$ rpki-client -vvf rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/7716938A416211EB9B0F3C54C4F9AE02.roa File: 7716938A416211EB9B0F3C54C4F9AE02.roa (raw, json) Hash identifier: hCaAEWq2eMhrSimlnmRSol9Ew4VVk2u8ZIHdiArRPpA= Subject key identifier: 6E:9C:E2:1A:5A:AA:F0:F4:0B:E6:D3:5D:4E:08:6F:8A:29:DC:56:07 Certificate issuer: /CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD Certificate serial: 0B28 Authority key identifier: 3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/7716938A416211EB9B0F3C54C4F9AE02.roa Signing time: Mon 12 Feb 2024 19:57:25 +0000 ROA not before: Mon 12 Feb 2024 19:57:25 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 136141 IP address blocks: 103.81.104.0/23 maxlen: 23 103.81.104.0/24 maxlen: 24 103.81.105.0/24 maxlen: 24 103.122.74.0/23 maxlen: 23 103.122.74.0/24 maxlen: 24 103.122.75.0/24 maxlen: 24 2001:df5:2f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2856 (0xb28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD Validity Not Before: Feb 12 19:57:25 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65ca7825-f771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f7:dd:8c:26:27:57:3e:6d:ce:27:d6:62:9a: 32:09:20:07:23:24:c1:72:25:c0:0d:9a:96:6b:af: ca:19:d1:e0:a8:af:97:b8:8f:57:8a:de:be:18:58: 64:74:8c:4f:83:8b:f5:cd:36:f4:e6:93:a1:70:ea: d4:3b:5d:74:5a:43:c2:8e:92:0c:eb:b8:10:b3:3f: 67:9e:af:a0:9e:9e:a4:9c:0d:5c:d2:f4:ac:ee:9e: bb:07:5e:06:2a:14:f2:29:c8:61:28:ab:35:f9:9a: 63:bc:09:04:ee:0e:33:25:f1:ee:bd:75:35:90:9c: 1b:79:bb:a9:fc:d8:da:b1:51:15:7f:e0:bc:69:57: 3b:fa:6f:75:4f:53:65:90:69:3d:03:5e:b5:32:f3: 0b:bf:10:92:37:a2:70:58:6f:a9:05:d2:a7:d7:42: 8f:7a:8f:64:06:1e:16:05:02:2f:1a:98:88:8b:84: ee:b0:e0:de:35:23:64:e5:ef:30:f1:80:28:2c:33: 7c:47:72:b9:cd:7d:7f:5a:1a:87:3d:61:ae:1f:c9: 34:0e:41:25:4d:e3:1a:c2:0d:43:ba:98:59:6d:ee: 98:34:83:4a:b2:7a:90:99:32:95:aa:06:89:17:56: fe:05:ea:2e:5a:23:7c:30:02:f8:bd:ae:02:4e:e8: 08:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9C:E2:1A:5A:AA:F0:F4:0B:E6:D3:5D:4E:08:6F:8A:29:DC:56:07 X509v3 Authority Key Identifier: keyid:3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/7716938A416211EB9B0F3C54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.104.0/23 103.122.74.0/23 IPv6: 2001:df5:2f00::/48 Signature Algorithm: sha256WithRSAEncryption 38:3d:a4:88:cd:06:85:ad:70:40:71:6a:c2:21:6b:d3:07:a3: