/jlJVwyioG a1lpHa31xgaVXfM/rwLKUNTyOil2Aja8yk06qWIirvl1OFcMiYKh49NGIHOF9DFd lvP4wdSH+xA1GGDUidJCLuYi1wHtvVZcvKxD5wUoNFaXFk4Wqf4Lx7waGiZON3Fh QUQQpEUMJJb1ahdte+0NX35MYVAqisoeicdm2+Kp2hRvjTlxhigS3ZJ5YNVIC29d 1JA6i7jz+lzXBfxrosDgOn9mc2gc6RkSM5rRzM3TDXR6svmqdXRtuv7Lq8GZlk2c U1/xfb+O+37JGA0Yp3ufb3uexQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFK8anLHs Ijno+x79dPoum/F8VTstMB8GA1UdIwQYMBaAFD+29tBmWDhsI3uNFA2tFbKDi7XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTcxQy9FN0VGMDgzNjNF MTUxMUVBQjM3MUE1NDFDNEY5QUUwMi9QN2IyMEdaWU9Hd2plNDBVRGEwVnNvT0x0 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3YjIwR1pZT0d3amU0MFVEYTBWc29PTHRjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjE3MUMvRTdFRjA4MzYzRTE1MTFFQUIzNzFBNTQxQzRGOUFFMDIvOUY5RkQ1NzQ3 NTg4MTFFQTkzQUFERDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJndLQwDQQCAAIwBwMFACQC/sAwDQYJKoZIhvcNAQELBQAD ggEBAC5/VpM78ZWt1eQETKIikmifrnh/ciGaOQJMdEfSOYfnbB2ZzfMgYKI3+Zxo kbc6qA9Be7rDimPLCKa2cVZ2mXr9eOjUIettn5cVxaNyZaJE3HDBRlfQMaRRUpQo 7l3zi3cIagPLKPFDYnN39dsCL30vZb2irLxsyDoI1gKeLD+lbKq0rwUNHXwE+ZNk 1I33etln2UU1DvJeinFz8HFbx3GF3uyA4UA7NPMGQjvrxx+Nx8WA04proc6W5Khw aNbKFScURkf8Xk1LKqZASRRH2s+rLghMmqB10we1GdkCj4bWdFyua0iBbvuuyZCr JBxy3qqSnmf7BmycVpZ3JBWyUM0= -----END CERTIFICATE-----Generated at Thu May 16 21:45:30 2024 by rpki-client on console-fra.rpki-client.org