$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/7DE1B508BC8A11EABAFA684CC4F9AE02.roa File: 7DE1B508BC8A11EABAFA684CC4F9AE02.roa (raw, json) Hash identifier: FATBotkIGD0bQJXeJ7pkyjLL4bWOCg2lIzaGeYVTZNM= Subject key identifier: 1B:40:D8:81:B2:42:D9:C8:3C:8B:AC:98:4C:1A:D4:13:A3:E4:40:6C Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 073C Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/7DE1B508BC8A11EABAFA684CC4F9AE02.roa Signing time: Wed 31 May 2023 23:45:26 +0000 ROA not before: Wed 31 May 2023 23:45:26 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 138997 IP address blocks: 103.138.72.0/22 maxlen: 22 103.138.72.0/23 maxlen: 24 103.138.74.0/23 maxlen: 24 2404:c140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 21:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1852 (0x73c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: May 31 23:45:26 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6477dc16-1788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:77:d1:a7:78:05:95:99:c7:65:c2:09:81:a3: 4f:16:ac:6b:15:fa:c6:8e:d8:ae:ec:44:2f:f8:3a: a5:10:8f:11:d6:53:3e:4c:04:64:8d:53:bb:bf:61: 72:8e:41:47:99:6e:c7:58:6d:46:44:3f:01:5d:75: 27:b5:b5:92:04:70:8d:57:ea:c7:af:6e:5c:f3:8c: 4a:eb:92:05:16:36:d1:b1:19:e7:8c:01:92:30:83: 73:3b:8a:f7:2b:7e:15:68:cd:be:c9:5c:b8:6d:29: b2:cc:b8:33:90:30:5d:3b:a1:3b:5e:e2:cc:50:17: a7:21:4f:93:7b:ae:7e:ad:0c:5c:92:35:5f:7a:5b: fa:27:0a:68:9a:a9:1c:3d:73:f3:29:b5:a7:58:35: f8:f1:50:d8:b8:03:ad:06:e1:90:09:5c:25:12:92: 77:b3:43:9e:6f:cd:14:62:6f:df:9c:6d:ff:af:c1: 06:41:41:89:52:74:59:28:71:71:83:70:9a:38:d6: 39:51:8e:75:8a:58:82:5d:c6:84:25:36:a3:b9:04: 1c:9c:28:eb:87:58:51:7a:69:62:d2:e6:3d:41:2e: 8d:e6:ac:b5:c5:0e:1a:f5:6a:0f:a0:fb:b9:f2:ad: 83:e3:7f:2c:72:4e:26:47:70:a7:a9:22:40:82:e7: 59:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:40:D8:81:B2:42:D9:C8:3C:8B:AC:98:4C:1A:D4:13:A3:E4:40:6C X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/7DE1B508BC8A11EABAFA684CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.72.0/22 IPv6: 2404:c140::/32 Signature Algorithm: sha256WithRSAEncryption 95:3a:4e:0e:19:68:86:ec:63:e6:ae:63:85:9b:15:92:a1:5e: 5b:f2:79:ba:37:f3:9f:06:df:05:71:98:b4:c2:5a:5e:95:eb: e1:67:05:c5:62:4c:5b:69:bb:95:5b:f8:10:98:34:e9:12:c7: 1f:f9:d5:4f:49:25:25:83:67:06:84:6a:66:0b:5c:fe:c5:a9: bd:34:8a:ec:67:80:da:ba:16:c2:21:ef:42:22:75:07:d2:0d: 24:6b:99:bc:81:8e:ea:12:1b:c8:77:61:00:e5:61:f2:4e:a8: 0d:cf:31:48:d6:89:9a:a9:bd:11:1a:dc:51:b4:79:24:da:03: 4e:72:d1:fd:ec:5d:e3:24:91:a2:5a:a2:65:30:83:d9:9a:a9: 3a:46:47:f2:dc:01:ed:0d:ac:50:ab:c9:f7:cd:6a:33:fa:bc: 24:9f:5d:7f:be:53:89:d6:c5:52:15:7a:6f:24:bb:9e:4c:64: 7d:63:a2:63:da:45:5f:87:5f:c1:ba:0e:c0:c1:c1:e4:ec:57: 2c:5c:75:ed:04:4f:9a:07:61:94:eb:96:8e:a6:1c:99:ae:31: ca:6a:28:15:2a:7b:bf:e2:26:89:0b:ee:74:b3:0d:36:5a:70: 36:93:0f:1c:b2:cc:6d:b4:c8:00:f1:48:91:26:05:e2:d5:4e: 1e:f6:b8:8b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjMwNTMxMjM0NTI2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDc3ZGMxNi0xNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXfRp3gFlZnHZcIJgaNPFqxrFfrGjtiu7EQv+DqlEI8R1lM+TARkjVO7v2Fy jkFHmW7HWG1GRD8BXXUntbWSBHCNV+rHr25c84xK65IFFjbRsRnnjAGSMINzO4r3 K34VaM2+yVy4bSmyzLgzkDBdO6E7XuLMUBenIU+Te65+rQxckjVfelv6Jwpomqkc PXPzKbWnWDX48VDYuAOtBuGQCVwlEpJ3s0Oeb80UYm/fnG3/r8EGQUGJUnRZKHFx g3CaONY5UY51iliCXcaEJTajuQQcnCjrh1hRemli0uY9QS6N5qy1xQ4a9WoPoPu5 8q2D438sck4mR3CnqSJAgudZmwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBtA2IGy QtnIPIusmEwa1BOj5EBsMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVERkQvNTQ1MzZCM0VCQzg4MTFFQTg4RUYzRDQ5QzRGOUFFMDIvN0RFMUI1MDhC QzhBMTFFQUJBRkE2ODRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnikgwDQQCAAIwBwMFACQEwUAwDQYJKoZIhvcNAQELBQAD ggEBAJU6Tg4ZaIbsY+auY4WbFZKhXlvyebo3858G3wVxmLTCWl6V6+FnBcViTFtp u5Vb+BCYNOkSxx/51U9JJSWDZwaEamYLXP7Fqb00iuxngNq6FsIh70IidQfSDSRr mbyBjuoSG8h3YQDlYfJOqA3PMUjWiZqpvREa3FG0eSTaA05y0f3sXeMkkaJaomUw g9maqTpGR/LcAe0NrFCryffNajP6vCSfXX++U4nWxVIVem8ku55MZH1jomPaRV+H X8G6DsDBweTsVyxcde0ET5oHYZTrlo6mHJmuMcpqKBUqe7/iJokL7nSzDTZacDaT DxyyzG20yADxSJEmBeLVTh72uIs= -----END CERTIFICATE-----Generated at Mon May 20 22:57:19 2024 by rpki-client on console-ams.rpki-client.org