$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/73D3A6E0F72011EA8776EC28C4F9AE02.roa File: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (raw, json) Hash identifier: 8mFzzrlk85rbk61UzKP3wPdAY1iqXOtfnZR2ZRvL2VU= Subject key identifier: D8:13:94:8A:FD:29:4F:BF:3C:53:14:10:0F:FF:C4:AF:48:89:E7:77 Certificate issuer: /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B Certificate serial: 069E Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/73D3A6E0F72011EA8776EC28C4F9AE02.roa Signing time: Sat 28 Oct 2023 22:29:49 +0000 ROA not before: Sat 28 Oct 2023 22:29:49 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 139731 IP address blocks: 103.144.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1694 (0x69e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B Validity Not Before: Oct 28 22:29:49 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=653d8b5d-cd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:74:50:75:c0:16:58:c2:00:0a:2b:ba:36:4e: 98:04:2f:2c:a5:e8:4a:01:d3:27:dd:8b:45:d4:8c: dc:07:d8:90:e5:dc:19:85:ae:45:58:94:76:1e:eb: bf:fd:63:61:8f:2f:f0:b7:51:7d:ef:85:76:64:53: 90:db:89:7f:d7:ab:43:1f:88:9d:59:43:fb:7c:ab: 8a:3b:24:c9:86:27:84:cb:41:a1:bd:a2:cb:a6:88: 13:54:b8:f7:a1:ce:6d:fc:71:b0:cd:be:c8:68:05: 74:0d:f5:e7:72:29:a1:8b:2a:fd:55:22:2c:a7:9b: 59:cc:58:13:4b:7c:a0:f7:57:da:b1:f8:50:db:9f: 48:f6:23:d9:44:6c:0f:ae:ca:1b:e0:27:75:26:b0: 8e:78:8b:29:b4:03:be:58:55:dd:76:3a:c5:f8:2b: 33:56:78:0b:db:31:02:17:40:bf:6a:9c:1d:54:08: 37:a5:61:2d:f7:26:c5:39:67:95:1a:b2:a7:08:f1: 8a:d9:35:6a:1b:ed:d2:c3:64:98:ad:a7:5a:ab:23: c1:b6:f3:f9:1f:b1:16:ad:e6:14:e4:ea:cd:20:75: 5c:36:cd:59:23:63:e8:50:ae:8d:86:a5:99:ec:5d: db:0b:0b:bb:da:14:f6:8f:9b:79:cd:c9:55:a3:c6: e9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:13:94:8A:FD:29:4F:BF:3C:53:14:10:0F:FF:C4:AF:48:89:E7:77 X509v3 Authority Key Identifier: keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/73D3A6E0F72011EA8776EC28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.60.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:7a:03:84:7b:40:9f:c7:77:6d:02:1b:0a:9b:55:58:8e:fd: 51:6d:de:5f:c5:e7:9c:b7:34:b3:c7:82:dc:f4:fe:90:0a:a9: 53:25:0f:59:b1:2d:e8:09:a0:07:47:b7:65:f0:f0:d8:98:b8: 3e:e0:34:c6:e2:fa:a6:30:46:56:49:59:b7:cd:fb:68:0a:4a: 16:9e:42:f8:df:81:5d:2a:eb:7d:d9:8a:03:b6:f5:1f:5a:71: be:80:01:cf:bb:f1:05:25:62:fa:49:14:e4:94:e2:75:7f:a5: f9:82:65:6e:9a:7d:71:ff:64:a8:d6:59:a3:90:e9:af:09:4a: ec:7f:cb:51:9a:f6:a6:64:5f:ec:4f:07:c1:85:f5:63:82:4e: f2:85:7b:e1:72:e1:ff:d5:a9:24:40:b2:a9:c4:17:95:3c:89: d3:c9:92:97:78:bc:82:ef:15:67:a0:14:38:9a:11:27:00:0d: 6a:e8:ac:c8:be:86:02:9c:88:a6:fb:6b:bc:d5:be:e0:74:44: 09:bb:bd:f2:4b:9d:db:e3:29:c3:38:b4:1a:8c:a4:74:55:58: 93:91:4e:72:59:a5:b7:93:36:13:9d:42:21:1f:b5:81:15:92: f9:07:49:4d:50:a4:66:48:25:55:c8:1a:a8:e0:1d:ec:f1:1b: 5b:e8:e6:74 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFBRjIxMTAvBgNVBAUTKEIxQTE4QzIwNjc3NThGRThDOTIxOTgxRThCMTFGQTMw OEU2MjY5M0IwHhcNMjMxMDI4MjIyOTQ5WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNkOGI1ZC1jZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23RQdcAWWMIACiu6Nk6YBC8spehKAdMn3YtF1IzcB9iQ5dwZha5FWJR2Huu/ /WNhjy/wt1F974V2ZFOQ24l/16tDH4idWUP7fKuKOyTJhieEy0GhvaLLpogTVLj3 oc5t/HGwzb7IaAV0DfXncimhiyr9VSIsp5tZzFgTS3yg91fasfhQ259I9iPZRGwP rsob4Cd1JrCOeIsptAO+WFXddjrF+CszVngL2zECF0C/apwdVAg3pWEt9ybFOWeV GrKnCPGK2TVqG+3Sw2SYradaqyPBtvP5H7EWreYU5OrNIHVcNs1ZI2PoUK6NhqWZ 7F3bCwu72hT2j5t5zclVo8bp9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFNgTlIr9 KU+/PFMUEA//xK9Iied3MB8GA1UdIwQYMBaAFLGhjCBndY/oySGYHosR+jCOYmk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUFGMi84MjI2QUI3MkY3 MUUxMUVBQjY5OTQxMjNDNEY5QUUwMi9zYUdNSUdkMWotakpJWmdlaXhINk1JNWlh VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhR01JR2Qxai1qSklaZ2VpeEg2TUk1aWFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFBRjIvODIyNkFCNzJGNzFFMTFFQUI2OTk0MTIzQzRGOUFFMDIvNzNEM0E2RTBG NzIwMTFFQTg3NzZFQzI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkDwwDQYJKoZIhvcNAQELBQADggEBAI16A4R7QJ/Hd20C GwqbVViO/VFt3l/F55y3NLPHgtz0/pAKqVMlD1mxLegJoAdHt2Xw8NiYuD7gNMbi +qYwRlZJWbfN+2gKShaeQvjfgV0q633ZigO29R9acb6AAc+78QUlYvpJFOSU4nV/ pfmCZW6afXH/ZKjWWaOQ6a8JSux/y1Ga9qZkX+xPB8GF9WOCTvKFe+Fy4f/VqSRA sqnEF5U8idPJkpd4vILvFWegFDiaEScADWrorMi+hgKciKb7a7zVvuB0RAm7vfJL ndvjKcM4tBqMpHRVWJORTnJZpbeTNhOdQiEftYEVkvkHSU1QpGZIJVXIGqjgHezx G1vo5nQ= -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:25 2024 by rpki-client on console-ams.rpki-client.org