$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa File: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (raw, json) Hash identifier: 85xRku9zBr5QFRliCNa1tHlA5DPnsE4QcgRNYFEIP28= Subject key identifier: A4:33:C0:7B:DE:CC:AF:DD:23:78:84:5E:60:C6:6D:7B:97:40:B3:F1 Certificate issuer: /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Certificate serial: 0743 Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa Signing time: Wed 05 Jul 2023 06:07:48 +0000 ROA not before: Wed 05 Jul 2023 06:07:48 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 136533 IP address blocks: 103.91.240.0/22 maxlen: 22 123.253.72.0/22 maxlen: 22 123.253.74.0/24 maxlen: 24 2401:17c0::/32 maxlen: 32 2401:17c0::/48 maxlen: 48 2401:17c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1859 (0x743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Validity Not Before: Jul 5 06:07:48 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64a508b4-0bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:54:66:70:37:52:f0:f6:9f:cb:54:c9:c3:fd: f6:48:b3:a5:a4:68:24:bc:82:a7:c9:63:de:a7:3e: 27:04:0f:e3:5d:c4:71:04:2c:fe:36:e8:16:f7:a4: db:e7:b8:fc:f3:49:a2:30:5e:77:7a:19:49:78:d6: 24:8b:0b:2d:c6:0b:3f:b8:4a:c5:ed:e3:d9:ac:cb: 25:87:e4:9a:60:b0:34:e9:c4:d7:d1:3d:27:bf:34: 71:3f:ac:6a:d2:02:b1:83:94:43:bc:ae:c5:ab:a2: 11:5d:52:8d:47:d0:5b:4d:1e:af:fd:10:9a:99:da: d3:fe:ce:7e:0a:23:ed:9f:44:02:c0:fd:63:b9:53: cf:21:6b:45:90:9a:cf:a3:62:f9:68:95:f0:59:6a: aa:ad:45:32:56:8d:ee:ef:f0:bb:bd:65:89:b7:bf: 6a:30:ef:84:2d:46:d3:3a:47:a1:34:f0:7b:2b:30: cf:93:31:d7:4c:91:7e:01:98:b0:64:f4:6c:ef:5d: 4e:b7:7f:ef:5f:67:4d:23:35:4c:73:29:f4:4d:22: 11:95:88:18:81:06:1b:87:86:18:0b:f3:b9:8e:b2: 39:f6:35:61:68:b7:e4:ff:52:ef:c7:93:0a:6b:88: 78:d6:54:71:6b:79:d7:0f:d6:4f:61:5e:e8:2f:1e: 0e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:33:C0:7B:DE:CC:AF:DD:23:78:84:5E:60:C6:6D:7B:97:40:B3:F1 X509v3 Authority Key Identifier: keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.240.0/22 123.253.72.0/22 IPv6: 2401:17c0::/32 Signature Algorithm: sha256WithRSAEncryption b6:5e:ab:07:c1:4d:c8:35:44:55:95:55:38:c9:dc:b8:9a:58: ab:f7:f2:ce:bf:28:ca:d6:e0:e8:e2:09:a9:5f:73:10:9c:ed: aa:ec:6d:ec:80:6e:9c:41:ab:99:3a:f2:5c:94:f7:b9:bb:f1: f0:7c:ad:62:4b:87:8a:56:ec:87:2b:d8:5d:c0:0d:2e:89:03: b5:8f:f4:c9:fd:0c:ba:58:2d:b8:fa:03:9b:8f:06:13:2d:a7: b2:88:4f:c5:3c:86:44:62:a4:22:b7:4a:6b:c0:2b:12:fc:98: 5f:1d:ee:c8:88:1c:54:f3:96:ea:59:6f:28:38:f2:1e:b6:97: 96:b0:d9:8e:81:21:5a:0f:bd:20:96:56:fe:93:19:1e:fa:c5: 85:ad:86:df:73:a6:27:32:09:a8:b1:1f:34:8e:e1:83:07:9b: 92:1d:c8:f4:37:c0:b0:09:f6:72:49:f2:47:3f:0b:69:9c:f0: 7e:42:8e:5b:34:d8:5c:c9:42:21:1b:e6:4d:c3:9b:4d:2f:e3: 39:4c:c8:0e:ce:47:65:3f:73:70:5a:af:11:d1:d7:5c:ff:5b: e2:92:6a:e0:0c:70:79:ea:85:37:25:13:49:a7:05:2e:1f:7e: 61:c5:82:1b:54:e8:b4:66:48:3f:b5:5f:6b:c5:b2:d3:70:ef: 72:a6:93:98 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwOUIxMTAvBgNVBAUTKDFGRjRFMzNFRDc3MzBEQ0UzMjMxRDJFREI1NEQ5NkQ5 RUFCNUY3RjYwHhcNMjMwNzA1MDYwNzQ4WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE1MDhiNC0wYmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61RmcDdS8Pafy1TJw/32SLOlpGgkvIKnyWPepz4nBA/jXcRxBCz+NugW96Tb 57j880miMF53ehlJeNYkiwstxgs/uErF7ePZrMslh+SaYLA06cTX0T0nvzRxP6xq 0gKxg5RDvK7Fq6IRXVKNR9BbTR6v/RCamdrT/s5+CiPtn0QCwP1juVPPIWtFkJrP o2L5aJXwWWqqrUUyVo3u7/C7vWWJt79qMO+ELUbTOkehNPB7KzDPkzHXTJF+AZiw ZPRs711Ot3/vX2dNIzVMcyn0TSIRlYgYgQYbh4YYC/O5jrI59jVhaLfk/1Lvx5MK a4h41lRxa3nXD9ZPYV7oLx4OxwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFKQzwHve zK/dI3iEXmDGbXuXQLPxMB8GA1UdIwQYMBaAFB/04z7Xcw3OMjHS7bVNltnqtff2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA5Qi83Njc4RjJGRUJB OTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRjNHlNZEx0dFUyVzJlcTE5 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hfVGpQdGR6RGM0eU1kTHR0VTJXMmVxMTlfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgwOUIvNzY3OEYyRkVCQTkxMTFFQUFBQjVDQzU3QzRGOUFFMDIvMkQ0QkREQTI5 RDhFMTFFREJFQkVDRTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnW/ADBAJ7/UgwDQQCAAIwBwMFACQBF8AwDQYJKoZIhvcN AQELBQADggEBALZeqwfBTcg1RFWVVTjJ3LiaWKv38s6/KMrW4OjiCalfcxCc7ars beyAbpxBq5k68lyU97m78fB8rWJLh4pW7Icr2F3ADS6JA7WP9Mn9DLpYLbj6A5uP BhMtp7KIT8U8hkRipCK3SmvAKxL8mF8d7siIHFTzlupZbyg48h62l5aw2Y6BIVoP vSCWVv6TGR76xYWtht9zpicyCaixHzSO4YMHm5IdyPQ3wLAJ9nJJ8kc/C2mc8H5C jls02FzJQiEb5k3Dm00v4zlMyA7OR2U/c3BarxHR11z/W+KSauAMcHnqhTclE0mn BS4ffmHFghtU6LRmSD+1X2vFstNw73Kmk5g= -----END CERTIFICATE-----Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org