$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1C99BCBCEE8911EDBFAE4177C4F9AE02.roa File: 1C99BCBCEE8911EDBFAE4177C4F9AE02.roa (raw, json) Hash identifier: +mzckbthwaf+j0qOqWnbBkEithRPpqGqbznJBVlol8Y= Subject key identifier: 67:F6:D4:38:C0:B8:64:36:D1:77:90:01:F0:35:09:1D:62:33:9D:0A Certificate issuer: /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Certificate serial: 16 Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1C99BCBCEE8911EDBFAE4177C4F9AE02.roa Signing time: Tue 09 May 2023 16:46:58 +0000 ROA not before: Tue 09 May 2023 16:46:58 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 151077 IP address blocks: 103.130.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Validity Not Before: May 9 16:46:58 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=645a7901-7e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:19:ac:35:03:e6:0d:ff:6c:af:39:60:cb:95: 13:1d:53:74:9e:30:48:fa:8c:57:7c:1c:d7:99:9d: a3:19:4f:e3:6c:1e:fb:8c:89:63:32:fc:d2:b0:f4: 1f:fc:0c:6b:db:bf:93:60:04:75:5c:a6:1d:a8:f5: d3:bc:2a:eb:3c:d4:10:cb:00:15:68:b0:a6:70:96: 0e:59:5e:e2:c4:31:cb:af:5a:07:55:a9:70:07:42: c6:3f:b7:03:96:3e:8d:2f:b8:8c:01:f4:19:e7:7c: 66:55:da:f3:6c:a6:0d:dc:5c:be:cc:4b:9d:ce:20: c6:09:da:f0:e6:c2:33:1d:d6:c8:6b:b7:ad:ae:dc: 6b:87:d2:c4:98:aa:f2:5b:5a:3b:54:53:62:85:ee: 2f:26:51:0d:48:36:e4:64:4b:7c:69:a5:d4:d2:63: 47:3d:78:31:45:32:96:26:51:e4:bc:d0:50:3d:e5: b6:11:aa:cd:dd:72:d7:72:55:77:0f:af:88:39:3d: a1:6d:88:a0:88:a2:99:4f:08:b1:e6:f6:be:fe:d5: ca:31:43:a9:27:1f:21:0c:1c:a1:bb:de:ad:12:cc: bd:8e:73:a7:b4:39:1d:a3:bd:17:3a:76:c9:0c:b0: 53:9d:63:6f:f1:76:62:3a:ce:5f:df:10:df:00:1b: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F6:D4:38:C0:B8:64:36:D1:77:90:01:F0:35:09:1D:62:33:9D:0A X509v3 Authority Key Identifier: keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1C99BCBCEE8911EDBFAE4177C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.130.118.0/24 Signature Algorithm: sha256WithRSAEncryption 66:49:da:9d:45:83:94:6f:0d:fa:e2:b3:88:26:e5:4b:a0:76: 32:9f:5c:f0:00:60:01:db:db:02:e9:0c:3a:8a:06:ff:39:33: 79:2d:a1:91:f4:32:68:64:4d:72:65:68:94:d0:1f:0b:04:c3: 7e:eb:31:ed:35:07:5a:99:ac:a1:97:4e:53:58:52:25:7a:6b: 1e:84:2a:26:16:db:78:f9:84:e5:1c:cc:07:cc:f2:59:a7:48: 04:5a:2d:4c:9c:aa:a7:46:f4:24:8d:26:5c:df:ce:63:59:90: 11:08:18:c1:f2:d4:5c:82:c4:09:fc:55:41:09:0e:d7:62:6c: 95:01:d1:09:7e:4e:0a:71:4e:06:fa:cb:6e:fb:37:eb:80:49: 5c:b6:ed:c5:e6:fa:86:1a:6e:f7:27:3f:be:70:34:4d:c0:a0: b1:2c:94:d3:c6:c3:e6:7f:2e:53:c7:e1:d3:9a:36:09:4b:a0: 61:fb:db:ae:4b:e8:1d:64:d8:aa:1d:7d:d7:0b:27:e0:a0:78: b9:fe:9a:a9:2e:97:00:35:75:6c:f9:7c:82:b7:fa:48:25:8e: 22:b6:d7:c0:5a:d5:3c:68:b6:9c:bf:49:a2:72:52:99:85:4a: 7a:1c:e6:2d:b3:fc:04:ff:7b:d9:59:d0:42:bb:ad:07:65:f0: 85:ac:2a:7a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDMyOTExMC8GA1UEBRMoRjc0RTk2Q0E5RUU5MzYwNzQ1NjQyOTI5NjBGQkMxRjlD RjM0ODU0RDAeFw0yMzA1MDkxNjQ2NThaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY0NWE3OTAxLTdlOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwGaw1A+YN/2yvOWDLlRMdU3SeMEj6jFd8HNeZnaMZT+NsHvuMiWMy/NKw9B/8 DGvbv5NgBHVcph2o9dO8Kus81BDLABVosKZwlg5ZXuLEMcuvWgdVqXAHQsY/twOW Po0vuIwB9BnnfGZV2vNspg3cXL7MS53OIMYJ2vDmwjMd1shrt62u3GuH0sSYqvJb WjtUU2KF7i8mUQ1INuRkS3xppdTSY0c9eDFFMpYmUeS80FA95bYRqs3dctdyVXcP r4g5PaFtiKCIoplPCLHm9r7+1coxQ6knHyEMHKG73q0SzL2Oc6e0OR2jvRc6dskM sFOdY2/xdmI6zl/fEN8AG5M1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZ/bUOMC4 ZDbRd5AB8DUJHWIznQowHwYDVR0jBBgwFoAU906Wyp7pNgdFZCkpYPvB+c80hU0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMzI5LzQ1RDZFRkZDRDM5 RDExRURCQkNCMjgwRkM0RjlBRTAyLzkwNld5cDdwTmdkRlpDa3BZUHZCLWM4MGhV MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOTA2V3lwN3BOZ2RGWkNrcFlQdkItYzgwaFUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDMyOS80NUQ2RUZGQ0QzOUQxMUVEQkJDQjI4MEZDNEY5QUUwMi8xQzk5QkNCQ0VF ODkxMUVEQkZBRTQxNzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeCdjANBgkqhkiG9w0BAQsFAAOCAQEAZknanUWDlG8N+uKz iCblS6B2Mp9c8ABgAdvbAukMOooG/zkzeS2hkfQyaGRNcmVolNAfCwTDfusx7TUH WpmsoZdOU1hSJXprHoQqJhbbePmE5RzMB8zyWadIBFotTJyqp0b0JI0mXN/OY1mQ EQgYwfLUXILECfxVQQkO12JslQHRCX5OCnFOBvrLbvs364BJXLbtxeb6hhpu9yc/ vnA0TcCgsSyU08bD5n8uU8fh05o2CUugYfvbrkvoHWTYqh191wsn4KB4uf6aqS6X ADV1bPl8grf6SCWOIrbXwFrVPGi2nL9JonJSmYVKehzmLbP8BP972VnQQrutB2Xw hawqeg== -----END CERTIFICATE-----Generated at Fri May 17 08:13:55 2024 by rpki-client on console-fra.rpki-client.org