$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/8ADFF772924011ED867BE311C4F9AE02.roa File: 8ADFF772924011ED867BE311C4F9AE02.roa (raw, json) Hash identifier: wgzIXbW6KprROQBjZLM8QfcB+crPxbYuiK0sdAP6dQg= Subject key identifier: B9:C0:58:34:5C:CF:AD:51:1B:F7:FE:97:03:EE:0A:3B:26:D2:6A:6C Certificate issuer: /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF Certificate serial: 0D76 Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/8ADFF772924011ED867BE311C4F9AE02.roa Signing time: Thu 04 Apr 2024 18:57:26 +0000 ROA not before: Thu 04 Apr 2024 18:57:26 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 133076 IP address blocks: 103.18.160.0/24 maxlen: 24 103.18.161.0/24 maxlen: 24 103.18.162.0/24 maxlen: 24 103.18.163.0/24 maxlen: 24 116.204.160.0/24 maxlen: 24 116.204.161.0/24 maxlen: 24 116.204.162.0/24 maxlen: 24 116.204.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3446 (0xd76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF Validity Not Before: Apr 4 18:57:26 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660ef816-378e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:97:0e:26:09:8f:fd:02:fb:68:8c:0e:48: c8:e1:a2:66:0b:74:a4:82:2e:10:99:9e:16:c6:4f: 6c:f2:f1:30:f7:b7:56:5e:bf:61:4c:45:b9:50:dc: 11:59:05:4f:0c:d4:1f:f4:1e:14:7d:da:4f:a9:7d: e0:ac:69:8a:16:d1:b3:53:34:a2:39:8d:56:29:a1: e3:03:09:6a:33:9d:b6:86:60:9f:a3:27:6c:61:f6: f1:50:9e:15:e9:05:df:b9:5a:a6:94:d9:f3:b7:de: 9c:69:8c:4b:57:ce:42:70:a5:bc:0b:f7:1e:06:4d: 91:dd:fa:67:db:96:a5:dc:32:97:ae:2b:43:b1:80: 21:eb:e0:de:56:ec:46:04:f0:6d:e2:9e:7d:b4:f4: ae:24:6a:56:34:6b:65:11:9f:71:af:81:ab:b9:b8: 61:15:ff:47:7c:3d:54:a7:70:43:d9:ce:ed:fc:ba: 8e:28:03:23:12:5c:01:7d:37:d7:83:1a:53:97:43: d4:5a:ff:f4:6c:63:70:33:50:26:ce:81:56:a0:cf: 49:6d:d6:04:8c:87:7f:6b:51:9a:b4:39:28:a8:80: 14:07:27:74:63:35:3d:f0:70:92:aa:96:28:ac:f9: f2:d3:40:ef:ae:50:24:50:f0:67:a7:a8:e7:4a:8d: 18:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C0:58:34:5C:CF:AD:51:1B:F7:FE:97:03:EE:0A:3B:26:D2:6A:6C X509v3 Authority Key Identifier: keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/8ADFF772924011ED867BE311C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.18.160.0/22 116.204.160.0/22 Signature Algorithm: sha256WithRSAEncryption a5:7e:1b:1e:06:a6:55:fe:60:fd:81:8b:eb:6f:7c:9f:e3:75: b8:36:b7:9e:d1:21:cb:10:db:43:b1:20:5e:a6:fd:48:da:15: fa:99:ad:a7:07:c1:24:3e:21:19:53:fe:4c:7a:cc:fd:8b:02: 2d:72:9a:41:36:79:51:16:78:b9:1c:f5:31:d2:b1:5b:49:be: ea:ca:67:ad:ec:0f:ce:d7:24:5b:b3:ad:63:f2:66:c7:42:65: ec:75:72:9e:91:cd:80:f7:46:1a:1a:6c:49:8c:b0:ca:49:fb: ca:c0:2e:f7:cf:e9:33:bf:59:88:c9:df:c8:d0:7e:f1:19:18: be:1a:25:d0:fe:04:68:9a:6a:25:4c:a2:04:a3:f8:54:98:89: 34:28:14:ef:d1:cf:da:fc:94:eb:90:d8:97:49:4c:bf:bd:65: a1:72:69:5d:70:26:9f:cb:0c:11:8a:d7:d3:e4:04:d2:eb:8f: 5e:9b:2e:cf:f9:2c:62:1c:73:fa:ea:0b:a0:bf:65:16:63:0e: f7:3e:ee:15:6f:2d:9d:0b:c1:85:b5:36:65:24:5b:24:d1:75: cd:4e:7e:0a:14:f3:c1:87:aa:0c:c1:a9:b7:26:9e:2b:24:56: 27:df:46:3c:5a:83:42:bf:07:78:20:fe:76:c7:2e:b1:90:47: 2c:3d:0c:53 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlGMDgxMTAvBgNVBAUTKENFOENBRDM1NjIxQTkwMTJDNDBCMzYzNzUzN0NBNDBF M0QwN0U4Q0YwHhcNMjQwNDA0MTg1NzI2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBlZjgxNi0zNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFCXDiYJj/0C+2iMDkjI4aJmC3Skgi4QmZ4Wxk9s8vEw97dWXr9hTEW5UNwR WQVPDNQf9B4UfdpPqX3grGmKFtGzUzSiOY1WKaHjAwlqM522hmCfoydsYfbxUJ4V 6QXfuVqmlNnzt96caYxLV85CcKW8C/ceBk2R3fpn25al3DKXritDsYAh6+DeVuxG BPBt4p59tPSuJGpWNGtlEZ9xr4GrubhhFf9HfD1Up3BD2c7t/LqOKAMjElwBfTfX gxpTl0PUWv/0bGNwM1AmzoFWoM9JbdYEjId/a1GatDkoqIAUByd0YzU98HCSqpYo rPny00DvrlAkUPBnp6jnSo0YZwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLnAWDRc z61RG/f+lwPuCjsm0mpsMB8GA1UdIwQYMBaAFM6MrTViGpASxAs2N1N8pA49B+jP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUYwOC8zMDkwRDkxNEEx NEMxMUU5ODQ3NUE4MkRDNEY5QUUwMi96b3l0TldJYWtCTEVDelkzVTN5a0RqMEg2 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pveXROV0lha0JMRUN6WTNVM3lrRGowSDZNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjlGMDgvMzA5MEQ5MTRBMTRDMTFFOTg0NzVBODJEQzRGOUFFMDIvOEFERkY3NzI5 MjQwMTFFRDg2N0JFMzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnEqADBAJ0zKAwDQYJKoZIhvcNAQELBQADggEBAKV+Gx4G plX+YP2Bi+tvfJ/jdbg2t57RIcsQ20OxIF6m/UjaFfqZracHwSQ+IRlT/kx6zP2L Ai1ymkE2eVEWeLkc9THSsVtJvurKZ63sD87XJFuzrWPyZsdCZex1cp6RzYD3Rhoa bEmMsMpJ+8rALvfP6TO/WYjJ38jQfvEZGL4aJdD+BGiaaiVMogSj+FSYiTQoFO/R z9r8lOuQ2JdJTL+9ZaFyaV1wJp/LDBGK19PkBNLrj16bLs/5LGIcc/rqC6C/ZRZj Dvc+7hVvLZ0LwYW1NmUkWyTRdc1OfgoU88GHqgzBqbcmniskViffRjxag0K/B3gg /nbHLrGQRyw9DFM= -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org