$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa File: 0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa (raw, json) Hash identifier: a1hfZfTwt/Bh2qSBtcc8YaWdNGdAJ0i4Jdou1l2/QfA= Subject key identifier: 9F:01:A1:7A:EB:70:74:F9:A2:27:E1:7B:F6:D5:13:26:DF:2C:AA:2F Certificate issuer: /CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC Certificate serial: 04 Authority key identifier: C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa Signing time: Fri 28 Jul 2023 03:36:36 +0000 ROA not before: Fri 28 Jul 2023 03:36:36 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 133433 IP address blocks: 103.227.26.0/23 maxlen: 23 103.227.26.0/24 maxlen: 24 103.227.27.0/24 maxlen: 24 2401:de0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC Validity Not Before: Jul 28 03:36:36 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c337c4-4279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c7:2a:91:09:23:cd:f2:06:42:0e:3d:a3:ad: c7:2d:67:0f:ee:44:9a:c0:65:d9:42:27:19:77:23: ce:d1:17:2b:04:1a:77:4e:1b:29:ce:c9:57:cf:be: a3:a0:5f:fa:77:1a:f1:21:f0:ae:09:9a:86:de:4c: 24:dd:2a:0a:ce:ae:80:6a:27:ae:b0:d7:e2:43:88: 29:22:a4:51:17:1c:4b:58:5c:55:19:b5:2a:40:4e: 57:ac:04:88:08:97:a4:d5:fa:b6:b3:1d:af:7f:d6: de:6c:be:7d:7f:1e:c1:9e:f9:5a:35:9b:9d:0d:04: e3:15:71:26:a5:de:b0:fd:22:3e:0f:f7:b3:fa:bd: e8:cd:65:7e:6a:56:e8:4b:af:67:06:37:12:de:6d: 54:00:5e:d5:ca:b3:2b:63:a7:e7:c2:58:69:c6:b8: 89:b5:84:bd:e5:4e:fa:5d:c1:fe:df:4f:43:23:90: 46:05:da:63:e6:be:f2:37:74:d0:96:0d:17:20:8c: 71:0d:f2:f8:96:9f:6e:0e:02:c6:90:99:e9:6c:61: dd:ec:99:b3:36:32:12:26:a6:0b:29:b7:ac:45:53: e7:8f:f9:ed:dc:d1:ad:fb:b9:3e:4c:c6:7d:66:2d: 65:17:f5:2c:63:97:99:77:5f:19:6f:1a:0d:ec:e5: 8b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:01:A1:7A:EB:70:74:F9:A2:27:E1:7B:F6:D5:13:26:DF:2C:AA:2F X509v3 Authority Key Identifier: keyid:C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.227.26.0/23 IPv6: 2401:de0::/32 Signature Algorithm: sha256WithRSAEncryption 23:ac:19:be:42:21:34:2d:27:25:74:f7:94:c0:87:b7:7e:a0: 39:5e:c0:9c:13:2b:37:e6:86:5f:1f:9f:ab:81:7d:71:78:d9: cf:4c:af:09:e9:3a:c5:1a:54:bb:7f:bb:4a:56:1b:df:56:01: 76:92:a1:3a:43:f1:b4:10:25:8e:e1:6d:f3:84:24:1b:09:e1: c2:75:7a:e1:cf:3d:86:81:cf:e6:07:71:88:22:8e:15:46:12: 31:34:59:72:a2:e5:45:31:8b:a9:64:f4:b9:ce:e4:60:f4:81: 38:fb:44:ea:d6:13:61:9e:50:db:20:07:02:0c:d1:56:ea:8d: 48:92:04:fc:6a:ea:54:56:45:46:d4:2e:9c:f1:7a:63:59:75: ae:94:b3:20:92:55:c6:f6:28:5b:08:86:79:4f:13:98:0e:aa: 1f:91:94:73:61:ae:75:b4:b2:58:15:2c:7b:8b:5c:d5:f4:01: 39:56:f5:8c:75:3d:f7:61:12:f7:96:10:ce:24:21:6e:79:b8: 2c:f8:7e:c0:ea:67:dc:90:67:05:c4:9c:7d:c9:fc:95:f4:71: 6e:57:e4:ed:ee:6b:6d:16:a6:21:cc:2d:00:20:08:17:84:7e: e3:a3:09:0f:89:c8:ca:42:75:e8:53:27:53:32:eb:a4:cf:cb: 60:d6:5f:c2 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzUyNDExMC8GA1UEBRMoQzc5REE4QUE2OUYxMjY3QTM4NTFFOTkyQTA2OUMwMkY1 MEU4MDJCQzAeFw0yMzA3MjgwMzM2MzZaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY0YzMzN2M0LTQyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD7xyqRCSPN8gZCDj2jrcctZw/uRJrAZdlCJxl3I87RFysEGndOGynOyVfPvqOg X/p3GvEh8K4JmobeTCTdKgrOroBqJ66w1+JDiCkipFEXHEtYXFUZtSpATlesBIgI l6TV+razHa9/1t5svn1/HsGe+Vo1m50NBOMVcSal3rD9Ij4P97P6vejNZX5qVuhL r2cGNxLebVQAXtXKsytjp+fCWGnGuIm1hL3lTvpdwf7fT0MjkEYF2mPmvvI3dNCW DRcgjHEN8viWn24OAsaQmelsYd3smbM2MhImpgspt6xFU+eP+e3c0a37uT5Mxn1m LWUX9Sxjl5l3XxlvGg3s5YuDAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUnwGheutw dPmiJ+F79tUTJt8sqi8wHwYDVR0jBBgwFoAUx52oqmnxJno4UemSoGnAL1DoArww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDNTI0L0I1QzJCNzM0MkM1 NzExRUVCQjE4ODYyOUM0RjlBRTAyL3g1Mm9xbW54Sm5vNFVlbVNvR25BTDFEb0Fy dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDUyb3FtbnhKbm80VWVtU29HbkFMMURvQXJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzUyNC9CNUMyQjczNDJDNTcxMUVFQkIxODg2MjlDNEY5QUUwMi8wRDcwNUY4QTJD NTkxMUVFQkI0QzJDNEJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWfjGjANBAIAAjAHAwUAJAEN4DANBgkqhkiG9w0BAQsFAAOC AQEAI6wZvkIhNC0nJXT3lMCHt36gOV7AnBMrN+aGXx+fq4F9cXjZz0yvCek6xRpU u3+7SlYb31YBdpKhOkPxtBAljuFt84QkGwnhwnV64c89hoHP5gdxiCKOFUYSMTRZ cqLlRTGLqWT0uc7kYPSBOPtE6tYTYZ5Q2yAHAgzRVuqNSJIE/GrqVFZFRtQunPF6 Y1l1rpSzIJJVxvYoWwiGeU8TmA6qH5GUc2GudbSyWBUse4tc1fQBOVb1jHU992ES 95YQziQhbnm4LPh+wOpn3JBnBcScfcn8lfRxblfk7e5rbRamIcwtACAIF4R+46MJ D4nIykJ16FMnUzLrpM/LYNZfwg== -----END CERTIFICATE-----Generated at Fri May 31 10:02:45 2024 by rpki-client on console-ams.rpki-client.org