$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/49036D2CB0D711E58B185E0FC4F9AE02.roa File: 49036D2CB0D711E58B185E0FC4F9AE02.roa (raw, json) Hash identifier: YazdyMwHOwoF8umaAipXjtQtje6WJc0WXJZNFJEXGA0= Subject key identifier: AF:14:6D:83:E8:14:D4:0D:5A:65:99:2B:D8:A8:8D:7E:85:9B:24:7A Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 33E5 Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/49036D2CB0D711E58B185E0FC4F9AE02.roa Signing time: Tue 16 Apr 2024 15:20:47 +0000 ROA not before: Tue 16 Apr 2024 15:20:47 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 38478 IP address blocks: 103.15.120.0/22 maxlen: 22 103.15.120.0/24 maxlen: 24 103.15.121.0/24 maxlen: 24 103.15.122.0/24 maxlen: 24 103.15.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 14:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13285 (0x33e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: Apr 16 15:20:47 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=661e974e-3aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:47:1f:62:4b:83:5d:b3:3f:26:a6:97:a9:be: 9e:16:d4:78:40:9e:1e:14:02:ec:77:03:e1:10:7c: df:ac:9a:9f:9f:2c:57:7d:af:cc:f5:b3:5d:6a:d2: da:11:78:82:ae:0b:17:d4:da:31:16:71:76:90:0e: 5d:a2:41:99:aa:22:c9:01:6f:40:2d:2f:60:1f:84: 77:41:a6:51:55:27:38:ae:9d:3f:1d:ae:7a:44:62: 15:7c:42:0c:e5:2b:b0:ff:78:e5:76:15:68:23:9d: c1:8c:da:4c:0a:b2:54:34:74:d7:53:2b:e3:d8:91: 17:62:19:54:c6:43:59:11:88:44:62:69:8b:32:05: d4:4e:58:93:a9:31:34:c2:e2:cb:4f:d7:c3:f7:96: 5e:f2:eb:b8:6e:d1:3a:43:b4:79:0b:19:39:1f:b3: d2:05:11:75:b8:eb:e0:b7:c4:9d:ea:cb:cd:9e:d8: 9e:b5:3d:fe:85:9a:e6:1a:e1:d9:1e:87:5a:73:b2: da:06:41:76:0f:31:73:6d:32:89:7e:a5:82:90:05: 74:cf:c6:92:62:ed:dc:c8:7d:1c:b9:4d:9a:81:d3: 80:7f:56:22:04:5d:e9:74:ea:fc:38:50:c1:96:47: 78:ae:6c:05:d5:ce:54:de:1f:19:3f:19:d9:19:d7: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:14:6D:83:E8:14:D4:0D:5A:65:99:2B:D8:A8:8D:7E:85:9B:24:7A X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/49036D2CB0D711E58B185E0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.120.0/22 Signature Algorithm: sha256WithRSAEncryption 19:a1:07:c8:ac:e9:e4:0c:e0:dc:bd:c6:83:4e:f3:9e:0b:98: d5:61:0c:9d:f6:44:47:ba:7c:28:f2:4f:b0:d3:94:67:aa:19: ea:9b:a5:d6:5e:bc:33:1f:ab:83:b4:de:11:1a:10:72:f4:c4: e7:34:f7:72:76:91:6a:c3:7f:17:77:37:53:32:c2:1f:87:80: 18:9d:a5:91:1d:72:f3:34:76:5f:bf:6e:7b:c2:8d:f3:01:41: 79:5a:e9:64:33:fc:a7:12:e7:0b:bc:cb:ea:3f:f9:1c:c2:7e: cd:1a:61:7a:ba:37:c5:e9:80:ba:ba:6e:4e:45:f5:0b:00:55: 44:e5:02:61:2d:54:3e:4c:c1:a3:72:bb:af:a9:66:36:f4:69: 1d:dc:66:bf:b2:be:2f:4f:85:74:6e:87:e2:25:82:62:44:3d: a3:a8:78:de:26:95:46:3c:2e:c8:b5:2b:1d:99:8a:4f:0e:a6: 69:1f:44:84:0e:1a:f5:a4:3f:de:ca:b3:e2:46:4b:07:75:2b: 19:b8:7b:3f:ff:14:3d:06:28:6d:85:80:9f:f8:c8:9c:fe:a6: d2:05:c3:28:2f:60:58:c8:0e:0c:3a:5b:cf:d9:ad:e7:29:a8: 60:15:aa:88:7f:80:ae:8a:2d:26:d1:99:50:83:28:90:90:db: 03:d0:33:a8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICM+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjQwNDE2MTUyMDQ3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjFlOTc0ZS0zYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8EcfYkuDXbM/JqaXqb6eFtR4QJ4eFALsdwPhEHzfrJqfnyxXfa/M9bNdatLa EXiCrgsX1NoxFnF2kA5dokGZqiLJAW9ALS9gH4R3QaZRVSc4rp0/Ha56RGIVfEIM 5Suw/3jldhVoI53BjNpMCrJUNHTXUyvj2JEXYhlUxkNZEYhEYmmLMgXUTliTqTE0 wuLLT9fD95Ze8uu4btE6Q7R5Cxk5H7PSBRF1uOvgt8Sd6svNntietT3+hZrmGuHZ Hodac7LaBkF2DzFzbTKJfqWCkAV0z8aSYu3cyH0cuU2agdOAf1YiBF3pdOr8OFDB lkd4rmwF1c5U3h8ZPxnZGde+MQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK8UbYPo FNQNWmWZK9iojX6FmyR6MB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk0ODQvNkZGMERERTAxRDk0MTFFMjlERUNCNUY4MDhCMDJDRDIvNDkwMzZEMkNC MEQ3MTFFNThCMTg1RTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnD3gwDQYJKoZIhvcNAQELBQADggEBABmhB8is6eQM4Ny9 xoNO854LmNVhDJ32REe6fCjyT7DTlGeqGeqbpdZevDMfq4O03hEaEHL0xOc093J2 kWrDfxd3N1Mywh+HgBidpZEdcvM0dl+/bnvCjfMBQXla6WQz/KcS5wu8y+o/+RzC fs0aYXq6N8XpgLq6bk5F9QsAVUTlAmEtVD5MwaNyu6+pZjb0aR3cZr+yvi9PhXRu h+IlgmJEPaOoeN4mlUY8Lsi1Kx2Zik8OpmkfRIQOGvWkP97Ks+JGSwd1Kxm4ez// FD0GKG2FgJ/4yJz+ptIFwygvYFjIDgw6W8/ZrecpqGAVqoh/gK6KLSbRmVCDKJCQ 2wPQM6g= -----END CERTIFICATE-----Generated at Sun May 26 19:11:42 2024 by rpki-client on console-ams.rpki-client.org