$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/76C2A8A2AC8F11ED9F292231C4F9AE02.roa File: 76C2A8A2AC8F11ED9F292231C4F9AE02.roa (raw, json) Hash identifier: zSeZ3w/F8C3cLNraMvVn9y3TgAQ2I7EbWW1/4UiDysQ= Subject key identifier: EF:D5:E0:A7:B4:5E:75:DE:93:D5:27:D0:37:16:E7:26:C7:62:42:3E Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 0E64 Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/76C2A8A2AC8F11ED9F292231C4F9AE02.roa Signing time: Sat 20 Apr 2024 18:36:46 +0000 ROA not before: Sat 20 Apr 2024 18:36:46 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 17916 IP address blocks: 103.30.184.0/23 maxlen: 23 103.30.186.0/23 maxlen: 23 202.53.192.0/20 maxlen: 20 202.53.197.0/24 maxlen: 24 202.53.204.0/23 maxlen: 23 202.53.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3684 (0xe64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Apr 20 18:36:46 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66240b3e-fad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2d:f8:56:9a:52:f6:11:2a:26:57:85:e0:04: 76:cc:82:68:41:d5:c8:5c:d5:71:49:b6:d2:46:7d: 05:41:fc:ad:3f:9a:71:04:11:47:be:99:b6:fe:e3: 3d:c3:1c:74:b2:97:40:9a:8c:e4:0e:43:c8:94:3d: cc:92:8c:94:d9:64:20:83:46:4b:f7:51:e2:fa:87: d5:9f:0b:42:ec:56:41:f4:2e:fa:da:53:de:0e:63: b8:0b:a9:c0:cd:1b:fe:c0:d4:39:e1:4f:65:1b:ce: 04:68:d7:fe:55:33:1d:d6:75:d0:87:d0:72:9c:5c: 81:a1:1f:60:b8:50:c7:54:93:d2:d1:83:08:56:22: 87:2e:f7:38:37:72:00:bd:08:bc:6e:93:e1:d3:f9: 70:7a:c0:b3:53:ef:5a:60:50:ab:19:82:8a:30:b3: 19:4d:65:3b:ec:1c:91:78:a4:c9:c5:f1:83:1f:2c: d7:31:28:a5:76:f7:22:9c:dc:c5:0d:3c:e7:6f:e3: 29:ec:42:fa:44:c9:b5:5c:9d:42:54:41:15:e7:26: a9:b4:4b:36:54:42:2c:3f:a8:f0:fe:78:c9:35:31: d9:01:d1:24:b8:58:43:d3:cc:f7:57:1c:ce:2c:85: d9:fd:27:d7:4c:d6:85:72:43:9a:ca:cb:2e:29:0a: a7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D5:E0:A7:B4:5E:75:DE:93:D5:27:D0:37:16:E7:26:C7:62:42:3E X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/76C2A8A2AC8F11ED9F292231C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.30.184.0/22 202.53.192.0/20 Signature Algorithm: sha256WithRSAEncryption ec:ed:37:cb:71:81:2e:3a:33:e0:ea:85:5e:f3:c0:8b:73:33: c7:5d:33:79:59:b4:4f:f9:2a:33:87:29:c0:72:01:a0:56:5e: 9a:8f:ce:dc:a3:7d:b0:a1:25:60:aa:12:78:62:17:91:6a:f0: 85:f7:a0:24:b5:79:a0:c4:79:cc:c4:40:58:54:23:4a:db:50: 61:ed:48:c4:e1:05:36:99:90:42:13:09:15:d1:75:60:b3:d1: 88:b7:88:2a:0a:db:6b:04:04:5f:97:54:6c:66:b7:9f:c4:d0: f2:1b:7b:4d:39:c8:39:c5:b3:0e:4f:e6:f8:af:82:bb:97:b1: fc:e3:70:96:69:3e:1d:03:97:fb:18:44:3e:90:7b:be:3c:bb: 3f:b3:d8:7b:ef:29:46:58:6f:f0:e7:70:55:61:2c:ad:a3:05: 17:1c:9e:be:ca:ee:04:ad:25:70:38:93:a3:5a:12:79:ba:4c: aa:1e:f5:43:83:cb:94:86:51:9e:cf:87:d9:c2:13:e8:e0:88: d2:d2:a3:aa:ae:cf:1e:3d:c6:f0:4c:dd:92:26:ea:78:a5:6e: 40:7a:e1:fc:33:d0:cf:94:46:64:47:b8:d3:c7:cc:50:be:1a: c9:4e:44:5c:98:03:53:22:ea:10:2d:9c:d8:30:07:5c:06:a7: 85:de:fd:d9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjQwNDIwMTgzNjQ2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjI0MGIzZS1mYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6S34VppS9hEqJleF4AR2zIJoQdXIXNVxSbbSRn0FQfytP5pxBBFHvpm2/uM9 wxx0spdAmozkDkPIlD3MkoyU2WQgg0ZL91Hi+ofVnwtC7FZB9C762lPeDmO4C6nA zRv+wNQ54U9lG84EaNf+VTMd1nXQh9BynFyBoR9guFDHVJPS0YMIViKHLvc4N3IA vQi8bpPh0/lwesCzU+9aYFCrGYKKMLMZTWU77ByReKTJxfGDHyzXMSildvcinNzF DTznb+Mp7EL6RMm1XJ1CVEEV5yaptEs2VEIsP6jw/njJNTHZAdEkuFhD08z3VxzO LIXZ/SfXTNaFckOayssuKQqnoQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFO/V4Ke0 XnXek9Un0DcW5ybHYkI+MB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzJDQzcvNzkxQzZBMzQ3QjM4MTFFOUJDMEQzQjMyQzRGOUFFMDIvNzZDMkE4QTJB QzhGMTFFRDlGMjkyMjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnHrgDBATKNcAwDQYJKoZIhvcNAQELBQADggEBAOztN8tx gS46M+DqhV7zwItzM8ddM3lZtE/5KjOHKcByAaBWXpqPztyjfbChJWCqEnhiF5Fq 8IX3oCS1eaDEeczEQFhUI0rbUGHtSMThBTaZkEITCRXRdWCz0Yi3iCoK22sEBF+X VGxmt5/E0PIbe005yDnFsw5P5vivgruXsfzjcJZpPh0Dl/sYRD6Qe748uz+z2Hvv KUZYb/DncFVhLK2jBRccnr7K7gStJXA4k6NaEnm6TKoe9UODy5SGUZ7Ph9nCE+jg iNLSo6quzx49xvBM3ZIm6nilbkB64fwz0M+URmRHuNPHzFC+GslORFyYA1Mi6hAt nNgwB1wGp4Xe/dk= -----END CERTIFICATE-----Generated at Wed May 8 20:36:04 2024 by rpki-client on console-ams.rpki-client.org