$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa File: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (raw, json) Hash identifier: qEqQfXHfbyISuL0cdw/rlmC00m4dNQOaNJBD2WlRotA= Subject key identifier: 9D:2B:69:05:3F:AD:0C:78:43:C1:D1:43:9E:9D:E7:D9:99:88:84:02 Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Certificate serial: 068C Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa Signing time: Fri 19 Apr 2024 08:04:07 +0000 ROA not before: Fri 19 Apr 2024 08:04:07 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 15830 IP address blocks: 103.91.164.0/23 maxlen: 23 103.91.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Validity Not Before: Apr 19 08:04:07 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=66222577-72fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:0e:a1:49:56:cc:cd:2b:76:a5:7b:6c:b4: 3c:2b:54:cb:36:1c:b4:f9:98:7b:31:34:8b:59:cc: b6:76:5a:b3:cf:97:08:2a:fe:5a:7b:1a:96:97:06: 35:7d:b4:b9:60:82:a2:af:07:87:30:12:62:15:16: 03:a4:e6:ef:f9:19:13:c6:2e:1e:f9:75:88:50:50: 1b:88:a9:a6:5a:2f:3b:65:4e:40:c9:f0:8b:68:66: 0c:bb:4a:59:a7:1f:5e:43:4b:b8:c1:a6:27:19:3c: 56:14:1b:a1:e7:09:29:b8:bc:eb:f4:10:4f:34:73: ad:82:3d:3d:7e:78:79:07:1f:d8:39:a5:74:f4:d1: 72:46:4a:c6:3e:1c:87:af:36:62:18:b3:44:03:2c: b0:f3:57:34:ec:e7:8a:7d:78:c6:64:57:8e:6a:ee: 8b:14:8e:41:ba:ef:9c:d1:8b:9c:39:f1:f7:07:d2: b3:a5:00:2a:8e:b8:12:5d:0e:39:d5:cd:43:16:89: d7:27:87:f7:d2:ef:f9:1b:58:dd:63:05:3f:4e:ec: 51:f7:3e:9a:3e:61:d8:f7:3c:3c:46:1b:77:c3:9c: 56:0d:f1:54:32:7c:1d:af:d8:5b:f5:1b:b0:10:f0: 43:f7:1a:fc:d1:03:c0:20:bf:cd:7b:17:21:34:1c: ff:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2B:69:05:3F:AD:0C:78:43:C1:D1:43:9E:9D:E7:D9:99:88:84:02 X509v3 Authority Key Identifier: keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.164.0/23 103.91.167.0/24 Signature Algorithm: sha256WithRSAEncryption b7:b4:54:79:43:7e:43:01:11:05:b7:ec:aa:c9:1c:0e:5f:14: 39:d2:fd:b9:ae:b0:48:04:5a:32:5c:88:f5:ea:fa:b1:48:02: b3:ec:46:13:c3:89:6c:bf:cd:30:9a:1d:ff:7d:fa:a7:a5:bd: 27:3c:b8:67:56:71:c1:17:4f:93:e0:57:26:79:f8:3b:bc:bb: 9a:9e:be:1c:fe:95:b6:52:50:81:cf:3f:29:2d:70:74:29:e9: 50:35:4d:b1:59:01:2d:bc:ba:f1:1f:11:ab:5a:b5:14:fc:6b: ad:53:fc:11:95:9e:50:30:cd:3d:65:f6:b4:63:35:64:4f:9f: 95:e4:6e:18:3a:cc:36:ed:d8:cf:7a:88:9b:33:c8:3c:be:02: 7c:10:4d:fa:42:74:0e:9c:e2:29:e8:37:53:cd:9b:2a:55:6c: e7:bb:b0:c0:a7:6a:99:d6:78:bd:62:0d:df:0f:26:98:bf:05: 42:5c:fa:24:03:d2:9a:46:28:ef:6a:24:ee:33:48:94:12:c8: 32:04:67:d8:40:fb:37:84:38:e5:dc:6f:ab:34:6c:f4:c9:43: 3d:3e:91:7d:c1:b2:30:41:70:85:6c:45:39:54:df:a1:96:7c: f3:0b:ca:32:38:b0:90:43:e4:18:e0:3d:cb:2d:4a:16:f9:40: e2:fc:cd:33 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx RjY0QzdCQUYwHhcNMjQwNDE5MDgwNDA3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjIyMjU3Ny03MmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvMOoUlWzM0rdqV7bLQ8K1TLNhy0+Zh7MTSLWcy2dlqzz5cIKv5aexqWlwY1 fbS5YIKirweHMBJiFRYDpObv+RkTxi4e+XWIUFAbiKmmWi87ZU5AyfCLaGYMu0pZ px9eQ0u4waYnGTxWFBuh5wkpuLzr9BBPNHOtgj09fnh5Bx/YOaV09NFyRkrGPhyH rzZiGLNEAyyw81c07OeKfXjGZFeOau6LFI5Buu+c0YucOfH3B9KzpQAqjrgSXQ45 1c1DFonXJ4f30u/5G1jdYwU/TuxR9z6aPmHY9zw8Rht3w5xWDfFUMnwdr9hb9Ruw EPBD9xr80QPAIL/NexchNBz/RwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJ0raQU/ rQx4Q8HRQ56d59mZiIQCMB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJBRjEvOEZFN0E4QjgyNDhFMTFFQkFCRUYyQjJGQzRGOUFFMDIvNEFFN0E4RUFG RTIzMTFFRUI3MUJCQjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnW6QDBABnW6cwDQYJKoZIhvcNAQELBQADggEBALe0VHlD fkMBEQW37KrJHA5fFDnS/bmusEgEWjJciPXq+rFIArPsRhPDiWy/zTCaHf99+qel vSc8uGdWccEXT5PgVyZ5+Du8u5qevhz+lbZSUIHPPyktcHQp6VA1TbFZAS28uvEf EatatRT8a61T/BGVnlAwzT1l9rRjNWRPn5Xkbhg6zDbt2M96iJszyDy+AnwQTfpC dA6c4inoN1PNmypVbOe7sMCnapnWeL1iDd8PJpi/BUJc+iQD0ppGKO9qJO4zSJQS yDIEZ9hA+zeEOOXcb6s0bPTJQz0+kX3BsjBBcIVsRTlU36GWfPMLyjI4sJBD5Bjg PcstShb5QOL8zTM= -----END CERTIFICATE-----Generated at Sun May 5 00:14:46 2024 by rpki-client on console-ams.rpki-client.org