$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/738240A246DC11EEAF1D2C1DC4F9AE02.roa File: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (raw, json) Hash identifier: B2rzduRjtCAy1p3+thwY4jllEo5iIiCf0nMJPxn4OUo= Subject key identifier: 5F:09:81:02:97:BE:9F:F3:B2:CC:61:66:A1:A5:09:96:D8:65:40:2A Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Certificate serial: 0953 Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/738240A246DC11EEAF1D2C1DC4F9AE02.roa Signing time: Fri 10 May 2024 21:30:24 +0000 ROA not before: Fri 10 May 2024 21:30:24 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 137551 IP address blocks: 103.112.240.0/22 maxlen: 24 103.120.120.0/22 maxlen: 22 103.120.120.0/24 maxlen: 24 103.120.121.0/24 maxlen: 24 103.120.122.0/24 maxlen: 24 103.120.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 21:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2387 (0x953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Validity Not Before: May 10 21:30:24 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=663e91f0-4907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:90:f8:3e:df:b7:59:aa:00:f5:57:40:af:15: 70:29:3a:4e:ed:00:a1:f1:cc:e0:91:f6:92:65:7e: 8f:01:b1:84:b8:a0:b5:55:cc:ff:92:ef:a4:23:6d: 8b:46:c9:18:54:95:8f:02:e8:70:3c:54:d7:b5:1d: 41:df:2a:87:0c:59:44:65:46:45:59:4a:69:2a:e2: 78:6c:b4:b3:53:9b:db:c2:f5:2a:ba:cc:c3:34:71: f7:b1:05:f6:39:e1:60:4d:fc:34:32:27:e9:e3:ba: 26:7e:3c:19:84:3f:76:b5:e6:c8:a9:2e:0d:ff:63: 98:08:b5:4c:b3:6e:23:35:7a:0b:2c:f0:3c:f8:d9: 1d:95:75:55:8f:36:1f:cd:7d:86:e2:ff:43:07:f5: 82:c2:59:ab:2c:09:fb:53:39:0f:0a:bd:2c:9c:3f: 78:66:57:99:24:3d:23:d4:06:68:31:b9:e2:80:7d: 1f:2a:92:3d:19:85:74:e9:99:be:0c:4a:e5:6f:35: 41:ad:f9:81:df:4a:c5:0b:81:87:29:9d:e2:cb:f3: ea:2a:89:d3:19:66:d2:63:66:6a:9b:1e:9f:d7:6c: db:66:be:ce:1d:b8:f6:81:a3:c7:f1:b0:2a:05:1e: 74:89:bf:8e:cf:74:63:6f:3c:76:97:fb:c4:93:bf: 78:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:09:81:02:97:BE:9F:F3:B2:CC:61:66:A1:A5:09:96:D8:65:40:2A X509v3 Authority Key Identifier: keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/738240A246DC11EEAF1D2C1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.240.0/22 103.120.120.0/22 Signature Algorithm: sha256WithRSAEncryption aa:78:63:a0:a7:c1:d2:49:1e:c0:11:6b:bd:be:3c:fb:87:cd: b3:85:53:a3:9b:34:91:0a:07:fd:97:8c:d5:70:a9:f9:62:e9: 9a:18:02:f1:0b:b6:54:48:69:4e:2e:bc:23:6e:0b:18:e3:88: f9:ea:b2:e0:c8:6c:37:6c:85:7b:f6:6f:38:f3:86:10:5c:6a: 0a:b4:0b:54:c1:aa:15:2c:b0:51:2b:e5:50:3c:75:ab:5b:01: 28:66:54:3e:bd:dd:38:d2:a0:48:5c:f6:82:a0:54:68:1f:6c: d4:fb:ca:59:0f:f0:ad:29:6d:17:3f:69:77:b1:bb:56:ad:14: be:9a:81:e8:2c:b3:16:ac:ad:d9:18:ed:b3:ca:ff:dd:b1:dd: ef:5b:3f:64:1c:a5:ec:1e:c4:e6:0b:dc:f7:fe:03:50:56:e2: ab:36:ba:db:4a:85:47:db:bc:ae:19:56:2e:3a:3a:e7:6b:ae: a6:5f:49:fa:8d:3f:ae:f4:b5:83:9a:a5:33:6c:28:10:9a:e5: 84:28:79:e9:8a:40:66:8d:97:32:12:5d:82:eb:d1:bc:27:92: 11:73:df:5a:5c:57:be:22:f9:1f:6c:9b:a1:6e:41:c7:10:27: 3b:62:dd:c4:ba:88:0b:2a:ff:34:2a:6b:77:c6:8a:8c:1e:ef: 9e:70:24:48 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3 ODNFOEFDQkYwHhcNMjQwNTEwMjEzMDI0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjNlOTFmMC00OTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZD4Pt+3WaoA9VdArxVwKTpO7QCh8czgkfaSZX6PAbGEuKC1Vcz/ku+kI22L RskYVJWPAuhwPFTXtR1B3yqHDFlEZUZFWUppKuJ4bLSzU5vbwvUquszDNHH3sQX2 OeFgTfw0Mifp47omfjwZhD92tebIqS4N/2OYCLVMs24jNXoLLPA8+NkdlXVVjzYf zX2G4v9DB/WCwlmrLAn7UzkPCr0snD94ZleZJD0j1AZoMbnigH0fKpI9GYV06Zm+ DErlbzVBrfmB30rFC4GHKZ3iy/PqKonTGWbSY2Zqmx6f12zbZr7OHbj2gaPH8bAq BR50ib+Oz3Rjbzx2l/vEk794FQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFF8JgQKX vp/zssxhZqGlCZbYZUAqMB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ3N0EvQzgyODk0MzI3M0U4MTFFQTg4RjAyMjdGQzRGOUFFMDIvNzM4MjQwQTI0 NkRDMTFFRUFGMUQyQzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJncPADBAJneHgwDQYJKoZIhvcNAQELBQADggEBAKp4Y6Cn wdJJHsARa72+PPuHzbOFU6ObNJEKB/2XjNVwqfli6ZoYAvELtlRIaU4uvCNuCxjj iPnqsuDIbDdshXv2bzjzhhBcagq0C1TBqhUssFEr5VA8datbAShmVD693TjSoEhc 9oKgVGgfbNT7ylkP8K0pbRc/aXexu1atFL6agegssxasrdkY7bPK/92x3e9bP2Qc pewexOYL3Pf+A1BW4qs2uttKhUfbvK4ZVi46OudrrqZfSfqNP670tYOapTNsKBCa 5YQoeemKQGaNlzISXYLr0bwnkhFz31pcV74i+R9sm6FuQccQJzti3cS6iAsq/zQq a3fGiowe755wJEg= -----END CERTIFICATE-----Generated at Sun May 26 22:04:00 2024 by rpki-client on console-fra.rpki-client.org