$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa File: C82A0778680811EE88B5527CC4F9AE02.roa (raw, json) Hash identifier: iT0U9lnLZYbIpbQMpMgZSE264DaSr6jhkfqcGbR6zSk= Subject key identifier: 76:4B:EE:B8:47:E3:EB:BB:C3:FC:A4:F7:65:F8:B4:81:B4:DC:4C:F4 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: CC Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa Signing time: Thu 23 Nov 2023 07:39:12 +0000 ROA not before: Thu 23 Nov 2023 07:39:12 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 149021 IP address blocks: 103.176.204.0/23 maxlen: 23 103.176.204.0/24 maxlen: 24 103.176.205.0/24 maxlen: 24 2401:43e0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 04:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Nov 23 07:39:12 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=655f01a0-b560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:89:ea:dc:6c:50:cb:bd:db:96:1c:56:4c: 88:c9:d6:50:18:de:63:d9:03:1d:5e:5f:86:5c:31: 28:2a:50:e6:12:a4:c5:e1:11:3b:86:63:c5:59:d2: ea:6b:33:24:07:9d:22:29:f3:4e:0c:06:c8:f1:b3: 8e:a9:58:75:ef:5d:bf:7d:62:72:e9:f5:f2:7f:df: 65:ab:26:05:d5:6c:ad:c2:44:27:78:23:30:e7:9a: 44:19:e2:b8:5c:42:c0:4c:05:76:38:cb:0f:ac:4e: ac:7c:47:e8:ce:b7:bc:d0:d6:65:3f:8c:79:77:10: 43:1a:e9:89:ee:f6:c8:45:25:df:d0:27:1d:92:30: ea:c4:34:90:c6:a7:a1:ae:ec:30:90:98:39:64:df: e8:0a:8f:d5:d3:e8:c7:7e:2d:96:fd:d5:87:21:38: c2:25:ca:60:f0:07:db:0c:1f:dd:12:f3:ef:00:5a: 93:74:18:65:29:72:b0:2f:0a:95:1f:db:f4:0a:b3: e3:41:0f:90:80:04:6e:67:1b:d9:aa:74:ea:45:49: e1:a7:63:15:6b:49:15:8c:b4:30:60:fe:6a:56:2e: 64:d9:f7:6b:ee:7f:5d:e5:b7:f3:27:96:61:55:1c: 3f:86:2d:05:25:23:63:06:c0:d4:c0:b4:11:a3:25: 50:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4B:EE:B8:47:E3:EB:BB:C3:FC:A4:F7:65:F8:B4:81:B4:DC:4C:F4 X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.204.0/23 IPv6: 2401:43e0:1::/48 Signature Algorithm: sha256WithRSAEncryption 48:6a:b6:1d:2b:57:fc:54:b9:81:ac:08:87:f0:ba:46:80:ff: 96:42:ae:bb:41:01:b1:d8:a3:96:63:f0:65:c2:68:cc:85:df: 5d:e4:60:d8:c1:07:fe:86:69:50:5a:0d:db:58:96:7a:66:f6: 9f:35:d6:cd:12:ed:09:58:cc:cf:b6:77:14:d7:60:ab:b4:82: 71:ea:a4:92:6e:2e:14:fa:51:62:bd:2b:9d:78:b8:67:1a:25: 3b:4e:c3:71:33:de:5f:40:f3:8b:d9:3e:06:e9:86:38:b2:d8: 2d:69:a0:cc:62:0d:c1:f3:25:cc:7d:0b:1d:00:d9:a5:c4:f6: 70:3d:f1:a3:f0:5b:18:2e:d8:c1:44:79:45:17:0e:68:61:cf: 2b:e5:65:7c:f4:65:b1:a3:24:46:19:45:87:e6:af:7a:d7:fe: 93:a4:86:6a:ac:20:a5:c8:87:4e:29:42:e3:a7:c9:ec:d2:0e: 3f:7e:e5:7a:43:86:35:bf:1f:30:da:5a:44:1a:ec:cc:75:61: 87:e0:83:fc:54:6c:58:ad:60:bb:d0:a2:a9:b1:86:be:b1:c1: 65:e1:7e:8d:85:0d:f7:21:5f:c2:e3:c6:bc:7d:f2:6c:30:32: 2d:80:ac:ad:37:b0:ce:7c:80:76:51:c5:ca:52:f4:b6:52:2c: 2b:fa:a0:46 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjMxMTIzMDczOTEyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTVmMDFhMC1iNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwN6J6txsUMu925YcVkyIydZQGN5j2QMdXl+GXDEoKlDmEqTF4RE7hmPFWdLq azMkB50iKfNODAbI8bOOqVh1712/fWJy6fXyf99lqyYF1WytwkQneCMw55pEGeK4 XELATAV2OMsPrE6sfEfozre80NZlP4x5dxBDGumJ7vbIRSXf0CcdkjDqxDSQxqeh ruwwkJg5ZN/oCo/V0+jHfi2W/dWHITjCJcpg8AfbDB/dEvPvAFqTdBhlKXKwLwqV H9v0CrPjQQ+QgARuZxvZqnTqRUnhp2MVa0kVjLQwYP5qVi5k2fdr7n9d5bfzJ5Zh VRw/hi0FJSNjBsDUwLQRoyVQFwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHZL7rhH 4+u7w/yk92X4tIG03Ez0MB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUNDMjQvMTZDNjEzMTY2QUZBMTFFREI3MDZGRjNDQzRGOUFFMDIvQzgyQTA3Nzg2 ODA4MTFFRTg4QjU1MjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsMwwDwQCAAIwCQMHACQBQ+AAATANBgkqhkiG9w0BAQsF AAOCAQEASGq2HStX/FS5gawIh/C6RoD/lkKuu0EBsdijlmPwZcJozIXfXeRg2MEH /oZpUFoN21iWemb2nzXWzRLtCVjMz7Z3FNdgq7SCceqkkm4uFPpRYr0rnXi4Zxol O07DcTPeX0Dzi9k+BumGOLLYLWmgzGINwfMlzH0LHQDZpcT2cD3xo/BbGC7YwUR5 RRcOaGHPK+VlfPRlsaMkRhlFh+avetf+k6SGaqwgpciHTilC46fJ7NIOP37lekOG Nb8fMNpaRBrszHVhh+CD/FRsWK1gu9CiqbGGvrHBZeF+jYUN9yFfwuPGvH3ybDAy LYCsrTewznyAdlHFylL0tlIsK/qgRg== -----END CERTIFICATE-----Generated at Wed May 15 05:59:56 2024 by rpki-client on console-fra.rpki-client.org