$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa File: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (raw, json) Hash identifier: W8Pn/sq38ZFH49tNBuEJsAdeSaButY/8Fr7mt/fCMSg= Subject key identifier: 9E:14:D9:8F:B8:53:BE:84:6A:8D:E2:DF:2B:BE:F7:0B:E9:E9:EB:AF Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Certificate serial: 1089 Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa Signing time: Sun 28 Jan 2024 17:55:27 +0000 ROA not before: Sun 28 Jan 2024 17:55:27 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 134926 IP address blocks: 103.127.28.0/24 maxlen: 24 103.127.29.0/24 maxlen: 24 103.127.30.0/24 maxlen: 24 103.127.31.0/24 maxlen: 24 2404:17c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4233 (0x1089) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Validity Not Before: Jan 28 17:55:27 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b6950f-e4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fa:99:4e:29:97:ec:51:34:f7:f6:08:28:68: 0a:fc:8d:bb:fe:81:50:28:35:cb:a3:f4:2a:26:3f: 33:8e:42:60:55:31:74:74:da:7a:4e:07:4c:82:79: 5f:a2:7e:fd:ff:cf:08:63:cf:e9:98:ad:20:17:54: e4:b8:3d:10:a8:cf:17:5b:ed:40:9d:aa:92:f7:48: fc:74:4d:96:92:97:be:48:80:89:dd:e0:c5:9f:ca: 89:30:45:3b:42:4e:89:93:9c:0c:ab:48:a3:3b:7b: 56:21:bb:08:7c:90:07:d9:85:cb:9f:0e:7b:e2:f8: c0:40:62:1f:96:dd:57:46:c1:92:ec:d0:e0:f3:84: 52:a9:25:30:05:c8:77:c6:30:ca:a8:c1:c2:6c:1a: 24:bd:1a:17:75:22:83:4a:61:0d:0c:b4:0b:88:6f: 56:eb:f2:d5:8f:33:57:e2:fb:75:17:bc:9c:11:d1: 40:16:ff:8c:88:1c:cb:e4:4f:60:b0:3e:e7:42:85: d4:48:07:df:85:92:b5:4d:29:84:31:f0:99:28:06: b2:e5:bd:6a:da:67:74:7e:a8:cb:60:e5:7a:90:e7: c4:97:59:de:13:b8:c9:14:9d:f3:3c:63:1d:fe:da: 9a:f0:87:14:74:56:fe:d0:ec:ce:82:41:28:c0:79: 84:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:14:D9:8F:B8:53:BE:84:6A:8D:E2:DF:2B:BE:F7:0B:E9:E9:EB:AF X509v3 Authority Key Identifier: keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.28.0/22 IPv6: 2404:17c0::/32 Signature Algorithm: sha256WithRSAEncryption 38:19:36:93:b8:d9:ba:e5:c9:2c:5c:9d:de:67:b6:f8:39:9a: ee:18:21:85:ef:98:51:d4:00:37:73:c9:69:03:c9:f3:81:c6: de:17:c7:49:04:de:1f:03:84:bf:2c:04:06:42:42:0e:89:b5: dd:b8:54:35:99:3f:ca:c0:54:bd:c7:21:75:68:2f:ea:cd:d8: e9:1a:80:93:ac:0f:7f:cc:2f:f5:1c:a2:f1:06:57:55:62:03: 8e:83:f6:c5:44:cc:d2:51:03:fa:b8:a5:6b:80:3b:24:a0:7f: 97:8f:03:13:7c:10:e7:31:e8:0c:10:49:17:d3:e5:5e:2a:e5: 9e:95:55:da:75:c4:fd:37:95:e5:30:c7:dc:40:0a:b6:98:4a: 04:57:16:9c:92:64:25:d6:d4:7c:8b:ed:a1:06:ff:b9:c2:f0: 03:3b:da:7f:06:bf:1b:86:b8:c4:73:93:9a:21:e8:2e:d2:af: c8:38:3a:ba:68:bc:1b:3e:62:9f:06:a4:fe:9c:40:d3:9c:d5: ee:a1:2c:6a:c9:9c:08:af:3d:db:93:15:70:cb:1b:1c:e8:35: 85:bc:c9:b9:72:93:c2:9d:69:27:56:5e:4d:bb:b0:b3:d6:ab: f1:5c:90:b6:d0:6c:9f:e7:a4:c7:7b:f3:5b:50:00:47:3b:07: 05:da:4d:d3 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICEIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCMjUxMTAvBgNVBAUTKDYxQ0I5MDg1RjAyRkY4RkE0NUU3MzJGNTgwMzQwRjQy NDlFMDBDQTIwHhcNMjQwMTI4MTc1NTI3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI2OTUwZi1lNGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/qZTimX7FE09/YIKGgK/I27/oFQKDXLo/QqJj8zjkJgVTF0dNp6TgdMgnlf on79/88IY8/pmK0gF1TkuD0QqM8XW+1AnaqS90j8dE2Wkpe+SICJ3eDFn8qJMEU7 Qk6Jk5wMq0ijO3tWIbsIfJAH2YXLnw574vjAQGIflt1XRsGS7NDg84RSqSUwBch3 xjDKqMHCbBokvRoXdSKDSmENDLQLiG9W6/LVjzNX4vt1F7ycEdFAFv+MiBzL5E9g sD7nQoXUSAffhZK1TSmEMfCZKAay5b1q2md0fqjLYOV6kOfEl1neE7jJFJ3zPGMd /tqa8IcUdFb+0OzOgkEowHmE8wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJ4U2Y+4 U76Eao3i3yu+9wvp6euvMB8GA1UdIwQYMBaAFGHLkIXwL/j6Recy9YA0D0JJ4Ayi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0IyNS8yQzYwREZEOEZE QTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1QcEY1ekwxZ0RRUFFrbmdE S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ljdVFoZkF2LVBwRjV6TDFnRFFQUWtuZ0RLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENCMjUvMkM2MERGRDhGREE1MTFFODg4NTlDMDZCQzRGOUFFMDIvQkRDMUFCMEFG REE2MTFFODhGQTVFMjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfxwwDQQCAAIwBwMFACQEF8AwDQYJKoZIhvcNAQELBQAD ggEBADgZNpO42brlySxcnd5ntvg5mu4YIYXvmFHUADdzyWkDyfOBxt4Xx0kE3h8D hL8sBAZCQg6Jtd24VDWZP8rAVL3HIXVoL+rN2OkagJOsD3/ML/UcovEGV1ViA46D 9sVEzNJRA/q4pWuAOySgf5ePAxN8EOcx6AwQSRfT5V4q5Z6VVdp1xP03leUwx9xA CraYSgRXFpySZCXW1HyL7aEG/7nC8AM72n8GvxuGuMRzk5oh6C7Sr8g4OrpovBs+ Yp8GpP6cQNOc1e6hLGrJnAivPduTFXDLGxzoNYW8yblyk8KdaSdWXk27sLPWq/Fc kLbQbJ/npMd781tQAEc7BwXaTdM= -----END CERTIFICATE-----Generated at Fri May 10 19:18:46 2024 by rpki-client on console-ams.rpki-client.org