$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/CD77D766287911ED93621A30C4F9AE02.roa File: CD77D766287911ED93621A30C4F9AE02.roa (raw, json) Hash identifier: gN2FZeNXqiYFjRqzzNhrx6X/x84wIeQDu/SZTNGaq+0= Subject key identifier: 4B:6C:47:03:F1:36:BC:6D:78:09:32:A4:1F:2D:D0:2F:45:50:A1:EA Certificate issuer: /CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Certificate serial: 07A5 Authority key identifier: 71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/CD77D766287911ED93621A30C4F9AE02.roa Signing time: Wed 02 Aug 2023 21:18:48 +0000 ROA not before: Wed 02 Aug 2023 21:18:48 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 138346 IP address blocks: 103.152.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Validity Not Before: Aug 2 21:18:48 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cac838-ce3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dd:3f:98:3a:78:c1:7e:1f:57:d2:27:46:bd: dd:9b:7b:10:3a:94:4f:77:85:eb:a5:7d:eb:77:6d: ba:be:5e:42:a8:ac:e5:58:e9:11:b5:cc:a8:46:f1: 5d:30:c3:a1:77:c4:fb:74:eb:90:bb:43:76:bf:3d: 7e:f6:d0:58:1a:48:65:80:52:82:67:1b:72:ea:5b: 65:6e:dc:8b:8a:3e:f1:64:cc:c8:ac:74:f3:bd:ef: df:8a:a4:69:bb:5e:6e:6d:d6:38:84:93:6e:b6:35: a4:47:f1:f5:b0:92:5d:48:e1:7c:82:be:1b:23:3f: 6a:d9:99:be:4f:82:27:c3:59:6c:97:2b:be:cf:ee: 5b:a2:f7:43:69:b6:8e:de:45:dc:9d:ad:27:a5:1f: 43:ed:ec:5b:df:96:c2:f7:6c:d3:f2:8b:ef:00:80: a0:f8:a1:dc:38:a5:6f:b0:4d:a3:c8:92:54:94:1a: 45:a2:06:ca:a5:14:63:50:f9:3e:7d:ee:99:0a:d5: 73:ac:3d:ad:bf:d6:ad:57:96:ec:a9:68:e3:7e:17: 5d:a7:2d:8a:79:47:59:ab:ae:3c:90:d1:f6:e3:ef: 17:f2:93:f7:f1:25:d0:78:c1:aa:f6:b9:7b:eb:0c: 98:72:a1:39:3b:ac:ab:f2:9f:60:66:0e:d0:3a:77: f3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6C:47:03:F1:36:BC:6D:78:09:32:A4:1F:2D:D0:2F:45:50:A1:EA X509v3 Authority Key Identifier: keyid:71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/CD77D766287911ED93621A30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.1.0/24 Signature Algorithm: sha256WithRSAEncryption 68:3d:46:7e:46:ce:3a:01:13:3c:6b:d0:fa:14:c6:20:72:5b: 2e:f7:af:ae:c0:89:97:a7:d7:16:63:c4:e9:0c:31:b8:ed:c9: 8e:0e:60:ec:77:49:b9:c7:3d:a1:46:17:2b:26:e8:b8:15:09: 0e:ec:a9:15:e0:e0:7f:4f:ae:93:de:98:fb:15:11:f5:8d:3a: cd:e5:6f:aa:56:8e:86:a3:57:28:32:89:b0:be:a1:fe:3d:6c: e7:72:46:e1:8f:cc:cf:72:a8:19:3d:cf:bb:6b:31:45:02:b4: 71:6c:50:f3:54:65:82:ca:5c:25:0c:2e:5b:81:df:6b:58:c8: 17:29:35:34:9a:c5:f6:4c:61:7b:dc:39:8a:7d:ea:ee:c4:da: 04:88:8e:25:f0:22:16:ce:f9:28:4c:3a:8b:d7:22:11:cd:00: 08:9b:5a:8d:76:e6:ab:63:93:8f:56:71:77:86:39:c3:6e:ff: 07:2e:6d:9e:31:f7:dc:00:67:0a:5d:ad:40:8f:b5:ea:55:12: f3:ba:d7:0c:bb:fd:b8:38:f9:3d:3d:18:02:a3:36:fd:12:d2: 24:2e:7f:b4:b9:29:86:49:bf:1e:0b:2f:e7:fe:d1:83:85:a8: be:78:4a:2e:8a:ae:c1:6f:f0:55:21:af:b0:61:4a:1c:4a:3d: 52:e2:1a:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3MjExMTAvBgNVBAUTKDcxQzYzRDU5MDkzRjA0RDA0QjM5QkIxRUEyQjQ2OTJD REZEMTZGRTEwHhcNMjMwODAyMjExODQ4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNhYzgzOC1jZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA490/mDp4wX4fV9InRr3dm3sQOpRPd4XrpX3rd226vl5CqKzlWOkRtcyoRvFd MMOhd8T7dOuQu0N2vz1+9tBYGkhlgFKCZxty6ltlbtyLij7xZMzIrHTzve/fiqRp u15ubdY4hJNutjWkR/H1sJJdSOF8gr4bIz9q2Zm+T4Inw1lslyu+z+5bovdDabaO 3kXcna0npR9D7exb35bC92zT8ovvAICg+KHcOKVvsE2jyJJUlBpFogbKpRRjUPk+ fe6ZCtVzrD2tv9atV5bsqWjjfhddpy2KeUdZq648kNH24+8X8pP38SXQeMGq9rl7 6wyYcqE5O6yr8p9gZg7QOnfzcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEtsRwPx NrxteAkypB8t0C9FUKHqMB8GA1UdIwQYMBaAFHHGPVkJPwTQSzm7HqK0aSzf0W/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjcyMS9BM0MwNkFENkE5 QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JOQkxPYnNlb3JScExOX1Ji LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjWTlXUWtfQk5CTE9ic2VvclJwTE5fUmItRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDY3MjEvQTNDMDZBRDZBOUJGMTFFQUEzMDRBMDIzQzRGOUFFMDIvQ0Q3N0Q3NjYy ODc5MTFFRDkzNjIxQTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnmAEwDQYJKoZIhvcNAQELBQADggEBAGg9Rn5GzjoBEzxr 0PoUxiByWy73r67AiZen1xZjxOkMMbjtyY4OYOx3SbnHPaFGFysm6LgVCQ7sqRXg 4H9PrpPemPsVEfWNOs3lb6pWjoajVygyibC+of49bOdyRuGPzM9yqBk9z7trMUUC tHFsUPNUZYLKXCUMLluB32tYyBcpNTSaxfZMYXvcOYp96u7E2gSIjiXwIhbO+ShM OovXIhHNAAibWo125qtjk49WcXeGOcNu/wcubZ4x99wAZwpdrUCPtepVEvO61wy7 /bg4+T09GAKjNv0S0iQuf7S5KYZJvx4LL+f+0YOFqL54Si6KrsFv8FUhr7BhShxK PVLiGlk= -----END CERTIFICATE-----Generated at Thu May 16 22:23:38 2024 by rpki-client on console-fra.rpki-client.org