$ rpki-client -vvf rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/503D2222018111EBB0502527C4F9AE02.roa File: 503D2222018111EBB0502527C4F9AE02.roa (raw, json) Hash identifier: 3enXPqnFzMHU9dBHb+GMjG4Ixqaeyokw5ixU8F4DMjc= Subject key identifier: 91:32:84:54:EA:AB:36:28:46:AF:74:2A:1D:79:CA:25:7A:98:54:A0 Certificate issuer: /CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B Certificate serial: 0918 Authority key identifier: FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/503D2222018111EBB0502527C4F9AE02.roa Signing time: Sun 18 Feb 2024 20:59:16 +0000 ROA not before: Sun 18 Feb 2024 20:59:16 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 49645 IP address blocks: 103.148.42.0/24 maxlen: 24 103.157.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 21:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2328 (0x918) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B Validity Not Before: Feb 18 20:59:16 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d26fa4-008b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:f1:d5:e2:13:30:b8:a8:cc:2d:40:48:05: 17:62:5d:66:12:70:ef:d3:5d:e0:73:37:fb:1a:3a: f2:d4:cf:12:48:50:f7:a6:d6:61:d6:64:22:09:1d: a7:8f:58:77:4e:b6:17:d0:43:94:dc:99:59:a3:7b: 21:32:23:a5:f0:1a:e5:b2:bf:2c:4b:ab:66:54:d1: 16:9f:f2:a4:b3:b4:eb:41:dc:c8:cc:84:18:f0:bf: d3:c8:7d:d7:80:3a:33:b9:71:fa:c1:ad:79:7a:06: c5:bf:3c:88:64:99:f0:96:15:34:9a:ed:3a:f5:d3: d9:10:8b:7d:21:13:ee:8b:4f:d5:1e:79:f1:60:dd: 83:74:bd:75:b4:dd:86:69:eb:98:b5:13:14:07:f1: 33:66:3a:e0:f0:fc:c4:7e:34:6a:c4:c2:72:0f:b7: 01:75:ee:1b:d0:3e:72:18:a5:7a:12:ea:ac:df:6c: 35:e4:73:20:82:0e:e3:3e:a1:ee:48:d6:c1:b9:17: ce:54:fe:52:52:a4:c6:31:45:cd:51:d0:08:ef:2b: aa:14:e9:b1:b4:1e:bd:81:1c:5a:5f:55:57:41:df: 93:11:dd:d9:98:a1:ae:cd:02:9f:10:c5:3e:67:fb: 61:e7:fd:e1:e6:91:d4:4b:8f:0f:b4:5e:d6:6f:8b: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:32:84:54:EA:AB:36:28:46:AF:74:2A:1D:79:CA:25:7A:98:54:A0 X509v3 Authority Key Identifier: keyid:FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/503D2222018111EBB0502527C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.42.0/24 103.157.75.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:b7:60:df:6d:0c:41:e7:e5:80:19:e0:43:88:26:f8:63:84: 59:51:0d:8b:1c:b8:78:50:04:52:59:a1:58:5f:d7:1c:af:59: 6c:64:a9:e9:09:0d:f2:f4:9e:3a:14:01:d9:c1:76:18:b7:66: 6f:78:3c:17:dc:29:bc:c8:fe:98:de:2f:e5:4f:f9:60:5c:f1: 03:d7:30:fb:c9:0b:8d:ab:01:3f:4b:13:65:d6:6d:b0:0b:19: e4:22:80:a1:7a:a6:47:4b:f1:98:c4:06:bd:2b:08:0c:50:e2: 22:84:a5:2f:42:4b:1e:38:78:89:b2:75:a9:cd:30:50:db:b0: 03:c8:a3:93:1f:05:9a:c4:2b:c1:30:33:af:b0:95:3e:0e:d3: b0:f9:f7:f6:40:f6:52:ac:72:78:48:50:01:af:f0:bd:11:c3: ab:45:97:a0:f6:73:9c:57:1a:c4:dc:dc:d2:41:52:ae:2e:f7: f7:04:a3:e0:ef:1c:cb:b3:70:5c:3c:51:ca:a0:79:97:ff:b6: 80:9f:7a:31:21:03:ac:81:72:a0:3e:6c:49:80:24:3c:84:21: 9e:9a:00:14:09:69:f5:f7:15:48:0f:70:5c:68:95:de:17:10: b2:58:9d:24:9a:0d:4c:ea:32:18:90:8f:f0:cb:e2:4c:e3:d5: 8a:56:b7:67 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY2QzUxMTAvBgNVBAUTKEZFRjEzQUI4NTJCODkyQUJBMjhCN0Y0QjI1MjU3MDg5 OTY0RDc2NkIwHhcNMjQwMjE4MjA1OTE2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQyNmZhNC0wMDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvzx1eITMLiozC1ASAUXYl1mEnDv013gczf7Gjry1M8SSFD3ptZh1mQiCR2n j1h3TrYX0EOU3JlZo3shMiOl8Brlsr8sS6tmVNEWn/Kks7TrQdzIzIQY8L/TyH3X gDozuXH6wa15egbFvzyIZJnwlhU0mu069dPZEIt9IRPui0/VHnnxYN2DdL11tN2G aeuYtRMUB/EzZjrg8PzEfjRqxMJyD7cBde4b0D5yGKV6Euqs32w15HMggg7jPqHu SNbBuRfOVP5SUqTGMUXNUdAI7yuqFOmxtB69gRxaX1VXQd+TEd3ZmKGuzQKfEMU+ Z/th5/3h5pHUS48PtF7Wb4sXbwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJEyhFTq qzYoRq90Kh15yiV6mFSgMB8GA1UdIwQYMBaAFP7xOrhSuJKroot/SyUlcImWTXZr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjZDNS9BMkNEMzU0RTc3 RUUxMUVBQTVEMDBDMjhDNEY5QUUwMi9fdkU2dUZLNGtxdWlpMzlMSlNWd2laWk5k bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192RTZ1Rks0a3F1aWkzOUxKU1Z3aVpaTmRtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY2QzUvQTJDRDM1NEU3N0VFMTFFQUE1RDAwQzI4QzRGOUFFMDIvNTAzRDIyMjIw MTgxMTFFQkIwNTAyNTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnlCoDBABnnUswDQYJKoZIhvcNAQELBQADggEBAH63YN9t DEHn5YAZ4EOIJvhjhFlRDYscuHhQBFJZoVhf1xyvWWxkqekJDfL0njoUAdnBdhi3 Zm94PBfcKbzI/pjeL+VP+WBc8QPXMPvJC42rAT9LE2XWbbALGeQigKF6pkdL8ZjE Br0rCAxQ4iKEpS9CSx44eImydanNMFDbsAPIo5MfBZrEK8EwM6+wlT4O07D59/ZA 9lKscnhIUAGv8L0Rw6tFl6D2c5xXGsTc3NJBUq4u9/cEo+DvHMuzcFw8UcqgeZf/ toCfejEhA6yBcqA+bEmAJDyEIZ6aABQJafX3FUgPcFxold4XELJYnSSaDUzqMhiQ j/DL4kzj1YpWt2c= -----END CERTIFICATE-----Generated at Sun May 26 23:05:38 2024 by rpki-client on console-ams.rpki-client.org