$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/6E9BA8D467E911EEAC5AD27AC4F9AE02.roa File: 6E9BA8D467E911EEAC5AD27AC4F9AE02.roa (raw, json) Hash identifier: 0FyBk9jIeYxULovo1PVC/UVc4+bRdPuT87f6V2CBZlQ= Subject key identifier: 50:A2:AD:10:69:B2:1F:EC:F4:4F:D7:AD:30:9E:D8:2B:82:3E:F2:86 Certificate issuer: /CN=A91C5413/serialNumber=33E7F26615D3F40732C53BF873E27C9C52E12DCD Certificate serial: 70 Authority key identifier: 33:E7:F2:66:15:D3:F4:07:32:C5:3B:F8:73:E2:7C:9C:52:E1:2D:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M-fyZhXT9AcyxTv4c-J8nFLhLc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/6E9BA8D467E911EEAC5AD27AC4F9AE02.roa Signing time: Wed 01 May 2024 01:03:02 +0000 ROA not before: Wed 01 May 2024 01:03:01 +0000 ROA not after: Thu 29 Aug 2024 00:00:00 +0000 asID: 137480 IP address blocks: 103.110.64.0/22 maxlen: 22 103.110.64.0/23 maxlen: 23 103.110.64.0/24 maxlen: 24 103.110.65.0/24 maxlen: 24 103.110.66.0/23 maxlen: 23 103.110.66.0/24 maxlen: 24 103.110.67.0/24 maxlen: 24 2402:8440::/32 maxlen: 32 2402:8440::/48 maxlen: 48 2402:8440:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.crl rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M-fyZhXT9AcyxTv4c-J8nFLhLc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 00:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5413/serialNumber=33E7F26615D3F40732C53BF873E27C9C52E12DCD Validity Not Before: May 1 01:03:01 2024 GMT Not After : Aug 29 00:00:00 2024 GMT Subject: CN=663194c5-a79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:18:15:ec:76:1e:f6:cd:d4:6c:69:9e:df: 38:6d:07:b3:d4:98:18:fe:da:6a:00:a4:94:cd:ec: b3:ff:97:74:65:7c:cc:d2:d9:c3:49:a9:6d:83:b5: c8:53:ad:fe:03:3e:40:7c:c6:cc:c8:b5:bc:d1:e8: c6:e6:8c:0c:cb:ac:61:31:d0:0e:a7:ad:99:17:f0: a4:85:48:3c:0a:e2:a4:e1:7e:62:f0:6d:95:b0:98: 44:ae:05:a0:bd:0e:28:ba:80:49:48:a4:5f:0d:98: ca:bf:11:a0:c2:45:76:4c:d1:09:72:f4:e6:6d:60: 24:d7:65:92:88:ee:df:e0:7c:88:0d:70:8e:88:ca: f9:b1:3c:68:0d:57:44:bb:d6:52:cf:87:3e:64:f8: ee:02:3c:05:45:53:8f:00:bd:d4:cf:ad:32:e0:55: 09:62:02:0a:b8:1c:2e:a1:c4:22:54:86:64:70:54: 80:bd:92:32:66:46:24:bf:77:f4:26:48:37:9b:ef: 27:e3:51:50:0a:f6:01:e4:7c:7a:17:81:ff:f2:16: 24:7c:f0:6a:a1:ca:9f:fd:6c:c3:d9:b3:ba:26:68: be:fb:56:20:35:35:f4:41:8b:00:2f:d2:43:99:16: c0:6a:e8:84:a5:91:fd:bd:c3:23:a8:47:cd:f8:46: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A2:AD:10:69:B2:1F:EC:F4:4F:D7:AD:30:9E:D8:2B:82:3E:F2:86 X509v3 Authority Key Identifier: keyid:33:E7:F2:66:15:D3:F4:07:32:C5:3B:F8:73:E2:7C:9C:52:E1:2D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M-fyZhXT9AcyxTv4c-J8nFLhLc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/6E9BA8D467E911EEAC5AD27AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.64.0/22 