$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/0665D2328D1A11EB80593760C4F9AE02.roa File: 0665D2328D1A11EB80593760C4F9AE02.roa (raw, json) Hash identifier: BjkJHXkj5+mPaQvI75MMMBdyFJW01ysY4zBzxe7EtMc= Subject key identifier: 86:D3:81:42:EC:2E:05:C8:F1:78:48:B2:F5:9A:6D:AD:B4:06:EB:DF Certificate issuer: /CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907 Certificate serial: 0589 Authority key identifier: ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/0665D2328D1A11EB80593760C4F9AE02.roa Signing time: Wed 01 May 2024 01:03:54 +0000 ROA not before: Wed 01 May 2024 01:03:54 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132372 IP address blocks: 103.27.255.0/24 maxlen: 24 103.164.203.0/24 maxlen: 24 2001:df2:3bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1417 (0x589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907 Validity Not Before: May 1 01:03:54 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=663194f9-d7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:c2:91:e8:b1:55:d7:bd:d0:e1:ea:63:86: bf:9c:06:f8:a3:9c:cd:42:b8:fa:d6:3a:f5:37:97: 34:26:ee:f7:3e:aa:66:80:fb:03:ab:97:b7:82:8c: fa:89:c5:fd:88:f1:2b:41:3e:7b:e9:31:8d:e5:83: 48:e7:e2:b7:75:cf:f3:1d:06:0f:fc:d8:ae:5b:27: 51:80:9b:54:ad:10:47:78:11:05:d4:83:a2:c6:d7: 0c:aa:fd:5e:22:91:c4:83:2c:bf:f4:88:b1:1b:cc: 74:76:58:ef:54:32:da:86:41:65:2b:6f:14:eb:dc: 36:c8:57:c2:bd:c6:fb:71:55:74:f1:1e:3e:58:da: 60:c8:c1:fb:e5:b3:a9:e1:0a:17:21:29:e5:0c:9e: 8a:19:ca:40:eb:84:f8:e2:7e:8b:2f:54:0f:22:9c: f5:50:7a:fb:16:90:f8:f2:57:95:da:44:10:98:7a: 4f:2a:73:82:77:8a:46:2d:07:a7:95:a9:40:47:dd: 0f:35:65:c6:dc:da:9c:d9:ee:2a:fc:af:ce:bc:cb: e2:2f:d2:38:54:3c:cb:34:02:ad:d1:32:83:e0:5c: 5f:62:7c:18:f7:2d:f0:07:3f:6b:b6:72:97:9b:01: ec:ca:ca:3d:cc:ea:b4:ac:08:1c:7d:65:12:6c:b5: b7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D3:81:42:EC:2E:05:C8:F1:78:48:B2:F5:9A:6D:AD:B4:06:EB:DF X509v3 Authority Key Identifier: keyid:ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/0665D2328D1A11EB80593760C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.27.255.0/24 103.164.203.0/24 IPv6: 2001:df2:3bc0::/48 Signature Algorithm: sha256WithRSAEncryption 7f:06:38:ca:4b:a6:63:d2:5b:bd:df:92:05:5c:b1:76:49:c5: c7:d9:c8:d1:80:b1:c9:91:ca:e0:f4:b6:eb:22:9b:1c:55:9a: aa:2f:bf:cb:a3:3d:30:a0:ff:25:8a:48:47:d7:6e:6e:f3:9a: 79:a6:5c:73:16:76:b9:20:b5:39:4c:58:c0:20:1b:1c:9a:96: 40:2d:5f:5f:87:cd:68:08:20:bc:ec:5f:0e:56:25:7c:99:2a: 2c:4a:12:cf:7c:c3:0f:27:43:45:5d:37:7f:db:1d:78:d6:ca: 42:47:c2:a5:d3:90:5a:5b:85:fe:27:24:20:ee:25:f2:d6:3f: ce:e3:1d:60:d1:71:41:5b:01:a8:fd:6b:e9:ed:3b:fe:d4:68: 64:19:1f:06:3a:c7:9a:0e:84:36:05:ef:a3:5f:df:78:71:86: db:4e:4e:02:db:ed:03:99:34:68:27:5e:87:a8:08:bb:14:55: 72:6d:85:e0:8f:62:8d:e1:c4:fb:32:91:8a:72:4a:68:a9:16: 93:9f:0c:a1:1b:32:ad:ba:41:00:66:16:57:33:b8:69:10:ea: c6:31:cf:06:9f:f0:8c:12:ce:17:01:5f:23:35:59:08:f8:84: db:da:e0:ec:3c:95:98:dc:6c:d3:8c:9f:f0:53:a3:eb:04:21: e8:6d:eb:ca -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0RUQxMTAvBgNVBAUTKEVEQTJBQUJCNDAyMTJFQjNDMDkyQUFFQUYxNTE0MkE3 NjlFRjU5MDcwHhcNMjQwNTAxMDEwMzU0WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxOTRmOS1kN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYrCkeixVde90OHqY4a/nAb4o5zNQrj61jr1N5c0Ju73PqpmgPsDq5e3goz6 icX9iPErQT576TGN5YNI5+K3dc/zHQYP/NiuWydRgJtUrRBHeBEF1IOixtcMqv1e IpHEgyy/9IixG8x0dljvVDLahkFlK28U69w2yFfCvcb7cVV08R4+WNpgyMH75bOp 4QoXISnlDJ6KGcpA64T44n6LL1QPIpz1UHr7FpD48leV2kQQmHpPKnOCd4pGLQen lalAR90PNWXG3Nqc2e4q/K/OvMviL9I4VDzLNAKt0TKD4FxfYnwY9y3wBz9rtnKX mwHsyso9zOq0rAgcfWUSbLW3iQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFIbTgULs LgXI8XhIsvWaba20BuvfMB8GA1UdIwQYMBaAFO2iqrtAIS6zwJKq6vFRQqdp71kH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRFRC9EQkU5MEJBQzhE MTcxMUVCOTM2ODg1NUNDNEY5QUUwMi83YUtxdTBBaExyUEFrcXJxOFZGQ3AybnZX UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhS3F1MEFoTHJQQWtxcnE4VkZDcDJudldRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTA0RUQvREJFOTBCQUM4RDE3MTFFQjkzNjg4NTVDQzRGOUFFMDIvMDY2NUQyMzI4 RDFBMTFFQjgwNTkzNzYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnG/8DBABnpMswDwQCAAIwCQMHACABDfI7wDANBgkqhkiG 9w0BAQsFAAOCAQEAfwY4ykumY9Jbvd+SBVyxdknFx9nI0YCxyZHK4PS26yKbHFWa qi+/y6M9MKD/JYpIR9dubvOaeaZccxZ2uSC1OUxYwCAbHJqWQC1fX4fNaAggvOxf DlYlfJkqLEoSz3zDDydDRV03f9sdeNbKQkfCpdOQWluF/ickIO4l8tY/zuMdYNFx QVsBqP1r6e07/tRoZBkfBjrHmg6ENgXvo1/feHGG205OAtvtA5k0aCdeh6gIuxRV cm2F4I9ijeHE+zKRinJKaKkWk58MoRsyrbpBAGYWVzO4aRDqxjHPBp/wjBLOFwFf IzVZCPiE29rg7DyVmNxs04yf8FOj6wQh6G3ryg== -----END CERTIFICATE-----Generated at Fri May 17 02:01:45 2024 by rpki-client on console-ams.rpki-client.org