$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/573BE4DE3D0811EF84157B26C4F9AE02.roa File: 573BE4DE3D0811EF84157B26C4F9AE02.roa (raw, json) Hash identifier: nywG68ULgKtBcMdjYbgBHpATJxb1PptzCmatC6Dkc8Q= Subject key identifier: E3:2A:C6:07:4C:FA:C0:F5:28:84:40:2F:0E:A7:E3:14:3B:72:CF:F1 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: 05 Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/573BE4DE3D0811EF84157B26C4F9AE02.roa Signing time: Mon 08 Jul 2024 08:59:10 +0000 ROA not before: Mon 08 Jul 2024 08:59:10 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 27385 IP address blocks: 103.75.172.0/23 maxlen: 23 103.75.172.0/24 maxlen: 24 103.75.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Jul 8 08:59:10 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=668baa5e-6d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:75:c4:af:1f:f4:8a:6f:9a:5b:6e:81:ca:c1: 5f:01:71:ef:0c:9a:43:95:b9:d8:a3:61:b3:e5:18: 0f:cd:2b:32:08:55:dd:be:3d:9f:8c:3b:dc:10:1c: 38:ea:5e:a9:25:b7:38:60:4e:ca:ba:b8:ba:e7:e3: 62:ca:c6:da:99:1a:10:87:28:3e:54:04:15:6d:93: b7:e6:27:30:1f:39:6a:40:84:27:3c:c1:ec:c9:37: 71:ab:b1:ca:40:2f:43:8b:d2:9b:6d:02:ce:05:98: 02:89:af:ea:1a:09:ea:77:8c:4d:93:70:49:36:bd: 73:ca:f9:dd:37:b1:ba:1e:7a:65:e2:7f:81:82:61: ba:fe:cf:73:50:59:4b:91:63:01:3a:01:ba:d1:f7: b0:2d:86:a8:7b:1e:df:07:b0:da:28:47:25:30:77: 45:cb:1a:80:01:61:37:e3:70:9d:b4:a5:e6:f3:f9: 29:8b:49:00:1b:6d:d1:3e:28:22:54:54:95:1b:33: e5:3c:74:d3:5f:f9:9a:82:f1:d4:12:4e:66:2d:fc: 0f:93:66:e9:b7:d9:bb:ba:69:40:93:77:61:90:9e: ce:09:3f:f5:2f:77:62:98:38:ba:c8:f3:33:5f:bb: 9d:c8:60:ac:69:14:0d:d9:70:f8:35:08:91:07:7a: e7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2A:C6:07:4C:FA:C0:F5:28:84:40:2F:0E:A7:E3:14:3B:72:CF:F1 X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/573BE4DE3D0811EF84157B26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.75.172.0/23 Signature Algorithm: sha256WithRSAEncryption 24:68:a0:36:66:f7:76:8a:0b:dc:8f:eb:f4:26:eb:cb:6c:09: eb:ad:c0:6b:59:7e:e1:3a:62:18:14:6e:54:52:c5:43:4f:a4: cc:01:cb:58:c7:4e:c5:04:f5:02:73:2d:62:e1:57:bf:30:c8: 7e:bd:96:57:6a:81:c6:a0:a4:ba:d3:d1:11:f7:ab:03:17:61: c7:d8:29:19:c3:18:aa:7f:2b:0d:18:d9:13:78:4e:ba:ba:16: b9:51:72:eb:66:c7:11:65:c2:77:e6:f6:9a:ac:31:8e:b5:8d: a9:87:dd:c8:ea:9c:6c:8a:1f:97:8a:77:91:9e:5d:11:32:53: 27:67:8e:0d:b8:17:f0:0f:26:da:ea:d8:c2:60:eb:2b:6b:2b: 41:ac:b8:77:ad:65:fd:01:11:0e:7e:3b:d9:07:0b:66:97:63: be:c2:78:ae:29:4e:70:68:d0:40:94:e6:a4:3d:2a:ca:13:18: 03:c1:f7:53:cd:30:ff:d3:1f:6e:56:c3:a2:0c:9e:11:a9:ab: 1f:38:73:c2:a7:31:27:86:31:9b:bc:a6:a6:9f:48:06:d1:2c: c6:cf:b3:e5:4a:c2:5e:4b:b3:91:69:80:09:e1:8a:5f:64:ec: 20:d2:b5:a8:8e:48:fe:5d:40:19:27:c9:d8:2b:99:9b:07:13: 57:80:71:e9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OUIxQjExMC8GA1UEBRMoRDM1OUU1NkREQTAwMDNDNDgzRjNBRDZBNDBDMDgwRTkw Q0I4RDQ3MjAeFw0yNDA3MDgwODU5MTBaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2OGJhYTVlLTZkMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZdcSvH/SKb5pbboHKwV8Bce8MmkOVudijYbPlGA/NKzIIVd2+PZ+MO9wQHDjq XqkltzhgTsq6uLrn42LKxtqZGhCHKD5UBBVtk7fmJzAfOWpAhCc8wezJN3GrscpA L0OL0pttAs4FmAKJr+oaCep3jE2TcEk2vXPK+d03sboeemXif4GCYbr+z3NQWUuR YwE6AbrR97Athqh7Ht8HsNooRyUwd0XLGoABYTfjcJ20pebz+SmLSQAbbdE+KCJU VJUbM+U8dNNf+ZqC8dQSTmYt/A+TZum32bu6aUCTd2GQns4JP/Uvd2KYOLrI8zNf u53IYKxpFA3ZcPg1CJEHeufbAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU4yrGB0z6 wPUohEAvDqfjFDtyz/EwHwYDVR0jBBgwFoAU01nlbdoAA8SD861qQMCA6Qy41HIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5QjFCL0Y5RkVFMDQ2M0NG ODExRUZBMzY3QzM4NUM0RjlBRTAyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFI SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMDFubGJkb0FBOFNEODYxcVFNQ0E2UXk0MUhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi81NzNCRTRERTNE MDgxMUVGODQxNTdCMjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWdLrDANBgkqhkiG9w0BAQsFAAOCAQEAJGigNmb3dooL3I/r 9Cbry2wJ663Aa1l+4TpiGBRuVFLFQ0+kzAHLWMdOxQT1AnMtYuFXvzDIfr2WV2qB xqCkutPREferAxdhx9gpGcMYqn8rDRjZE3hOuroWuVFy62bHEWXCd+b2mqwxjrWN qYfdyOqcbIofl4p3kZ5dETJTJ2eODbgX8A8m2urYwmDrK2srQay4d61l/QERDn47 2QcLZpdjvsJ4rilOcGjQQJTmpD0qyhMYA8H3U80w/9MfblbDogyeEamrHzhzwqcx J4Yxm7ympp9IBtEsxs+z5UrCXkuzkWmACeGKX2TsINK1qI5I/l1AGSfJ2CuZmwcT V4Bx6Q== -----END CERTIFICATE-----Generated at Mon Nov 25 06:04:16 2024 by rpki-client on console-ams.rpki-client.org