$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4CC0341641A311EABAADCE0AC4F9AE02.roa File: 4CC0341641A311EABAADCE0AC4F9AE02.roa (raw, json) Hash identifier: 4gX6ptBwddfrFYLEAkZCoulGBfjSY3z6D4r2Ab8w1lI= Subject key identifier: BB:81:CF:25:F3:78:E5:13:8B:E7:7A:9A:BB:38:A1:45:20:AF:26:EF Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Certificate serial: 0A2A Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4CC0341641A311EABAADCE0AC4F9AE02.roa Signing time: Mon 04 Mar 2024 20:49:06 +0000 ROA not before: Mon 04 Mar 2024 20:49:06 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 59321 IP address blocks: 103.213.28.0/23 maxlen: 24 103.226.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2602 (0xa2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Validity Not Before: Mar 4 20:49:06 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65e633c2-da5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:06:6d:ff:5e:c2:f9:7b:95:4d:4e:50:37: 05:60:d3:65:d9:3f:87:ca:09:09:7c:ad:d0:66:e0: a5:cf:d4:71:d8:42:e5:ad:f5:06:d7:81:f7:b4:f3: 6d:3d:90:2e:c9:e7:ab:81:0c:6e:95:d3:79:7a:60: 2c:0a:c5:76:35:47:3a:75:3a:d6:45:b8:17:f5:31: 97:81:c9:57:a8:f0:3b:3b:15:6a:7e:a8:16:a7:0c: fb:ab:17:de:6c:89:26:26:54:a4:f0:58:1c:5f:fc: a5:3b:04:8a:bb:2b:1e:e0:54:5b:af:df:e0:bd:81: fa:5f:d2:61:34:2d:00:fe:c1:fa:c6:19:d0:4b:f8: 87:9c:3e:00:67:7a:6e:fb:46:ab:6c:40:42:f2:8c: cd:f4:d9:37:83:3d:11:4f:d3:a6:fa:e3:d4:51:73: 4a:e8:13:96:b2:9e:cd:93:fd:13:d3:fa:87:3b:7d: 98:52:d4:8f:57:b2:ea:2a:07:43:fa:33:6d:72:d8: ff:27:db:8b:ac:79:84:6f:35:a3:2d:e1:1f:0d:03: ac:88:fa:b0:29:ab:59:7d:c4:15:8f:ec:0b:2f:d0: b0:c5:ba:0a:7e:9a:5a:ec:71:7c:a2:55:31:77:3c: 0e:2e:06:8e:ce:8e:d2:6d:b0:8a:f1:0a:13:bd:65: 17:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:81:CF:25:F3:78:E5:13:8B:E7:7A:9A:BB:38:A1:45:20:AF:26:EF X509v3 Authority Key Identifier: keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4CC0341641A311EABAADCE0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.213.28.0/23 103.226.122.0/24 Signature Algorithm: sha256WithRSAEncryption 90:1e:c2:8d:6b:98:63:47:d4:8d:24:39:cc:ae:4d:63:cd:68: c1:2b:ac:21:6f:e8:59:74:ee:7c:40:d5:4a:54:c0:bf:fb:66: 24:0d:b8:7b:82:5b:19:e0:0f:64:09:3a:24:f3:72:5c:1b:11: 18:82:42:14:d8:c5:c5:4d:4d:d4:12:0c:75:88:7f:2f:5a:2c: 4f:be:62:c3:04:b9:27:49:66:7c:51:25:2f:8d:84:9f:bd:62: 8c:a7:e9:ae:50:7b:c7:e3:b1:7e:5b:bb:f9:37:ad:c7:64:76: 53:c4:ee:9d:da:9f:7b:eb:44:c7:00:2e:25:26:4f:ee:1c:26: 5c:54:4b:f1:86:b6:9e:97:3e:a7:e3:ab:53:4a:bc:98:82:7d: e4:6b:47:d3:66:93:ce:77:99:ce:34:a2:5e:0c:49:9d:5a:a7: b7:69:5d:90:ce:49:6c:ac:3b:bd:05:cc:6a:31:f4:ec:99:95: 60:cb:2e:d7:b7:0a:40:d2:7e:46:e1:8c:21:97:57:2b:ef:50: 7d:24:89:cb:72:5e:4e:22:93:31:f6:fa:59:f7:e5:c0:86:23: 08:15:ca:9b:f1:34:de:0d:9d:52:23:be:80:0f:ea:04:23:f5: 43:7d:9f:8a:2b:2a:41:b7:0a:61:08:4e:54:25:cb:4e:2e:0f: c4:73:61:2c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1 MjBENzRCMkEwHhcNMjQwMzA0MjA0OTA2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWU2MzNjMi1kYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFQGbf9ewvl7lU1OUDcFYNNl2T+HygkJfK3QZuClz9Rx2ELlrfUG14H3tPNt PZAuyeergQxuldN5emAsCsV2NUc6dTrWRbgX9TGXgclXqPA7OxVqfqgWpwz7qxfe bIkmJlSk8FgcX/ylOwSKuyse4FRbr9/gvYH6X9JhNC0A/sH6xhnQS/iHnD4AZ3pu +0arbEBC8ozN9Nk3gz0RT9Om+uPUUXNK6BOWsp7Nk/0T0/qHO32YUtSPV7LqKgdD +jNtctj/J9uLrHmEbzWjLeEfDQOsiPqwKatZfcQVj+wLL9CwxboKfppa7HF8olUx dzwOLgaOzo7SbbCK8QoTvWUXuQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLuBzyXz eOUTi+d6mrs4oUUgrybvMB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlFNDkvMDQwNDlEMDg0MUEyMTFFQTlGMjY5NTg3QzRGOUFFMDIvNENDMDM0MTY0 MUEzMTFFQUJBQURDRTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFn1RwDBABn4nowDQYJKoZIhvcNAQELBQADggEBAJAewo1r mGNH1I0kOcyuTWPNaMErrCFv6Fl07nxA1UpUwL/7ZiQNuHuCWxngD2QJOiTzclwb ERiCQhTYxcVNTdQSDHWIfy9aLE++YsMEuSdJZnxRJS+NhJ+9Yoyn6a5Qe8fjsX5b u/k3rcdkdlPE7p3an3vrRMcALiUmT+4cJlxUS/GGtp6XPqfjq1NKvJiCfeRrR9Nm k853mc40ol4MSZ1ap7dpXZDOSWysO70FzGox9OyZlWDLLte3CkDSfkbhjCGXVyvv UH0kictyXk4ikzH2+ln35cCGIwgVypvxNN4NnVIjvoAP6gQj9UN9n4orKkG3CmEI TlQly04uD8RzYSw= -----END CERTIFICATE-----Generated at Fri May 10 21:16:14 2024 by rpki-client on console-fra.rpki-client.org