$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/D3843904F79D11ECAFF03840C4F9AE02.roa File: D3843904F79D11ECAFF03840C4F9AE02.roa (raw, json) Hash identifier: YY7Z20dBPpsDiySGSP0usIUKi5vjMr+zV2dGQQke+BY= Subject key identifier: CB:3F:27:99:54:39:16:F7:4E:7E:56:10:02:6C:C0:8D:20:C6:9E:86 Certificate issuer: /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Certificate serial: 0165 Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/D3843904F79D11ECAFF03840C4F9AE02.roa Signing time: Wed 23 Aug 2023 03:03:33 +0000 ROA not before: Wed 23 Aug 2023 03:03:33 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 56264 IP address blocks: 103.190.74.0/24 maxlen: 24 103.190.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Validity Not Before: Aug 23 03:03:33 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64e57705-278d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cb:34:c3:c3:7f:d9:04:47:df:73:7a:63:48: f6:64:55:5d:e1:89:ea:1a:8a:65:aa:83:bd:33:ca: fe:48:af:f0:7f:c9:fb:9c:00:84:b7:2f:71:64:28: 59:ec:cb:fd:45:e4:57:4a:58:f1:86:71:c6:9a:f9: e9:57:d0:9c:60:6b:de:5e:06:6f:fe:0e:0c:41:1e: 48:bb:7d:53:03:d6:1a:1c:5a:7a:b6:33:08:89:79: 21:fa:33:af:fd:21:fc:7b:b3:36:a4:4b:b9:44:63: f7:43:56:38:51:cb:84:7f:b5:f2:4b:35:59:64:fc: 92:eb:3b:69:5e:2b:72:9b:77:55:73:65:8d:3c:27: dc:44:6d:31:91:a9:7a:fc:c1:f7:3e:22:e5:8e:a3: 43:36:4f:05:04:f2:a2:fe:2d:0f:96:86:35:04:5e: 7b:3f:be:d5:f0:c5:3c:3e:9e:9f:74:2d:21:93:03: 26:e2:72:5a:74:12:56:87:c0:70:94:e5:f6:07:9e: b9:95:df:69:d2:ac:cc:4f:4a:29:b2:17:03:9e:e2: eb:8c:a7:cb:2c:5d:66:bf:50:f2:9e:ec:8e:a3:e8: 8a:5a:32:11:da:6c:88:db:44:a5:b3:46:96:40:b4: 91:f4:cb:9a:e2:c7:a4:b9:a8:00:36:77:52:ac:2b: 0f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3F:27:99:54:39:16:F7:4E:7E:56:10:02:6C:C0:8D:20:C6:9E:86 X509v3 Authority Key Identifier: keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/D3843904F79D11ECAFF03840C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.74.0/23 Signature Algorithm: sha256WithRSAEncryption 79:7a:31:c8:c5:2b:fb:cd:2f:81:82:be:6f:67:f4:f2:f2:2c: 7f:c2:cd:13:4b:7a:c0:01:53:9d:db:e3:dd:dc:1a:8e:9b:4c: e2:38:20:7c:de:53:b9:e8:54:66:7f:89:f8:5f:7a:71:6d:57: a8:c6:9f:5f:d4:43:ab:09:3a:2d:95:37:6f:fb:ff:ea:5b:91: 6a:f7:e7:e2:4c:34:63:ae:51:69:52:67:a8:ac:d2:82:65:01: fc:cf:0a:3f:fd:65:99:24:13:13:60:1c:82:a8:20:13:7a:e2: 1c:54:af:23:ed:56:78:8a:dd:2a:55:64:91:ed:23:c7:ea:e3: 98:4c:8a:13:1c:a6:72:6c:d3:12:17:0d:0f:46:cb:af:78:31: 8a:1d:14:c0:8d:6a:5b:57:a0:76:a7:4f:8d:66:ac:7e:62:55: b5:ff:00:ed:74:a8:a6:f9:60:8c:33:7f:43:e6:81:01:aa:13: 42:d2:dd:0b:70:3b:f2:1c:d3:2f:2d:2a:c2:65:97:fd:86:42: 9c:5c:dc:40:c3:0e:43:64:ef:87:01:14:94:6f:f3:4f:ef:c1: f1:b5:d2:e4:11:ba:4f:d4:ed:72:41:3a:bc:61:61:89:3a:d9: 89:cb:a7:b9:c7:d9:bf:12:b0:2f:b3:18:05:30:77:1f:d6:6a: f5:60:af:70 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG QkIwNzc3QzQwHhcNMjMwODIzMDMwMzMzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGU1NzcwNS0yNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8s0w8N/2QRH33N6Y0j2ZFVd4YnqGoplqoO9M8r+SK/wf8n7nACEty9xZChZ 7Mv9ReRXSljxhnHGmvnpV9CcYGveXgZv/g4MQR5Iu31TA9YaHFp6tjMIiXkh+jOv /SH8e7M2pEu5RGP3Q1Y4UcuEf7XySzVZZPyS6ztpXitym3dVc2WNPCfcRG0xkal6 /MH3PiLljqNDNk8FBPKi/i0PloY1BF57P77V8MU8Pp6fdC0hkwMm4nJadBJWh8Bw lOX2B565ld9p0qzMT0opshcDnuLrjKfLLF1mv1DynuyOo+iKWjIR2myI20Sls0aW QLSR9Mua4sekuagANndSrCsPIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMs/J5lU ORb3Tn5WEAJswI0gxp6GMB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3 OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjAwMTcvNzYxNzFFNTRGNzk3MTFFQ0I0QzY2ODM1QzRGOUFFMDIvRDM4NDM5MDRG NzlEMTFFQ0FGRjAzODQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvkowDQYJKoZIhvcNAQELBQADggEBAHl6McjFK/vNL4GC vm9n9PLyLH/CzRNLesABU53b493cGo6bTOI4IHzeU7noVGZ/ifhfenFtV6jGn1/U Q6sJOi2VN2/7/+pbkWr35+JMNGOuUWlSZ6is0oJlAfzPCj/9ZZkkExNgHIKoIBN6 4hxUryPtVniK3SpVZJHtI8fq45hMihMcpnJs0xIXDQ9Gy694MYodFMCNaltXoHan T41mrH5iVbX/AO10qKb5YIwzf0PmgQGqE0LS3QtwO/Ic0y8tKsJll/2GQpxc3EDD DkNk74cBFJRv80/vwfG10uQRuk/U7XJBOrxhYYk62YnLp7nH2b8SsC+zGAUwdx/W avVgr3A= -----END CERTIFICATE-----Generated at Tue May 7 05:40:32 2024 by rpki-client on console-fra.rpki-client.org