$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCDE1/29E0B442B50D11EAAC6C401FC4F9AE02/D078B850232511EBA643E910C4F9AE02.roa File: D078B850232511EBA643E910C4F9AE02.roa (raw, json) Hash identifier: nYgUOsvMAXCGyXLiepoWl0Bs3cBd+jmMvkCFXJIxkac= Subject key identifier: 7A:AD:5D:D6:CC:89:79:A4:CF:A8:FA:2A:0D:FF:68:A5:33:55:57:C8 Certificate issuer: /CN=A91FCDE1/serialNumber=C2FF115D310BB9147CDDC74991CC1C471FBA1299 Certificate serial: 077B Authority key identifier: C2:FF:11:5D:31:0B:B9:14:7C:DD:C7:49:91:CC:1C:47:1F:BA:12:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wv8RXTELuRR83cdJkcwcRx-6Epk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCDE1/29E0B442B50D11EAAC6C401FC4F9AE02/D078B850232511EBA643E910C4F9AE02.roa Signing time: Wed 02 Aug 2023 21:38:42 +0000 ROA not before: Wed 02 Aug 2023 21:38:42 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 137969 IP address blocks: 103.152.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCDE1/29E0B442B50D11EAAC6C401FC4F9AE02/wv8RXTELuRR83cdJkcwcRx-6Epk.crl rsync://rpki.apnic.net/member_repository/A91FCDE1/29E0B442B50D11EAAC6C401FC4F9AE02/wv8RXTELuRR83cdJkcwcRx-6Epk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wv8RXTELuRR83cdJkcwcRx-6Epk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 21:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1915 (0x77b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCDE1/serialNumber=C2FF115D310BB9147CDDC74991CC1C471FBA1299 Validity Not Before: Aug 2 21:38:42 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cacce2-da7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b7:34:c8:88:d9:0a:37:cb:1f:7f:5d:96:b2: 96:04:09:b2:3f:1d:18:95:c9:37:29:97:aa:72:81: 5f:3d:ca:0d:a7:2f:b6:7c:98:72:6e:f0:f7:57:de: 5e:36:fa:6f:9d:d9:64:1e:56:e0:25:32:ee:da:6d: 71:9d:83:67:0b:4b:48:4a:8c:a6:6a:9f:7d:78:66: 09:4d:cd:0c:d6:04:db:0b:f7:f5:ca:ae:fc:e4:a9: 0c:0f:08:a3:4a:b5:03:f7:4d:e0:e5:c0:fa:bf:4c: 15:c7:25:93:7f:f4:fa:88:38:28:31:81:98:35:cb: 72:73:83:10:62:41:ca:80:70:12:2d:40:5c:26:e0: bd:6c:e9:66:d3:6e:b0:3d:cd:39:e8:64:32:9c:6a: d5:fc:b0:13:13:03:a0:2f:72:bc:b0:71:14:b1:64: e8:f1:d2:a6:ba:f2:9d:0e:0f:63:10:0f:74:57:e6: 8d:b9:cb:6b:e4:69:32:d7:dc:dd:6e:23:28:a5:20: 2d:6f:70:c6:ce:6b:e2:cb:be:21:9a:c3:99:d5:99: f3:77:6e:5a:4c:55:3c:9a:4d:29:83:5a:b5:4b:29: e2:01:a7:bf:5f:16:8c:88:9e:9f:f9:3e:f3:b7:2e: ca:2c:f8:0c:38:ae:2a:e6:e3:cd:7f:cc:11:f6:42: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AD:5D:D6:CC:89:79:A4:CF:A8:FA:2A:0D:FF:68:A5:33:55:57:C8 X509v3 Authority Key Identifier: