$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/4F7BE82E397311EDB1F6BE2DC4F9AE02.roa File: 4F7BE82E397311EDB1F6BE2DC4F9AE02.roa (raw, json) Hash identifier: TIqqrp0emgHvZ/pwNsz30a8tRWqKOYNVX3FKyHMWO4o= Subject key identifier: AF:41:CB:5A:DF:2A:B4:36:A9:DD:53:69:26:36:07:39:FF:34:8D:85 Certificate issuer: /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Certificate serial: 02A0 Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/4F7BE82E397311EDB1F6BE2DC4F9AE02.roa Signing time: Sun 03 Mar 2024 03:15:29 +0000 ROA not before: Sun 03 Mar 2024 03:15:29 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 149522 IP address blocks: 103.182.122.0/24 maxlen: 24 103.182.123.0/24 maxlen: 24 2400:5ce0::/44 maxlen: 44 2400:5ce0:10::/46 maxlen: 46 2400:5ce0:18::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 672 (0x2a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Validity Not Before: Mar 3 03:15:29 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65e3eb51-295f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e6:f5:a3:8d:dd:e9:ed:bd:5e:c2:cf:01:bf: 5f:99:e0:3a:84:a2:93:30:16:f4:78:72:fc:0a:b2: 66:00:40:11:ae:9a:61:3a:c5:50:4e:93:e6:41:a6: 2e:a5:a7:f7:b1:3a:b9:63:d9:bb:d7:98:3e:15:1c: 3a:c8:fe:07:cd:45:e1:de:74:10:99:ef:93:df:9c: 76:99:08:cb:1e:a0:3a:24:87:8e:a4:d1:7a:27:69: 01:49:3a:d4:de:8d:d3:b8:0c:a3:6e:4a:cd:53:ee: 4b:44:bd:73:38:a9:7d:3c:40:6b:4c:d0:be:70:ca: e3:3e:a3:ca:67:a5:d6:10:08:f2:9d:b1:26:50:b9: 1a:27:cb:8d:cb:31:5e:40:27:12:e5:65:db:c5:42: a5:bb:cd:31:6e:95:f8:c5:44:13:13:b4:b3:c3:80: a6:b3:06:26:36:3b:b6:ae:8f:12:be:3e:3b:80:e8: 8f:84:64:fd:63:33:65:34:56:00:f5:66:aa:a8:33: 47:5a:1f:86:bf:99:f3:2b:7e:a6:52:58:6a:02:08: 33:6b:d4:15:3f:41:b6:9b:75:e3:a8:70:02:b2:86: 18:14:b1:40:d1:f2:39:48:4c:ca:97:e2:de:2a:ec: 9e:a8:80:cd:98:1b:dd:19:7b:ec:13:61:7f:6a:78: b3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:41:CB:5A:DF:2A:B4:36:A9:DD:53:69:26:36:07:39:FF:34:8D:85 X509v3 Authority Key Identifier: keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/4F7BE82E397311EDB1F6BE2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.122.0/23 IPv6: 2400:5ce0::-2400:5ce0:13:ffff:ffff:ffff:ffff:ffff 2400:5ce0:18::/45 Signature Algorithm: sha256WithRSAEncryption 6d:c9:a1:77:14:a4:5c:43:30:ac:4b:a8:af:c7:52:fd:b4:ec: 44:4d:6c:11:d7:d3:3d:7d:2f:54:5d:20:c9:90:cc:38:89:cd: 