$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/A04E05E42CE911EC8F99F486C4F9AE02.roa File: A04E05E42CE911EC8F99F486C4F9AE02.roa (raw, json) Hash identifier: grFPnpair5b6TpzaGyDaVQsKdbSvgiobKcV8VYMAec0= Subject key identifier: 63:0D:87:C7:2C:56:C1:05:D1:5B:E7:85:8B:76:41:FC:E2:D4:4B:72 Certificate issuer: /CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Certificate serial: 127A Authority key identifier: 93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/A04E05E42CE911EC8F99F486C4F9AE02.roa Signing time: Mon 04 Sep 2023 17:24:38 +0000 ROA not before: Mon 04 Sep 2023 17:24:38 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 137826 IP address blocks: 103.115.23.0/24 maxlen: 24 103.139.194.0/24 maxlen: 24 2001:df5:1b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4730 (0x127a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Validity Not Before: Sep 4 17:24:38 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64f612d6-03f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:4b:80:1b:cf:70:6e:38:89:de:61:13:2d: 56:cf:0b:92:05:5e:a8:46:3f:fb:f2:b4:61:93:06: 3f:e0:9b:bd:2d:63:87:c3:af:0b:25:16:40:02:66: 12:28:3a:13:57:f7:42:1f:6f:35:54:e1:69:24:50: ee:fd:db:4f:1b:98:73:d5:fd:ad:ce:b3:53:e4:25: 9d:db:b9:d5:ce:90:e1:ca:02:49:a1:71:52:60:fb: 30:9c:ba:75:c1:9c:b1:45:bb:e1:0d:64:df:5e:06: 5e:cf:37:57:e5:0b:95:b3:ec:3f:56:07:d4:49:e1: 51:52:59:a1:c2:24:64:8f:cb:87:5e:48:5d:46:1c: b2:56:d9:56:7e:5f:9f:ed:26:32:e6:17:b4:1c:e3: 9d:98:29:39:d3:fc:e0:c4:94:9f:b9:10:52:8a:82: 86:b7:d0:aa:cd:7c:a4:c6:63:84:b2:3e:bf:4a:52: e3:35:4c:15:8e:de:fc:7e:8c:82:ad:f5:ba:f1:b3: 05:ab:39:cc:c6:8d:62:3e:7b:76:8e:a0:5c:54:a2: 2a:e6:ea:fd:23:80:eb:cf:59:af:eb:46:aa:54:06: 57:48:18:a0:09:8c:42:c9:b3:13:42:3f:99:e5:f2: 2e:63:4b:39:18:5f:54:f8:b2:72:08:a0:c8:14:59: 3d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0D:87:C7:2C:56:C1:05:D1:5B:E7:85:8B:76:41:FC:E2:D4:4B:72 X509v3 Authority Key Identifier: keyid:93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/A04E05E42CE911EC8F99F486C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.23.0/24 103.139.194.0/24 IPv6: 2001:df5:1b00::/48 Signature Algorithm: sha256WithRSAEncryption ba:da:3a:d9:33:4b:39:bb:ec:58:8d:92:7d:6e:3f:4f:0f:cf: bf:5f:34:94:ce:01:8d:86:2f:a5:73:cd:82:cd:ba:70:fd:56: 39:a0:e1:c1:13:75:9f:50:40:dd:50:f0:7c:b1:b1:b4:d4:0b: 9a:5a:0d:93:41:25:d8:3e:9b:92:2e:1a:1d:7d:85:c7:39:e6: ab:9a:e3:5b:de:1d:54:84:c4:b6:7d:84:2d:90:65:95:ed:0d: d3:62:a0:6b:43:b0:b2:ae:ff:d3:41:48:de:ce:7a:d3:13:e8: 7f:56:07:b3:39:5c:1e:1a:8c:85:05:11:72:3d:b4:ff:11:00: 80:7d:6b:e6:18:a1:0d:64:4b:46:b9:0f:b1:2e:a5:ee:95:90: 9b:f9:fe:f2:66:d9:1d:1f:64:3e:de:65:8f:75:d9:67:4e:d1: a5:e8:2d:32:19:e3:1f:4a:42:eb:d6:11:b4:2a:5a:65:91:43: 8b:f1:04:de:df:6c:bc:c0:52:ca:cc:7a:57:77:05:8f:e8:9e: 3d:24:a3:f7:30:58:d2:d9:5f:b5:5b:d5:c0:f9:a8:eb:b4:57: db:44:f1:a8:22:29:36:a4:38:22:f1:fe:36:e6:2d:37:b8:de: 3a:98:90:fd:2f:46:39:77:d4:13:f2:59:07:96:aa:eb:43:e1: e9:63:bf:38 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICEnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMTUxMTAvBgNVBAUTKDkzQzRENzREMThGNTJDRUE1ODUyODBCQjMzMTJGMzEw RTEyMEMwRTkwHhcNMjMwOTA0MTcyNDM4WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY2MTJkNi0wM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpdLgBvPcG44id5hEy1WzwuSBV6oRj/78rRhkwY/4Ju9LWOHw68LJRZAAmYS KDoTV/dCH281VOFpJFDu/dtPG5hz1f2tzrNT5CWd27nVzpDhygJJoXFSYPswnLp1 wZyxRbvhDWTfXgZezzdX5QuVs+w/VgfUSeFRUlmhwiRkj8uHXkhdRhyyVtlWfl+f 7SYy5he0HOOdmCk50/zgxJSfuRBSioKGt9CqzXykxmOEsj6/SlLjNUwVjt78foyC rfW68bMFqznMxo1iPnt2jqBcVKIq5ur9I4Drz1mv60aqVAZXSBigCYxCybMTQj+Z 5fIuY0s5GF9U+LJyCKDIFFk95wIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFGMNh8cs VsEF0VvnhYt2Qfzi1EtyMB8GA1UdIwQYMBaAFJPE100Y9SzqWFKAuzMS8xDhIMDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QxNS83QzY4NUE4Mjk1 QjkxMUU4QTY4OEI2MEVDNEY5QUUwMi9rOFRYVFJqMUxPcFlVb0M3TXhMekVPRWd3 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4VFhUUmoxTE9wWVVvQzdNeEx6RU9FZ3dPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNEMTUvN0M2ODVBODI5NUI5MTFFOEE2ODhCNjBFQzRGOUFFMDIvQTA0RTA1RTQy Q0U5MTFFQzhGOTlGNDg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABncxcDBABni8IwDwQCAAIwCQMHACABDfUbADANBgkqhkiG 9w0BAQsFAAOCAQEAuto62TNLObvsWI2SfW4/Tw/Pv180lM4BjYYvpXPNgs26cP1W OaDhwRN1n1BA3VDwfLGxtNQLmloNk0El2D6bki4aHX2Fxznmq5rjW94dVITEtn2E LZBlle0N02Kga0Owsq7/00FI3s560xPof1YHszlcHhqMhQURcj20/xEAgH1r5hih DWRLRrkPsS6l7pWQm/n+8mbZHR9kPt5lj3XZZ07RpegtMhnjH0pC69YRtCpaZZFD i/EE3t9svMBSysx6V3cFj+iePSSj9zBY0tlftVvVwPmo67RX20TxqCIpNqQ4IvH+ NuYtN7jeOpiQ/S9GOXfUE/JZB5aq60Ph6WO/OA== -----END CERTIFICATE-----Generated at Fri May 24 21:43:34 2024 by rpki-client on console-ams.rpki-client.org