$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/F436492E3B3C11EEB9F6256EC4F9AE02.roa File: F436492E3B3C11EEB9F6256EC4F9AE02.roa (raw, json) Hash identifier: uEVXh1Qu4aiO02uDasogKDaEETU1Cm8lLi0QlXue/M4= Subject key identifier: 84:29:2E:42:D4:F9:00:AA:1D:C7:BD:85:BD:3D:66:FE:64:2D:0E:D2 Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Certificate serial: 8A Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/F436492E3B3C11EEB9F6256EC4F9AE02.roa Signing time: Tue 15 Aug 2023 07:28:14 +0000 ROA not before: Tue 15 Aug 2023 07:28:14 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 142301 IP address blocks: 103.167.208.0/24 maxlen: 24 103.167.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 06:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Validity Not Before: Aug 15 07:28:14 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64db290d-b69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:72:25:44:e0:a2:04:74:0c:d5:da:52:8d: 1f:1d:bb:7f:ac:13:7c:52:10:27:01:03:e1:88:b0: bd:a3:9f:25:c4:8d:b5:c3:3c:8f:8f:e8:8c:e7:e8: 0c:d4:b5:ab:7e:57:5d:ab:0d:d6:0f:6e:90:fb:dc: 0f:14:59:76:64:1d:0b:5b:a2:53:e6:77:88:f9:ad: c6:78:0e:2a:27:b2:eb:9e:58:e8:05:6d:b2:07:5f: 50:7f:03:33:ad:75:b4:0c:0b:e5:63:44:43:4a:8b: ee:38:94:28:26:f5:d8:41:29:63:e2:45:ab:be:07: 83:62:70:fc:b9:1c:30:5b:bb:2b:ba:a8:55:e3:a3: 53:4e:b8:c4:71:95:36:85:a8:00:cb:50:0a:d4:ac: 7a:0b:c0:cd:e5:0c:99:71:f6:d3:64:c6:48:12:e7: 42:52:82:6c:29:95:9b:ce:79:cb:04:1d:91:06:b3: e0:c6:6d:7f:8e:da:a1:0f:cc:ea:ff:e0:2c:8a:e6: d3:96:6f:8a:83:61:e1:93:e5:a6:e7:fd:49:b9:4e: 7b:fc:39:ba:7a:89:e3:03:da:48:5d:46:46:41:ce: 7e:a5:8d:11:f7:97:4a:29:3e:b1:72:ad:ce:de:7e: 89:4d:62:ec:7b:7f:da:8d:16:ab:34:64:86:98:98: 7d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:29:2E:42:D4:F9:00:AA:1D:C7:BD:85:BD:3D:66:FE:64:2D:0E:D2 X509v3 Authority Key Identifier: keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/F436492E3B3C11EEB9F6256EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.208.0/23 Signature Algorithm: sha256WithRSAEncryption bb:96:6c:2b:4e:91:2b:dc:55:08:92:f3:29:ad:bc:28:4e:68: ff:ab:45:07:42:6e:a1:8a:51:5b:35:29:2b:ca:a3:91:e5:ec: ba:ac:1d:0b:49:d1:c2:89:2e:41:54:6f:fb:63:b2:94:58:98: b7:1a:7c:3e:52:35:8a:9b:3c:b3:96:c2:72:05:f1:5b:6c:6a: 54:db:bf:54:c1:f8:90:8b:9d:5f:f6:23:5c:0c:5c:df:46:53: 58:e7:fc:42:c2:80:80:86:06:16:99:80:f2:d5:0c:10:50:7b: 85:21:bd:95:2c:b1:c3:03:2c:5e:81:63:93:b4:79:af:90:fa: 79:bb:be:57:de:62:91:8e:65:94:01:84:64:88:6f:64:2a:d2: 60:76:cd:b9:01:d2:cc:df:e0:9e:a7:4b:2f:23:d1:e6:4c:37: 53:bf:36:d9:5c:dc:5d:08:6e:88:75:26:6b:88:0e:fb:46:25: 09:53:73:65:61:25:31:c4:2b:14:df:e1:c3:76:e9:77:d1:7d: c7:c7:48:9e:87:a1:f8:92:fb:ee:4a:fb:2e:8d:a9:97:f6:7c: 3f:be:1e:d1:c4:d1:60:0e:00:bd:a0:7b:70:55:3a:74:33:96: cc:fd:3f:ca:ae:6d:04:63:e9:3d:6b:4c:09:5b:6f:a7:50:a6: 5d:60:5a:62 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw QkIyQzUwREIwHhcNMjMwODE1MDcyODE0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRiMjkwZC1iNjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyD9yJUTgogR0DNXaUo0fHbt/rBN8UhAnAQPhiLC9o58lxI21wzyPj+iM5+gM 1LWrflddqw3WD26Q+9wPFFl2ZB0LW6JT5neI+a3GeA4qJ7LrnljoBW2yB19QfwMz rXW0DAvlY0RDSovuOJQoJvXYQSlj4kWrvgeDYnD8uRwwW7sruqhV46NTTrjEcZU2 hagAy1AK1Kx6C8DN5QyZcfbTZMZIEudCUoJsKZWbznnLBB2RBrPgxm1/jtqhD8zq /+AsiubTlm+Kg2Hhk+Wm5/1JuU57/Dm6eonjA9pIXUZGQc5+pY0R95dKKT6xcq3O 3n6JTWLse3/ajRarNGSGmJh95wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIQpLkLU +QCqHce9hb09Zv5kLQ7SMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODk2RDQvNUU5RTY0MzQ3Qjk2MTFFRDhCREZFMzExQzRGOUFFMDIvRjQzNjQ5MkUz QjNDMTFFRUI5RjYyNTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnp9AwDQYJKoZIhvcNAQELBQADggEBALuWbCtOkSvcVQiS 8ymtvChOaP+rRQdCbqGKUVs1KSvKo5Hl7LqsHQtJ0cKJLkFUb/tjspRYmLcafD5S NYqbPLOWwnIF8VtsalTbv1TB+JCLnV/2I1wMXN9GU1jn/ELCgICGBhaZgPLVDBBQ e4UhvZUsscMDLF6BY5O0ea+Q+nm7vlfeYpGOZZQBhGSIb2Qq0mB2zbkB0szf4J6n Sy8j0eZMN1O/Ntlc3F0Iboh1JmuIDvtGJQlTc2VhJTHEKxTf4cN26XfRfcfHSJ6H ofiS++5K+y6NqZf2fD++HtHE0WAOAL2ge3BVOnQzlsz9P8qubQRj6T1rTAlbb6dQ pl1gWmI= -----END CERTIFICATE-----Generated at Sat Jun 1 08:15:59 2024 by rpki-client on console-ams.rpki-client.org