$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/7083BABC100311EE8B670F78C4F9AE02.roa File: 7083BABC100311EE8B670F78C4F9AE02.roa (raw, json) Hash identifier: qRj9qjC/xBQUGI8EHmc6bdfw8u9noUxyDnXZDm0hnPU= Subject key identifier: 72:85:3A:56:DE:91:C5:56:FD:A0:66:60:95:A2:66:53:41:2E:D6:28 Certificate issuer: /CN=A91E1022/serialNumber=76AA20CA24A6C2E328876D004D1314E117A6E7D0 Certificate serial: 3F Authority key identifier: 76:AA:20:CA:24:A6:C2:E3:28:87:6D:00:4D:13:14:E1:17:A6:E7:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/7083BABC100311EE8B670F78C4F9AE02.roa Signing time: Wed 11 Oct 2023 05:37:03 +0000 ROA not before: Wed 11 Oct 2023 05:37:03 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 141153 IP address blocks: 103.192.38.0/23 maxlen: 23 103.192.38.0/24 maxlen: 24 103.192.39.0/24 maxlen: 24 2407:6480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.crl rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1022/serialNumber=76AA20CA24A6C2E328876D004D1314E117A6E7D0 Validity Not Before: Oct 11 05:37:03 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6526347f-c327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4e:39:e8:73:d1:0a:f6:f8:19:00:78:96:91: a3:fb:62:4d:b0:ad:4b:70:f8:ac:91:4c:a3:9a:3a: 20:ef:16:6c:a6:8a:26:64:e4:d9:25:c3:e0:f7:9a: b7:75:e7:2d:34:20:d1:d3:ce:02:25:76:dd:1b:6a: b1:8b:93:86:ab:8a:8e:3e:8d:0c:4b:b1:65:32:4a: 79:82:5d:e1:97:65:f8:7c:27:21:fc:7a:2e:34:a6: e1:7d:53:be:f5:e9:ad:6e:f4:2a:7c:22:a4:a2:17: e3:da:be:64:aa:e9:8e:21:10:96:d0:77:49:36:78: 68:87:9a:29:cb:6e:49:9b:2d:a6:50:df:7a:88:2b: 92:a1:7c:47:90:fd:36:5d:30:7a:5e:fd:bc:d8:f9: 2f:0e:f7:7d:68:8a:be:b4:51:d4:a5:92:18:38:65: 81:6a:25:4c:cc:3c:27:f1:a9:61:32:40:c3:65:f8: 77:7b:6f:4c:34:3e:af:82:a1:c8:3a:b4:51:84:43: c3:df:98:70:81:1c:08:57:9e:ab:03:ee:b4:c6:f8: c4:c9:3c:f0:90:6f:27:30:a3:cb:25:1e:86:6c:36: a2:f3:84:00:f6:d9:5a:66:25:93:74:1d:29:df:69: 37:85:0a:7a:ea:16:ba:6e:69:7a:51:a0:ba:ce:34: b1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:85:3A:56:DE:91:C5:56:FD:A0:66:60:95:A2:66:53:41:2E:D6:28 X509v3 Authority Key Identifier: keyid:76:AA:20:CA:24:A6:C2:E3:28:87:6D:00:4D:13:14:E1:17:A6:E7:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/7083BABC100311EE8B670F78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.192.38.0/23 IPv6: 2407:6480::/32 Signature Algorithm: sha256WithRSAEncryption 16:2c:04:c1:f2:51:54:3c:9d:56:78:78:6c:77:19:31:20:0b: