$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/10E6D9CAB55C11ECA9565039C4F9AE02.roa File: 10E6D9CAB55C11ECA9565039C4F9AE02.roa (raw, json) Hash identifier: 6DLxtAbKI0TdBhmj3SbmREK/S1JyCj5OlF8tz2zn8hE= Subject key identifier: AB:67:0A:D0:88:C5:E9:2B:9A:7E:72:49:EA:00:85:C1:56:87:07:88 Certificate issuer: /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Certificate serial: 0D47 Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/10E6D9CAB55C11ECA9565039C4F9AE02.roa Signing time: Tue 02 Apr 2024 18:57:21 +0000 ROA not before: Tue 02 Apr 2024 18:57:21 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132459 IP address blocks: 103.137.220.0/23 maxlen: 24 2404:b940::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 18:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3399 (0xd47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Validity Not Before: Apr 2 18:57:21 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=660c5511-28c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:75:d1:b6:35:33:28:51:74:61:7d:73:15:10: 68:42:ca:e8:f9:b2:a0:57:af:3b:2f:fb:5f:f5:f3: d6:c7:ec:b5:73:10:71:91:f6:e8:fd:35:28:c1:29: 34:00:54:c2:99:a6:5e:94:52:45:90:29:02:85:18: ff:7e:00:a3:12:a2:4e:53:22:d4:47:f3:07:dc:d5: b9:22:bc:81:49:0d:77:f2:06:85:dd:a6:99:84:5a: a1:c9:ce:a0:7c:09:c0:76:9b:90:d4:a6:28:f9:4e: c9:70:08:59:bf:0e:a2:f2:e2:76:f6:0c:77:98:1b: d1:5f:c6:23:80:12:d6:57:03:4a:96:38:d7:c5:37: c1:d2:2e:f1:f6:9f:ec:c9:75:f5:9d:fc:e8:c2:b9: 7b:35:e4:61:eb:09:13:73:cc:79:5c:ae:7b:77:57: ae:54:f2:ce:dc:0d:53:0d:ec:59:15:98:b8:73:ce: d6:e6:ae:f6:0a:8b:0c:b5:29:26:60:e8:67:48:27: 7e:65:36:c1:77:43:42:74:30:7b:ad:0c:2b:0e:ad: 37:d2:0c:37:ca:e2:76:94:12:a8:0d:69:57:f4:39: 41:fd:85:34:0e:69:cc:de:00:b9:72:1d:e4:1c:8c: 2f:3a:28:0c:4b:c6:1d:96:35:99:b3:41:97:46:d7: 26:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:67:0A:D0:88:C5:E9:2B:9A:7E:72:49:EA:00:85:C1:56:87:07:88 X509v3 Authority Key Identifier: keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/10E6D9CAB55C11ECA9565039C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.220.0/23 IPv6: 2404:b940::/32 Signature Algorithm: sha256WithRSAEncryption 4a:e8:35:29:30:8d:bc:13:23:07:11:39:88:5e:4a:f5:c6:c2: ea:38:3a:14:2c:5e:d5:fa:d6:4d:a4:57:ca:ca:f4:9f:54:c9: f5:da:de:a3:86:e0:d4:ed:9b:10:e4:4a:ca:5e:0b:bd:4c:bf: 07:58:d3:52:95:be:2e:51:1c:4e:ce:21:91:68:f4:72:a9:3d: 8f:80:b1:99:dd:15:47:72:8a:02:99:ba:8b:69:2c:d3:04:02: bf:25:b0:4f:bc:60:e5:5b:2c:b7:bc:5b:ba:07:6b:3a:d3:66: 49:ba:0a:0a:59:72:19:1e:be:50:f9:a5:58:c7:d3:61:5b:88: 1c:84:d5:21:d3:2e:63:19:70:f4:25:f1:62:c0:62:b8:28:f6: 6a:a7:3c:50:96:2d:78:48:42:8e:a1:24:3c:cb:09:9f:25:34: 4c:ed:e0:76:21:9b:14:fe:35:cc:58:71:43:62:eb:b7:c5:2f: 60:d4:8c:25:5e:01:6d:1e:c0:78:12:40:8d:4a:95:3b:74:07: 18:02:20:1a:36:a9:13:2b:af:62:10:86:5a:5d:66:4f:7b:fc: 72:64:72:89:85:22:72:ba:4b:79:7d:fe:16:d3:2f:a2:79:c0: 6e:c6:f7:3f:75:b9:a4:2c:91:65:99:61:dc:2e:d0:9a:55:54: 40:da:5b:18 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMDQxMTAvBgNVBAUTKERGQzIzRTNEOTA1RDBFODM2ODEyMTk1OTZEMDgyMjlB Njk0RkFGMTMwHhcNMjQwNDAyMTg1NzIxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjNTUxMS0yOGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HXRtjUzKFF0YX1zFRBoQsro+bKgV687L/tf9fPWx+y1cxBxkfbo/TUowSk0 AFTCmaZelFJFkCkChRj/fgCjEqJOUyLUR/MH3NW5IryBSQ138gaF3aaZhFqhyc6g fAnAdpuQ1KYo+U7JcAhZvw6i8uJ29gx3mBvRX8YjgBLWVwNKljjXxTfB0i7x9p/s yXX1nfzowrl7NeRh6wkTc8x5XK57d1euVPLO3A1TDexZFZi4c87W5q72CosMtSkm YOhnSCd+ZTbBd0NCdDB7rQwrDq030gw3yuJ2lBKoDWlX9DlB/YU0DmnM3gC5ch3k HIwvOigMS8YdljWZs0GXRtcmswIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKtnCtCI xekrmn5ySeoAhcFWhweIMB8GA1UdIwQYMBaAFN/CPj2QXQ6DaBIZWW0IIpppT68T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QwNC83QTE3RkU4RUFE RDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERvTm9FaGxaYlFnaW1tbFBy eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4SS1QWkJkRG9Ob0VobFpiUWdpbW1sUHJ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNEMDQvN0ExN0ZFOEVBREQ5MTFFOUI3NDA5QTcyQzRGOUFFMDIvMTBFNkQ5Q0FC NTVDMTFFQ0E5NTY1MDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnidwwDQQCAAIwBwMFACQEuUAwDQYJKoZIhvcNAQELBQAD ggEBAEroNSkwjbwTIwcROYheSvXGwuo4OhQsXtX61k2kV8rK9J9UyfXa3qOG4NTt mxDkSspeC71MvwdY01KVvi5RHE7OIZFo9HKpPY+AsZndFUdyigKZuotpLNMEAr8l sE+8YOVbLLe8W7oHazrTZkm6CgpZchkevlD5pVjH02FbiByE1SHTLmMZcPQl8WLA Yrgo9mqnPFCWLXhIQo6hJDzLCZ8lNEzt4HYhmxT+NcxYcUNi67fFL2DUjCVeAW0e wHgSQI1KlTt0BxgCIBo2qRMrr2IQhlpdZk97/HJkcomFInK6S3l9/hbTL6J5wG7G 9z91uaQskWWZYdwu0JpVVEDaWxg= -----END CERTIFICATE-----Generated at Wed May 22 20:09:15 2024 by rpki-client on console-ams.rpki-client.org