$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/D29DE1E6C98611ED8D5AE04CC4F9AE02.roa File: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (raw, json) Hash identifier: +1WLQRV04Ed2oW4QFm7/7ippf8dDjkisALZjf/MJ6Po= Subject key identifier: CE:77:D8:26:52:CB:E1:52:EC:BD:5C:D2:5F:21:F3:00:5A:26:9F:71 Certificate issuer: /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD Certificate serial: 0B6D Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/D29DE1E6C98611ED8D5AE04CC4F9AE02.roa Signing time: Sat 04 May 2024 19:58:48 +0000 ROA not before: Sat 04 May 2024 19:58:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136141 IP address blocks: 103.137.66.0/24 maxlen: 24 103.137.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD Validity Not Before: May 4 19:58:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66369377-b16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e4:52:7a:d1:24:89:b1:fa:eb:6e:60:da:49: d3:ba:83:4f:8f:cf:62:fb:c1:40:74:32:ef:d7:01: 4c:7c:68:31:3d:65:d7:e2:8a:22:ac:75:82:b3:b0: ca:88:e4:d2:82:82:53:d9:dd:14:16:af:8d:7f:a3: ba:9c:87:cc:69:d0:5f:85:52:22:20:0f:f4:57:e5: 87:62:8b:16:ba:39:b0:77:4d:7a:5b:5b:fd:aa:c9: e3:cc:ea:a4:f6:be:2c:34:a6:62:e3:25:d8:eb:15: df:46:f2:a0:39:4f:05:e2:5b:1f:06:95:a5:1e:01: 79:80:2e:62:86:67:32:64:98:4f:46:4f:f9:f1:12: 46:14:02:44:03:1b:c4:50:59:7d:6c:0e:17:f7:3a: 0a:fa:ab:82:6e:35:a2:e1:f9:51:0f:e3:df:f2:09: 89:25:03:8c:58:05:c9:d6:6a:eb:33:ee:20:53:93: 71:19:00:85:72:3f:a9:6c:58:56:1e:15:4f:e1:ec: 75:7e:55:9a:8b:03:7a:2e:ca:1c:7c:a0:2a:fb:10: c2:94:7b:04:ce:96:fc:70:48:3b:79:9a:3e:e3:b7: 63:85:ae:5c:82:72:25:4f:58:bb:6b:f8:da:4c:0f: 87:d8:4e:23:b6:81:19:38:e2:6f:d5:c6:01:4a:cb: e3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:77:D8:26:52:CB:E1:52:EC:BD:5C:D2:5F:21:F3:00:5A:26:9F:71 X509v3 Authority Key Identifier: keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/D29DE1E6C98611ED8D5AE04CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.66.0/23 Signature Algorithm: sha256WithRSAEncryption 01:0a:72:14:be:66:34:e8:25:33:39:74:9b:34:78:43:aa:4a: b5:7e:b3:2b:17:8a:a4:bb:63:69:d1:67:f6:61:83:03:56:5e: b9:65:4b:18:58:b2:76:7e:d3:03:66:b7:ed:65:c7:5d:46:2f: 99:f2:9d:63:e6:41:d1:5f:92:69:16:0b:30:5d:f8:f6:ca:46: b4:84:5a:f5:70:97:04:db:11:fd:f7:d9:69:96:59:83:60:c6: df:d7:4f:cc:b0:47:d1:8a:8a:7d:37:f9:0b:77:6d:23:09:11: 3e:7a:19:d3:ee:85:dd:b6:b5:90:ee:47:f7:a3:d2:f9:b8:82: 6e:0e:a5:aa:32:1a:59:8b:84:0c:0e:03:d1:25:cd:ab:62:f7: 11:b3:4a:6b:8a:bf:fb:7f:c3:34:15:e6:6d:21:da:db:2a:ba: 5e:fa:d9:87:d5:08:7c:28:08:a3:54:0b:76:9c:0b:7b:96:61: a7:f2:b6:58:46:05:d0:2e:2d:d1:6b:58:80:e4:4d:b8:5f:28: 51:7b:38:5b:97:df:8a:4a:d0:3c:f5:48:2a:f2:20:ba:a7:4c: 68:94:6b:ec:e0:29:15:ac:c9:7f:8e:81:0b:fc:fb:94:ea:aa: 9c:fb:fb:e3:78:94:ad:f0:01:4d:17:be:74:cb:6f:6b:24:80: fb:80:6f:98 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNEQzgxMTAvBgNVBAUTKEE2Qzk2MTExMzBDNTE2NzQ1NTEzNkU4NUFCRjIzNkFB QUE5MzdCQUQwHhcNMjQwNTA0MTk1ODQ4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM2OTM3Ny1iMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+RSetEkibH6625g2knTuoNPj89i+8FAdDLv1wFMfGgxPWXX4ooirHWCs7DK iOTSgoJT2d0UFq+Nf6O6nIfMadBfhVIiIA/0V+WHYosWujmwd016W1v9qsnjzOqk 9r4sNKZi4yXY6xXfRvKgOU8F4lsfBpWlHgF5gC5ihmcyZJhPRk/58RJGFAJEAxvE UFl9bA4X9zoK+quCbjWi4flRD+Pf8gmJJQOMWAXJ1mrrM+4gU5NxGQCFcj+pbFhW HhVP4ex1flWaiwN6LsocfKAq+xDClHsEzpb8cEg7eZo+47djha5cgnIlT1i7a/ja TA+H2E4jtoEZOOJv1cYBSsvj+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFM532CZS y+FS7L1c0l8h8wBaJp9xMB8GA1UdIwQYMBaAFKbJYREwxRZ0VRNuhavyNqqqk3ut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0RDOC9FNUNBRjkzRTEx RDgxMUVBQjcxNjdDNEZDNEY5QUUwMi9wc2xoRVRERkZuUlZFMjZGcV9JMnFxcVRl NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzbGhFVERGRm5SVkUyNkZxX0kycXFxVGU2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzNEQzgvRTVDQUY5M0UxMUQ4MTFFQUI3MTY3QzRGQzRGOUFFMDIvRDI5REUxRTZD OTg2MTFFRDhENUFFMDRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFniUIwDQYJKoZIhvcNAQELBQADggEBAAEKchS+ZjToJTM5 dJs0eEOqSrV+sysXiqS7Y2nRZ/ZhgwNWXrllSxhYsnZ+0wNmt+1lx11GL5nynWPm QdFfkmkWCzBd+PbKRrSEWvVwlwTbEf332WmWWYNgxt/XT8ywR9GKin03+Qt3bSMJ ET56GdPuhd22tZDuR/ej0vm4gm4OpaoyGlmLhAwOA9Elzati9xGzSmuKv/t/wzQV 5m0h2tsqul762YfVCHwoCKNUC3acC3uWYafytlhGBdAuLdFrWIDkTbhfKFF7OFuX 34pK0Dz1SCryILqnTGiUa+zgKRWsyX+OgQv8+5Tqqpz7++N4lK3wAU0XvnTLb2sk gPuAb5g= -----END CERTIFICATE-----Generated at Sat May 18 21:31:31 2024 by rpki-client on console-ams.rpki-client.org