$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa File: 94B101721B8B11EEACEA736AC4F9AE02.roa (raw, json) Hash identifier: yYCYM+D4VlWmYI/ad0TBLqiC/Uh/7gNsKoXWr+9O79s= Subject key identifier: A7:BA:14:45:C4:58:3C:A1:56:EC:A1:EB:B8:47:50:64:55:DA:88:5E Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 072E Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa Signing time: Tue 31 Oct 2023 22:29:40 +0000 ROA not before: Tue 31 Oct 2023 22:29:40 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 134555 IP address blocks: 43.247.80.0/22 maxlen: 24 103.23.174.0/24 maxlen: 24 103.87.38.0/23 maxlen: 24 103.235.188.0/22 maxlen: 24 103.236.203.0/24 maxlen: 24 202.52.54.0/23 maxlen: 24 2402:d840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1838 (0x72e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Validity Not Before: Oct 31 22:29:40 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65417fd4-8769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:05:9a:d5:4b:1f:c7:d1:64:e9:fa:1d:0a:ae: ad:9f:df:af:1f:a8:e9:ca:51:c2:80:df:19:7a:33: 99:d6:60:4d:9d:01:0e:49:97:d8:59:69:f5:a7:ee: 0a:6d:cb:e3:9c:a8:ec:8e:4b:3c:5b:d7:8a:51:0f: 2c:fe:04:7f:4e:5a:c2:e4:79:f0:8e:5a:7e:21:74: c0:9a:01:96:24:22:64:bd:fd:c1:db:60:73:63:7a: 82:e6:44:01:6a:77:c7:df:51:d1:a7:76:25:85:18: 49:67:06:d9:f7:78:fb:43:f4:61:5b:66:2e:65:ef: 03:16:47:a7:fc:db:d0:ff:04:64:36:f8:fb:89:b7: 08:8e:01:07:b1:d8:2a:0e:17:83:16:4d:cf:05:b8: 43:f1:ac:d5:c9:12:b0:25:2c:0c:c7:e5:53:63:52: 1b:37:be:5a:7f:35:41:11:b9:ec:35:b8:f3:dd:2f: fd:e9:78:83:8f:83:39:3c:24:ce:d6:6a:a1:4a:96: a1:00:20:1a:d6:2b:8c:e1:3f:db:9e:1f:a3:7e:ef: 36:60:bc:02:91:cd:f5:22:4b:e8:f9:cf:1a:15:25: 00:63:d4:73:65:11:67:b3:e4:99:7b:ab:6b:1e:85: 3a:19:18:90:d4:3b:d6:ce:f0:f9:60:6c:2b:f9:5b: ea:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BA:14:45:C4:58:3C:A1:56:EC:A1:EB:B8:47:50:64:55:DA:88:5E X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.80.0/22 103.23.174.0/24 103.87.38.0/23 103.235.188.0/22 103.236.203.0/24 202.52.54.0/23 IPv6: 2402:d840::/32 Signature Algorithm: sha256WithRSAEncryption 4b:42:f8:ca:e0:c2:f3:56:e6:ed:9c:37:fb:c9:6e:6c:66:60: 93:bb:6b:7d:e8:c6:1a:f3:db:e5:c5:3d:32:cc:87:db:87:ac: 12:fd:9a:c3:d7:74:44:76:4a:80:8c:d5:03:02:75:91:2f:3e: c2:18:7e:1a:60:14:ec:31:6e:5c:40:87:21:c2:95:05:df:d3: 92:66:7f:83:0f:dc:61:cc:5d:a7:7d:0d:2c:23:0c:7f:3f:3a: a8:8d:dc:bb:8e:5b:51:33:ae:e3:a9:61:fc:ec:c0:ff:33:f6: cc:7f:e7:cd:91:f7:c6:49:51:1d:58:45:e9:65:91:13:eb:05: aa:f9:7b:58:a2:34:af:55:ec:a1:fc:64:69:83:57:72:c1:b4: 07:1f:f1:cc:cc:35:a9:a5:96:e5:b4:3b:a6:ad:c5:58:48:dc: cd:7b:be:7b:47:29:67:97:4b:ef:af:1c:08:b3:f0:11:f3:0a: 8c:a9:d0:31:5a:51:a4:fd:e0:93:88:6e:65:91:f9:37:37:95: e3:07:01:cd:82:87:0e:89:10:8d:06:8e:75:ea:c1:26:24:61: 35:66:cb:b2:a5:01:eb:9f:f0:df:47:92:78:d2:3d:d5:4a:68: 45:cd:b2:bb:9c:85:83:4f:3d:5e:6e:63:aa:3f:37:4c:db:bb: 55:20:1c:99 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjMxMDMxMjIyOTQwWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQxN2ZkNC04NzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgWa1Usfx9Fk6fodCq6tn9+vH6jpylHCgN8ZejOZ1mBNnQEOSZfYWWn1p+4K bcvjnKjsjks8W9eKUQ8s/gR/TlrC5Hnwjlp+IXTAmgGWJCJkvf3B22BzY3qC5kQB anfH31HRp3YlhRhJZwbZ93j7Q/RhW2YuZe8DFken/NvQ/wRkNvj7ibcIjgEHsdgq DheDFk3PBbhD8azVyRKwJSwMx+VTY1IbN75afzVBEbnsNbjz3S/96XiDj4M5PCTO 1mqhSpahACAa1iuM4T/bnh+jfu82YLwCkc31Ikvo+c8aFSUAY9RzZRFns+SZe6tr HoU6GRiQ1DvWzvD5YGwr+VvqXQIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFKe6FEXE WDyhVuyh67hHUGRV2oheMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc2RTUvRTA4M0EwRUFDQjEyMTFFQTkyNTA3QTJCQzRGOUFFMDIvOTRCMTAxNzIx QjhCMTFFRUFDRUE3MzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCoEAgABMCQDBAIr91ADBABnF64DBAFnVyYDBAJn67wDBABn7MsDBAHKNDYw DQQCAAIwBwMFACQC2EAwDQYJKoZIhvcNAQELBQADggEBAEtC+MrgwvNW5u2cN/vJ bmxmYJO7a33oxhrz2+XFPTLMh9uHrBL9msPXdER2SoCM1QMCdZEvPsIYfhpgFOwx blxAhyHClQXf05Jmf4MP3GHMXad9DSwjDH8/OqiN3LuOW1EzruOpYfzswP8z9sx/ 582R98ZJUR1YRellkRPrBar5e1iiNK9V7KH8ZGmDV3LBtAcf8czMNamlluW0O6at xVhI3M17vntHKWeXS++vHAiz8BHzCoyp0DFaUaT94JOIbmWR+Tc3leMHAc2Chw6J EI0GjnXqwSYkYTVmy7KlAeuf8N9HknjSPdVKaEXNsruchYNPPV5uY6o/N0zbu1Ug HJk= -----END CERTIFICATE-----Generated at Thu May 16 22:58:19 2024 by rpki-client on console-fra.rpki-client.org