$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/D80917805F9611EE8E7ED641C4F9AE02.roa File: D80917805F9611EE8E7ED641C4F9AE02.roa (raw, json) Hash identifier: cYMEulXW7KzZ4iKSfCwrLTDJOW+8DTuNItu45qDkWQs= Subject key identifier: 47:C6:9C:C1:1A:1D:58:A6:60:4C:78:37:C7:71:D4:C7:55:D4:BF:07 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 02 Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/D80917805F9611EE8E7ED641C4F9AE02.roa Signing time: Sat 30 Sep 2023 13:39:57 +0000 ROA not before: Sat 30 Sep 2023 13:39:57 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 151350 IP address blocks: 103.209.74.0/23 maxlen: 23 2401:2a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 06:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Sep 30 13:39:57 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6518252d-bb72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:ff:9e:bb:fd:b2:4f:b4:de:31:7c:9b:ef: a3:68:52:ce:b3:cf:48:c1:4b:cc:d2:d6:65:df:3c: 3b:5c:44:6f:83:e0:90:8e:60:07:6c:51:a5:b0:1f: 8f:3d:9e:20:5c:5e:69:04:b4:81:10:d3:02:03:bf: 72:ed:dc:9e:c7:5d:f6:5e:a0:e2:4d:7f:31:a2:e6: 98:cf:95:45:72:1d:3a:e3:f7:1f:09:38:3c:c7:e3: e8:67:71:32:4e:fe:b8:60:d9:27:26:b4:1b:5c:22: 56:98:7e:7d:d8:b4:ef:0e:00:87:46:b4:12:e2:ea: bd:1d:ed:8e:ed:39:bf:ac:bb:7d:7c:58:a9:9c:15: f6:31:35:92:1c:39:41:7d:fe:de:37:cc:f8:60:40: d2:a9:6d:44:6a:c9:96:71:35:b9:5b:0f:59:fb:61: fd:c7:06:98:09:63:cf:25:c2:28:3e:b3:23:d7:14: b2:c8:ed:9a:8e:b0:90:66:14:50:81:b9:3b:c9:e0: c6:51:fe:ae:ac:b7:20:36:38:c0:cd:8f:7c:e6:95: 3d:8c:61:1c:df:ae:e1:25:9f:fd:56:7c:11:ee:59: 96:5c:42:55:c6:6f:4e:93:db:58:03:14:03:3e:5f: 8b:8a:42:c5:fe:50:ac:aa:47:e4:a6:8e:4f:2d:9a: 70:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C6:9C:C1:1A:1D:58:A6:60:4C:78:37:C7:71:D4:C7:55:D4:BF:07 X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/D80917805F9611EE8E7ED641C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.74.0/23 IPv6: 2401:2a0::/32 Signature Algorithm: sha256WithRSAEncryption 16:12:79:28:49:2e:34:81:fa:c3:33:3e:4b:56:09:6d:3b:ce: 7d:03:6a:c0:44:4c:5b:30:b9:22:31:52:9f:b9:88:72:6d:a4: b9:f0:27:c1:74:9f:9a:68:ef:bf:ff:bb:c3:94:52:aa:b8:2f: e1:1e:82:61:cf:e1:69:d9:30:d4:5a:23:86:c3:9f:19:a1:cb: 0e:be:54:72:3b:f9:0c:9e:44:9f:8d:07:d4:a9:17:ef:60:d3: ac:ed:cf:0c:3a:d4:36:1d:bb:6b:3d:7a:5b:bb:a7:25:00:26: a0:0d:70:6b:77:ae:d5:41:0c:db:30:22:d0:5d:a1:5f:95:72: 27:3f:4b:25:94:70:ae:de:12:ca:20:df:31:47:22:5c:9b:1a: 09:38:89:51:42:0c:3f:d3:9f:80:4d:5f:13:e3:36:0d:10:79: 90:af:b3:d4:52:6c:c1:64:7f:61:b9:35:38:d9:02:a9:5d:27: a8:65:48:43:53:d2:8b:a2:bd:59:a8:82:0f:f3:38:54:ad:46: a8:89:ad:e9:72:fb:c8:e7:0b:15:b3:df:e8:39:d4:de:63:b3: e2:91:1c:12:be:a2:51:49:d0:d3:05:f3:80:4c:f1:b8:df:d1: ee:29:37:31:1e:f5:c8:ff:24:71:d3:09:2b:10:61:72:8d:ac: f6:d4:a9:93 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QUUwNDExMC8GA1UEBRMoQjM2MjQzN0FCNjdEMjkwQzVDREZFRjJGNjJCNzdFREQ4 QTlGRkE0NDAeFw0yMzA5MzAxMzM5NTdaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MTgyNTJkLWJiNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1KP+eu/2yT7TeMXyb76NoUs6zz0jBS8zS1mXfPDtcRG+D4JCOYAdsUaWwH489 niBcXmkEtIEQ0wIDv3Lt3J7HXfZeoOJNfzGi5pjPlUVyHTrj9x8JODzH4+hncTJO /rhg2ScmtBtcIlaYfn3YtO8OAIdGtBLi6r0d7Y7tOb+su318WKmcFfYxNZIcOUF9 /t43zPhgQNKpbURqyZZxNblbD1n7Yf3HBpgJY88lwig+syPXFLLI7ZqOsJBmFFCB uTvJ4MZR/q6styA2OMDNj3zmlT2MYRzfruEln/1WfBHuWZZcQlXGb06T21gDFAM+ X4uKQsX+UKyqR+Smjk8tmnCBAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUR8acwRod WKZgTHg3x3HUx1XUvwcwHwYDVR0jBBgwFoAUs2JDerZ9KQxc3+8vYrd+3Yqf+kQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBRTA0LzlEOEY3NzJBNUY5 NjExRUU4MzYzOEYzRUM0RjlBRTAyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1r US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvczJKRGVyWjlLUXhjMy04dllyZC0zWXFmLWtRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9EODA5MTc4MDVG OTYxMUVFOEU3RUQ2NDFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWfRSjANBAIAAjAHAwUAJAECoDANBgkqhkiG9w0BAQsFAAOC AQEAFhJ5KEkuNIH6wzM+S1YJbTvOfQNqwERMWzC5IjFSn7mIcm2kufAnwXSfmmjv v/+7w5RSqrgv4R6CYc/hadkw1FojhsOfGaHLDr5Ucjv5DJ5En40H1KkX72DTrO3P DDrUNh27az16W7unJQAmoA1wa3eu1UEM2zAi0F2hX5VyJz9LJZRwrt4SyiDfMUci XJsaCTiJUUIMP9OfgE1fE+M2DRB5kK+z1FJswWR/Ybk1ONkCqV0nqGVIQ1PSi6K9 WaiCD/M4VK1GqImt6XL7yOcLFbPf6DnU3mOz4pEcEr6iUUnQ0wXzgEzxuN/R7ik3 MR71yP8kcdMJKxBhco2s9tSpkw== -----END CERTIFICATE-----Generated at Fri Apr 19 10:29:15 2024 by rpki-client on console-ams.rpki-client.org