$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/B43753D005AC11ECB86F694EC4F9AE02.roa File: B43753D005AC11ECB86F694EC4F9AE02.roa (raw, json) Hash identifier: 4voOAOg+GGStYX0SDRYiy8PZ/u1+zqoHP+mr6zE4WdU= Subject key identifier: B4:6E:0E:0D:09:D1:99:B9:AD:5B:94:86:F7:F6:85:AB:55:AB:73:A7 Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Certificate serial: 062D Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/B43753D005AC11ECB86F694EC4F9AE02.roa Signing time: Sun 24 Dec 2023 23:31:29 +0000 ROA not before: Sun 24 Dec 2023 23:31:29 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 135353 IP address blocks: 103.161.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1581 (0x62d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Validity Not Before: Dec 24 23:31:29 2023 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=6588bf50-867d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:19:54:68:d0:7b:00:3c:a8:4b:3c:ae:03: 01:ba:65:c0:2f:9d:1d:2b:58:50:c0:b4:8a:a9:53: 67:bd:99:c6:39:b5:a4:33:5c:37:a1:fb:8f:ed:1c: b7:66:d6:b7:9a:69:dd:b0:78:79:80:11:1e:3b:d7: 77:ef:28:af:e0:b7:af:e7:78:78:53:c5:d9:bb:1f: 29:d7:08:43:87:55:46:e5:69:43:c6:43:ba:fa:5a: 86:fd:82:fc:e4:f7:a8:98:89:e0:08:fd:2f:42:5c: 0e:75:05:f7:39:b3:16:ab:96:bb:7d:4e:72:53:86: b2:b1:a7:a1:96:34:24:c7:55:a2:97:8f:32:e5:39: 7c:ee:1d:bb:8c:a0:ac:23:67:52:e3:d1:2b:f5:7f: fb:81:33:1b:64:96:63:fa:12:1d:47:b1:10:b3:99: 7f:9a:81:40:e8:33:4b:9b:9f:0f:2e:a9:e7:8d:f0: eb:a5:66:5a:6a:10:21:e4:96:24:6b:2b:65:85:a0: d5:c2:b1:ba:b7:26:91:3b:f8:d5:f6:96:0e:9d:59: 6f:80:bc:f3:77:9d:3d:0f:93:ae:09:36:ae:75:71: d8:30:8b:3a:b0:1f:1c:83:45:77:c6:60:ac:d5:07: da:d9:52:3d:04:9a:77:be:2f:14:f0:d1:c7:51:de: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6E:0E:0D:09:D1:99:B9:AD:5B:94:86:F7:F6:85:AB:55:AB:73:A7 X509v3 Authority Key Identifier: keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/B43753D005AC11ECB86F694EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.168.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:5f:3b:c0:11:dc:51:b5:ce:57:ec:2a:9a:ac:20:4a:29:00: 9d:dd:11:7a:34:ff:6a:b8:b7:08:6c:5b:0a:c4:73:06:6f:a4: 5d:21:56:c8:89:49:85:57:83:7e:a2:a1:a8:d6:61:4c:7c:6a: fd:be:81:22:65:2a:5e:c9:ce:24:70:7f:7b:3f:53:c2:b5:95: d9:1d:fc:4a:00:72:cf:f9:66:ea:80:1c:b7:25:ca:1f:87:c3: 70:9a:5a:4d:40:c3:71:53:0b:44:4c:bc:1d:37:10:20:56:2e: ff:e2:6a:68:85:3b:bf:07:7c:85:db:13:ea:fa:33:04:12:8f: 1e:bd:61:56:dc:6e:df:68:7d:f5:4a:79:d6:75:ce:3c:41:32: 83:87:ef:90:7d:17:0c:2f:e6:53:a4:61:1f:73:d5:6c:9c:29: 63:ec:42:53:68:29:03:16:2c:21:5c:2c:b8:27:f3:4d:24:c6: e5:c2:cd:7b:44:24:47:fd:2d:1f:54:5c:8f:cd:04:1e:0e:93: 16:42:b9:bf:94:1a:3b:18:3f:c1:2d:d9:91:62:b3:ba:17:5f: d8:fc:ab:2a:46:f9:d1:4f:b7:d7:c9:98:e0:0b:f8:9a:64:c6: fb:a7:48:b8:be:49:ed:3e:0a:4e:31:f0:dc:66:50:60:75:c3: eb:58:66:62 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3 Q0YxRjU5REYwHhcNMjMxMjI0MjMzMTI5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTg4YmY1MC04NjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwsZVGjQewA8qEs8rgMBumXAL50dK1hQwLSKqVNnvZnGObWkM1w3ofuP7Ry3 Zta3mmndsHh5gBEeO9d37yiv4Lev53h4U8XZux8p1whDh1VG5WlDxkO6+lqG/YL8 5PeomIngCP0vQlwOdQX3ObMWq5a7fU5yU4aysaehljQkx1Wil48y5Tl87h27jKCs I2dS49Er9X/7gTMbZJZj+hIdR7EQs5l/moFA6DNLm58PLqnnjfDrpWZaahAh5JYk aytlhaDVwrG6tyaRO/jV9pYOnVlvgLzzd509D5OuCTaudXHYMIs6sB8cg0V3xmCs 1Qfa2VI9BJp3vi8U8NHHUd63KQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLRuDg0J 0Zm5rVuUhvf2hatVq3OnMB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1 QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODcxQzIvREU2MTY2Njg1NUE5MTFFQjk5QUZEQTVEQzRGOUFFMDIvQjQzNzUzRDAw NUFDMTFFQ0I4NkY2OTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnoagwDQYJKoZIhvcNAQELBQADggEBADpfO8AR3FG1zlfs KpqsIEopAJ3dEXo0/2q4twhsWwrEcwZvpF0hVsiJSYVXg36ioajWYUx8av2+gSJl Kl7JziRwf3s/U8K1ldkd/EoAcs/5ZuqAHLclyh+Hw3CaWk1Aw3FTC0RMvB03ECBW Lv/iamiFO78HfIXbE+r6MwQSjx69YVbcbt9offVKedZ1zjxBMoOH75B9Fwwv5lOk YR9z1WycKWPsQlNoKQMWLCFcLLgn800kxuXCzXtEJEf9LR9UXI/NBB4OkxZCub+U GjsYP8Et2ZFis7oXX9j8qypG+dFPt9fJmOAL+JpkxvunSLi+Se0+Ck4x8NxmUGB1 w+tYZmI= -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:16 2024 by rpki-client on console-ams.rpki-client.org