$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/498ED6046FD011EDA007D478C4F9AE02.roa File: 498ED6046FD011EDA007D478C4F9AE02.roa (raw, json) Hash identifier: pK01oVo+gCZKxEOHwAayzXnpDV9OalCfPxrHTb2LSTA= Subject key identifier: D1:46:17:4D:47:AA:C5:24:34:68:18:70:13:01:89:3C:BA:4C:2B:EF Certificate issuer: /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Certificate serial: 0AE1 Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/498ED6046FD011EDA007D478C4F9AE02.roa Signing time: Sat 26 Aug 2023 19:16:40 +0000 ROA not before: Sat 26 Aug 2023 19:16:40 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 137959 IP address blocks: 103.31.178.0/23 maxlen: 24 103.118.76.0/22 maxlen: 24 2403:2e40:1::/48 maxlen: 48 2403:2e40:2::/48 maxlen: 48 2403:2e40:3::/48 maxlen: 48 2403:2e40:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Validity Not Before: Aug 26 19:16:40 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ea4f98-0205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:c2:0e:d7:5f:0e:42:80:c7:d5:ee:aa:eb: fb:e0:61:a5:34:a6:0b:ed:ef:ad:cb:01:c1:6e:31: fb:8a:3d:68:9c:53:cd:81:78:a4:35:d8:32:b1:1a: 44:18:b3:0d:81:c6:e1:14:55:95:47:57:6e:1b:cb: d3:94:de:a8:5f:30:b8:04:43:f5:82:69:28:df:80: 67:77:3d:94:24:b1:53:15:90:51:c5:84:a0:5d:c5: 4f:12:ee:d8:08:e4:84:e4:23:47:c1:11:3b:58:eb: 32:a2:33:97:f9:f8:cd:24:0d:da:0c:01:db:57:ed: e9:02:7b:74:55:19:d8:f8:b3:04:08:25:c6:89:87: 1f:26:b4:d3:7a:e2:7f:b9:c3:26:3d:de:8c:0f:de: 1a:4e:df:8e:a6:32:79:17:58:04:bb:0a:5a:d3:e1: 12:c6:ff:0b:59:bc:ec:17:a1:46:95:2c:11:6e:f3: c7:c5:82:68:d5:f1:6d:d7:10:8f:54:a1:68:13:af: 6b:65:40:f8:80:fb:57:0a:70:21:0f:a1:77:5f:0f: 35:52:6f:4c:78:2f:4a:62:90:e5:ef:d1:3c:13:5b: 65:01:4f:81:2d:c0:1b:e5:ea:f9:3f:5f:be:f0:01: 2c:96:fc:ae:a0:81:26:e2:77:ec:c5:41:d8:4a:5a: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:46:17:4D:47:AA:C5:24:34:68:18:70:13:01:89:3C:BA:4C:2B:EF X509v3 Authority Key Identifier: keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/498ED6046FD011EDA007D478C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.31.178.0/23 103.118.76.0/22 IPv6: 2403:2e40:1::-2403:2e40:3:ffff:ffff:ffff:ffff:ffff 2403:2e40:10::/48 Signature Algorithm: sha256WithRSAEncryption 74:90:69:e7:4e:f9:df:d3:21:d0:6d:55:d5:d5:40:ed:b0:5d: 31:68:47:53:1b:26:de:e0:58:cc:2a:df:b7:44:59:80:60:4c: 98:7c:b9:cc:1f:99:2a:3e:c4:ed:69:a4:a7:7e:c8:e1:8f:f8: