$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/DDCCD058B35111EE96186E1EC4F9AE02.roa File: DDCCD058B35111EE96186E1EC4F9AE02.roa (raw, json) Hash identifier: ZOEE2RA5l92lEDxXtfiZnC9k9xK97dZYYa226sWye0s= Subject key identifier: 4A:65:E9:D8:BE:73:B4:2A:4D:25:8C:14:7B:FD:57:C7:5B:5B:41:5D Certificate issuer: /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Certificate serial: 06 Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/DDCCD058B35111EE96186E1EC4F9AE02.roa Signing time: Mon 15 Jan 2024 02:59:05 +0000 ROA not before: Mon 15 Jan 2024 02:59:05 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 135612 IP address blocks: 103.76.176.0/24 maxlen: 24 103.76.177.0/24 maxlen: 24 203.2.158.0/23 maxlen: 23 203.2.158.0/24 maxlen: 24 203.2.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Validity Not Before: Jan 15 02:59:05 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65a49f78-4ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fe:6b:19:2f:af:c9:22:e9:ef:fe:cf:c3:de: 97:88:93:0a:8b:64:67:d9:6b:e3:e3:9c:ec:51:56: b7:92:42:8b:0d:eb:6f:c5:eb:0f:8d:6a:79:b5:fc: d7:b7:a1:b6:2d:10:97:67:7c:f5:cc:a7:b0:3f:e8: 7b:b0:43:ef:48:df:a9:fb:57:24:56:70:32:87:99: ba:79:59:d2:55:5b:03:fd:25:54:31:0a:d3:41:ac: c1:88:23:ea:46:fb:2f:35:a9:62:64:52:84:cc:90: b7:b4:c0:b5:ad:b4:46:44:9d:db:50:56:0f:d5:ef: 8d:02:fa:70:3e:2c:dd:f9:82:b7:0b:a4:4e:c2:fa: 24:9a:c7:fc:9a:d3:ac:44:43:6a:57:99:b1:99:bf: c0:37:1f:70:2d:0a:06:3c:d2:54:de:2f:e6:ec:10: fc:be:ab:53:40:35:bb:96:66:5f:1b:98:3e:a1:fc: 48:c5:9b:eb:e3:6e:5b:bd:a9:57:c1:01:3d:2c:d6: cd:20:14:5b:6f:e7:29:c5:23:b9:ab:61:71:65:8a: 99:a4:8d:09:9b:52:7b:ac:75:36:6c:43:d0:3f:ed: 8e:2a:52:b4:53:35:41:29:62:fc:89:84:a9:69:bb: 07:95:e2:f3:e7:2d:90:44:7a:dd:c9:63:bc:6d:4d: df:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:65:E9:D8:BE:73:B4:2A:4D:25:8C:14:7B:FD:57:C7:5B:5B:41:5D X509v3 Authority Key Identifier: keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/DDCCD058B35111EE96186E1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.176.0/23 203.2.158.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:a7:3e:62:d1:23:ab:ba:53:39:05:c5:a2:64:45:54:33:4b: fb:59:11:d8:e0:7c:02:a1:f4:33:af:80:57:3e:08:3b:dd:d5: 5f:10:2a:02:5a:85:9a:17:ec:d3:66:0d:29:c4:04:cf:89:e2: b5:db:e8:1a:87:57:28:9f:7b:09:68:61:f9:4d:60:b1:36:98: b2:45:2a:40:e5:bd:02:61:e5:0b:d7:91:08:d1:2c:da:cc:cd: f7:67:11:09:49:f6:be:e7:22:d4:36:45:82:76:59:38:b0:77: 0d:ab:4b:66:e6:15:29:41:aa:aa:0d:7f:55:a7:50:b1:3e:4a: 3e:85:f1:30:4b:0d:0e:7e:e2:eb:0d:07:73:f2:9f:c0:31:4e: 1c:45:42:02:93:59:69:12:00:b4:1b:db:d9:50:cd:50:a1:2b: 8e:70:1d:9f:de:3c:9f:7a:ba:9d:57:22:1c:15:7d:3d:43:a6: 17:e5:ce:54:1b:ee:ce:00:d6:66:60:86:3e:b3:16:0b:a2:e2: 17:da:0d:1a:09:b6:41:36:40:55:56:ef:f3:e9:f8:04:ca:ce: 4b:6f:65:d6:b5:be:8d:90:09:a6:5f:9b:13:f0:25:b6:a5:e6: b9:54:6a:de:0b:6d:ea:7a:c2:d3:e5:3f:57:1c:53:5b:8d:c8: 72:e3:34:9a -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEE2NzExMC8GA1UEBRMoMDM1NERCRTFFRDNEOTlFMTk0NUUyNzI3NEJBMkY2MDNF QjZBMTc4MTAeFw0yNDAxMTUwMjU5MDVaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YTQ5Zjc4LTRlZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDO/msZL6/JIunv/s/D3peIkwqLZGfZa+PjnOxRVreSQosN62/F6w+Nanm1/Ne3 obYtEJdnfPXMp7A/6HuwQ+9I36n7VyRWcDKHmbp5WdJVWwP9JVQxCtNBrMGII+pG +y81qWJkUoTMkLe0wLWttEZEndtQVg/V740C+nA+LN35grcLpE7C+iSax/ya06xE Q2pXmbGZv8A3H3AtCgY80lTeL+bsEPy+q1NANbuWZl8bmD6h/EjFm+vjblu9qVfB AT0s1s0gFFtv5ynFI7mrYXFlipmkjQmbUnusdTZsQ9A/7Y4qUrRTNUEpYvyJhKlp uweV4vPnLZBEet3JY7xtTd8TAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUSmXp2L5z tCpNJYwUe/1Xx1tbQV0wHwYDVR0jBBgwFoAUA1Tb4e09meGUXicnS6L2A+tqF4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QTY3LzU1MTFBRjY4QjM1 MTExRUU5OEJBMDIxREM0RjlBRTAyL0ExVGI0ZTA5bWVHVVhpY25TNkwyQS10cUY0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTFUYjRlMDltZUdVWGljblM2TDJBLXRxRjRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEE2Ny81NTExQUY2OEIzNTExMUVFOThCQTAyMURDNEY5QUUwMi9ERENDRDA1OEIz NTExMUVFOTYxODZFMUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAWdMsAMEAcsCnjANBgkqhkiG9w0BAQsFAAOCAQEAXqc+YtEj q7pTOQXFomRFVDNL+1kR2OB8AqH0M6+AVz4IO93VXxAqAlqFmhfs02YNKcQEz4ni tdvoGodXKJ97CWhh+U1gsTaYskUqQOW9AmHlC9eRCNEs2szN92cRCUn2vuci1DZF gnZZOLB3DatLZuYVKUGqqg1/VadQsT5KPoXxMEsNDn7i6w0Hc/KfwDFOHEVCApNZ aRIAtBvb2VDNUKErjnAdn948n3q6nVciHBV9PUOmF+XOVBvuzgDWZmCGPrMWC6Li F9oNGgm2QTZAVVbv8+n4BMrOS29l1rW+jZAJpl+bE/AltqXmuVRq3gtt6nrC0+U/ VxxTW43IcuM0mg== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:34 2024 by rpki-client on console-ams.rpki-client.org