$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0834FF2C2F4C11EDB0375D6CC4F9AE02.roa File: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (raw, json) Hash identifier: 1nDeoh6ARNV/1usL+bDBy0j2Um1gOnbqC0xIxYBygJI= Subject key identifier: BF:1A:C0:D3:95:FE:24:2F:85:9A:AA:78:EB:47:C7:D1:B0:B7:29:AD Certificate issuer: /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20 Certificate serial: 0784 Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0834FF2C2F4C11EDB0375D6CC4F9AE02.roa Signing time: Wed 06 Sep 2023 21:29:00 +0000 ROA not before: Wed 06 Sep 2023 21:29:00 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 149010 IP address blocks: 103.253.24.0/24 maxlen: 24 103.253.25.0/24 maxlen: 24 103.253.26.0/24 maxlen: 24 103.253.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1924 (0x784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20 Validity Not Before: Sep 6 21:29:00 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64f8ef1c-ce5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:a7:5e:a3:9a:ed:eb:80:58:17:f3:7c:91: d4:83:1f:51:75:f2:3f:52:68:e6:d2:65:bd:6d:a0: 37:f1:be:e2:cc:a2:27:bf:ce:b5:d5:1d:76:19:80: 3f:dd:1c:75:23:eb:6d:9a:0f:ab:c8:6a:05:71:a2: 55:d7:f5:8f:e6:91:ec:d8:57:8f:aa:3c:85:c9:27: 14:a9:e2:82:12:a6:e4:92:17:e1:b8:f8:9b:b9:84: 18:6e:6c:83:7b:90:e1:53:ff:3f:ba:6a:6a:cf:ee: 33:19:3b:1e:14:54:1f:6b:4b:4a:50:a7:55:8c:ae: 47:66:91:5b:3a:6b:5d:ce:d3:bf:d7:a6:47:0d:39: 8d:95:91:ba:fa:46:8e:0f:c2:cc:72:22:c1:68:4c: a1:96:4d:3e:cb:32:9d:ef:38:92:e9:e7:69:c3:c8: f2:4a:59:8b:ca:dc:d1:93:11:79:1a:c4:cb:9e:ca: 01:88:a2:df:6b:ab:0c:d7:1f:1e:32:45:c7:c6:7d: b2:16:ef:97:f4:ad:f2:7e:18:cb:98:be:51:18:ca: 45:1a:23:cd:f2:fb:34:ca:67:1d:0d:b7:5d:f3:d8: 95:a4:26:b6:73:a6:f9:b1:6e:08:6c:75:9a:e2:83: d9:dd:19:6a:1b:68:c5:18:36:c8:a3:78:83:d2:2d: 1b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1A:C0:D3:95:FE:24:2F:85:9A:AA:78:EB:47:C7:D1:B0:B7:29:AD X509v3 Authority Key Identifier: keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0834FF2C2F4C11EDB0375D6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.253.24.0/22 Signature Algorithm: sha256WithRSAEncryption a9:d7:c2:1f:43:ec:bc:8f:1d:83:37:3a:98:21:2e:44:ad:3f: ad:eb:1c:d0:e3:48:73:31:97:4d:a7:bd:05:87:19:d0:a0:5d: 90:a6:d2:5c:8a:9f:40:b7:b8:e4:1b:45:57:62:68:57:c8:4d: 0e:8b:c6:ae:f6:60:f4:29:9e:e4:d9:4a:b1:1a:46:01:a2:ab: 90:19:df:e4:bf:02:00:ae:2d:b9:91:62:18:a5:63:45:30:7c: b4:71:33:88:81:60:39:2d:3b:db:85:7e:97:b0:dd:7c:54:57: 87:0e:76:81:95:e4:c6:fa:59:2e:06:71:f5:14:2c:1b:8e:85: 8e:ea:44:0a:b0:07:f6:22:52:f1:a9:e3:e7:8d:9a:5c:52:0b: 90:96:6d:57:44:fd:2b:90:7f:dc:2b:19:6e:d9:6e:b8:55:b4: 80:5d:5f:5b:6a:32:c6:7b:71:30:0c:57:ad:78:32:d5:e1:17: 8f:8b:4c:c9:10:b6:ed:89:a0:2a:ef:d3:77:63:44:59:58:c5: 73:4d:32:9f:c6:01:0c:c8:88:02:ea:3d:f4:3e:7d:52:9c:10: 8a:07:0c:a5:91:14:db:75:3e:cb:75:c1:93:55:da:52:96:39: 79:1e:20:17:1e:f2:e1:10:ea:14:40:d6:7b:d0:18:83:db:e2: be:d8:64:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRjExMTAvBgNVBAUTKDlFRkVBQTcyNEQ3MDhDRkU4MkM2QjZCRjI3MENCQjVE RDQzMDZGMjAwHhcNMjMwOTA2MjEyOTAwWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY4ZWYxYy1jZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApV6nXqOa7euAWBfzfJHUgx9RdfI/Umjm0mW9baA38b7izKInv8611R12GYA/ 3Rx1I+ttmg+ryGoFcaJV1/WP5pHs2FePqjyFyScUqeKCEqbkkhfhuPibuYQYbmyD e5DhU/8/umpqz+4zGTseFFQfa0tKUKdVjK5HZpFbOmtdztO/16ZHDTmNlZG6+kaO D8LMciLBaEyhlk0+yzKd7ziS6edpw8jySlmLytzRkxF5GsTLnsoBiKLfa6sM1x8e MkXHxn2yFu+X9K3yfhjLmL5RGMpFGiPN8vs0ymcdDbdd89iVpCa2c6b5sW4IbHWa 4oPZ3RlqG2jFGDbIo3iD0i0bTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFL8awNOV /iQvhZqqeOtHx9GwtymtMB8GA1UdIwQYMBaAFJ7+qnJNcIz+gsa2vycMu13UMG8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNGMS9EMENBRjM4NEJB NTkxMUVBOTA0RkY5MURDNEY5QUUwMi9udjZxY2sxd2pQNkN4cmFfSnd5N1hkUXdi eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252NnFjazF3alA2Q3hyYV9Kd3k3WGRRd2J5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODEzRjEvRDBDQUYzODRCQTU5MTFFQTkwNEZGOTFEQzRGOUFFMDIvMDgzNEZGMkMy RjRDMTFFREIwMzc1RDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn/RgwDQYJKoZIhvcNAQELBQADggEBAKnXwh9D7LyPHYM3 OpghLkStP63rHNDjSHMxl02nvQWHGdCgXZCm0lyKn0C3uOQbRVdiaFfITQ6Lxq72 YPQpnuTZSrEaRgGiq5AZ3+S/AgCuLbmRYhilY0UwfLRxM4iBYDktO9uFfpew3XxU V4cOdoGV5Mb6WS4GcfUULBuOhY7qRAqwB/YiUvGp4+eNmlxSC5CWbVdE/SuQf9wr GW7ZbrhVtIBdX1tqMsZ7cTAMV614MtXhF4+LTMkQtu2JoCrv03djRFlYxXNNMp/G AQzIiALqPfQ+fVKcEIoHDKWRFNt1Pst1wZNV2lKWOXkeIBce8uEQ6hRA1nvQGIPb 4r7YZDk= -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:20 2024 by rpki-client on console-ams.rpki-client.org