f3:5f:95:8d:1c:bf:cd:ea:fd:ca:0c:eb:86:ae:08:cc:8b:f2: 69:99:0d:24:e0:5a:68:22:af:98:6a:1c:02:dc:68:d0:cc:0a: 9e:5a:64:dc:ef:96:50:57:a5:c1:d9:6c:33:ce:bf:d9:08:55: 17:d4:d9:a0:c0:a6:1e:9d:f1:29:48:b0:c9:c7:40:38:93:8e: 75:e3:9e:fd:85:4a:a0:e2:51:5c:1c:f7:39:2e:0f:d4:56:20: c3:2d:6a:5d:58:7e:8d:49:f1:ef:78:2a:4f:cb:6a:0d:17:29: 3d:20:d4:d9:ce:ee:a7:81:23:6a:dd:a8:39:ec:fc:6f:e9:b5: de:64:80:78:14:af:53:21:ac:2e:90:1a:76:a6:3a:b5:06:c1: 48:a8:eb:2e:ab:87:97:40:12:d7:38:de:be:47:3a:7b:7b:a7: 41:26:d0:b6:59:55:41:95:4a:90:34:de:2e:c6:8a:70:65:4b: 67:64:b7:c3:9d:6b:c0:5c:69:31:44:4c:bd:37:4c:8d:bb:b1: 19:3c:26:12 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQkYxMTAvBgNVBAUTKEQwQjk3REMwMUQ4OUYyM0E4MDVGQkU1ODYxRUUzN0JG MDk5QzNGRjAwHhcNMjMwODI2MTkxNjQwWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGVhNGY5OC0wMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbvCDtdfDkKAx9Xuquv74GGlNKYL7e+tywHBbjH7ij1onFPNgXikNdgysRpE GLMNgcbhFFWVR1duG8vTlN6oXzC4BEP1gmko34Bndz2UJLFTFZBRxYSgXcVPEu7Y COSE5CNHwRE7WOsyojOX+fjNJA3aDAHbV+3pAnt0VRnY+LMECCXGiYcfJrTTeuJ/ ucMmPd6MD94aTt+OpjJ5F1gEuwpa0+ESxv8LWbzsF6FGlSwRbvPHxYJo1fFt1xCP VKFoE69rZUD4gPtXCnAhD6F3Xw81Um9MeC9KYpDl79E8E1tlAU+BLcAb5er5P1++ 8AEslvyuoIEm4nfsxUHYSloyeQIDAQABo4ICwDCCArwwHQYDVR0OBBYEFNFGF01H qsUkNGgYcBMBiTy6TCvvMB8GA1UdIwQYMBaAFNC5fcAdifI6gF++WGHuN78JnD/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJCRi80NEVDNTEwNjEw MzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhqcUFYNzVZWWU0M3Z3bWNQ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMbDl3QjJKOGpxQVg3NVlZZTQzdndtY1BfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYyQkYvNDRFQzUxMDYxMDMwMTFFQUIxMTJBMjMyQzRGOUFFMDIvNDk4RUQ2MDQ2 RkQwMTFFREEwMDdENDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E OzA5MBIEAgABMAwDBAFnH7IDBAJndkwwIwQCAAIwHTASAwcAJAMuQAABAwcCJAMu QAAAAwcAJAMuQAAQMA0GCSqGSIb3DQEBCwUAA4IBAQB0kGnnTvnf0yHQbVXV1UDt sF0xaEdTGybe4FjMKt+3RFmAYEyYfLnMH5kqPsTtaaSnfsjhj/jzX5WNHL/N6v3K DOuGrgjMi/JpmQ0k4FpoIq+YahwC3GjQzAqeWmTc75ZQV6XB2Wwzzr/ZCFUX1Nmg wKYenfEpSLDJx0A4k4514579hUqg4lFcHPc5Lg/UViDDLWpdWH6NSfHveCpPy2oN Fyk9INTZzu6ngSNq3ag57Pxv6bXeZIB4FK9TIawukBp2pjq1BsFIqOsuq4eXQBLX ON6+Rzp7e6dBJtC2WVVBlUqQNN4uxopwZUtnZLfDnWvAXGkxREy9N0yNu7EZPCYS -----END CERTIFICATE-----Generated at Thu May 16 21:45:30 2024 by rpki-client on console-fra.rpki-client.org