$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/6F67CF8CDCF111ED9828F232C4F9AE02.roa File: 6F67CF8CDCF111ED9828F232C4F9AE02.roa (raw, json) Hash identifier: t308APOJrn10MPw3DSxFkEvQxuY9WYVLshqW46DmSB0= Subject key identifier: 32:DC:18:98:4B:D2:52:0A:A5:5B:16:56:4F:5F:DF:01:F7:61:E5:05 Certificate issuer: /CN=A91F3D37/serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Certificate serial: 54 Authority key identifier: 6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/6F67CF8CDCF111ED9828F232C4F9AE02.roa Signing time: Thu 21 Sep 2023 05:05:25 +0000 ROA not before: Thu 21 Sep 2023 05:05:25 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 146960 IP address blocks: 103.172.74.0/23 maxlen: 23 103.172.74.0/24 maxlen: 24 103.172.75.0/24 maxlen: 24 2001:df7:6580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3D37/serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Validity Not Before: Sep 21 05:05:25 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=650bcf15-0c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4d:10:9b:2b:80:a8:03:ec:ee:9b:28:6f:89: bf:fa:94:d4:2d:9b:b9:fe:4b:c6:ae:4d:d2:3a:1e: 9f:64:ba:5f:9a:eb:91:44:ca:4d:b3:1b:31:49:96: cc:a4:8c:51:86:e9:9d:2b:4f:da:d5:6c:6b:86:cd: e3:3a:58:34:f5:6d:15:d3:1e:7a:9b:01:2c:85:f6: f2:70:38:b5:ee:03:67:9d:5a:ab:d3:18:02:5c:d7: 27:50:aa:fa:28:30:8a:ff:66:b8:60:8b:c5:0b:f0: db:6b:59:67:a0:91:98:16:23:81:ec:b6:0e:da:13: b0:55:fd:5d:1f:bf:83:93:24:c1:b7:cc:51:e9:10: 64:bf:b3:6e:78:95:6a:a9:7b:11:d4:07:60:7c:c4: a4:d4:da:b2:17:40:b5:fb:da:4b:ae:c9:da:8d:3b: 37:4e:59:c7:e0:6b:e3:3b:e7:d2:0c:e4:5b:31:c2: df:09:25:f3:8a:2f:7f:3d:5d:67:5f:48:91:c6:98: 35:9a:2b:73:2b:37:4a:92:6c:7f:b5:f2:92:57:e3: 4c:9f:68:31:c9:1b:78:b2:06:20:5c:5b:d7:93:91: 0f:0f:c9:fa:0b:c9:2a:37:11:e8:3f:f1:1d:2c:4a: d6:ab:78:07:19:27:02:48:74:69:7b:db:e9:fc:6b: c2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DC:18:98:4B:D2:52:0A:A5:5B:16:56:4F:5F:DF:01:F7:61:E5:05 X509v3 Authority Key Identifier: keyid:6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/6F67CF8CDCF111ED9828F232C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.74.0/23 IPv6: 2001:df7:6580::/48 Signature Algorithm: sha256WithRSAEncryption 43:3a:17:c6:cd:42:4f:64:1e:a5:35:6c:6c:f2:ae:76:6c:1f: 46:4d:78:6c:e2:b4:9c:a1:32:1e:c5:6b:98:b7:d8:a9:f1:c3: cb:54:68:41:cd:1f:fb:e6:c5:2e:69:0e:e8:1f:ed:25:3a:cf: 04:27:a2:9a:ec:02:b6:c3:76:cd:27:e8:ee:1e:3d:e4:1f:a6: 28:ae:a9:fe:27:af:dc:05:91:71:e4:2f:4c:17:95:8b:f0:a6: 70:ec:48:70:11:00:75:76:92:f8:aa:3a:b7:0d:3a:75:b2:65: 13:16:e7:2a:88:f3:d2:fa:49:fb:05:d9:40:f2:77:a1:f7:bc: 5e:cb:9e:67:02:5f:83:e8:c4:c7:82:73:95:66:21:0a:28:14: fd:36:1b:39:5a:50:4e:f0:0d:e6:83:39:7b:ac:1b:e7:50:10: 58:82:80:90:66:8d:17:5a:00:90:5f:70:11:95:3f:23:e2:73: 82:8d:43:45:2d:96:e9:65:2a:0c:df:34:33:23:f4:f2:54:91: ec:c5:14:2f:dc:d9:d1:20:e2:d5:fa:a5:48:aa:1f:02:f2:b6: c8:f3:d1:de:6d:38:fb:57:2c:4b:89:72:09:80:10:35:c4:70: 95:d1:af:c7:09:9e:a9:82:b0:32:8c:62:b2:30:73:db:f3:ab: e0:db:2b:97 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0QzNzExMC8GA1UEBRMoNkNGNjA0M0VGNjFBODQ0RjA4RTI1M0ExOTNENUQ5NDY1 NDk2Mjc5RDAeFw0yMzA5MjEwNTA1MjVaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MGJjZjE1LTBjOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbTRCbK4CoA+zumyhvib/6lNQtm7n+S8auTdI6Hp9kul+a65FEyk2zGzFJlsyk jFGG6Z0rT9rVbGuGzeM6WDT1bRXTHnqbASyF9vJwOLXuA2edWqvTGAJc1ydQqvoo MIr/Zrhgi8UL8NtrWWegkZgWI4Hstg7aE7BV/V0fv4OTJMG3zFHpEGS/s254lWqp exHUB2B8xKTU2rIXQLX72kuuydqNOzdOWcfga+M759IM5Fsxwt8JJfOKL389XWdf SJHGmDWaK3MrN0qSbH+18pJX40yfaDHJG3iyBiBcW9eTkQ8PyfoLySo3Eeg/8R0s StareAcZJwJIdGl72+n8a8JVAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUMtwYmEvS UgqlWxZWT1/fAfdh5QUwHwYDVR0jBBgwFoAUbPYEPvYahE8I4lOhk9XZRlSWJ50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzRDM3LzVFRTk3ODJBRENF RTExRUQ4QzM4RDAzMUM0RjlBRTAyL2JQWUVQdllhaEU4STRsT2hrOVhaUmxTV0o1 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlBZRVB2WWFoRThJNGxPaGs5WFpSbFNXSjUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0QzNy81RUU5NzgyQURDRUUxMUVEOEMzOEQwMzFDNEY5QUUwMi82RjY3Q0Y4Q0RD RjExMUVEOTgyOEYyMzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWesSjAPBAIAAjAJAwcAIAEN92WAMA0GCSqGSIb3DQEBCwUA A4IBAQBDOhfGzUJPZB6lNWxs8q52bB9GTXhs4rScoTIexWuYt9ip8cPLVGhBzR/7 5sUuaQ7oH+0lOs8EJ6Ka7AK2w3bNJ+juHj3kH6Yorqn+J6/cBZFx5C9MF5WL8KZw 7EhwEQB1dpL4qjq3DTp1smUTFucqiPPS+kn7BdlA8neh97xey55nAl+D6MTHgnOV ZiEKKBT9Nhs5WlBO8A3mgzl7rBvnUBBYgoCQZo0XWgCQX3ARlT8j4nOCjUNFLZbp ZSoM3zQzI/TyVJHsxRQv3NnRIOLV+qVIqh8C8rbI89HebTj7VyxLiXIJgBA1xHCV 0a/HCZ6pgrAyjGKyMHPb86vg2yuX -----END CERTIFICATE-----Generated at Fri May 17 08:52:56 2024 by rpki-client on console-ams.rpki-client.org