$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/92B69AA869B911EAB1A0F35EC4F9AE02.roa File: 92B69AA869B911EAB1A0F35EC4F9AE02.roa (raw, json) Hash identifier: kXmXnxjp/lt/PP9UkCmUHJsRIKc/mYuemsRBit3U0jA= Subject key identifier: E2:9C:44:3A:F7:9B:BF:72:0E:88:8C:CF:F6:D7:B2:50:20:3C:67:F2 Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Certificate serial: 07E5 Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/92B69AA869B911EAB1A0F35EC4F9AE02.roa Signing time: Thu 11 Aug 2022 09:49:26 +0000 ROA not before: Thu 11 Aug 2022 09:49:26 +0000 ROA not after: Sat 30 Sep 2023 00:00:00 +0000 asID: 58895 IP address blocks: 103.117.160.0/22 maxlen: 22 103.117.160.0/24 maxlen: 24 103.117.161.0/24 maxlen: 24 103.117.162.0/24 maxlen: 24 103.117.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Mar 2023 21:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2021 (0x7e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Validity Not Before: Aug 11 09:49:26 2022 GMT Not After : Sep 30 00:00:00 2023 GMT Subject: CN=62f4d0a5-fe93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:5c:23:f8:ca:c0:f1:20:60:2f:02:b5:6c: fe:ba:b6:25:34:d4:de:ce:94:72:20:af:05:74:3c: 85:15:54:17:f3:62:ee:75:56:05:b2:77:90:87:86: d5:43:b8:2b:3c:cc:ac:f5:9b:16:85:46:a4:de:a6: 18:25:81:7d:66:13:48:e8:a8:f2:15:31:48:91:74: 2a:54:50:b9:cc:c9:fb:db:c5:13:e2:b4:15:4d:3f: c4:bb:a8:2e:70:cf:6b:9f:70:de:b8:76:e1:16:32: 01:62:77:00:c2:d4:e9:f3:06:f3:2d:b6:ad:cd:bf: 1a:55:e7:5c:30:6d:6a:f9:1c:01:3a:08:da:77:e2: 89:3f:1c:1b:cf:9b:e3:cf:29:ac:6f:19:a7:a5:8d: db:c6:9e:df:f4:82:d3:27:dd:dc:95:c0:0a:2a:b3: c1:ce:2c:26:72:28:78:91:2e:e8:2d:bf:1a:5f:18: ff:fe:20:0a:31:f1:ef:18:1d:9c:37:67:e5:01:5d: a2:df:12:19:14:54:4e:34:7b:e2:6c:21:71:fe:45: 4c:2e:d2:d4:ca:18:d8:5f:8c:07:b7:15:99:2b:3e: a1:91:a7:44:52:76:30:ea:a5:8e:a0:03:fe:6a:0d: a2:f2:fd:aa:0f:8c:eb:da:68:2d:04:3e:af:e1:bd: 75:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9C:44:3A:F7:9B:BF:72:0E:88:8C:CF:F6:D7:B2:50:20:3C:67:F2 X509v3 Authority Key Identifier: keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/92B69AA869B911EAB1A0F35EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.117.160.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:5a:03:10:fd:fc:68:2d:2e:3d:3c:86:fd:d8:8c:de:f5:ca: 6d:83:d1:6f:c5:ab:65:f7:b3:9e:91:78:2d:97:81:d1:7d:65: 15:87:b7:6d:fc:14:fd:d0:2c:cd:ab:de:a4:51:68:2b:1e:7d: 6e:8b:4b:0f:8d:f5:38:11:86:61:61:4d:15:50:91:62:66:68: f1:97:6f:f1:80:82:89:fa:99:55:f8:09:49:7b:c1:8e:83:f8: 3f:04:55:a6:50:81:c7:5f:73:de:3d:a7:35:5d:82:19:b6:8c: 06:33:04:9a:9a:0e:7a:0d:b8:a4:bc:fd:30:84:9c:d8:02:df: 04:94:d4:28:5a:f7:8d:59:c3:45:8e:28:62:43:32:50:17:16: ad:d6:42:5d:18:49:6a:1f:aa:f7:09:76:47:fe:d6:aa:72:ec: fa:4a:c4:2a:3c:6c:82:f8:a0:20:82:83:35:c7:11:3f:13:a0: c1:d8:41:eb:9a:9d:31:97:4e:62:41:d6:1a:a8:d5:ed:15:c3: c9:78:1a:80:89:e2:84:19:5a:5f:37:75:df:b7:16:ba:00:49: 7e:2d:f7:5f:14:d3:21:dd:68:7c:35:10:35:72:99:08:ee:39: 92:20:51:3a:0c:08:ad:e6:4e:c8:65:3b:db:26:c8:cf:cc:93: 89:db:85:50 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCQjQxMTAvBgNVBAUTKDFEMTIxN0VGOEZFODRCNTgyNTUxNjcxQkNBMzVFNjg0 NDg2OTI0OTcwHhcNMjIwODExMDk0OTI2WhcNMjMwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02MmY0ZDBhNS1mZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXhcI/jKwPEgYC8CtWz+urYlNNTezpRyIK8FdDyFFVQX82LudVYFsneQh4bV Q7grPMys9ZsWhUak3qYYJYF9ZhNI6KjyFTFIkXQqVFC5zMn728UT4rQVTT/Eu6gu cM9rn3DeuHbhFjIBYncAwtTp8wbzLbatzb8aVedcMG1q+RwBOgjad+KJPxwbz5vj zymsbxmnpY3bxp7f9ILTJ93clcAKKrPBziwmcih4kS7oLb8aXxj//iAKMfHvGB2c N2flAV2i3xIZFFRONHvibCFx/kVMLtLUyhjYX4wHtxWZKz6hkadEUnYw6qWOoAP+ ag2i8v2qD4zr2mgtBD6v4b11SQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOKcRDr3 m79yDoiMz/bXslAgPGfyMB8GA1UdIwQYMBaAFB0SF++P6EtYJVFnG8o15oRIaSSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJCNC9EOTU0QkFCRTY5 QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1MxZ2xVV2NieWpYbWhFaHBK SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hSSVg3NF9vUzFnbFVXY2J5alhtaEVocEpKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzhCQjQvRDk1NEJBQkU2OUI3MTFFQTg4RTcyRTU5QzRGOUFFMDIvOTJCNjlBQTg2 OUI5MTFFQUIxQTBGMzVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJndaAwDQYJKoZIhvcNAQELBQADggEBAB5aAxD9/GgtLj08 hv3YjN71ym2D0W/Fq2X3s56ReC2XgdF9ZRWHt238FP3QLM2r3qRRaCsefW6LSw+N 9TgRhmFhTRVQkWJmaPGXb/GAgon6mVX4CUl7wY6D+D8EVaZQgcdfc949pzVdghm2 jAYzBJqaDnoNuKS8/TCEnNgC3wSU1Cha941Zw0WOKGJDMlAXFq3WQl0YSWofqvcJ dkf+1qpy7PpKxCo8bIL4oCCCgzXHET8ToMHYQeuanTGXTmJB1hqo1e0Vw8l4GoCJ 4oQZWl83dd+3FroASX4t918U0yHdaHw1EDVymQjuOZIgUToMCK3mTshlO9smyM/M k4nbhVA= -----END CERTIFICATE-----Generated at Wed Mar 15 11:54:18 2023 by rpki-client on console-fra.rpki-client.org