$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/0CF8405C95CD11EA8D1B0C65C4F9AE02.roa File: 0CF8405C95CD11EA8D1B0C65C4F9AE02.roa (raw, json) Hash identifier: L2FQdcEAehehi36iTYlNTu2HzMsF5TyknQqhhyP6lwI= Subject key identifier: A7:8D:08:D5:5D:AE:2C:B2:A6:07:0A:46:A4:28:37:EC:7B:D9:7D:1A Certificate issuer: /CN=A91C08FA/serialNumber=A11E2C2179B36A9647B951FC602D779307BFAE6E Certificate serial: 089D Authority key identifier: A1:1E:2C:21:79:B3:6A:96:47:B9:51:FC:60:2D:77:93:07:BF:AE:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/0CF8405C95CD11EA8D1B0C65C4F9AE02.roa Signing time: Sat 20 Apr 2024 21:40:01 +0000 ROA not before: Sat 20 Apr 2024 21:40:01 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9876 IP address blocks: 103.8.140.0/22 maxlen: 24 103.15.126.0/23 maxlen: 24 163.47.236.0/22 maxlen: 24 202.56.32.0/20 maxlen: 22 202.56.48.0/21 maxlen: 24 202.137.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.crl rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 23:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2205 (0x89d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C08FA/serialNumber=A11E2C2179B36A9647B951FC602D779307BFAE6E Validity Not Before: Apr 20 21:40:01 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66243631-f8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:fa:90:b1:80:43:e0:7d:da:7e:d5:e8:7f: 0d:5e:4d:1a:99:bc:42:9b:e2:00:39:98:85:2f:db: ae:bf:e8:59:82:d1:a1:32:c8:e0:d8:2c:f6:23:66: a2:fd:ef:91:80:c1:a3:6f:c4:aa:6f:97:86:3e:16: 45:b8:ef:a0:67:da:a5:de:9c:ab:c6:24:b1:ca:26: dc:66:74:ee:02:14:da:24:45:54:b8:eb:e9:17:b0: 78:c1:cd:10:f8:95:03:f6:29:4d:e3:76:05:1a:dd: 50:bb:a6:7e:36:72:3a:12:12:86:8e:dd:20:b5:76: 21:9d:64:c3:82:3b:6e:a2:cd:0e:a3:da:c5:a6:d9: 9f:05:83:59:b6:60:3b:1f:4c:f0:34:95:b7:dc:5a: 36:13:7d:63:53:12:9f:be:97:1c:a9:ca:c8:a4:c6: 9d:15:86:fa:26:59:cf:5d:57:87:e2:e9:35:f8:fb: 66:b0:95:74:45:05:06:39:93:36:bd:4d:3b:70:d3: 65:40:0d:82:bf:6a:b5:fb:fd:08:0e:72:7d:ea:11: 92:e6:6d:a7:3a:41:7d:1e:47:53:97:a1:59:42:a0: a3:28:e4:a2:f7:16:55:df:0e:4d:b0:21:15:15:e0: 12:37:57:b4:e0:2c:23:63:8c:cb:f6:1f:23:6e:c7: c2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8D:08:D5:5D:AE:2C:B2:A6:07:0A:46:A4:28:37:EC:7B:D9:7D:1A X509v3 Authority Key Identifier: keyid:A1:1E:2C:21:79:B3:6A:96:47:B9:51:FC:60:2D:77:93:07:BF:AE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/0CF8405C95CD11EA8D1B0C65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.8.140.0/22 103.15.126.0/23 163.47.236.0/22 202.56.32.0-202.56.55.255 202.137.240.0/21 Signature