ab:86:78:f1:b7:60:e2:39:53:4b:e6:cd:9b:85:a2:02:95:40: d1:cb:72:9b:66:9a:6f:54:44:ba:0a:31:31:c0:f0:5b:f6:78: c2:69:62:17:40:21:59:50:e2:df:07:c7:e0:ed:dc:d9:ad:d5: 3c:b4:63:99:ae:49:da:f3:27:21:b6:0c:02:e5:d7:c5:d4:9e: 06:f9:98:3b:14:fc:98:4a:55:3a:ae:33:3d:33:90:cf:8c:4e: 52:0a:3b:91:8e:48:d4:b8:cb:f6:78:cc:38:b3:42:35:90:7e: f2:0d:39:48:54:eb:93:77:89:e2:c2:75:7a:3c:b7:69:96:f9: 07:6b:d3:68:96:6e:87:87:e7:42:fd:f8:14:9b:84:45:52:86: 30:8d:21:5c:31:20:fb:6d:6b:2d:33:05:30:16:be:1a:d0:4a: 12:ea:1c:14:03:d7:3a:1e:0a:8f:e4:55:7f:31:92:2a:dd:ff: be:dc:35:f2:c4:73:d4:49:83:91:dc:5b:a3:2d:0e:fa:87:eb: 2f:6d:08:81:5c:1d:80:67:7a:aa:48:1f:db:36:44:43:d4:db: df:6b:52:46:e0:e0:9d:8d:82:30:33:30:75:c2:0b:83:dc:2f: a5:a6:fc:19 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAyRUExMTAvBgNVBAUTKDNEMjg3MDg4RTM4NjgyQTRFNEI5RDgyODQ1MEIzMzY2 QkRFQUQ1REQwHhcNMjQwMjEyMTk1NzI1WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWNhNzgyNS1mNzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoffdjCYnVz5tzifWYpoyCSAHIyTBciXADZqWa6/KGdHgqK+XuI9Xit6+GFhk dIxPg4v1zTb05pOhcOrUO110WkPCjpIM67gQsz9nnq+gnp6knA1c0vSs7p67B14G KhTyKchhKKs1+ZpjvAkE7g4zJfHuvXU1kJwbebup/NjasVEVf+C8aVc7+m91T1Nl kGk9A161MvMLvxCSN6JwWG+pBdKn10KPeo9kBh4WBQIvGpiIi4TusODeNSNk5e8w 8YAoLDN8R3K5zX1/WhqHPWGuH8k0DkElTeMawg1DuphZbe6YNINKsnqQmTKVqgaJ F1b+BeouWiN8MAL4va4CTugIyQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFG6c4hpa qvD0C+bTXU4Ib4op3FYHMB8GA1UdIwQYMBaAFD0ocIjjhoKk5LnYKEULM2a96tXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDJFQS9EQjE1Q0RFMDEx REIxMUVBOTVGMkIwNTlDNEY5QUUwMi9QU2h3aU9PR2dxVGt1ZGdvUlFzelpyM3Ex ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTaHdpT09HZ3FUa3VkZ29SUXN6WnIzcTFkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjAyRUEvREIxNUNERTAxMURCMTFFQTk1RjJCMDU5QzRGOUFFMDIvNzcxNjkzOEE0 MTYyMTFFQjlCMEYzQzU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnUWgDBAFnekowDwQCAAIwCQMHACABDfUvADANBgkqhkiG 9w0BAQsFAAOCAQEAOD2kiM0Gha1wQHFqwiFr0wejq4Z48bdg4jlTS+bNm4WiApVA 0ctym2aab1REugoxMcDwW/Z4wmliF0AhWVDi3wfH4O3c2a3VPLRjma5J2vMnIbYM AuXXxdSeBvmYOxT8mEpVOq4zPTOQz4xOUgo7kY5I1LjL9njMOLNCNZB+8g05SFTr k3eJ4sJ1ejy3aZb5B2vTaJZuh4fnQv34FJuERVKGMI0hXDEg+21rLTMFMBa+GtBK EuocFAPXOh4Kj+RVfzGSKt3/vtw18sRz1EmDkdxboy0O+ofrL20IgVwdgGd6qkgf 2zZEQ9Tb32tSRuDgnY2CMDMwdcILg9wvpab8GQ== -----END CERTIFICATE-----Generated at Thu May 16 21:45:32 2024 by rpki-client on console-fra.rpki-client.org