$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D943848ABDC11EC8C02DB82C4F9AE02.roa File: 8D943848ABDC11EC8C02DB82C4F9AE02.roa (raw, json) Hash identifier: 3B19F/vu0fA55hybo+Uz8X9yx8VX91vdbzJyJNDRlrU= Subject key identifier: 68:F6:4E:89:79:72:45:AB:D1:A0:C5:4D:E0:98:F6:CA:97:F4:FD:5C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3F0E Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D943848ABDC11EC8C02DB82C4F9AE02.roa Signing time: Tue 12 Sep 2023 02:43:46 +0000 ROA not before: Tue 12 Sep 2023 02:43:46 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 45556 IP address blocks: 203.161.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16142 (0x3f0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:43:46 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffd062-7e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:76:1c:30:ee:cb:91:91:a1:67:11:31:24:b0: bf:5f:79:a1:44:59:46:95:9e:75:fd:4b:cf:4c:cf: 91:70:78:e5:76:45:30:2a:31:1e:62:6e:a8:ea:00: f3:01:97:5c:27:fe:1b:39:54:9e:0a:ea:4a:4f:0d: 8a:f2:3b:45:70:dc:4b:bc:ad:ec:fb:40:9a:ee:10: 06:b5:93:a1:38:6b:73:83:46:38:67:2b:54:11:44: 33:2b:ea:27:7d:ad:82:af:3b:5d:8f:4a:eb:93:67: 1f:df:60:da:0e:cd:2e:ea:15:29:ab:45:23:ae:f3: 12:91:fa:c1:5c:6c:7d:4d:69:f8:a7:3f:14:0e:30: 25:29:7f:d2:52:5b:ed:bc:ed:a3:9c:79:b4:84:03: d6:b5:66:93:e0:60:47:ce:a2:e0:47:7c:fc:dd:17: c8:07:2e:2d:c4:f7:2b:58:99:e7:da:9c:00:39:57: 88:33:f2:e3:ea:88:a2:30:11:01:8b:ed:1b:e4:75: f2:4a:91:a9:73:3c:0f:5b:9d:40:bb:91:d6:0c:91: 03:e2:68:24:b4:39:42:7f:97:bb:76:4a:84:c0:e3: f6:c4:14:6b:ac:f6:6b:03:3f:ed:c2:bc:2c:9d:83: c9:a9:85:78:5b:7e:db:e4:0f:a4:ae:57:c3:0b:44: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F6:4E:89:79:72:45:AB:D1:A0:C5:4D:E0:98:F6:CA:97:F4:FD:5C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D943848ABDC11EC8C02DB82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.161.178.0/24 Signature Algorithm: sha256WithRSAEncryption 64:c8:03:99:79:0c:cd:45:fe:de:5c:c5:44:6b:03:69:38:30: dc:43:70:24:f2:c0:02:1f:aa:73:42:86:53:30:11:15:cb:7a: fc:b2:ce:5c:9d:b8:82:c2:d6:22:d9:dc:b9:09:d7:71:07:05: 80:bf:33:56:d8:05:d9:54:6c:5e:38:c3:6a:ae:15:42:72:7e: 6b:19:00:09:ba:74:1b:bc:c9:7c:59:98:97:5a:44:59:8e:bb: 3d:85:47:d7:ee:ec:c8:b1:bf:32:59:ea:83:fc:b2:33:fd:f0: a2:e9:98:69:15:68:f5:d7:8c:5e:02:2b:b4:73:12:b2:aa:72: 41:88:c9:29:ef:2b:0c:c9:3e:8d:58:9d:79:2d:96:b1:f7:9c: 34:a2:d9:24:cb:1a:c1:90:6d:f5:c8:08:50:4d:99:89:48:e9: a5:90:11:f7:ec:08:b2:42:44:17:f1:33:78:82:b3:3a:72:a0: d9:51:0a:34:c8:f9:be:c7:3a:88:d9:6b:9a:bd:7e:90:de:74: 2a:b5:8c:d1:14:bc:d0:3e:56:c3:5a:94:45:5a:de:dc:72:ac: 3d:a4:a8:06:c5:48:1c:14:e5:a0:52:b7:3a:9a:80:e5:cb:0f: 25:25:b7:7d:21:25:1a:09:af:31:0a:4d:44:49:33:94:e0:be: 53:c3:c3:63 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICPw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0MzQ2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmZDA2Mi03ZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nYcMO7LkZGhZxExJLC/X3mhRFlGlZ51/UvPTM+RcHjldkUwKjEeYm6o6gDz AZdcJ/4bOVSeCupKTw2K8jtFcNxLvK3s+0Ca7hAGtZOhOGtzg0Y4ZytUEUQzK+on fa2Crztdj0rrk2cf32DaDs0u6hUpq0UjrvMSkfrBXGx9TWn4pz8UDjAlKX/SUlvt vO2jnHm0hAPWtWaT4GBHzqLgR3z83RfIBy4txPcrWJnn2pwAOVeIM/Lj6oiiMBEB i+0b5HXySpGpczwPW51Au5HWDJED4mgktDlCf5e7dkqEwOP2xBRrrPZrAz/twrws nYPJqYV4W37b5A+krlfDC0SeWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGj2Tol5 ckWr0aDFTeCY9sqX9P1cMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOEQ5NDM4NDhB QkRDMTFFQzhDMDJEQjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLobIwDQYJKoZIhvcNAQELBQADggEBAGTIA5l5DM1F/t5c xURrA2k4MNxDcCTywAIfqnNChlMwERXLevyyzlyduILC1iLZ3LkJ13EHBYC/M1bY BdlUbF44w2quFUJyfmsZAAm6dBu8yXxZmJdaRFmOuz2FR9fu7MixvzJZ6oP8sjP9 8KLpmGkVaPXXjF4CK7RzErKqckGIySnvKwzJPo1YnXktlrH3nDSi2STLGsGQbfXI CFBNmYlI6aWQEffsCLJCRBfxM3iCszpyoNlRCjTI+b7HOojZa5q9fpDedCq1jNEU vNA+VsNalEVa3txyrD2kqAbFSBwU5aBStzqagOXLDyUlt30hJRoJrzEKTURJM5Tg vlPDw2M= -----END CERTIFICATE-----Generated at Fri May 31 16:41:40 2024 by rpki-client on console-ams.rpki-client.org