$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/B77DFD4E1CE311EB88EB1B78C4F9AE02.roa File: B77DFD4E1CE311EB88EB1B78C4F9AE02.roa (raw, json) Hash identifier: JMs2/LJjQt6KiixkV3wONxqsVX9WfdE5oB9RcjzVjrY= Subject key identifier: 70:44:AD:48:2B:42:FE:10:0C:F4:08:55:AC:5F:B5:3B:4C:AC:63:66 Certificate issuer: /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Certificate serial: 066E Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/B77DFD4E1CE311EB88EB1B78C4F9AE02.roa Signing time: Sun 28 Jan 2024 23:01:14 +0000 ROA not before: Sun 28 Jan 2024 23:01:14 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 134712 IP address blocks: 103.158.4.0/23 maxlen: 23 103.158.4.0/24 maxlen: 24 103.158.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Validity Not Before: Jan 28 23:01:14 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65b6dcba-a660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:d6:26:42:68:e8:1d:f7:1e:bf:d3:d0:0e: c7:72:01:7c:ba:d1:49:07:14:84:7f:76:db:58:90: af:57:5a:33:88:dc:0e:20:6b:3a:f9:58:12:d3:b8: 27:b0:44:8d:fc:87:48:ac:11:57:37:b4:8b:7a:58: cf:84:34:33:7e:2a:f0:46:51:c8:3d:78:db:58:2d: a1:6e:dd:63:f8:ff:43:a5:8e:5b:3e:21:91:a6:e7: 78:a2:db:b8:48:72:1b:55:0a:72:3b:29:a7:a1:1d: 56:b3:a9:5d:62:98:8b:67:df:cf:eb:1a:f6:18:b1: 00:4a:77:79:04:1d:37:a0:0e:8d:9b:b3:02:91:bd: c1:e9:e1:3f:ce:05:e7:46:46:f4:e9:d0:a7:28:76: 38:2e:45:b2:4d:27:e4:0e:5e:d7:e6:cb:07:62:51: 49:43:c2:2f:48:a1:a0:12:f9:6a:85:b3:93:03:47: 95:0e:97:48:11:75:de:2f:7a:18:e3:48:fc:a0:50: 78:17:eb:84:b4:f3:fe:01:fd:c5:83:53:70:d5:30: e0:f1:bc:53:0c:c4:27:76:c3:ac:fe:98:f2:a5:1f: 10:4a:d3:76:af:88:2d:a0:60:bb:2a:b6:fc:29:61: 70:93:b2:f1:ca:d1:82:e8:3b:f0:e0:54:5f:1c:37: 86:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:44:AD:48:2B:42:FE:10:0C:F4:08:55:AC:5F:B5:3B:4C:AC:63:66 X509v3 Authority Key Identifier: keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/B77DFD4E1CE311EB88EB1B78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.4.0/23 Signature Algorithm: sha256WithRSAEncryption df:67:42:24:91:27:23:08:a9:87:88:e8:61:11:c8:58:ad:54: 9a:82:85:f4:53:3d:44:b1:4b:0d:0b:7d:37:cf:4d:67:bb:8e: 94:28:39:d8:a6:10:a5:e5:b7:6d:58:34:81:ca:e6:d9:8c:a6: 45:35:ac:00:46:48:03:8b:20:5f:57:91:54:b6:cf:8e:8a:50: 76:de:5d:46:a1:49:09:38:fb:5f:0e:75:00:74:9f:1f:f0:2e: 03:dc:dd:41:b5:f5:61:ef:e5:d5:38:01:eb:ca:70:32:7b:d2: 00:62:35:a7:cc:f7:f3:ac:82:c3:d3:13:da:56:0b:64:ab:a7: 1b:27:55:60:07:fd:79:60:3d:b6:5c:00:af:68:78:27:2e:9c: 5b:9b:c4:26:14:8c:54:35:aa:5b:8d:b2:1d:b3:8b:ef:75:e3: 35:71:0b:dc:44:9b:2c:f1:31:35:69:d0:07:4c:e0:f7:10:62: 9b:13:e8:a8:9a:e6:9b:5c:76:b4:ec:22:45:c7:0f:f7:49:32: 33:57:f0:e5:d7:ab:d8:3b:20:a1:4b:d1:ae:db:71:70:23:0d: b5:a4:0f:63:e8:97:df:87:cf:89:1f:6f:a9:ad:51:4d:40:18: 86:00:49:ff:e4:87:13:a4:fd:b6:80:83:c5:c4:b3:02:a7:6f: 0e:4c:e7:f2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBMDAxMTAvBgNVBAUTKEIxRUVDNTlFRDU2MUEwREIzRDdENDBDMzBBRjJBQjZG RUQyOTdBOTgwHhcNMjQwMTI4MjMwMTE0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI2ZGNiYS1hNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5zWJkJo6B33Hr/T0A7HcgF8utFJBxSEf3bbWJCvV1oziNwOIGs6+VgS07gn sESN/IdIrBFXN7SLeljPhDQzfirwRlHIPXjbWC2hbt1j+P9DpY5bPiGRpud4otu4 SHIbVQpyOymnoR1Ws6ldYpiLZ9/P6xr2GLEASnd5BB03oA6Nm7MCkb3B6eE/zgXn Rkb06dCnKHY4LkWyTSfkDl7X5ssHYlFJQ8IvSKGgEvlqhbOTA0eVDpdIEXXeL3oY 40j8oFB4F+uEtPP+Af3Fg1Nw1TDg8bxTDMQndsOs/pjypR8QStN2r4gtoGC7Krb8 KWFwk7LxytGC6Dvw4FRfHDeGxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHBErUgr Qv4QDPQIVaxftTtMrGNmMB8GA1UdIwQYMBaAFLHuxZ7VYaDbPX1Awwryq2/tKXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREEwMC83REQ3NTBEQzFD RTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9OczlmVUREQ3ZLcmItMHBl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlN0ZudFZob05zOWZVRERDdktyYi0wcGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRBMDAvN0RENzUwREMxQ0UyMTFFQjlBQUI0OTc3QzRGOUFFMDIvQjc3REZENEUx Q0UzMTFFQjg4RUIxQjc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnngQwDQYJKoZIhvcNAQELBQADggEBAN9nQiSRJyMIqYeI 6GERyFitVJqChfRTPUSxSw0LfTfPTWe7jpQoOdimEKXlt21YNIHK5tmMpkU1rABG SAOLIF9XkVS2z46KUHbeXUahSQk4+18OdQB0nx/wLgPc3UG19WHv5dU4AevKcDJ7 0gBiNafM9/OsgsPTE9pWC2SrpxsnVWAH/XlgPbZcAK9oeCcunFubxCYUjFQ1qluN sh2zi+914zVxC9xEmyzxMTVp0AdM4PcQYpsT6Kia5ptcdrTsIkXHD/dJMjNX8OXX q9g7IKFL0a7bcXAjDbWkD2Pol9+Hz4kfb6mtUU1AGIYASf/khxOk/baAg8XEswKn bw5M5/I= -----END CERTIFICATE-----Generated at Thu May 16 23:48:43 2024 by rpki-client on console-fra.rpki-client.org