$ rpki-client -vvf rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/99A7637060B311EEBA329E54C4F9AE02.roa File: 99A7637060B311EEBA329E54C4F9AE02.roa (raw, json) Hash identifier: 7nzz5YKwwXZf09jz37XzY7781RRAJLlb5nuGsk6+Jak= Subject key identifier: 0D:6C:72:84:42:FD:28:61:A2:3C:94:93:49:B4:DA:5E:85:F2:11:3F Certificate issuer: /CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F Certificate serial: 0156 Authority key identifier: 3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/99A7637060B311EEBA329E54C4F9AE02.roa Signing time: Sun 01 Oct 2023 23:38:19 +0000 ROA not before: Sun 01 Oct 2023 23:38:19 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 24499 IP address blocks: 103.191.118.0/24 maxlen: 24 103.191.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F Validity Not Before: Oct 1 23:38:19 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=651a02eb-1fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ec:ab:7a:67:fd:1e:e2:f5:93:1a:ff:90:dc: 88:07:7a:2a:60:9c:d9:b7:34:da:37:1f:e7:3d:04: 7e:b1:c3:8d:ff:82:5b:ce:4a:3e:00:47:cf:db:5d: 72:71:09:38:d5:97:b7:f6:ff:e8:d2:c6:d9:55:95: 60:b5:72:de:0e:45:2a:13:23:58:e4:29:5e:53:67: 72:27:76:dd:e9:fa:a9:59:de:3b:77:72:b6:48:50: 8a:a3:1f:b6:b8:72:83:d0:e5:d8:1d:cf:22:e7:ed: 07:43:a8:ef:f3:8d:c4:1f:4d:7b:06:a4:af:dc:13: 5f:ee:f8:ab:60:4f:ca:ec:f6:00:14:0e:f9:9d:1b: 01:7f:c8:47:15:50:b1:16:db:f2:57:4f:41:86:06: d2:b6:ff:7f:2d:bb:c4:65:56:3b:36:48:a0:dc:a7: 87:68:1f:7e:75:eb:75:4b:7c:2a:98:62:61:e2:82: f7:ee:9e:1e:71:70:53:3b:16:ae:1f:bb:eb:03:0b: 02:e3:78:09:8f:84:fa:9e:8a:53:1a:58:4a:83:60: ab:0b:5f:d8:83:fb:d9:5a:b1:60:47:78:3f:ee:7e: 5f:f2:7c:57:c3:92:17:a4:9e:c6:cb:d7:30:25:a0: a1:4f:26:1b:3c:8c:76:46:f0:66:4a:13:af:bc:32: 59:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6C:72:84:42:FD:28:61:A2:3C:94:93:49:B4:DA:5E:85:F2:11:3F X509v3 Authority Key Identifier: keyid:3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/99A7637060B311EEBA329E54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.118.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:6b:1b:e8:7f:8d:7f:7f:9d:af:6b:af:25:e9:89:60:1e:7b: c3:b0:7c:a5:db:86:0b:90:ab:44:a1:3f:b1:71:98:09:90:82: 59:cc:f1:9e:8e:ba:71:16:83:0c:d5:a7:6e:18:d7:f4:ef:41: 78:57:54:a9:96:90:61:9e:74:d6:d8:28:d8:fc:37:c3:89:e8: 15:03:6f:03:75:1d:91:6f:d5:7a:73:ed:08:81:4a:6e:6e:0a: cf:7e:e0:bc:70:1b:af:7f:9c:9d:48:9c:9b:df:97:d1:57:4d: 46:7f:a8:08:2a:ba:fd:fb:6a:79:e0:3d:ce:3c:eb:04:ad:53: b7:ed:fc:f9:05:66:28:56:a2:b5:31:6d:29:1f:b6:fd:79:8a: 06:a1:f4:5b:c5:3c:43:48:63:cc:10:9c:7d:14:fe:3a:a1:a4: c2:73:bd:e1:40:ac:c7:65:ab:3d:0a:e4:4b:30:84:ce:ba:06: d8:44:f3:cb:bc:f5:dd:70:4b:d5:a5:5e:6a:8e:7d:a0:8a:2a: 03:43:da:1d:47:3e:ce:48:14:2d:2d:24:c2:d7:c1:00:77:26: a8:a2:ce:a1:91:03:a0:a2:7f:65:a1:1b:a9:74:93:86:2d:59: 73:4f:7f:99:cf:60:f9:fa:7a:e5:bb:0c:a3:ee:2c:21:af:f4: 7b:69:0e:96 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxQTUxMTAvBgNVBAUTKDNGMjkwOUMzRjUzMkMwMEIwMjU3QjkyNTZDNzZFQkEz MTREQ0QwMEYwHhcNMjMxMDAxMjMzODE5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFhMDJlYi0xZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Oyremf9HuL1kxr/kNyIB3oqYJzZtzTaNx/nPQR+scON/4Jbzko+AEfP211y cQk41Ze39v/o0sbZVZVgtXLeDkUqEyNY5CleU2dyJ3bd6fqpWd47d3K2SFCKox+2 uHKD0OXYHc8i5+0HQ6jv843EH017BqSv3BNf7virYE/K7PYAFA75nRsBf8hHFVCx FtvyV09BhgbStv9/LbvEZVY7Nkig3KeHaB9+det1S3wqmGJh4oL37p4ecXBTOxau H7vrAwsC43gJj4T6nopTGlhKg2CrC1/Yg/vZWrFgR3g/7n5f8nxXw5IXpJ7Gy9cw JaChTyYbPIx2RvBmShOvvDJZLwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA1scoRC /ShhojyUk0m02l6F8hE/MB8GA1UdIwQYMBaAFD8pCcP1MsALAle5JWx266MU3NAP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzFBNS8zQkZBMjgzNDBB ODMxMUVEOEQ2RDgzMkFDNEY5QUUwMi9QeWtKd19VeXdBc0NWN2tsYkhicm94VGMw QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B5a0p3X1V5d0FzQ1Y3a2xiSGJyb3hUYzBBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzcxQTUvM0JGQTI4MzQwQTgzMTFFRDhENkQ4MzJBQzRGOUFFMDIvOTlBNzYzNzA2 MEIzMTFFRUJBMzI5RTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnv3YwDQYJKoZIhvcNAQELBQADggEBABprG+h/jX9/na9r ryXpiWAee8OwfKXbhguQq0ShP7FxmAmQglnM8Z6OunEWgwzVp24Y1/TvQXhXVKmW kGGedNbYKNj8N8OJ6BUDbwN1HZFv1Xpz7QiBSm5uCs9+4LxwG69/nJ1InJvfl9FX TUZ/qAgquv37anngPc486wStU7ft/PkFZihWorUxbSkftv15igah9FvFPENIY8wQ nH0U/jqhpMJzveFArMdlqz0K5EswhM66BthE88u89d1wS9WlXmqOfaCKKgND2h1H Ps5IFC0tJMLXwQB3JqiizqGRA6Cif2WhG6l0k4YtWXNPf5nPYPn6euW7DKPuLCGv 9HtpDpY= -----END CERTIFICATE-----Generated at Wed May 1 05:55:45 2024 by rpki-client on console-ams.rpki-client.org