keyid:C2:FF:11:5D:31:0B:B9:14:7C:DD:C7:49:91:CC:1C:47:1F:BA:12:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCDE1/29E0B442B50D11EAAC6C401FC4F9AE02/wv8RXTELuRR83cdJkcwcRx-6Epk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wv8RXTELuRR83cdJkcwcRx-6Epk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCDE1/29E0B442B50D11EAAC6C401FC4F9AE02/D078B850232511EBA643E910C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.132.0/23 Signature Algorithm: sha256WithRSAEncryption 06:f8:eb:e7:e0:0b:ed:00:56:05:07:4f:8e:65:96:6a:df:a6: da:19:55:41:7e:2a:84:48:cc:20:8f:a6:b4:c4:b3:1b:dd:eb: a1:e2:7f:78:82:53:a1:7a:67:ca:80:af:04:52:9a:e7:91:fc: b5:fb:ff:78:b2:72:25:41:91:b6:dc:dd:24:3c:a5:ec:05:d4: c0:d3:9e:d0:3e:12:67:5a:0d:ae:68:bb:b7:5a:44:2b:97:95: 17:40:d4:ce:db:d1:ec:dd:ee:6c:d0:e7:61:be:31:60:92:0d: fa:5b:10:56:29:c7:e3:36:ef:0e:82:60:c1:63:95:75:69:3a: 4e:53:78:cf:6b:36:3f:f3:ef:ae:8b:b0:81:35:e6:9d:c2:a1: c0:64:62:cf:2e:d6:ad:e6:61:5a:12:4f:ca:2c:d6:ff:15:4c: 72:28:e0:01:7a:f2:b7:30:16:1e:f1:23:68:ad:b3:96:ff:f1: f4:1c:ac:96:70:b4:ea:ef:38:2e:97:46:92:c1:68:66:53:26: 3f:79:99:de:b2:91:6a:b4:ae:24:dd:27:3e:94:57:bd:1e:7e: c8:67:71:50:fa:f3:3a:7d:ee:54:b0:4c:91:4b:72:07:90:6c: 82:fa:d6:b5:6e:bd:73:7c:1d:9d:7f:d0:5b:24:d4:5c:75:d1: a8:b2:e5:e1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNERTExMTAvBgNVBAUTKEMyRkYxMTVEMzEwQkI5MTQ3Q0REQzc0OTkxQ0MxQzQ3 MUZCQTEyOTkwHhcNMjMwODAyMjEzODQyWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNhY2NlMi1kYTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrc0yIjZCjfLH39dlrKWBAmyPx0Ylck3KZeqcoFfPcoNpy+2fJhybvD3V95e NvpvndlkHlbgJTLu2m1xnYNnC0tISoymap99eGYJTc0M1gTbC/f1yq785KkMDwij SrUD903g5cD6v0wVxyWTf/T6iDgoMYGYNctyc4MQYkHKgHASLUBcJuC9bOlm026w Pc056GQynGrV/LATEwOgL3K8sHEUsWTo8dKmuvKdDg9jEA90V+aNuctr5Gky19zd biMopSAtb3DGzmviy74hmsOZ1Znzd25aTFU8mk0pg1q1SyniAae/XxaMiJ6f+T7z ty7KLPgMOK4q5uPNf8wR9kIdBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHqtXdbM iXmkz6j6Kg3/aKUzVVfIMB8GA1UdIwQYMBaAFML/EV0xC7kUfN3HSZHMHEcfuhKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0RFMS8yOUUwQjQ0MkI1 MEQxMUVBQUM2QzQwMUZDNEY5QUUwMi93djhSWFRFTHVSUjgzY2RKa2N3Y1J4LTZF cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2OFJYVEVMdVJSODNjZEprY3djUngtNkVway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkNERTEvMjlFMEI0NDJCNTBEMTFFQUFDNkM0MDFGQzRGOUFFMDIvRDA3OEI4NTAy MzI1MTFFQkE2NDNFOTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmIQwDQYJKoZIhvcNAQELBQADggEBAAb46+fgC+0AVgUH T45llmrfptoZVUF+KoRIzCCPprTEsxvd66Hif3iCU6F6Z8qArwRSmueR/LX7/3iy ciVBkbbc3SQ8pewF1MDTntA+EmdaDa5ou7daRCuXlRdA1M7b0ezd7mzQ52G+MWCS DfpbEFYpx+M27w6CYMFjlXVpOk5TeM9rNj/z766LsIE15p3CocBkYs8u1q3mYVoS T8os1v8VTHIo4AF68rcwFh7xI2its5b/8fQcrJZwtOrvOC6XRpLBaGZTJj95md6y kWq0riTdJz6UV70efshncVD68zp97lSwTJFLcgeQbIL61rVuvXN8HZ1/0Fsk1Fx1 0aiy5eE= -----END CERTIFICATE-----Generated at Thu Apr 18 23:10:23 2024 by rpki-client on console-ams.rpki-client.org