$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/AB68CE76346511EDAC41E081C4F9AE02.roa File: AB68CE76346511EDAC41E081C4F9AE02.roa (raw, json) Hash identifier: HJ0Cao6jB2YulYVzgXluQUWinj2uO2DD7IdiUB5D1EM= Subject key identifier: C1:2F:08:24:5A:80:3E:93:88:94:9D:BF:3C:6B:CF:B4:47:CF:A7:ED Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: F2 Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/AB68CE76346511EDAC41E081C4F9AE02.roa Signing time: Sat 09 Sep 2023 03:34:02 +0000 ROA not before: Sat 09 Sep 2023 03:34:02 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 21734 IP address blocks: 103.99.4.0/24 maxlen: 24 103.99.5.0/24 maxlen: 24 103.99.6.0/24 maxlen: 24 103.99.7.0/24 maxlen: 24 103.196.140.0/24 maxlen: 24 103.196.141.0/24 maxlen: 24 103.196.142.0/24 maxlen: 24 103.196.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Sep 9 03:34:02 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=64fbe7aa-9ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:d7:49:e3:0a:de:b6:4e:bd:3c:30:7c:a8: 95:a0:3b:a5:2a:a5:f8:05:8d:05:60:b4:16:8b:08: 7b:2d:ad:37:82:bd:a2:e3:85:31:6b:16:08:38:3b: b9:43:29:29:b6:60:a3:e1:4d:a8:39:f2:28:da:33: 56:bf:c0:45:2f:40:ad:07:0e:d7:60:58:84:f0:b8: 84:74:e4:45:db:83:5a:57:dd:d1:46:ea:9d:73:f7: aa:1f:11:31:ae:38:35:e6:3b:57:87:07:a5:57:be: 27:e7:00:66:9b:47:f8:00:bc:1c:07:4e:c6:93:e1: 0d:42:b6:d5:36:ac:06:23:c2:ff:c5:55:f5:7b:0a: 64:d2:cb:a1:b0:c2:e4:a0:d7:3f:54:cd:df:2e:f6: f6:32:b4:c9:d5:68:8a:4e:d3:af:ad:78:f1:b0:73: cc:43:e4:9e:c9:55:c4:6b:d1:5c:f4:fa:b3:14:c9: 0c:52:3c:9a:59:62:30:c1:dc:c4:44:90:61:21:53: 9e:0a:82:6c:f7:0e:7f:d3:4b:b7:e7:f4:4f:82:c4: 7c:46:4d:45:f1:7f:7a:13:00:dc:3e:a4:99:cb:e6: a0:09:e6:eb:65:a7:2d:58:3f:65:44:16:0e:d2:c0: 49:dd:74:9b:8e:24:5a:35:06:b8:89:6d:b8:bf:69: 0e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2F:08:24:5A:80:3E:93:88:94:9D:BF:3C:6B:CF:B4:47:CF:A7:ED X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/AB68CE76346511EDAC41E081C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.4.0/22 103.196.140.0/22 Signature Algorithm: sha256WithRSAEncryption ce:05:e0:fa:e3:cc:3c:f4:5a:9b:76:c0:54:23:b2:d4:32:5c: 1c:d0:18:2d:d0:fb:2a:ad:f0:d0:7d:3f:ff:cc:3c:b6:90:ea: 14:23:f5:72:e2:06:79:b8:f3:49:09:df:f6:8a:d3:6f:0f:6e: 28:1c:99:63:2a:03:ea:24:49:40:06:48:ed:b6:bd:ac:f4:e7: 11:e6:8b:aa:ad:3a:1e:2f:11:9c:6a:4b:64:3e:53:3a:04:62: 98:0a:fa:aa:79:9d:82:a5:f5:36:d7:fc:85:b1:2e:07:95:8f: 87:8a:be:40:ab:81:18:03:63:e3:ff:ad:71:82:8a:4a:e1:0c: 29:25:95:ee:c2:aa:20:d3:87:5a:ee:c7:7d:b3:db:5f:e6:01: 74:1a:04:a1:54:ad:3e:d6:4a:2a:e1:1c:b4:7d:62:c5:9f:44: 3d:9f:dd:6d:cf:19:b3:e2:3f:94:a8:82:7a:f1:75:d4:c1:6d: bc:4b:38:06:30:b6:ac:1b:26:dd:ba:b3:3a:56:3f:fc:47:e5: e3:27:76:e1:e5:56:81:63:7d:91:67:49:03:9a:f6:4a:30:50: be:dd:f4:d1:e7:53:39:e9:be:6c:1b:3f:88:82:a6:12:9d:2c: 53:9d:c7:75:85:73:b7:7b:8d:6f:1a:64:cb:86:fb:3e:f9:ac: bb:01:bc:21 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjMwOTA5MDMzNDAyWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZiZTdhYS05Y2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEDXSeMK3rZOvTwwfKiVoDulKqX4BY0FYLQWiwh7La03gr2i44UxaxYIODu5 QykptmCj4U2oOfIo2jNWv8BFL0CtBw7XYFiE8LiEdORF24NaV93RRuqdc/eqHxEx rjg15jtXhwelV74n5wBmm0f4ALwcB07Gk+ENQrbVNqwGI8L/xVX1ewpk0suhsMLk oNc/VM3fLvb2MrTJ1WiKTtOvrXjxsHPMQ+SeyVXEa9Fc9PqzFMkMUjyaWWIwwdzE RJBhIVOeCoJs9w5/00u35/RPgsR8Rk1F8X96EwDcPqSZy+agCebrZactWD9lRBYO 0sBJ3XSbjiRaNQa4iW24v2kOkwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMEvCCRa gD6TiJSdvzxrz7RHz6ftMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkQ0N0YvRDVDRTYyNkEzNDYxMTFFRDlERUU4RTdBQzRGOUFFMDIvQUI2OENFNzYz NDY1MTFFREFDNDFFMDgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnYwQDBAJnxIwwDQYJKoZIhvcNAQELBQADggEBAM4F4Prj zDz0Wpt2wFQjstQyXBzQGC3Q+yqt8NB9P//MPLaQ6hQj9XLiBnm480kJ3/aK028P bigcmWMqA+okSUAGSO22vaz05xHmi6qtOh4vEZxqS2Q+UzoEYpgK+qp5nYKl9TbX /IWxLgeVj4eKvkCrgRgDY+P/rXGCikrhDCklle7CqiDTh1rux32z21/mAXQaBKFU rT7WSirhHLR9YsWfRD2f3W3PGbPiP5SognrxddTBbbxLOAYwtqwbJt26szpWP/xH 5eMnduHlVoFjfZFnSQOa9kowUL7d9NHnUznpvmwbP4iCphKdLFOdx3WFc7d7jW8a ZMuG+z75rLsBvCE= -----END CERTIFICATE-----Generated at Fri May 17 06:46:31 2024 by rpki-client on console-ams.rpki-client.org