$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/020D49E0283211ED9E29FA70C4F9AE02.roa File: 020D49E0283211ED9E29FA70C4F9AE02.roa (raw, json) Hash identifier: dQvemlxARcv87/7G5g/NSLkSH2xSPJZa9N70eJpte0c= Subject key identifier: 80:6E:A9:B5:D4:D6:AA:BA:F0:86:3E:C2:66:E6:F9:76:0E:2D:59:A5 Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Certificate serial: 0123 Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/020D49E0283211ED9E29FA70C4F9AE02.roa Signing time: Mon 27 Nov 2023 04:15:13 +0000 ROA not before: Mon 27 Nov 2023 04:15:13 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 45481 IP address blocks: 103.242.32.0/22 maxlen: 22 113.52.0.0/20 maxlen: 20 113.52.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 04:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Validity Not Before: Nov 27 04:15:13 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656417d1-1619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9e:51:ba:97:5d:fa:dd:f1:dd:41:60:70:3e: 48:e3:6a:ab:25:f9:81:e7:d5:30:70:f2:33:90:2e: 06:d4:f3:f8:41:29:fa:02:44:81:ca:a7:f0:18:9d: 0c:ff:74:61:25:16:15:b3:84:99:9a:8b:09:a3:b2: a0:ab:9f:e0:c6:b6:6c:0a:1b:1f:50:a1:a9:7a:a9: f6:46:54:3f:e1:4f:a7:3a:0d:b1:a7:f6:b5:63:17: a8:52:7f:1f:f8:6f:fa:53:6c:23:79:47:d4:a8:7d: 1c:ba:70:48:27:6e:d9:14:5a:4d:70:5f:56:ac:2e: e3:4d:51:ec:fc:bb:68:d2:3a:41:ff:5d:dd:b3:2a: 7d:0e:82:c2:b2:c1:c4:a1:6f:44:cf:e0:0d:c8:2b: e2:c0:c2:c2:88:a5:ce:70:6a:40:05:81:95:03:cc: ae:3f:ca:73:e7:7d:73:41:5f:ff:6b:48:57:8e:65: ec:81:5d:9f:3b:5b:a0:b1:34:41:85:38:c3:9c:d6: fc:fd:66:7a:6d:9c:5a:de:5b:1e:96:a9:d3:7c:1d: 1b:ed:0f:66:bb:3e:28:78:d8:78:b9:67:c4:30:ea: 73:2b:4f:38:57:27:ca:c0:aa:93:13:7e:2b:41:e9: ac:01:0f:1b:0f:2f:12:c4:63:f6:87:15:5c:2f:cb: 92:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6E:A9:B5:D4:D6:AA:BA:F0:86:3E:C2:66:E6:F9:76:0E:2D:59:A5 X509v3 Authority Key Identifier: keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/020D49E0283211ED9E29FA70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.242.32.0/22 113.52.0.0/20 Signature Algorithm: sha256WithRSAEncryption 30:8a:ac:f0:ca:f9:f3:93:22:96:dc:40:5a:8d:9c:c0:78:f4: 6b:f1:f5:9f:be:44:23:af:eb:95:70:ef:ad:17:a1:b7:1f:8d: 42:c8:f2:3f:a7:cc:a8:10:30:99:ec:c9:5c:ec:f3:fa:27:6f: aa:17:23:37:57:6b:47:a1:a9:31:41:89:ef:71:03:b5:0a:76: 3c:71:b3:40:ba:df:e4:9c:ac:12:0c:e4:d5:ca:7a:6b:35:23: 56:76:f8:54:99:fd:ac:c2:e0:a9:4b:9e:a3:a6:db:a0:2c:c9: ba:c6:65:7e:1e:dc:02:9a:ab:51:50:70:27:44:d3:52:85:94: a1:19:67:ad:95:e1:37:af:f9:e1:7c:c6:86:dd:64:37:c0:b7: 61:5c:a0:21:41:a0:b4:38:13:c9:ac:31:d7:e6:12:61:2c:d7: da:55:9d:e0:c2:5e:2f:f3:d5:8b:d8:90:9c:e5:81:5a:20:de: 71:2c:46:71:f0:4c:5f:c7:8e:11:5d:82:f9:d0:37:7a:6d:ef: b7:d4:a6:ab:af:87:0c:dc:de:7a:aa:fd:5d:05:bf:fb:51:77: 68:a6:e3:57:df:4c:4c:25:df:14:41:da:c1:de:60:83:bb:59: 51:3c:5c:89:e7:a5:1f:ad:1b:3d:6b:4e:3c:bd:93:98:46:3a: 8e:be:26:78 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0MERGN0Q0MDM5 Q0IyRjYxMDgwHhcNMjMxMTI3MDQxNTEzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY0MTdkMS0xNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8p5Rupdd+t3x3UFgcD5I42qrJfmB59UwcPIzkC4G1PP4QSn6AkSByqfwGJ0M /3RhJRYVs4SZmosJo7Kgq5/gxrZsChsfUKGpeqn2RlQ/4U+nOg2xp/a1YxeoUn8f +G/6U2wjeUfUqH0cunBIJ27ZFFpNcF9WrC7jTVHs/Lto0jpB/13dsyp9DoLCssHE oW9Ez+ANyCviwMLCiKXOcGpABYGVA8yuP8pz531zQV//a0hXjmXsgV2fO1ugsTRB hTjDnNb8/WZ6bZxa3lselqnTfB0b7Q9muz4oeNh4uWfEMOpzK084VyfKwKqTE34r QemsAQ8bDy8SxGP2hxVcL8uS2QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIBuqbXU 1qq68IY+wmbm+XYOLVmlMB8GA1UdIwQYMBaAFDaHM/3FYMXrieRSQN99QDnLL2EI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTdGNS85MTcwQzQyQTI3 NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hldUo1RkpBMzMxQU9jc3ZZ UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05vY3pfY1ZneGV1SjVGSkEzMzFBT2NzdllRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk3RjUvOTE3MEM0MkEyNzQ0MTFFRDhDMTM5QjUxQzRGOUFFMDIvMDIwRDQ5RTAy ODMyMTFFRDlFMjlGQTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn8iADBARxNAAwDQYJKoZIhvcNAQELBQADggEBADCKrPDK +fOTIpbcQFqNnMB49Gvx9Z++RCOv65Vw760XobcfjULI8j+nzKgQMJnsyVzs8/on b6oXIzdXa0ehqTFBie9xA7UKdjxxs0C63+ScrBIM5NXKems1I1Z2+FSZ/azC4KlL nqOm26AsybrGZX4e3AKaq1FQcCdE01KFlKEZZ62V4Tev+eF8xobdZDfAt2FcoCFB oLQ4E8msMdfmEmEs19pVneDCXi/z1YvYkJzlgVog3nEsRnHwTF/HjhFdgvnQN3pt 77fUpquvhwzc3nqq/V0Fv/tRd2im41ffTEwl3xRB2sHeYIO7WVE8XInnpR+tGz1r Tjy9k5hGOo6+Jng= -----END CERTIFICATE-----Generated at Fri May 17 06:46:28 2024 by rpki-client on console-ams.rpki-client.org