$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/70F417104B1511EEB17AE059C4F9AE02.roa File: 70F417104B1511EEB17AE059C4F9AE02.roa (raw, json) Hash identifier: F9Z/vsgvq85axUrN39zW0cz5sNEX8ybx5f+P2WiQyNo= Subject key identifier: 34:F2:1A:64:D1:19:7D:45:AA:FD:41:E7:8D:25:97:E1:B6:CC:AF:16 Certificate issuer: /CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Certificate serial: 0D03 Authority key identifier: D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/70F417104B1511EEB17AE059C4F9AE02.roa Signing time: Tue 05 Sep 2023 19:01:21 +0000 ROA not before: Tue 05 Sep 2023 19:01:21 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 140962 IP address blocks: 103.141.2.0/24 maxlen: 24 103.141.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 18:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3331 (0xd03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Validity Not Before: Sep 5 19:01:21 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64f77b01-9347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:14:0e:1f:ce:27:e0:53:63:d9:77:3e:2a: 11:a8:9f:0b:c4:1a:d1:3e:dc:d0:d9:22:0b:69:fd: 6a:5d:1c:40:2c:38:14:d5:20:50:97:37:b6:cb:80: 74:77:1d:38:ac:4d:85:a4:7f:6a:12:da:2a:f8:9f: 7e:03:c2:52:ea:f0:c6:06:de:4f:46:05:fd:eb:78: 24:36:09:d9:18:11:43:e1:34:75:51:ce:a9:c0:76: 99:93:d8:30:2f:8a:e3:f3:4a:62:a9:24:ab:52:16: 87:f6:71:3e:02:60:6a:8c:c9:0f:b2:29:bc:20:89: 6f:e3:ef:95:cc:ed:46:b1:2b:a3:08:be:84:1e:dd: 41:0b:4a:ce:08:50:9a:f7:59:d8:6e:2b:03:66:45: c6:19:31:28:e2:45:06:e5:10:93:c7:de:30:21:e8: 7f:1a:43:1c:48:d5:22:f4:83:34:63:5b:8d:5a:be: 47:ac:20:f8:d0:2d:26:65:1e:39:ae:f1:23:b3:0a: 24:d2:f7:6b:e8:05:36:ed:45:c0:79:a6:b0:27:26: e2:e2:58:bb:1a:6a:62:b3:87:1b:00:74:61:99:8f: 85:fd:be:a3:ff:db:89:b1:ab:0e:bd:2d:5c:5a:20: fa:d7:e2:20:cf:25:dd:46:f1:8d:b9:01:3f:31:1c: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F2:1A:64:D1:19:7D:45:AA:FD:41:E7:8D:25:97:E1:B6:CC:AF:16 X509v3 Authority Key Identifier: keyid:D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/70F417104B1511EEB17AE059C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.2.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:05:7e:5e:89:0c:a0:64:b6:a6:09:a6:c7:a1:81:d4:ee:09: 19:c8:7a:64:e1:5d:ff:8f:70:78:2f:94:8f:7d:21:ae:c5:b6: 06:ea:22:70:55:cb:89:38:dc:8c:24:86:5d:82:88:21:ae:ca: 61:dd:d8:3e:27:e1:f3:96:7f:c2:70:49:8b:35:27:d0:ec:ea: 8d:85:32:7a:0e:f6:17:7d:16:e8:f6:c0:c3:56:90:41:cd:c5: d9:49:3d:fe:f1:b4:cc:8a:eb:1f:6c:b0:ad:f1:ea:1d:06:f6: 75:84:fc:39:b3:9e:ad:de:97:d5:7c:ae:f8:61:fa:2b:15:49: c9:be:81:1a:38:0c:15:07:aa:df:c9:a2:ae:15:aa:11:18:b8: 22:f7:d8:93:48:ce:4f:94:05:7e:aa:e0:fa:d3:1b:35:ce:14: 73:9e:f0:90:29:ab:f8:eb:2a:b7:55:2e:7d:6d:ce:9e:4a:36: 8d:7e:77:f4:71:3a:85:0f:e5:03:85:48:12:0a:03:e4:45:da: 67:ac:c8:b9:24:23:0a:4e:5c:99:e7:4b:22:16:47:07:c1:46: e7:2d:73:b1:8b:df:c6:b2:d9:5b:85:3a:85:92:4f:53:db:f4: 2b:67:3c:93:da:32:6a:04:13:03:8a:9d:66:c5:3e:c3:ab:f4: 35:89:f8:83 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3NzMxMTAvBgNVBAUTKEQ5MDBEREYyNEEyNzYyMkJGOTY0Mzc1N0VEQkNBRkZB RUUzMjFDMzcwHhcNMjMwOTA1MTkwMTIxWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY3N2IwMS05MzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzIUDh/OJ+BTY9l3PioRqJ8LxBrRPtzQ2SILaf1qXRxALDgU1SBQlze2y4B0 dx04rE2FpH9qEtoq+J9+A8JS6vDGBt5PRgX963gkNgnZGBFD4TR1Uc6pwHaZk9gw L4rj80piqSSrUhaH9nE+AmBqjMkPsim8IIlv4++VzO1GsSujCL6EHt1BC0rOCFCa 91nYbisDZkXGGTEo4kUG5RCTx94wIeh/GkMcSNUi9IM0Y1uNWr5HrCD40C0mZR45 rvEjswok0vdr6AU27UXAeaawJybi4li7Gmpis4cbAHRhmY+F/b6j/9uJsasOvS1c WiD61+IgzyXdRvGNuQE/MRxW/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDTyGmTR GX1Fqv1B540ll+G2zK8WMB8GA1UdIwQYMBaAFNkA3fJKJ2Ir+WQ3V+28r/ruMhw3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc3My9BRDMyMjM3Q0Ey RTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllpdjVaRGRYN2J5di11NHlI RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRRGQ4a29uWWl2NVpEZFg3Ynl2LXU0eUhEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzc3NzMvQUQzMjIzN0NBMkU4MTFFOUJBRTc4RDQ3QzRGOUFFMDIvNzBGNDE3MTA0 QjE1MTFFRUIxN0FFMDU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjQIwDQYJKoZIhvcNAQELBQADggEBAI4Ffl6JDKBktqYJ psehgdTuCRnIemThXf+PcHgvlI99Ia7FtgbqInBVy4k43Iwkhl2CiCGuymHd2D4n 4fOWf8JwSYs1J9Ds6o2FMnoO9hd9Fuj2wMNWkEHNxdlJPf7xtMyK6x9ssK3x6h0G 9nWE/Dmznq3el9V8rvhh+isVScm+gRo4DBUHqt/Joq4VqhEYuCL32JNIzk+UBX6q 4PrTGzXOFHOe8JApq/jrKrdVLn1tzp5KNo1+d/RxOoUP5QOFSBIKA+RF2mesyLkk IwpOXJnnSyIWRwfBRuctc7GL38ay2VuFOoWST1Pb9CtnPJPaMmoEEwOKnWbFPsOr 9DWJ+IM= -----END CERTIFICATE-----Generated at Mon May 20 19:20:11 2024 by rpki-client on console-fra.rpki-client.org