$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa File: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (raw, json) Hash identifier: ZkY0KzzTYIOlfe+QFFr6ughVl7NAzRhvIrPiqzSn17g= Subject key identifier: 14:0F:67:7D:FC:8E:F7:70:A6:45:5B:D9:11:3F:0F:4B:81:EC:11:66 Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Certificate serial: CD Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa Signing time: Fri 03 May 2024 06:49:45 +0000 ROA not before: Fri 03 May 2024 06:49:45 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 38903 IP address blocks: 103.122.123.0/24 maxlen: 24 103.131.83.0/24 maxlen: 24 203.99.152.0/24 maxlen: 24 203.99.153.0/24 maxlen: 24 203.99.154.0/24 maxlen: 24 203.99.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 06:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Validity Not Before: May 3 06:49:45 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66348909-a6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:49:33:f0:df:4f:05:2a:da:16:23:b2:2f:36: 12:33:e3:4f:50:7f:50:aa:4f:ef:a5:ad:8a:6d:64: a9:bc:f6:fc:86:ba:4c:f0:66:95:2d:89:c7:2f:fb: 6b:49:b6:9e:c6:0b:28:6b:31:97:a8:b4:c4:2e:52: 54:17:e7:bb:d6:05:1d:c9:44:40:95:5d:03:9d:f2: fa:c3:26:d1:bf:cc:b7:44:6e:77:64:6d:c9:b9:52: c6:a4:dc:eb:3e:94:6b:60:96:af:54:47:4e:07:a2: f0:3c:bc:ef:01:c1:2a:56:66:3f:95:83:1e:c5:70: ef:ff:db:9b:be:dd:08:b6:65:79:26:7e:4d:bc:5f: 31:07:a9:4e:06:78:53:27:80:f3:22:5a:18:0b:83: 5e:b3:c4:35:dd:56:96:a6:18:de:ea:69:34:1d:f2: 7b:6f:20:9f:4f:f9:01:70:37:10:ef:b1:dc:f6:7b: 22:f9:18:af:09:68:54:2b:70:c1:c4:5d:56:80:8c: a1:da:13:27:47:63:00:3e:e3:58:f3:dc:e2:8d:f1: b9:19:0f:61:47:2a:9e:15:da:8a:b7:c0:a9:de:a4: 07:f8:f6:41:4d:b3:07:f6:94:f1:b4:8e:c3:34:c6: b7:49:ae:a7:46:ea:b2:5d:fc:55:bb:4b:96:35:6d: fe:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0F:67:7D:FC:8E:F7:70:A6:45:5B:D9:11:3F:0F:4B:81:EC:11:66 X509v3 Authority Key Identifier: keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.123.0/24 103.131.83.0/24 203.99.152.0/22 Signature Algorithm: sha256WithRSAEncryption 84:cb:47:4d:9e:df:23:d5:86:36:a9:32:29:06:c8:d0:43:f3: e3:24:e5:25:e9:7f:86:0c:45:df:ab:e7:2e:21:d8:c8:10:ee: 20:ad:0e:28:ad:4f:35:1f:a2:c5:a0:38:ca:44:0a:23:fb:29: 3c:16:9e:c9:e0:3e:b2:82:ce:21:c4:87:90:55:ad:3c:bd:84: 9d:0d:f9:90:e0:6a:d9:ae:3d:a1:be:f8:f2:17:dd:fa:eb:b7: e8:43:7f:6e:0c:3a:62:15:86:7f:ce:0b:37:5a:b4:ef:a0:49: 50:6d:f4:13:1e:ea:30:89:11:25:2d:d2:43:23:26:28:c1:2f: f4:9f:d5:00:69:02:2e:d6:b5:8c:53:83:64:d6:5f:69:7b:45: 49:14:97:8e:40:eb:38:31:81:f1:01:ee:5e:14:ab:df:1d:f7: 09:04:4a:48:98:96:68:66:3e:13:7f:67:9d:ef:01:de:57:8b: e8:a9:67:6e:17:76:e7:e8:a3:26:4c:ee:de:42:8b:cc:65:93: 43:3e:f0:21:48:7b:0c:32:0a:f6:63:f5:79:10:cb:e4:77:10: dd:0b:ab:2b:31:b6:6d:27:f8:b1:b9:95:c9:da:2a:ac:08:3f: ca:e2:6d:26:e6:53:9e:72:08:cd:ab:00:58:e1:00:ce:97:3d: 6c:fb:af:7d -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIxMjgxMTAvBgNVBAUTKDcwQ0Y1QUMyNjE0NEU4RDc0M0IxNTIwM0UyNkMyMjA0 NkZBMjQwN0EwHhcNMjQwNTAzMDY0OTQ1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjM0ODkwOS1hNmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ukz8N9PBSraFiOyLzYSM+NPUH9Qqk/vpa2KbWSpvPb8hrpM8GaVLYnHL/tr SbaexgsoazGXqLTELlJUF+e71gUdyURAlV0DnfL6wybRv8y3RG53ZG3JuVLGpNzr PpRrYJavVEdOB6LwPLzvAcEqVmY/lYMexXDv/9ubvt0ItmV5Jn5NvF8xB6lOBnhT J4DzIloYC4Nes8Q13VaWphje6mk0HfJ7byCfT/kBcDcQ77Hc9nsi+RivCWhUK3DB xF1WgIyh2hMnR2MAPuNY89zijfG5GQ9hRyqeFdqKt8Cp3qQH+PZBTbMH9pTxtI7D NMa3Sa6nRuqyXfxVu0uWNW3+eQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBQPZ338 jvdwpkVb2RE/D0uB7BFmMB8GA1UdIwQYMBaAFHDPWsJhROjXQ7FSA+JsIgRvokB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjEyOC83QkYyM0FDNERE RTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZOZERzVklENG13aUJHLWlR SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNOWF3bUZFNk5kRHNWSUQ0bXdpQkctaVFIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REIxMjgvN0JGMjNBQzREREU4MTFFREJGOEM5NzNBQzRGOUFFMDIvQUJEN0Q5RkNE REVDMTFFREIxNEVEQTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnensDBABng1MDBALLY5gwDQYJKoZIhvcNAQELBQADggEB AITLR02e3yPVhjapMikGyNBD8+Mk5SXpf4YMRd+r5y4h2MgQ7iCtDiitTzUfosWg OMpECiP7KTwWnsngPrKCziHEh5BVrTy9hJ0N+ZDgatmuPaG++PIX3frrt+hDf24M OmIVhn/OCzdatO+gSVBt9BMe6jCJESUt0kMjJijBL/Sf1QBpAi7WtYxTg2TWX2l7 RUkUl45A6zgxgfEB7l4Uq98d9wkESkiYlmhmPhN/Z53vAd5Xi+ipZ24XdufooyZM 7t5Ci8xlk0M+8CFIewwyCvZj9XkQy+R3EN0Lqysxtm0n+LG5lcnaKqwIP8ribSbm U55yCM2rAFjhAM6XPWz7r30= -----END CERTIFICATE-----Generated at Wed May 29 09:16:49 2024 by rpki-client on console-fra.rpki-client.org