$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/F77C1438964111EDAAB8E74AC4F9AE02.roa File: F77C1438964111EDAAB8E74AC4F9AE02.roa (raw, json) Hash identifier: Z+8OAsXUqTPdaxZduFocVP1QFHv7C2jepVgKTrjE3Zg= Subject key identifier: F9:57:50:6D:9D:5D:08:56:B1:CB:D2:1C:46:35:C5:63:13:4A:E0:C9 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 49 Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/F77C1438964111EDAAB8E74AC4F9AE02.roa Signing time: Thu 01 Jun 2023 08:30:57 +0000 ROA not before: Thu 01 Jun 2023 08:30:57 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 149777 IP address blocks: 103.186.50.0/23 maxlen: 23 103.186.50.0/24 maxlen: 24 103.186.51.0/24 maxlen: 24 2400:6e20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Jun 1 08:30:57 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64785741-c59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:7f:d9:3b:dd:70:5d:b8:68:65:b8:78:e5: 3b:fe:ca:fd:30:f3:6d:60:36:eb:a4:f4:b0:70:a7: 53:a0:06:58:eb:53:b3:55:71:8d:3e:0f:e0:b4:d5: 50:23:a2:59:4b:fc:e1:30:dc:f7:b8:08:8f:d4:d8: 85:69:24:71:dd:c6:e1:be:dc:ed:14:5b:e8:a4:bc: 61:3b:cc:ff:13:98:1a:3a:5a:30:c0:e3:57:bb:dc: e7:85:01:46:58:56:ef:f3:e9:94:70:c3:e7:cc:d7: 44:bb:b1:59:b5:09:51:3e:5e:b9:2a:d7:3d:18:66: f2:36:dc:a1:f4:56:b6:6e:83:3b:d2:35:a3:52:65: fa:78:b5:a9:0b:d5:4d:2d:3d:5a:78:80:9f:1f:7e: 99:22:c0:c6:28:2a:f6:7e:03:c9:e2:ec:1c:ea:cd: 49:c5:b7:50:cf:29:5f:39:95:98:fb:aa:c0:4d:ba: 95:56:65:94:f0:6c:bb:b3:5d:5d:db:67:3a:c2:dd: 82:ac:fe:0b:64:0e:08:68:e8:b9:bb:4a:7a:0d:89: 50:58:a3:79:08:56:5b:3e:45:33:b7:cc:74:74:5a: f7:5f:07:b9:c2:5b:f0:05:66:58:62:9e:6f:21:b4: d9:72:57:fc:b8:94:87:e5:a5:9d:2f:c1:40:e5:9d: 0b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:57:50:6D:9D:5D:08:56:B1:CB:D2:1C:46:35:C5:63:13:4A:E0:C9 X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/F77C1438964111EDAAB8E74AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.50.0/23 IPv6: 2400:6e20::/32 Signature Algorithm: sha256WithRSAEncryption 6d:72:93:eb:e0:74:e7:71:85:0a:1f:d1:93:2e:69:7f:13:9f: 1a:84:3d:6a:46:1e:78:8e:b1:b5:9e:85:d6:ca:0d:c2:a7:77: 35:b3:cb:45:cb:ff:bb:74:25:3a:1d:e4:c7:79:0c:e0:91:26: fa:9e:81:e2:4f:d9:4d:07:5c:3a:c1:45:ab:e5:dc:82:e1:b3: 62:27:6b:11:4b:a6:30:d0:c9:bf:83:0c:1b:45:bd:3a:68:56: 61:d0:18:cd:20:18:b9:6d:f7:a4:5b:f9:60:96:5c:59:23:2a: a4:fd:6d:9b:f8:72:f3:dc:ee:5d:78:d3:96:12:33:17:7c:74: 7a:b7:15:05:95:f0:37:10:6f:5d:0f:ba:69:91:0b:77:05:44: d6:fc:00:74:0e:87:a6:c0:eb:fe:25:13:0d:b3:e2:af:34:29: 03:43:59:77:3f:b3:aa:63:10:9b:a5:48:26:0b:31:c2:e0:af: ad:18:3d:45:e9:8e:46:69:9c:e2:32:8d:b4:6a:97:57:93:91: 30:47:31:76:e0:84:5b:02:e9:02:46:68:e2:41:da:b6:d5:5e: 16:8b:fb:e7:f3:e2:cd:71:7f:c5:d5:6f:69:2f:fd:c9:f8:56: 83:fe:51:cd:11:c7:4c:56:29:b1:c6:8c:ae:dd:9c:f1:c6:88: e6:f8:85:2e -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0NERDExMC8GA1UEBRMoM0E4QTZBMkVFNURDMDlGQ0FBODJGRjAxOEYwOUMxQUY4 NEI0MTE5NjAeFw0yMzA2MDEwODMwNTdaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY0Nzg1NzQxLWM1OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtR3/ZO91wXbhoZbh45Tv+yv0w821gNuuk9LBwp1OgBljrU7NVcY0+D+C01VAj ollL/OEw3Pe4CI/U2IVpJHHdxuG+3O0UW+ikvGE7zP8TmBo6WjDA41e73OeFAUZY Vu/z6ZRww+fM10S7sVm1CVE+Xrkq1z0YZvI23KH0VrZugzvSNaNSZfp4takL1U0t PVp4gJ8ffpkiwMYoKvZ+A8ni7BzqzUnFt1DPKV85lZj7qsBNupVWZZTwbLuzXV3b ZzrC3YKs/gtkDgho6Lm7SnoNiVBYo3kIVls+RTO3zHR0WvdfB7nCW/AFZlhinm8h tNlyV/y4lIflpZ0vwUDlnQsbAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU+VdQbZ1d CFaxy9IcRjXFYxNK4MkwHwYDVR0jBBgwFoAUOopqLuXcCfyqgv8BjwnBr4S0EZYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQ0REL0YzQkJFNzZFOTYz RDExRURCRTNGRDAxQUM0RjlBRTAyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVa WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT29wcUx1WGNDZnlxZ3Y4Qmp3bkJyNFMwRVpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9GNzdDMTQzODk2 NDExMUVEQUFCOEU3NEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWe6MjANBAIAAjAHAwUAJABuIDANBgkqhkiG9w0BAQsFAAOC AQEAbXKT6+B053GFCh/Rky5pfxOfGoQ9akYeeI6xtZ6F1soNwqd3NbPLRcv/u3Ql Oh3kx3kM4JEm+p6B4k/ZTQdcOsFFq+XcguGzYidrEUumMNDJv4MMG0W9OmhWYdAY zSAYuW33pFv5YJZcWSMqpP1tm/hy89zuXXjTlhIzF3x0ercVBZXwNxBvXQ+6aZEL dwVE1vwAdA6HpsDr/iUTDbPirzQpA0NZdz+zqmMQm6VIJgsxwuCvrRg9RemORmmc 4jKNtGqXV5ORMEcxduCEWwLpAkZo4kHattVeFov75/PizXF/xdVvaS/9yfhWg/5R zRHHTFYpscaMrt2c8caI5viFLg== -----END CERTIFICATE-----Generated at Tue May 7 06:20:55 2024 by rpki-client on console-fra.rpki-client.org