$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/F4B8310CFC3511EB8D17450AC4F9AE02.roa File: F4B8310CFC3511EB8D17450AC4F9AE02.roa (raw, json) Hash identifier: 76KLiTJFCiPr4RQVE2/WVukIFpeZPQCC1K72TsdrRZA= Subject key identifier: 56:DA:F1:6F:82:B5:8D:3B:C9:1F:9A:09:B0:8D:CE:B7:02:6F:61:67 Certificate issuer: /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Certificate serial: 0CB5 Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/F4B8310CFC3511EB8D17450AC4F9AE02.roa Signing time: Mon 06 May 2024 18:57:25 +0000 ROA not before: Mon 06 May 2024 18:57:25 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 138983 IP address blocks: 103.138.30.0/23 maxlen: 23 103.138.30.0/24 maxlen: 24 103.138.31.0/24 maxlen: 24 2001:df0:2b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 18:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3253 (0xcb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Validity Not Before: May 6 18:57:25 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66392814-5f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:71:c0:b9:34:a6:ba:76:66:d4:d1:7a:97: 9a:13:b2:cf:1a:75:d0:1e:9c:bf:4f:cc:9b:19:dc: 79:11:22:a7:78:4e:f3:8d:ae:13:72:7b:f0:0f:66: 58:ba:69:9d:e1:f8:64:f7:74:c7:7d:e5:11:11:8a: ee:c3:c3:6b:27:82:ba:d4:a0:a5:aa:86:e2:8e:0e: 8b:d7:25:21:24:52:88:1b:73:73:3c:58:22:94:cc: 4a:20:d0:8a:c8:3a:d8:30:5c:ce:1b:48:6f:d5:ec: c1:40:7f:cb:7c:40:f6:83:52:9e:b0:13:53:0b:6d: 45:af:40:18:82:bf:d3:8c:cb:b2:e2:33:b3:9b:3a: f3:5c:93:a2:7d:1f:b0:a6:ed:63:17:39:d9:d3:37: 37:ad:c6:6c:1a:ca:07:88:5b:b7:45:74:20:99:d6: 6d:5d:98:4d:b8:a6:fd:49:e4:df:a7:0f:7d:1d:58: a6:9a:da:ad:3a:9d:eb:a2:04:ff:16:eb:f9:1f:2d: 9a:34:36:bb:fd:a1:e0:f9:01:25:73:8d:61:21:d1: a8:df:b1:7e:c3:40:31:54:03:17:c0:c4:89:58:cf: 54:cb:4d:10:56:16:22:09:6a:8f:a5:4b:41:ac:e3: 1a:df:47:cd:91:55:ca:6c:04:af:be:37:eb:9c:7f: b2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DA:F1:6F:82:B5:8D:3B:C9:1F:9A:09:B0:8D:CE:B7:02:6F:61:67 X509v3 Authority Key Identifier: keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/F4B8310CFC3511EB8D17450AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.30.0/23 IPv6: 2001:df0:2b80::/48 Signature Algorithm: sha256WithRSAEncryption 22:6b:12:56:c6:c1:4a:ea:c5:65:8b:d8:76:a2:e8:32:ca:21: f5:b4:ca:b2:b6:b9:de:9e:0c:e8:e1:f5:e7:d8:8c:12:0f:aa: 3b:28:a0:39:2a:45:22:47:c6:0a:95:1f:c4:52:95:63:34:ee: 6b:46:67:f1:38:87:e4:53:dd:50:ac:f3:e4:fe:33:1c:72:7d: 37:29:0b:78:fe:ef:37:c5:db:77:cc:cc:30:9c:27:75:2d:cc: f1:51:ff:29:9a:bd:93:13:e2:a6:6c:b3:99:35:14:bc:7b:8a: ab:85:b0:23:6a:77:de:ac:67:1d:bd:84:7d:d6:46:d8:e7:cf: 13:9b:1a:3b:f2:ae:29:23:b8:09:54:ce:98:e5:e3:61:66:0e: b0:a4:9a:89:41:69:06:f5:ca:3e:d9:0a:b9:2c:7d:6f:db:28: ba:28:a3:d9:db:17:39:67:0d:bc:cc:93:3d:52:7f:74:56:b5: f1:b6:a9:da:9f:58:29:b4:ca:b4:08:ae:d8:82:33:d1:61:9f: db:cd:af:98:47:27:cd:cd:b4:d1:d0:23:3a:ff:96:d8:cc:b0: 97:4d:99:4a:f6:37:63:4a:15:ca:65:be:fb:cd:33:5e:d9:2b: a2:10:a3:9b:0e:af:47:f4:61:f3:37:05:50:e7:44:2a:78:61: 0e:17:92:df -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwOTYxMTAvBgNVBAUTKDBBMkU1REYxQjJDM0Q3OTdERUExNTM2N0ZBQTlEQzM4 ODRDRDFCMzMwHhcNMjQwNTA2MTg1NzI1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM5MjgxNC01ZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyttxwLk0prp2ZtTRepeaE7LPGnXQHpy/T8ybGdx5ESKneE7zja4TcnvwD2ZY ummd4fhk93THfeUREYruw8NrJ4K61KClqobijg6L1yUhJFKIG3NzPFgilMxKINCK yDrYMFzOG0hv1ezBQH/LfED2g1KesBNTC21Fr0AYgr/TjMuy4jOzmzrzXJOifR+w pu1jFznZ0zc3rcZsGsoHiFu3RXQgmdZtXZhNuKb9SeTfpw99HVimmtqtOp3rogT/ Fuv5Hy2aNDa7/aHg+QElc41hIdGo37F+w0AxVAMXwMSJWM9Uy00QVhYiCWqPpUtB rOMa30fNkVXKbASvvjfrnH+y+QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFba8W+C tY07yR+aCbCNzrcCb2FnMB8GA1UdIwQYMBaAFAouXfGyw9eX3qFTZ/qp3DiEzRsz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA5Ni9FNTA0MkMyQUNB MzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1ZmVvVk5uLXFuY09JVE5H ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpNWQ4YkxEMTVmZW9WTm4tcW5jT0lUTkd6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QwOTYvRTUwNDJDMkFDQTMyMTFFOUE3MzlCNzUzQzRGOUFFMDIvRjRCODMxMENG QzM1MTFFQjhEMTc0NTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnih4wDwQCAAIwCQMHACABDfArgDANBgkqhkiG9w0BAQsF AAOCAQEAImsSVsbBSurFZYvYdqLoMsoh9bTKsra53p4M6OH159iMEg+qOyigOSpF IkfGCpUfxFKVYzTua0Zn8TiH5FPdUKzz5P4zHHJ9NykLeP7vN8Xbd8zMMJwndS3M 8VH/KZq9kxPipmyzmTUUvHuKq4WwI2p33qxnHb2EfdZG2OfPE5saO/KuKSO4CVTO mOXjYWYOsKSaiUFpBvXKPtkKuSx9b9souiij2dsXOWcNvMyTPVJ/dFa18bap2p9Y KbTKtAiu2IIz0WGf282vmEcnzc200dAjOv+W2Mywl02ZSvY3Y0oVymW++80zXtkr ohCjmw6vR/Rh8zcFUOdEKnhhDheS3w== -----END CERTIFICATE-----Generated at Fri May 24 21:43:32 2024 by rpki-client on console-ams.rpki-client.org