$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/C4B561629AFA11EEB91A2174C4F9AE02.roa File: C4B561629AFA11EEB91A2174C4F9AE02.roa (raw, json) Hash identifier: ecZYutUNN9dukiWdjI7RXtlJlSSR4QXlFMWvlx987w0= Subject key identifier: D6:47:05:1A:80:5F:45:21:69:8A:ED:A7:D1:AB:BB:0C:17:63:C1:1F Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Certificate serial: 15 Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/C4B561629AFA11EEB91A2174C4F9AE02.roa Signing time: Fri 29 Dec 2023 07:08:37 +0000 ROA not before: Fri 29 Dec 2023 07:08:37 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 135330 IP address blocks: 103.79.121.0/24 maxlen: 24 103.79.123.0/24 maxlen: 24 202.91.37.0/24 maxlen: 24 202.91.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Validity Not Before: Dec 29 07:08:37 2023 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=658e7075-45ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c5:77:7f:d7:be:df:0d:b8:cb:ff:5e:60:f1: da:4b:11:7a:2d:0f:81:67:a4:27:8c:5c:29:3c:d4: 9e:12:4a:f5:5d:7a:0f:46:9f:7d:35:c5:9d:27:0a: 31:c0:92:33:b3:72:d4:f4:e2:ad:54:1c:6c:56:77: 69:1e:4a:29:bb:1f:46:f3:b1:13:eb:99:7e:f3:ac: 31:c7:4e:39:6b:16:2d:cd:d1:e3:ed:76:b5:db:63: 90:a3:5b:f5:15:3d:67:d5:1d:b5:82:51:86:10:89: ad:d2:1c:d3:24:87:ec:d1:7b:fc:06:1d:ad:36:af: c8:09:da:ca:cb:e4:f3:87:ee:fa:41:00:5c:a5:9e: b5:85:00:85:5a:d8:9f:70:6c:de:b0:e6:c9:8a:db: 57:75:6c:b8:cc:a3:29:9b:04:fe:c1:ee:ab:ae:2f: 35:d4:60:58:75:10:87:18:6b:69:70:8e:2a:6e:d4: 16:18:f7:92:53:1b:a2:9a:a9:8a:ad:05:38:cc:7b: 44:49:ce:60:fb:b0:9c:1c:21:37:58:01:69:10:78: f0:5e:d6:b7:ae:ed:63:be:e7:8d:3a:d9:a9:dc:50: 6d:61:a6:a6:b9:e5:a9:7f:96:a2:ee:b4:d1:81:3f: 67:30:33:20:df:b0:7e:56:b3:44:0a:28:5f:df:6b: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:47:05:1A:80:5F:45:21:69:8A:ED:A7:D1:AB:BB:0C:17:63:C1:1F X509v3 Authority Key Identifier: keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/C4B561629AFA11EEB91A2174C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.79.121.0/24 103.79.123.0/24 202.91.37.0/24 202.91.39.0/24 Signature Algorithm: sha256WithRSAEncryption 35:39:b4:71:2c:4a:0f:78:8e:82:1a:6c:42:65:2f:98:08:ee: 37:49:a7:fc:4e:0c:a3:9e:93:ae:78:e9:9a:c9:27:9a:a2:32: 02:78:15:8f:cf:c2:0a:f6:0f:23:92:77:7b:b2:f0:e4:02:1a: 74:be:c1:18:16:44:00:f8:48:99:83:83:fe:d2:c8:51:99:67: 72:e6:25:7b:17:a4:6f:af:bf:77:31:93:8f:de:03:77:02:75: 3c:c0:2b:0a:cb:2a:2c:7f:88:ed:01:36:0f:85:0a:30:e3:8c: bb:0a:f8:d2:91:4c:bc:ae:65:84:05:60:35:fe:7f:93:b1:bd: 7c:04:28:23:07:85:db:5c:93:2b:e9:bb:42:ed:7c:93:bb:2c: 30:1c:e0:a8:c4:9b:96:ce:39:25:02:73:7c:c2:d4:74:d9:a3: 3b:f4:a2:08:90:34:84:68:7e:98:f7:68:05:15:80:8e:92:f8: 48:ed:4c:cf:4c:9f:31:d7:a5:e5:f4:b6:c7:86:48:d1:4b:81: 25:f3:cb:b9:d8:8c:6d:2a:eb:5a:ff:da:85:b6:07:e3:69:ac: e6:85:8b:dd:88:f7:1a:bb:98:42:16:02:72:c7:6b:66:63:7c: 12:b8:1c:1b:fb:da:b0:f4:92:45:4f:a3:53:42:3f:25:24:9d: 43:2e:68:78 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OUE2RTExMC8GA1UEBRMoNENBRDI3MkJBRDFEODcwOUIxNkU5OTc1MDA2RTEyMjU1 MjA1QzhGNjAeFw0yMzEyMjkwNzA4MzdaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1OGU3MDc1LTQ1YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCixXd/177fDbjL/15g8dpLEXotD4FnpCeMXCk81J4SSvVdeg9Gn301xZ0nCjHA kjOzctT04q1UHGxWd2keSim7H0bzsRPrmX7zrDHHTjlrFi3N0ePtdrXbY5CjW/UV PWfVHbWCUYYQia3SHNMkh+zRe/wGHa02r8gJ2srL5POH7vpBAFylnrWFAIVa2J9w bN6w5smK21d1bLjMoymbBP7B7quuLzXUYFh1EIcYa2lwjipu1BYY95JTG6KaqYqt BTjMe0RJzmD7sJwcITdYAWkQePBe1reu7WO+54062ancUG1hpqa55al/lqLutNGB P2cwMyDfsH5Ws0QKKF/fazflAgMBAAGjggKnMIICozAdBgNVHQ4EFgQU1kcFGoBf RSFpiu2n0au7DBdjwR8wHwYDVR0jBBgwFoAUTK0nK60dhwmxbpl1AG4SJVIFyPYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5QTZFL0Y1MUZGODg2OUFG OTExRUVBMTZEQkM1NUM0RjlBRTAyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVEswbks2MGRod214YnBsMUFHNFNKVklGeVBZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9DNEI1NjE2MjlB RkExMUVFQjkxQTIxNzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAxBggrBgEFBQcBBwEB/wQi MCAwHgQCAAEwGAMEAGdPeQMEAGdPewMEAMpbJQMEAMpbJzANBgkqhkiG9w0BAQsF AAOCAQEANTm0cSxKD3iOghpsQmUvmAjuN0mn/E4Mo56TrnjpmsknmqIyAngVj8/C CvYPI5J3e7Lw5AIadL7BGBZEAPhImYOD/tLIUZlncuYlexekb6+/dzGTj94DdwJ1 PMArCssqLH+I7QE2D4UKMOOMuwr40pFMvK5lhAVgNf5/k7G9fAQoIweF21yTK+m7 Qu18k7ssMBzgqMSbls45JQJzfMLUdNmjO/SiCJA0hGh+mPdoBRWAjpL4SO1Mz0yf Mdel5fS2x4ZI0UuBJfPLudiMbSrrWv/ahbYH42ms5oWL3Yj3GruYQhYCcsdrZmN8 ErgcG/vasPSSRU+jU0I/JSSdQy5oeA== -----END CERTIFICATE-----Generated at Fri May 31 10:02:44 2024 by rpki-client on console-ams.rpki-client.org