$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/9672E862793811EE92C54834C4F9AE02.roa File: 9672E862793811EE92C54834C4F9AE02.roa (raw, json) Hash identifier: fy/XQ3orV/fnfoxTdm1B9LEP7BHKU3FpLozA+E8kZU0= Subject key identifier: 61:5C:5D:7C:39:83:A6:B5:AB:69:62:CB:9C:79:C7:AB:62:1A:54:08 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 082E Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/9672E862793811EE92C54834C4F9AE02.roa Signing time: Tue 05 Dec 2023 13:42:55 +0000 ROA not before: Tue 05 Dec 2023 13:42:55 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 38074 IP address blocks: 103.152.178.0/24 maxlen: 24 103.160.48.0/24 maxlen: 24 2001:df4:1780::/48 maxlen: 48 2406:7ec0::/32 maxlen: 32 2406:7ec0::/33 maxlen: 33 2406:7ec0:400::/39 maxlen: 39 2406:7ec0:600::/39 maxlen: 39 2406:7ec0:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2094 (0x82e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Dec 5 13:42:55 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=656f28de-f69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cc:75:5e:34:da:32:49:c7:8f:4d:59:0a:ff: 96:fc:0b:16:d9:c3:c0:36:e3:fa:d6:9e:36:40:85: 2d:63:87:a8:17:62:d1:7e:9d:df:ad:eb:f4:f8:5c: 8b:26:6c:52:32:68:4c:71:18:93:52:f2:9e:b4:dc: 6f:b5:3d:2e:ea:17:76:ef:c5:70:2c:6b:13:62:85: 11:51:91:54:26:69:44:ca:41:f8:58:b9:12:49:a2: 36:d7:75:78:6f:fa:16:75:25:bf:12:29:df:25:68: 26:82:68:a0:44:bb:81:64:ab:4f:08:99:25:e2:a8: 76:36:49:dd:36:76:1c:22:d9:01:8e:7e:cd:ba:7f: ce:68:69:4c:a3:95:90:db:4b:73:8f:4e:92:2f:60: d7:9f:84:be:1c:03:aa:66:4b:36:ec:43:6a:51:f8: a0:c0:15:00:be:56:85:b3:fb:98:26:d2:0d:c3:1a: 50:ef:6a:b8:7b:09:4e:87:d6:eb:87:86:dc:65:37: 4f:f1:8b:f8:72:3b:34:f4:82:8a:78:a6:80:51:95: 3e:da:63:2e:1f:07:f3:03:53:e4:a0:4f:42:7e:02: e5:b3:64:dc:3e:ed:54:75:b2:2f:ce:af:7f:dd:f4: b0:3b:f0:a2:26:cc:2e:dd:8b:cd:92:54:a0:a6:96: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5C:5D:7C:39:83:A6:B5:AB:69:62:CB:9C:79:C7:AB:62:1A:54:08 X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/9672E862793811EE92C54834C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.178.0/24 103.160.48.0/24 IPv6: 2001:df4:1780::/48 2406:7ec0::/32 Signature Algorithm: sha256WithRSAEncryption 5f:cd:08:4c:e9:6f:13:56:81:61:db:26:b6:7c:69:3d:d3:72: a9:f3:12:ab:48:d4:7b:52:00:a7:8b:aa:7d:69:9d:09:45:c2: 96:af:5e:bb:c8:6c:66:24:94:9c:9f:af:7f:25:ad:7c:f8:c2: 2f:ba:7e:17:6b:93:8d:75:41:b3:8e:50:71:4c:f9:de:77:c6: bc:23:ad:fd:00:c5:34:76:6e:21:6f:bb:26:bc:88:6f:8a:8f: 2d:95:99:f4:64:b3:65:50:53:fe:7b:28:df:2f:17:0f:22:19: 2a:88:35:51:d4:86:e2:14:3a:85:9b:d8:7b:45:4a:d0:05:45: 10:74:e7:6c:40:b1:41:51:83:c0:0d:4b:73:b0:ad:96:7a:df: 88:25:4c:fb:c7:b0:25:7d:78:4e:b2:64:2c:9d:7b:e3:08:e7: 40:d2:08:77:ac:95:89:16:3f:67:50:9e:4f:d5:69:83:75:27: 43:c4:b1:8b:88:ff:0b:dc:29:48:5d:b6:52:05:08:0d:b4:27: 34:b4:e1:7b:1c:af:ee:7a:18:6b:9a:c2:ea:69:34:75:d2:3a: 73:4b:b8:1e:77:95:da:c7:e0:ab:f3:b6:f1:e3:9c:9a:fa:5f: 46:fe:b4:58:5f:d3:f5:dd:dc:2d:36:04:d3:87:28:64:5e:75: eb:24:75:a9 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjMxMjA1MTM0MjU1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZmMjhkZS1mNjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Mx1XjTaMknHj01ZCv+W/AsW2cPANuP61p42QIUtY4eoF2LRfp3frev0+FyL JmxSMmhMcRiTUvKetNxvtT0u6hd278VwLGsTYoURUZFUJmlEykH4WLkSSaI213V4 b/oWdSW/EinfJWgmgmigRLuBZKtPCJkl4qh2NkndNnYcItkBjn7Nun/OaGlMo5WQ 20tzj06SL2DXn4S+HAOqZks27ENqUfigwBUAvlaFs/uYJtINwxpQ72q4ewlOh9br h4bcZTdP8Yv4cjs09IKKeKaAUZU+2mMuHwfzA1PkoE9CfgLls2TcPu1UdbIvzq9/ 3fSwO/CiJswu3YvNklSgppawowIDAQABo4ICszCCAq8wHQYDVR0OBBYEFGFcXXw5 g6a1q2liy5x5x6tiGlQIMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjc3NzAvRTY4MTA0MTBDMEFFMTFFQUI5NUFCNTcyQzRGOUFFMDIvOTY3MkU4NjI3 OTM4MTFFRTkyQzU0ODM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMBIEAgABMAwDBABnmLIDBABnoDAwFgQCAAIwEAMHACABDfQXgAMFACQGfsAw DQYJKoZIhvcNAQELBQADggEBAF/NCEzpbxNWgWHbJrZ8aT3TcqnzEqtI1HtSAKeL qn1pnQlFwpavXrvIbGYklJyfr38lrXz4wi+6fhdrk411QbOOUHFM+d53xrwjrf0A xTR2biFvuya8iG+Kjy2VmfRks2VQU/57KN8vFw8iGSqINVHUhuIUOoWb2HtFStAF RRB052xAsUFRg8ANS3OwrZZ634glTPvHsCV9eE6yZCyde+MI50DSCHeslYkWP2dQ nk/VaYN1J0PEsYuI/wvcKUhdtlIFCA20JzS04Xscr+56GGuawuppNHXSOnNLuB53 ldrH4KvztvHjnJr6X0b+tFhf0/Xd3C02BNOHKGRedeskdak= -----END CERTIFICATE-----Generated at Thu May 16 22:58:18 2024 by rpki-client on console-fra.rpki-client.org