$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/3ABCF052301511EDA401DB3CC4F9AE02.roa File: 3ABCF052301511EDA401DB3CC4F9AE02.roa (raw, json) Hash identifier: qcQxgCc6f6DKvBXXPV7Z6QbMISYQ+I0+B+jlVDj3umU= Subject key identifier: 14:A7:3D:BD:42:8E:19:23:6D:FF:50:E5:82:12:A1:E6:C1:9B:96:82 Certificate issuer: /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E Certificate serial: 07B0 Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/3ABCF052301511EDA401DB3CC4F9AE02.roa Signing time: Sat 02 Mar 2024 22:00:16 +0000 ROA not before: Sat 02 Mar 2024 22:00:16 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 132827 IP address blocks: 103.6.63.0/24 maxlen: 24 123.253.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E Validity Not Before: Mar 2 22:00:16 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65e3a170-7070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:53:c2:11:5f:cd:2f:67:75:b8:ad:89:fd:3a: f8:74:42:29:dc:55:f4:8e:a2:e9:d8:f4:ca:cc:f2: 24:b8:1a:cb:55:64:e0:92:29:99:6f:17:1e:d5:84: c8:00:38:ef:e6:69:8a:a2:18:78:e7:84:6f:11:e7: ff:9b:da:89:b7:25:e8:21:3e:aa:b4:41:85:be:ca: c3:ea:c0:7e:74:a7:19:64:98:8c:3e:55:9a:56:22: e0:ca:90:1b:c8:4f:bf:44:7a:8b:78:7e:b5:74:78: 39:55:c2:25:16:8d:2b:1d:ac:28:c0:9f:6e:4f:53: 7f:72:4b:0f:5f:88:6c:bf:a7:5d:c7:2a:96:7a:1e: 53:8b:c3:ef:27:6d:be:bd:90:32:25:0b:73:24:6a: 93:24:c9:02:c1:ff:3b:bc:43:6c:d6:32:bc:b6:ac: 54:20:e3:f8:cd:50:52:8a:9d:27:2a:ce:63:c4:8e: 0f:59:a6:b1:69:79:d9:d0:bb:d5:33:40:b6:f6:a7: f7:e3:02:f3:be:82:d0:78:74:c4:2f:42:09:20:ba: 3f:d6:27:e5:d9:e6:01:47:7c:8e:c5:52:93:04:55: 01:6e:15:ba:f5:e8:e1:fd:cf:51:41:d3:54:ca:6e: 92:25:1f:15:1f:c9:fc:b2:22:93:29:96:cc:f8:2e: 43:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A7:3D:BD:42:8E:19:23:6D:FF:50:E5:82:12:A1:E6:C1:9B:96:82 X509v3 Authority Key Identifier: keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/3ABCF052301511EDA401DB3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.6.63.0/24 123.253.164.0/22 Signature Algorithm: sha256WithRSAEncryption 68:d1:37:ac:d6:1b:0d:66:4d:f1:32:62:5d:49:60:44:93:f2: e7:4f:ec:75:93:c8:02:0a:65:56:3e:da:16:f6:ad:0e:cf:c5: b7:da:09:3b:84:21:c9:10:ac:e5:76:e0:7c:ba:87:ac:6c:a1: b6:af:55:8d:74:05:1a:cd:1b:8e:78:88:79:93:63:dc:64:4d: 8a:ae:f2:f8:f8:ab:a4:f5:5a:7d:0d:89:b9:8d:83:17:a9:31: e0:dc:a8:0c:28:24:33:be:24:ef:8c:ba:1d:fc:1f:d9:6b:be: ec:8d:de:0d:2c:1a:c6:00:1e:6c:91:ce:e9:36:77:92:b8:e5: cd:2e:0a:4c:ff:6d:1b:fe:35:75:82:23:3a:5c:39:51:83:d6: 91:f1:b7:d5:b1:da:16:75:c0:87:ad:cf:f1:49:54:96:4f:10: 6d:f3:61:1e:0c:c7:ba:ec:06:b4:c2:5d:f5:3e:2c:61:03:5c: 31:12:ab:47:09:0c:80:c9:06:e3:9e:3b:49:c5:92:ef:f4:62: 26:09:73:92:af:04:b0:b9:2b:e1:c3:51:b9:54:f1:f8:29:b3: 1f:c8:65:42:fe:45:8a:fa:c0:80:60:d2:a5:a5:b2:1d:80:34: 6f:bd:eb:bf:3c:32:ec:09:68:62:90:a3:76:74:d4:9f:eb:fd: e5:a2:64:fe -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY5RkIxMTAvBgNVBAUTKEE5RjdCOTNFOTUyNEZDNEYxNjgxQTg5MkM0NzMyMjE1 NTQyMkIxOEUwHhcNMjQwMzAyMjIwMDE2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzYTE3MC03MDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlPCEV/NL2d1uK2J/Tr4dEIp3FX0jqLp2PTKzPIkuBrLVWTgkimZbxce1YTI ADjv5mmKohh454RvEef/m9qJtyXoIT6qtEGFvsrD6sB+dKcZZJiMPlWaViLgypAb yE+/RHqLeH61dHg5VcIlFo0rHawowJ9uT1N/cksPX4hsv6ddxyqWeh5Ti8PvJ22+ vZAyJQtzJGqTJMkCwf87vENs1jK8tqxUIOP4zVBSip0nKs5jxI4PWaaxaXnZ0LvV M0C29qf34wLzvoLQeHTEL0IJILo/1ifl2eYBR3yOxVKTBFUBbhW69ejh/c9RQdNU ym6SJR8VH8n8siKTKZbM+C5DlQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBSnPb1C jhkjbf9Q5YISoebBm5aCMB8GA1UdIwQYMBaAFKn3uT6VJPxPFoGoksRzIhVUIrGO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjlGQi8yMEFENDgzNEJG MzcxMUVBQTNFM0EzNkZDNEY5QUUwMi9xZmU1UHBVa19FOFdnYWlTeEhNaUZWUWlz WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FmZTVQcFVrX0U4V2dhaVN4SE1pRlZRaXNZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY5RkIvMjBBRDQ4MzRCRjM3MTFFQUEzRTNBMzZGQzRGOUFFMDIvM0FCQ0YwNTIz MDE1MTFFREE0MDFEQjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnBj8DBAJ7/aQwDQYJKoZIhvcNAQELBQADggEBAGjRN6zW Gw1mTfEyYl1JYEST8udP7HWTyAIKZVY+2hb2rQ7PxbfaCTuEIckQrOV24Hy6h6xs obavVY10BRrNG454iHmTY9xkTYqu8vj4q6T1Wn0NibmNgxepMeDcqAwoJDO+JO+M uh38H9lrvuyN3g0sGsYAHmyRzuk2d5K45c0uCkz/bRv+NXWCIzpcOVGD1pHxt9Wx 2hZ1wIetz/FJVJZPEG3zYR4Mx7rsBrTCXfU+LGEDXDESq0cJDIDJBuOeO0nFku/0 YiYJc5KvBLC5K+HDUblU8fgpsx/IZUL+RYr6wIBg0qWlsh2ANG+96788MuwJaGKQ o3Z01J/r/eWiZP4= -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:08 2024 by rpki-client on console-ams.rpki-client.org