29:4f:85:78:0d:81:27:6d:86:08:3c:d5:b6:a2:d1:4e:bb:6a: 47:e1:d2:84:50:ba:73:a6:ac:5b:e7:70:18:80:d0:b8:02:68: ef:9a:9d:37:8e:73:ea:b1:5b:8e:95:42:58:20:80:f8:36:be: f4:f5:4d:7c:c9:1c:38:86:b9:40:f1:70:a9:7b:7e:5b:5c:38: 4a:83:44:2d:24:ff:39:9a:84:b7:88:f7:f2:44:07:14:ea:9f: 47:cb:2e:f8:cb:6f:52:5f:00:f1:56:52:dc:f6:98:50:44:88: 46:d9:e7:60:02:e3:f9:0e:af:fd:a3:d4:74:ac:e0:69:e6:a5: d1:b1:4d:76:a7:4d:78:d3:cc:25:0a:47:38:27:0b:de:49:1a: a3:1d:69:fd:d1:61:14:c4:0e:cb:fb:ba:1d:a3:d3:72:ea:a6: 75:be:9f:33:c3:97:8d:0c:eb:41:a9:2e:89:04:d2:a0:77:14: 26:ef:ef:b0:40:90:0e:02:4c:4a:fd:c8:7a:51:2f:5c:59:ad: be:1d:70:09:3d:ee:5d:14:1f:65:ea:17:a5:55:eb:9a:22:58: 14:36:3f:42 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg2RDIxMTAvBgNVBAUTKEI4QURENUY4NEQxMUJBRDc0N0ZCRTk1OEQ0NkJBRDNC QTkxMzE5MDMwHhcNMjQwMzAzMDMxNTI5WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzZWI1MS0yOTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+b1o43d6e29XsLPAb9fmeA6hKKTMBb0eHL8CrJmAEARrpphOsVQTpPmQaYu paf3sTq5Y9m715g+FRw6yP4HzUXh3nQQme+T35x2mQjLHqA6JIeOpNF6J2kBSTrU 3o3TuAyjbkrNU+5LRL1zOKl9PEBrTNC+cMrjPqPKZ6XWEAjynbEmULkaJ8uNyzFe QCcS5WXbxUKlu80xbpX4xUQTE7Szw4CmswYmNju2ro8Svj47gOiPhGT9YzNlNFYA 9WaqqDNHWh+Gv5nzK36mUlhqAggza9QVP0G2m3XjqHACsoYYFLFA0fI5SEzKl+Le KuyeqIDNmBvdGXvsE2F/anizfQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFK9By1rf KrQ2qd1TaSY2Bzn/NI2FMB8GA1UdIwQYMBaAFLit1fhNEbrXR/vpWNRrrTupExkD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODZEMi8zOUREQ0NEQ0E5 NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0ZEgtLWxZMUd1dE82a1RH UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLM1YtRTBSdXRkSC0tbFkxR3V0TzZrVEdRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg2RDIvMzlERENDRENBOTc1MTFFQ0JBNUJEQzMzQzRGOUFFMDIvNEY3QkU4MkUz OTczMTFFREIxRjZCRTJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMAwEAgABMAYDBAFntnowIQQCAAIwGzAQAwUFJABc4AMHAiQAXOAAEAMHAyQA XOAAGDANBgkqhkiG9w0BAQsFAAOCAQEAbcmhdxSkXEMwrEuor8dS/bTsRE1sEdfT PX0vVF0gyZDMOInNKU+FeA2BJ22GCDzVtqLRTrtqR+HShFC6c6asW+dwGIDQuAJo 75qdN45z6rFbjpVCWCCA+Da+9PVNfMkcOIa5QPFwqXt+W1w4SoNELST/OZqEt4j3 8kQHFOqfR8su+MtvUl8A8VZS3PaYUESIRtnnYALj+Q6v/aPUdKzgaeal0bFNdqdN eNPMJQpHOCcL3kkaox1p/dFhFMQOy/u6HaPTcuqmdb6fM8OXjQzrQakuiQTSoHcU Ju/vsECQDgJMSv3IelEvXFmtvh1wCT3uXRQfZeoXpVXrmiJYFDY/Qg== -----END CERTIFICATE-----Generated at Fri May 17 04:44:33 2024 by rpki-client on console-ams.rpki-client.org