$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/865246208A7311EE9A63E50AC4F9AE02.roa File: 865246208A7311EE9A63E50AC4F9AE02.roa (raw, json) Hash identifier: ZNLJtOWTnP2dGArHX0t36AE6SzD+nplY5ZvAXsd5s68= Subject key identifier: C3:96:11:CA:57:05:30:01:A5:7C:7B:3F:E8:30:19:D9:1A:87:2F:C0 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 40A8 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/865246208A7311EE9A63E50AC4F9AE02.roa Signing time: Fri 24 Nov 2023 02:45:27 +0000 ROA not before: Fri 24 Nov 2023 02:45:27 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 131421 IP address blocks: 103.17.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 01:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16552 (0x40a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Nov 24 02:45:27 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65600e47-9e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f6:c8:41:73:76:2a:c4:0a:36:58:eb:e7:ee: 73:23:f7:a2:ac:08:50:c5:59:a8:3b:e7:00:86:96: 6f:96:26:3a:61:60:ea:a1:4a:ce:42:99:43:ea:5c: a3:ba:b9:59:d0:05:30:5c:21:cd:d5:91:64:12:fc: c5:f3:8d:82:e8:85:6a:0f:a1:e6:8b:33:95:1f:35: 41:c3:2b:35:86:a2:42:81:6f:e9:a9:92:02:7f:9d: 3c:ff:88:c8:fc:84:7c:e5:4c:12:8a:f2:24:10:f8: 2d:5e:fb:8e:b1:bd:10:45:ad:70:1b:12:e3:10:ec: 3e:15:27:4b:33:00:47:6e:cb:f2:6f:2d:06:a0:b4: 54:f9:07:13:21:8c:f7:22:0d:e2:24:3d:fb:eb:6b: 32:25:00:ef:83:59:15:d5:7f:fa:8c:73:49:01:b3: 1f:0c:f1:b1:2d:9c:76:40:fc:da:ec:fe:28:db:c6: b0:26:88:a7:73:5f:6c:47:dd:ae:87:6f:66:80:9d: 80:27:9a:01:0a:f3:36:3c:f1:3c:f9:ee:af:2e:fc: 2e:13:77:f4:e9:08:73:56:8d:a9:fa:6c:43:b3:e1: 99:9e:01:63:26:c0:ae:31:75:40:25:ec:d5:6b:12: 40:5a:42:b9:b0:01:3e:e0:9f:69:ad:de:54:bf:b4: aa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:96:11:CA:57:05:30:01:A5:7C:7B:3F:E8:30:19:D9:1A:87:2F:C0 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/865246208A7311EE9A63E50AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.17.236.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:a3:f0:be:e3:31:c1:1d:02:16:53:25:a8:61:b1:67:e5:bb: 64:04:cd:4b:02:31:bc:7f:6c:5f:4b:36:2c:6f:68:77:74:30: 72:02:a8:95:8e:de:64:de:c6:ce:65:b6:18:83:6b:aa:f6:ea: 0e:10:ad:41:7f:72:19:ea:bb:43:42:52:69:1b:9d:19:77:42: d7:99:6c:c6:37:33:f3:28:c3:a4:e2:b6:6f:f5:19:a1:5c:80: 53:a1:d4:2a:07:9d:25:b2:8e:51:0b:e4:4e:6d:d6:4c:e4:06: f3:0a:5d:04:0d:10:47:7b:ef:2e:cf:aa:33:38:f7:ec:35:2e: 2b:1f:ec:cf:69:75:18:7c:71:51:a9:ad:bd:e9:f5:d7:66:43: 9d:e9:ef:59:dd:08:1e:2d:2e:ff:b2:77:64:f3:5e:55:d6:97: 63:15:06:41:2f:fb:ff:ca:25:73:5e:d6:af:e9:3e:46:7e:75: 4d:35:9b:0b:64:38:86:68:1a:c2:7c:bc:3d:7a:bd:72:8b:89: 45:35:d3:13:7a:17:1c:7c:d6:41:68:49:93:94:78:89:83:79: 85:56:8c:28:0e:0d:47:cf:3d:b5:4c:73:2c:3e:85:87:77:0b: 4b:2b:09:e3:ab:93:68:85:33:01:f2:86:5a:76:dd:fe:24:ac: 50:f6:5e:3a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICQKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMxMTI0MDI0NTI3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTYwMGU0Ny05ZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvbIQXN2KsQKNljr5+5zI/eirAhQxVmoO+cAhpZvliY6YWDqoUrOQplD6lyj urlZ0AUwXCHN1ZFkEvzF842C6IVqD6HmizOVHzVBwys1hqJCgW/pqZICf508/4jI /IR85UwSivIkEPgtXvuOsb0QRa1wGxLjEOw+FSdLMwBHbsvyby0GoLRU+QcTIYz3 Ig3iJD3762syJQDvg1kV1X/6jHNJAbMfDPGxLZx2QPza7P4o28awJoinc19sR92u h29mgJ2AJ5oBCvM2PPE8+e6vLvwuE3f06QhzVo2p+mxDs+GZngFjJsCuMXVAJezV axJAWkK5sAE+4J9prd5Uv7SqNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMOWEcpX BTABpXx7P+gwGdkahy/AMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODY1MjQ2MjA4 QTczMTFFRTlBNjNFNTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnEewwDQYJKoZIhvcNAQELBQADggEBABuj8L7jMcEdAhZT JahhsWflu2QEzUsCMbx/bF9LNixvaHd0MHICqJWO3mTexs5lthiDa6r26g4QrUF/ chnqu0NCUmkbnRl3QteZbMY3M/Mow6Titm/1GaFcgFOh1CoHnSWyjlEL5E5t1kzk BvMKXQQNEEd77y7PqjM49+w1Lisf7M9pdRh8cVGprb3p9ddmQ53p71ndCB4tLv+y d2TzXlXWl2MVBkEv+//KJXNe1q/pPkZ+dU01mwtkOIZoGsJ8vD16vXKLiUU10xN6 Fxx81kFoSZOUeImDeYVWjCgODUfPPbVMcyw+hYd3C0srCeOrk2iFMwHyhlp23f4k rFD2Xjo= -----END CERTIFICATE-----Generated at Fri Jun 14 02:48:27 2024 by rpki-client on console-ams.rpki-client.org