$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/70E436A4155311EDB5B4C084C4F9AE02.roa File: 70E436A4155311EDB5B4C084C4F9AE02.roa (raw, json) Hash identifier: 2KPGE6YOGXpDAntQqSYERNf3VFcgLXO23a7bItR4QIo= Subject key identifier: 07:28:4B:BD:5A:A9:85:08:10:07:4A:F5:06:9D:03:6B:2E:06:87:72 Certificate issuer: /CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Certificate serial: 0B1C Authority key identifier: 0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/70E436A4155311EDB5B4C084C4F9AE02.roa Signing time: Sun 10 Sep 2023 19:06:34 +0000 ROA not before: Sun 10 Sep 2023 19:06:34 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 141731 IP address blocks: 103.119.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2844 (0xb1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Validity Not Before: Sep 10 19:06:34 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64fe13ba-b404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:c2:dd:24:a6:98:ae:ea:b1:32:cd:cf:10: ae:f0:0f:64:78:6f:41:d6:14:35:4a:04:08:aa:b4: 10:8e:da:ee:ba:5b:df:ac:df:64:1c:aa:e6:a8:0f: 14:f8:4d:53:42:c9:22:1a:d7:03:f9:bb:27:d6:1a: d0:0c:2d:50:5c:b6:92:ff:6c:b4:06:2c:99:24:49: c2:eb:b9:37:08:85:55:01:4b:22:48:fa:51:57:cf: 13:f5:e7:1f:1a:38:54:ab:e9:fe:cd:92:e5:5f:9a: be:3e:f8:74:e6:bc:1f:36:b7:2f:f2:af:ba:2e:4b: d5:21:a7:ba:40:a2:48:d0:67:d2:7e:c9:8c:cf:a4: 34:f8:e0:1a:ca:9d:8a:4c:e1:3c:13:32:5d:af:de: 39:3d:32:fc:ae:9a:73:f9:e3:86:bb:36:36:18:30: dd:52:49:3c:70:5c:93:dc:90:8f:95:bf:df:7e:39: 42:78:1a:83:d5:3d:38:b9:2b:41:1c:d5:72:f3:38: c0:8a:36:35:b0:34:dd:5d:db:60:4f:a9:ac:a2:78: 7e:61:af:37:56:3f:9c:21:9a:9c:eb:0c:4a:d2:35: 74:4a:aa:4c:c6:15:0d:5c:02:8f:ba:ec:bd:42:4b: ad:b6:6d:5f:a8:dd:09:49:87:d0:40:46:e2:e5:d3: 37:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:28:4B:BD:5A:A9:85:08:10:07:4A:F5:06:9D:03:6B:2E:06:87:72 X509v3 Authority Key Identifier: keyid:0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/70E436A4155311EDB5B4C084C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.103.0/24 Signature Algorithm: sha256WithRSAEncryption bd:31:d0:6a:f3:22:1d:ae:85:4a:56:90:14:33:24:cb:80:97: bf:65:55:2e:7e:38:c6:b0:cd:57:ab:02:ad:98:ae:8c:cc:0a: f6:42:ba:1d:b4:8d:c7:59:72:41:f0:3b:3b:be:9d:21:c1:5b: 80:ec:fb:04:d4:d9:7e:71:af:79:94:02:91:61:46:26:15:eb: 30:55:21:bd:e4:e1:ab:16:7a:11:6d:23:3d:6e:e5:55:e8:e0: ef:59:c1:90:cb:fb:92:a9:eb:6d:a9:72:ef:3a:14:d8:c9:34: 1e:0f:eb:25:13:21:40:36:b3:e2:42:c9:37:d3:46:96:8a:74: c2:b6:02:bc:2d:8a:69:19:fb:16:22:c5:9b:94:52:53:18:df: 2a:37:65:5f:0a:c9:b7:e6:9f:88:cf:f7:6c:16:8f:58:a4:f6: 57:1d:88:a3:be:bc:ae:93:6b:60:8e:8e:6f:82:f0:c3:fb:2e: b0:b3:79:a7:aa:51:cb:fb:83:be:1e:9d:7e:7d:38:30:43:0a: 12:c1:ea:66:eb:79:6f:6e:d9:8c:89:96:87:4b:0a:e9:b4:ef: 93:ae:c0:04:db:60:09:57:eb:54:b4:fd:7b:0d:bd:de:fa:ec: 30:34:43:74:12:26:b5:94:8f:77:32:ff:28:8e:ee:20:15:9c: 29:2e:d3:5b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxQkUxMTAvBgNVBAUTKDBBMzdFQzkxRTgyN0UxNjlDODYyQjQ0Q0Q4NzZCMUQz NzY0MTM3MzQwHhcNMjMwOTEwMTkwNjM0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZlMTNiYS1iNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwO3C3SSmmK7qsTLNzxCu8A9keG9B1hQ1SgQIqrQQjtruulvfrN9kHKrmqA8U +E1TQskiGtcD+bsn1hrQDC1QXLaS/2y0BiyZJEnC67k3CIVVAUsiSPpRV88T9ecf GjhUq+n+zZLlX5q+Pvh05rwfNrcv8q+6LkvVIae6QKJI0GfSfsmMz6Q0+OAayp2K TOE8EzJdr945PTL8rppz+eOGuzY2GDDdUkk8cFyT3JCPlb/ffjlCeBqD1T04uStB HNVy8zjAijY1sDTdXdtgT6msonh+Ya83Vj+cIZqc6wxK0jV0SqpMxhUNXAKPuuy9 Qkuttm1fqN0JSYfQQEbi5dM3uwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAcoS71a qYUIEAdK9QadA2suBodyMB8GA1UdIwQYMBaAFAo37JHoJ+FpyGK0TNh2sdN2QTc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFCRS9FMUVBQkYwQTA0 ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRXbklZclJNMkhheDAzWkJO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqZnNrZWduNFduSVlyUk0ySGF4MDNaQk56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0MxQkUvRTFFQUJGMEEwNDgzMTFFQTgwMjhCRTJGQzRGOUFFMDIvNzBFNDM2QTQx NTUzMTFFREI1QjRDMDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnd2cwDQYJKoZIhvcNAQELBQADggEBAL0x0GrzIh2uhUpW kBQzJMuAl79lVS5+OMawzVerAq2YrozMCvZCuh20jcdZckHwOzu+nSHBW4Ds+wTU 2X5xr3mUApFhRiYV6zBVIb3k4asWehFtIz1u5VXo4O9ZwZDL+5Kp622pcu86FNjJ NB4P6yUTIUA2s+JCyTfTRpaKdMK2ArwtimkZ+xYixZuUUlMY3yo3ZV8Kybfmn4jP 92wWj1ik9lcdiKO+vK6Ta2COjm+C8MP7LrCzeaeqUcv7g74enX59ODBDChLB6mbr eW9u2YyJlodLCum075OuwATbYAlX61S0/XsNvd767DA0Q3QSJrWUj3cy/yiO7iAV nCku01s= -----END CERTIFICATE-----Generated at Fri May 10 20:05:35 2024 by rpki-client on console-fra.rpki-client.org