$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/4C1CC64C7F1A11EEAD41A94EC4F9AE02.roa File: 4C1CC64C7F1A11EEAD41A94EC4F9AE02.roa (raw, json) Hash identifier: x/NBe2rp6nuh1iBCW/xjS2/vnJQp2+WXmFpLjt4XHpA= Subject key identifier: 99:91:69:42:9E:90:59:24:CC:17:AF:D1:5E:FD:B8:27:D9:AC:FF:98 Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Certificate serial: 65 Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/4C1CC64C7F1A11EEAD41A94EC4F9AE02.roa Signing time: Thu 09 Nov 2023 16:09:02 +0000 ROA not before: Thu 09 Nov 2023 16:09:02 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 61317 IP address blocks: 103.213.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Validity Not Before: Nov 9 16:09:02 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=654d041e-3ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:96:a5:88:92:bd:93:f7:67:f2:93:41:1b: a5:89:10:dd:13:fc:42:57:23:c0:97:db:f8:1f:ff: 77:24:5b:c0:a6:40:03:69:28:ed:fa:09:37:33:cd: e1:39:37:b5:6e:19:19:df:da:a7:c1:a0:ab:7d:44: 38:24:6b:4f:40:53:43:88:f3:15:ae:25:19:e4:1c: 9d:38:64:bb:cb:3e:9d:6b:35:85:f8:4a:ad:25:3b: 5b:aa:33:d4:16:0b:f6:b0:c6:90:76:12:0f:f9:f9: 7c:a2:21:de:bf:cc:86:b9:c1:c7:88:c2:8c:32:1c: 65:c9:5a:b7:78:cb:bc:d0:98:2d:03:5b:9a:75:e5: ba:f6:6c:3a:46:45:d6:ce:a4:2a:02:63:ab:bb:eb: 31:e7:08:6e:a9:d8:f1:ab:cc:8e:2f:cd:3e:3a:af: cd:b2:00:b5:cf:3f:d1:34:f9:83:cc:77:cb:eb:aa: da:e5:4f:6f:6d:e0:0a:91:69:d8:e4:3d:41:c8:2b: 7f:6b:78:5f:b3:33:37:02:24:89:1b:68:2d:b7:22: 14:0b:ff:17:50:4d:1f:c5:f6:22:51:f0:c2:ca:f3: ad:45:1c:d8:4f:77:c7:b4:ac:62:6f:98:3f:dd:bd: 35:c6:0e:12:eb:60:6b:7d:56:94:f9:19:2f:e5:d6: 2c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:91:69:42:9E:90:59:24:CC:17:AF:D1:5E:FD:B8:27:D9:AC:FF:98 X509v3 Authority Key Identifier: keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/4C1CC64C7F1A11EEAD41A94EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.213.39.0/24 Signature Algorithm: sha256WithRSAEncryption 22:23:09:f0:1e:be:ac:f9:89:92:3e:b6:f9:09:8c:c9:94:20: d9:ed:db:bd:aa:9a:08:14:37:57:7a:62:d9:7b:a4:4f:90:a3: b7:4b:8c:6d:29:2e:37:97:ed:84:39:c8:2e:35:5b:8a:58:99: fc:14:d3:fc:36:df:85:d6:ae:0d:cd:b4:28:2b:a7:c6:42:a1: 58:9c:1b:15:db:b8:bc:a0:14:87:c7:39:62:8b:d7:66:be:12: 68:f5:f7:c1:7e:eb:ee:70:8d:94:53:8e:c9:db:a3:a4:4b:cf: c8:5a:fd:32:9a:a0:a7:39:de:95:d2:13:ed:19:2b:3e:67:f4: 96:73:a4:27:b7:19:c1:65:cf:d4:82:cc:13:43:7f:c1:5d:3e: 34:59:89:f1:24:21:89:ee:57:f1:37:77:c4:97:45:06:63:31: e1:ca:33:59:2c:d4:14:96:e0:c8:05:0a:7f:3b:f0:47:21:2f: 9a:e3:73:8c:3b:f6:ae:06:15:41:cf:53:4b:a6:a1:24:91:44: e0:a7:9d:b2:69:c6:04:ed:de:ee:8e:6d:aa:77:1d:cc:f5:ef: 5e:19:6c:8c:7a:bc:11:67:41:79:b1:0a:a6:e1:93:1b:55:5d: 26:7f:90:7b:08:06:dc:34:6f:40:41:da:0d:dd:ff:47:84:4c: 35:24:71:c7 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUQzQzExMC8GA1UEBRMoNERFRTA4MzZGQTBGN0VFOTJDMkU2QTZDMTk4MDE2REU4 Q0Y4QkYxNjAeFw0yMzExMDkxNjA5MDJaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NGQwNDFlLTNlZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsw5aliJK9k/dn8pNBG6WJEN0T/EJXI8CX2/gf/3ckW8CmQANpKO36CTczzeE5 N7VuGRnf2qfBoKt9RDgka09AU0OI8xWuJRnkHJ04ZLvLPp1rNYX4Sq0lO1uqM9QW C/awxpB2Eg/5+XyiId6/zIa5wceIwowyHGXJWrd4y7zQmC0DW5p15br2bDpGRdbO pCoCY6u76zHnCG6p2PGrzI4vzT46r82yALXPP9E0+YPMd8vrqtrlT29t4AqRadjk PUHIK39reF+zMzcCJIkbaC23IhQL/xdQTR/F9iJR8MLK861FHNhPd8e0rGJvmD/d vTXGDhLrYGt9VpT5GS/l1iwZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUmZFpQp6Q WSTMF6/RXv24J9ms/5gwHwYDVR0jBBgwFoAUTe4INvoPfuksLmpsGYAW3oz4vxYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxRDNDLzEyNzE1N0YyMDU2 QTExRUVCODg3MDAxM0M0RjlBRTAyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVGU0SU52b1BmdWtzTG1wc0dZQVczb3o0dnhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi80QzFDQzY0QzdG MUExMUVFQUQ0MUE5NEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfVJzANBgkqhkiG9w0BAQsFAAOCAQEAIiMJ8B6+rPmJkj62 +QmMyZQg2e3bvaqaCBQ3V3pi2XukT5Cjt0uMbSkuN5fthDnILjVbiliZ/BTT/Dbf hdauDc20KCunxkKhWJwbFdu4vKAUh8c5YovXZr4SaPX3wX7r7nCNlFOOydujpEvP yFr9MpqgpzneldIT7RkrPmf0lnOkJ7cZwWXP1ILME0N/wV0+NFmJ8SQhie5X8Td3 xJdFBmMx4cozWSzUFJbgyAUKfzvwRyEvmuNzjDv2rgYVQc9TS6ahJJFE4KedsmnG BO3e7o5tqncdzPXvXhlsjHq8EWdBebEKpuGTG1VdJn+QewgG3DRvQEHaDd3/R4RM NSRxxw== -----END CERTIFICATE-----Generated at Fri May 3 08:21:09 2024 by rpki-client on console-ams.rpki-client.org