IPv6: 2402:8440::/32 Signature Algorithm: sha256WithRSAEncryption 7a:5b:ab:d6:18:21:ce:e7:86:b5:35:cb:0f:0a:ff:c8:9b:32: cc:08:8a:a9:1d:95:b7:71:b1:d9:b3:42:fe:89:2c:e5:ad:3b: 4b:15:06:03:8f:9d:97:d1:39:29:31:32:b6:d1:b7:22:b1:d5: 63:63:5c:33:1f:b1:96:f9:66:09:1a:d5:9d:b9:28:e7:9c:a7: 99:b7:5a:60:89:4d:9b:d6:93:ec:2c:92:ba:9d:f6:05:13:8f: 42:18:02:10:22:56:75:71:66:17:a3:fa:b5:69:be:a4:50:3e: 6a:e6:df:5c:3e:75:82:8b:b4:7b:ae:d0:5d:f5:22:20:a7:56: 1b:ba:8a:59:b9:08:6c:b1:0b:ae:39:09:4a:11:d2:c9:01:9c: 45:e2:6e:80:4a:c1:46:65:f2:2c:08:dd:df:21:7a:5f:47:58: 40:1c:3c:a6:22:07:72:45:a3:bf:03:2d:a0:0e:3f:d6:b6:b1: 49:24:d0:ac:78:5c:3f:64:89:e2:b9:42:cb:99:00:ec:45:f4: cd:7f:15:d7:e0:1c:46:b8:22:67:03:6a:de:91:61:e4:ad:79: 74:66:33:fd:f6:1a:37:58:f6:d9:80:cd:54:fe:eb:85:3e:de: 88:69:6f:6c:42:2a:0c:e7:57:df:95:c6:88:85:59:04:24:a6: 0b:e3:66:73 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTQxMzExMC8GA1UEBRMoMzNFN0YyNjYxNUQzRjQwNzMyQzUzQkY4NzNFMjdDOUM1 MkUxMkRDRDAeFw0yNDA1MDEwMTAzMDFaFw0yNDA4MjkwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MzE5NGM1LWE3OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5rxgV7HYe9s3UbGme3zhtB7PUmBj+2moApJTN7LP/l3RlfMzS2cNJqW2DtchT rf4DPkB8xszItbzR6MbmjAzLrGEx0A6nrZkX8KSFSDwK4qThfmLwbZWwmESuBaC9 Dii6gElIpF8NmMq/EaDCRXZM0Qly9OZtYCTXZZKI7t/gfIgNcI6IyvmxPGgNV0S7 1lLPhz5k+O4CPAVFU48AvdTPrTLgVQliAgq4HC6hxCJUhmRwVIC9kjJmRiS/d/Qm SDeb7yfjUVAK9gHkfHoXgf/yFiR88Gqhyp/9bMPZs7omaL77ViA1NfRBiwAv0kOZ FsBq6ISlkf29wyOoR834RtnTAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUUKKtEGmy H+z0T9etMJ7YK4I+8oYwHwYDVR0jBBgwFoAUM+fyZhXT9AcyxTv4c+J8nFLhLc0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NDEzL0RGOTlBMUU4N0JF ODExRUI5QTA5MjM0MkM0RjlBRTAyL00tZnlaaFhUOUFjeXhUdjRjLUo4bkZMaExj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTS1meVpoWFQ5QWN5eFR2NGMtSjhuRkxoTGMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTQxMy9ERjk5QTFFODdCRTgxMUVCOUEwOTIzNDJDNEY5QUUwMi82RTlCQThENDY3 RTkxMUVFQUM1QUQyN0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAmduQDANBAIAAjAHAwUAJAKEQDANBgkqhkiG9w0BAQsFAAOC AQEAelur1hghzueGtTXLDwr/yJsyzAiKqR2Vt3Gx2bNC/oks5a07SxUGA4+dl9E5 KTEyttG3IrHVY2NcMx+xlvlmCRrVnbko55ynmbdaYIlNm9aT7CySup32BROPQhgC ECJWdXFmF6P6tWm+pFA+aubfXD51gou0e67QXfUiIKdWG7qKWbkIbLELrjkJShHS yQGcReJugErBRmXyLAjd3yF6X0dYQBw8piIHckWjvwMtoA4/1raxSSTQrHhcP2SJ 4rlCy5kA7EX0zX8V1+AcRrgiZwNq3pFh5K15dGYz/fYaN1j22YDNVP7rhT7eiGlv bEIqDOdX35XGiIVZBCSmC+Nmcw== -----END CERTIFICATE-----Generated at Mon May 27 01:34:45 2024 by rpki-client on console-fra.rpki-client.org