$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/E4E7B8DA4CF911EE8C66D25EC4F9AE02.roa File: E4E7B8DA4CF911EE8C66D25EC4F9AE02.roa (raw, json) Hash identifier: KbmKtTlUkbGUXMfBow8Um6GLcqBvDst3ajH55Y7RS70= Subject key identifier: 46:D6:AA:9C:C4:9A:53:1E:46:9D:59:F0:A1:56:B6:AC:7A:88:6D:83 Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B Certificate serial: 062F Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/E4E7B8DA4CF911EE8C66D25EC4F9AE02.roa Signing time: Sat 02 Mar 2024 23:42:47 +0000 ROA not before: Sat 02 Mar 2024 23:42:47 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 55933 IP address blocks: 103.242.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B Validity Not Before: Mar 2 23:42:47 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65e3b977-44d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:76:d3:4f:b6:d4:f8:64:ff:2a:35:e5:78: 8e:a3:a2:57:1c:f1:7f:68:4a:91:6d:00:31:5f:2d: 68:26:9d:e3:d1:58:33:ac:03:c6:61:f0:e0:b2:f2: ee:a5:fa:5c:a0:fa:d8:7a:01:3e:f5:de:71:d9:c4: cd:a7:3e:3a:a8:0b:45:bb:db:dd:47:c8:f5:8f:1b: 37:f6:d0:0a:9d:1f:1d:1a:c9:c0:bf:0a:05:de:d3: b3:67:53:85:93:25:38:6d:b0:58:ca:95:e3:74:ee: 67:46:3d:55:db:3a:a7:d1:2a:88:44:25:dd:10:a9: 7c:69:6b:07:43:22:c1:c2:4f:1a:d4:0c:8a:80:13: 8f:87:16:c0:05:80:6e:55:ad:bc:11:47:40:51:4d: 56:be:51:40:29:8e:41:c6:ff:93:2c:d1:e3:31:14: 96:75:0c:b9:05:5c:c1:53:c7:a3:51:e9:8a:cb:be: 40:87:93:2b:ec:64:ab:1a:33:80:e7:db:88:fb:a6: 5d:ce:ee:f8:94:33:66:f4:fa:d9:ac:56:4d:f0:b5: a7:c1:b2:e1:17:d0:e9:d0:a3:7f:19:90:31:71:d3: a8:e3:2a:92:75:b9:6f:7c:bb:00:75:af:d8:38:bd: 05:ad:69:2b:be:83:57:be:aa:68:e4:76:e2:c0:73: c0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D6:AA:9C:C4:9A:53:1E:46:9D:59:F0:A1:56:B6:AC:7A:88:6D:83 X509v3 Authority Key Identifier: keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/E4E7B8DA4CF911EE8C66D25EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.242.0.0/22 Signature Algorithm: sha256WithRSAEncryption 84:7e:e3:47:38:97:d7:dd:f7:82:48:54:98:7c:2d:cf:60:6d: eb:a4:e2:9d:00:f5:79:0a:4b:2f:68:41:d6:8d:18:0b:7e:86: c7:39:d6:a1:52:93:2e:61:41:fe:f3:97:82:f7:d8:5a:a0:97: 2b:5a:bf:4d:8f:b3:00:ed:b3:1a:cc:c8:93:37:78:e3:e1:f5: e9:3b:e4:5a:29:6d:ad:b0:82:98:62:c9:8d:ac:4e:24:36:99: 6a:b5:9e:90:f5:5e:93:cf:1d:fb:c0:d8:7c:9b:ae:91:61:45: d0:e1:ec:05:a4:b0:94:5f:88:c0:8b:89:62:86:92:49:1d:56: d8:5a:45:24:b5:d4:10:a0:b9:a6:24:7e:2e:eb:26:2b:26:4a: 2c:39:bf:6b:72:2c:1b:ab:bc:b1:10:9a:d1:93:bb:77:7b:29: 56:24:7a:e5:1b:70:ab:57:47:5b:a9:e8:06:3f:8e:62:f0:8a: c0:78:13:c5:55:85:70:34:f8:c7:7f:86:36:1e:ac:ef:ef:7f: c7:f0:39:82:1f:19:e5:e4:d3:c1:3c:fa:25:65:e1:91:f1:d3: 63:28:bd:8d:af:ee:45:90:df:14:1a:13:0e:3f:db:6d:4a:38: 63:4f:52:9c:bf:c1:1e:dd:96:5c:f4:13:ab:08:1d:62:84:33: 28:22:bf:83 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2NjUxMTAvBgNVBAUTKDMwNThBNDY5QjY3RDAzMDcyQzJEOEEzODVFOUYyQUFC QkExMzRFMkIwHhcNMjQwMzAyMjM0MjQ3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzYjk3Ny00NGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0L1200+21Phk/yo15XiOo6JXHPF/aEqRbQAxXy1oJp3j0VgzrAPGYfDgsvLu pfpcoPrYegE+9d5x2cTNpz46qAtFu9vdR8j1jxs39tAKnR8dGsnAvwoF3tOzZ1OF kyU4bbBYypXjdO5nRj1V2zqn0SqIRCXdEKl8aWsHQyLBwk8a1AyKgBOPhxbABYBu Va28EUdAUU1WvlFAKY5Bxv+TLNHjMRSWdQy5BVzBU8ejUemKy75Ah5Mr7GSrGjOA 59uI+6Zdzu74lDNm9PrZrFZN8LWnwbLhF9Dp0KN/GZAxcdOo4yqSdblvfLsAda/Y OL0FrWkrvoNXvqpo5HbiwHPARwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEbWqpzE mlMeRp1Z8KFWtqx6iG2DMB8GA1UdIwQYMBaAFDBYpGm2fQMHLC2KOF6fKqu6E04r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTY2NS82RDBEMTJCODRC RjUxMUVCQkQ4M0I4N0JDNEY5QUUwMi9NRmlrYWJaOUF3Y3NMWW80WHA4cXE3b1RU aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01GaWthYlo5QXdjc0xZbzRYcDhxcTdvVFRpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjk2NjUvNkQwRDEyQjg0QkY1MTFFQkJEODNCODdCQzRGOUFFMDIvRTRFN0I4REE0 Q0Y5MTFFRThDNjZEMjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn8gAwDQYJKoZIhvcNAQELBQADggEBAIR+40c4l9fd94JI VJh8Lc9gbeuk4p0A9XkKSy9oQdaNGAt+hsc51qFSky5hQf7zl4L32Fqglytav02P swDtsxrMyJM3eOPh9ek75Fopba2wgphiyY2sTiQ2mWq1npD1XpPPHfvA2HybrpFh RdDh7AWksJRfiMCLiWKGkkkdVthaRSS11BCguaYkfi7rJismSiw5v2tyLBurvLEQ mtGTu3d7KVYkeuUbcKtXR1up6AY/jmLwisB4E8VVhXA0+Md/hjYerO/vf8fwOYIf GeXk08E8+iVl4ZHx02MovY2v7kWQ3xQaEw4/221KOGNPUpy/wR7dllz0E6sIHWKE Mygiv4M= -----END CERTIFICATE-----Generated at Sun May 19 00:59:44 2024 by rpki-client on console-fra.rpki-client.org