e7:69:68:8e:b1:16:89:8c:e3:59:b7:84:61:73:d8:a4:7e:4c: 1c:45:ef:20:35:96:e0:99:63:cd:dc:74:56:13:40:e3:2c:5e: b1:58:29:00:ec:ec:57:64:9f:62:25:5b:2a:41:a1:a6:b3:8e: 16:d3:b1:3e:a3:12:0d:86:8d:22:86:4c:a3:7b:d7:f0:39:6a: 0e:cd:09:08:8a:03:50:42:80:de:60:4a:a8:9e:cd:76:30:a9: 22:b7:15:07:dd:a9:4b:a9:54:6a:1a:5f:ab:89:97:77:19:30: 66:be:23:fe:08:1c:92:f1:b7:79:1c:cf:ba:85:17:33:72:4e: 19:c2:c1:c0:49:35:c8:e5:b4:e1:91:e1:e7:08:dc:eb:b0:21: 72:69:e1:1e:fc:51:fd:0c:5b:10:a7:ed:1a:f9:a7:29:71:2b: b9:bd:08:17:8b:ff:0c:7b:22:65:de:36:20:b1:62:04:e1:93: ff:39:2b:c8:7d:1b:20:e0:2f:37:69:30:85:db:ca:31:b6:76: e3:d2:65:0d:4f:a6:2c:e6:f7:53:18:26:c0:4c:d0:01:0d:0b: ae:6a:84:9d:85:15:ac:5e:41:6d:ea:8f:34:a7:10:4a:fd:a5: 4f:96:b2:35 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTAyMjExMC8GA1UEBRMoNzZBQTIwQ0EyNEE2QzJFMzI4ODc2RDAwNEQxMzE0RTEx N0E2RTdEMDAeFw0yMzEwMTEwNTM3MDNaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MjYzNDdmLWMzMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWTjnoc9EK9vgZAHiWkaP7Yk2wrUtw+KyRTKOaOiDvFmymiiZk5Nklw+D3mrd1 5y00INHTzgIldt0barGLk4ario4+jQxLsWUySnmCXeGXZfh8JyH8ei40puF9U771 6a1u9Cp8IqSiF+PavmSq6Y4hEJbQd0k2eGiHminLbkmbLaZQ33qIK5KhfEeQ/TZd MHpe/bzY+S8O931oir60UdSlkhg4ZYFqJUzMPCfxqWEyQMNl+Hd7b0w0Pq+Cocg6 tFGEQ8PfmHCBHAhXnqsD7rTG+MTJPPCQbycwo8slHoZsNqLzhAD22VpmJZN0HSnf aTeFCnrqFrpuaXpRoLrONLF1AgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUcoU6Vt6R xVb9oGZglaJmU0Eu1igwHwYDVR0jBBgwFoAUdqogyiSmwuMoh20ATRMU4Rem59Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxMDIyLzlDQzAwQTRBMEZG RTExRUVCNjE5MkI3NkM0RjlBRTAyL2Rxb2d5aVNtd3VNb2gyMEFUUk1VNFJlbTU5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZHFvZ3lpU213dU1vaDIwQVRSTVU0UmVtNTlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTAyMi85Q0MwMEE0QTBGRkUxMUVFQjYxOTJCNzZDNEY5QUUwMi83MDgzQkFCQzEw MDMxMUVFOEI2NzBGNzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWfAJjANBAIAAjAHAwUAJAdkgDANBgkqhkiG9w0BAQsFAAOC AQEAFiwEwfJRVDydVnh4bHcZMSAL52lojrEWiYzjWbeEYXPYpH5MHEXvIDWW4Jlj zdx0VhNA4yxesVgpAOzsV2SfYiVbKkGhprOOFtOxPqMSDYaNIoZMo3vX8DlqDs0J CIoDUEKA3mBKqJ7NdjCpIrcVB92pS6lUahpfq4mXdxkwZr4j/ggckvG3eRzPuoUX M3JOGcLBwEk1yOW04ZHh5wjc67AhcmnhHvxR/QxbEKftGvmnKXErub0IF4v/DHsi Zd42ILFiBOGT/zkryH0bIOAvN2kwhdvKMbZ249JlDU+mLOb3UxgmwEzQAQ0LrmqE nYUVrF5BbeqPNKcQSv2lT5ayNQ== -----END CERTIFICATE-----Generated at Fri May 31 08:39:02 2024 by rpki-client on console-fra.rpki-client.org