Algorithm: sha256WithRSAEncryption 12:03:25:e7:e7:22:ca:7a:63:ce:c6:36:05:0f:d5:7d:19:ce: 08:05:0f:23:1f:48:af:ed:d6:52:53:3f:0e:9e:19:18:56:62: 90:cd:9e:44:68:f2:25:18:a3:67:8d:ed:23:20:d4:55:ce:09: 09:13:4d:8d:e3:7f:fb:3f:c2:d6:55:72:99:40:a5:03:14:8a: 26:d5:31:4e:02:88:06:0c:4d:59:69:05:cb:97:50:c5:46:26: 4a:73:a3:53:c8:f7:bf:13:55:51:b9:bf:dc:60:4c:1f:7b:5d: f4:86:dc:ee:5c:94:57:76:61:79:12:0b:72:b6:e7:f3:f2:7a: d8:92:bb:ec:cf:7d:7a:79:72:a8:26:2f:b0:4e:fc:a7:ae:81: 63:68:f2:58:89:6a:6e:88:2e:69:44:41:38:01:38:36:e7:0a: 8a:e3:a5:3a:e0:cf:c7:3d:2d:83:e7:ba:bf:32:34:a6:ad:ac: e6:e4:b4:53:cb:40:88:82:c3:24:c5:60:d0:ba:6a:aa:f1:65: 32:c3:45:29:17:c4:73:54:e8:bb:e8:48:2e:de:ab:5f:16:ac: 42:f3:19:82:bc:e6:7f:0d:92:58:22:7d:ad:f8:83:3b:bd:b1: d3:ab:18:0a:14:a2:75:67:4a:94:43:c1:6e:25:5c:dd:50:72: bb:da:ef:49 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICCJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA4RkExMTAvBgNVBAUTKEExMUUyQzIxNzlCMzZBOTY0N0I5NTFGQzYwMkQ3Nzkz MDdCRkFFNkUwHhcNMjQwNDIwMjE0MDAxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjI0MzYzMS1mOGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVz6kLGAQ+B92n7V6H8NXk0ambxCm+IAOZiFL9uuv+hZgtGhMsjg2Cz2I2ai /e+RgMGjb8Sqb5eGPhZFuO+gZ9ql3pyrxiSxyibcZnTuAhTaJEVUuOvpF7B4wc0Q +JUD9ilN43YFGt1Qu6Z+NnI6EhKGjt0gtXYhnWTDgjtuos0Oo9rFptmfBYNZtmA7 H0zwNJW33Fo2E31jUxKfvpccqcrIpMadFYb6JlnPXVeH4uk1+PtmsJV0RQUGOZM2 vU07cNNlQA2Cv2q1+/0IDnJ96hGS5m2nOkF9HkdTl6FZQqCjKOSi9xZV3w5NsCEV FeASN1e04CwjY4zL9h8jbsfC9wIDAQABo4ICtTCCArEwHQYDVR0OBBYEFKeNCNVd riyypgcKRqQoN+x72X0aMB8GA1UdIwQYMBaAFKEeLCF5s2qWR7lR/GAtd5MHv65u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDhGQS9BRENCMTVGRTk1 QzMxMUVBQUU2MjAxNDlDNEY5QUUwMi9vUjRzSVhtemFwWkh1Vkg4WUMxM2t3ZV9y bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29SNHNJWG16YXBaSHVWSDhZQzEza3dlX3JtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzA4RkEvQURDQjE1RkU5NUMzMTFFQUFFNjIwMTQ5QzRGOUFFMDIvMENGODQwNUM5 NUNEMTFFQThEMUIwQzY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgABMCYDBAJnCIwDBAFnD34DBAKjL+wwDAMEBco4IAMEA8o4MAMEA8qJ 8DANBgkqhkiG9w0BAQsFAAOCAQEAEgMl5+ciynpjzsY2BQ/VfRnOCAUPIx9Ir+3W UlM/Dp4ZGFZikM2eRGjyJRijZ43tIyDUVc4JCRNNjeN/+z/C1lVymUClAxSKJtUx TgKIBgxNWWkFy5dQxUYmSnOjU8j3vxNVUbm/3GBMH3td9Ibc7lyUV3ZheRILcrbn 8/J62JK77M99enlyqCYvsE78p66BY2jyWIlqboguaURBOAE4NucKiuOlOuDPxz0t g+e6vzI0pq2s5uS0U8tAiILDJMVg0LpqqvFlMsNFKRfEc1Tou+hILt6rXxasQvMZ grzmfw2SWCJ9rfiDO72x06sYChSidWdKlEPBbiVc3VByu9rvSQ== -----END CERTIFICATE-----Generated at Mon May 27 00:39:39 2024 by rpki-client on console-ams.rpki-client.org