$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/D9A63D2E9D0711EBB708700BC4F9AE02.roa File: D9A63D2E9D0711EBB708700BC4F9AE02.roa (raw, json) Hash identifier: 01f25j3R54MWvOTz10L2YoiOpP1/37rLlOmREDYrZ44= Subject key identifier: 70:F3:2D:D4:B2:90:E3:FE:26:CF:2C:36:74:B5:85:1F:F9:08:AD:F7 Certificate issuer: /CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60 Certificate serial: 057B Authority key identifier: 83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/D9A63D2E9D0711EBB708700BC4F9AE02.roa Signing time: Sat 13 Apr 2024 01:02:28 +0000 ROA not before: Sat 13 Apr 2024 01:02:28 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142014 IP address blocks: 103.164.224.0/23 maxlen: 23 103.164.224.0/24 maxlen: 24 103.164.225.0/24 maxlen: 24 2407:4340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1403 (0x57b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60 Validity Not Before: Apr 13 01:02:28 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6619d9a3-53a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4d:55:e2:56:97:2d:9e:e9:4f:0c:2b:76:ef: fa:58:e8:8b:8d:a4:05:fd:7a:91:db:fb:79:d2:49: c9:6e:43:92:57:f7:ad:eb:89:e8:11:5d:e2:32:74: 1f:4d:cd:60:43:65:08:47:c3:40:67:43:c2:5f:cc: e1:0a:78:47:e1:51:bd:97:03:1c:49:92:dc:60:a4: e5:24:d9:b4:03:a5:a4:73:d3:fb:8a:2a:f9:bf:69: 71:5b:91:be:30:e8:ef:ce:93:d5:2d:9a:04:cc:5b: 21:43:39:39:8e:31:4f:82:68:0b:50:ff:34:ae:31: b8:2e:a5:c7:7f:ea:18:6d:82:c0:47:24:70:7a:f8: 06:2b:42:aa:4f:87:7f:99:9a:a2:50:bc:42:07:03: 00:b3:48:6c:1e:97:38:07:78:97:d2:bb:ee:ef:4a: cd:94:f4:45:a7:b1:ce:f1:a8:6d:7a:b0:56:cb:fd: 34:ac:7e:60:ba:fe:39:b7:73:00:77:3e:d3:a4:e0: 41:84:b7:29:85:1d:86:d3:d8:7c:1e:14:46:bf:0e: e4:a2:a0:1d:08:c3:b6:e6:f0:ca:c6:6d:79:bd:a1: 7c:ee:a6:0a:e4:ee:cc:7e:53:09:00:21:44:5e:45: 34:4f:ab:37:54:4d:e3:20:53:2d:1f:13:5f:77:d2: 6d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F3:2D:D4:B2:90:E3:FE:26:CF:2C:36:74:B5:85:1F:F9:08:AD:F7 X509v3 Authority Key Identifier: keyid:83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/D9A63D2E9D0711EBB708700BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.224.0/23 IPv6: 2407:4340::/32 Signature Algorithm: sha256WithRSAEncryption b8:d1:d3:ba:75:66:82:ba:1f:b6:91:30:c0:8f:c1:9d:4a:27: 85:96:38:77:96:4f:ed:24:c6:02:ac:be:f7:b0:de:07:16:d7: bf:0c:bf:6d:90:93:67:a4:9f:9a:45:83:66:db:53:95:47:ed: 3b:fb:49:c7:15:2d:ef:3f:40:26:68:bd:55:a7:9d:7c:f9:dd: 57:03:ea:6f:ab:9f:d2:f5:e7:ee:bf:56:8c:ab:42:5c:e8:6d: a6:df:8b:b9:86:96:2a:73:49:e3:32:59:7b:e4:29:a9:c8:db: 93:93:ba:f6:1f:12:b4:97:0b:4b:6c:d9:39:50:62:ec:f5:a3: 43:0d:17:dc:cf:69:65:4d:d7:62:41:e7:93:31:b1:84:d3:a8: 5d:23:da:41:50:71:93:05:64:3a:9d:8f:70:8c:0f:cc:81:cb: 3f:b6:da:df:e7:4c:90:0d:35:f1:fb:10:77:fe:fa:5e:bd:34: db:49:7a:b8:e7:fb:03:6a:62:c4:df:f0:7b:6f:95:0a:df:70: 4f:66:c2:4f:f9:62:49:cf:ad:ad:3c:38:ff:65:12:4d:1f:74: 07:49:5d:59:63:1b:6e:51:fc:e9:98:d8:ab:df:f9:4e:0b:74: db:01:dc:85:e9:6f:24:c8:fe:6c:23:78:4b:a8:b9:7b:0f:8b: 8c:52:a8:81 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUQxMTAvBgNVBAUTKDgzMjI0NEIzMDJEMTY1Q0Q3OEJEQzNBMjEyQjBCN0U2 RjkwQkZDNjAwHhcNMjQwNDEzMDEwMjI4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE5ZDlhMy01M2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArE1V4laXLZ7pTwwrdu/6WOiLjaQF/XqR2/t50knJbkOSV/et64noEV3iMnQf Tc1gQ2UIR8NAZ0PCX8zhCnhH4VG9lwMcSZLcYKTlJNm0A6Wkc9P7iir5v2lxW5G+ MOjvzpPVLZoEzFshQzk5jjFPgmgLUP80rjG4LqXHf+oYbYLARyRwevgGK0KqT4d/ mZqiULxCBwMAs0hsHpc4B3iX0rvu70rNlPRFp7HO8ahterBWy/00rH5guv45t3MA dz7TpOBBhLcphR2G09h8HhRGvw7koqAdCMO25vDKxm15vaF87qYK5O7MflMJACFE XkU0T6s3VE3jIFMtHxNfd9JtBwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHDzLdSy kOP+Js8sNnS1hR/5CK33MB8GA1UdIwQYMBaAFIMiRLMC0WXNeL3DohKwt+b5C/xg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBRC80QjY1MDY1ODhE RTkxMUVCOTA1QzczMTVDNEY5QUUwMi9neUpFc3dMUlpjMTR2Y09pRXJDMzV2a0xf R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5SkVzd0xSWmMxNHZjT2lFckMzNXZrTF9HQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjVBQUQvNEI2NTA2NTg4REU5MTFFQjkwNUM3MzE1QzRGOUFFMDIvRDlBNjNEMkU5 RDA3MTFFQkI3MDg3MDBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnpOAwDQQCAAIwBwMFACQHQ0AwDQYJKoZIhvcNAQELBQAD ggEBALjR07p1ZoK6H7aRMMCPwZ1KJ4WWOHeWT+0kxgKsvvew3gcW178Mv22Qk2ek n5pFg2bbU5VH7Tv7SccVLe8/QCZovVWnnXz53VcD6m+rn9L15+6/VoyrQlzobabf i7mGlipzSeMyWXvkKanI25OTuvYfErSXC0ts2TlQYuz1o0MNF9zPaWVN12JB55Mx sYTTqF0j2kFQcZMFZDqdj3CMD8yByz+22t/nTJANNfH7EHf++l69NNtJerjn+wNq YsTf8HtvlQrfcE9mwk/5YknPra08OP9lEk0fdAdJXVljG25R/OmY2Kvf+U4LdNsB 3IXpbyTI/mwjeEuouXsPi4xSqIE= -----END CERTIFICATE-----Generated at Fri May 17 01:07:01 2024 by rpki-client on console-fra.rpki-client.org