$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/736BC8B433B011EBB38B4E68C4F9AE02.roa File: 736BC8B433B011EBB38B4E68C4F9AE02.roa (raw, json) Hash identifier: +ohKtoCBfIbgFHsK5YXm9GEY/uc//r9I6KtkOSJPqeg= Subject key identifier: 4F:19:F6:88:B6:77:CF:4D:D5:D3:11:2C:53:7A:BC:E6:9A:71:8D:41 Certificate issuer: /CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969 Certificate serial: 0629 Authority key identifier: 26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/736BC8B433B011EBB38B4E68C4F9AE02.roa Signing time: Wed 10 Jan 2024 23:21:21 +0000 ROA not before: Wed 10 Jan 2024 23:21:21 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 141444 IP address blocks: 103.159.138.0/24 maxlen: 24 103.159.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969 Validity Not Before: Jan 10 23:21:21 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=659f2670-1c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:32:b3:46:11:92:18:42:35:39:11:8c:a9:52: 01:11:8d:41:e0:de:74:e1:b1:00:16:b6:b8:48:95: 8d:8a:08:c1:f7:eb:78:3d:31:0e:8a:4b:e4:a6:d0: 9a:19:fe:80:3b:65:f3:09:e8:d1:8a:cb:ba:dd:56: 96:9e:03:d6:31:4d:fe:be:8c:9b:46:03:d3:6b:13: c9:86:d1:bb:6e:af:1d:ad:bb:93:e8:69:d4:01:cf: 4f:53:54:a7:d1:8b:3c:5c:a8:cf:67:32:89:fe:79: 2c:73:fb:b3:5a:e5:7f:20:7e:7e:34:5c:cf:f0:fb: 8e:61:e6:1c:cf:4e:09:95:a4:a7:5d:29:95:02:99: 5a:f2:12:af:e5:c8:dd:60:88:de:8a:75:1d:ee:54: df:84:06:58:5a:4d:e9:4c:80:49:c8:9f:62:bd:91: c8:06:bb:24:da:01:c2:bc:25:9c:e3:88:ec:c9:0b: 14:b2:9a:c8:23:50:40:a9:93:38:64:1f:f3:82:4f: a1:85:21:ff:35:ed:94:f2:65:6f:11:3a:f0:4d:f2: 9f:25:d5:25:47:b3:6d:7a:12:36:b8:7d:78:b8:3b: f9:1b:5b:11:9c:45:66:64:7e:96:4c:52:35:11:ce: c7:e6:7c:ec:b8:24:81:d3:42:bc:d6:6f:76:bc:2a: 8c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:19:F6:88:B6:77:CF:4D:D5:D3:11:2C:53:7A:BC:E6:9A:71:8D:41 X509v3 Authority Key Identifier: keyid:26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/736BC8B433B011EBB38B4E68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.138.0/23 Signature Algorithm: sha256WithRSAEncryption 89:82:06:19:d3:84:0a:48:b8:c7:25:36:0a:9d:f2:30:0e:66: 73:4a:20:07:22:07:09:96:a7:4c:8c:09:8e:57:bc:7b:d6:89: b8:fb:3e:4a:7f:75:93:93:d8:ea:ef:a1:b5:67:3f:8d:5a:5f: a1:9f:2d:31:19:c6:1f:fe:15:11:42:cb:0a:83:0a:13:ec:51: 6b:08:4a:5c:97:2c:de:23:bf:64:f2:d1:eb:0c:57:da:b4:57: 79:1b:fc:35:e3:4c:cd:01:d8:05:58:8a:d1:38:d5:a8:49:0d: 49:c2:26:13:91:46:dd:dc:cd:91:21:12:ef:2c:8c:fe:cd:0f: 5a:01:cd:b3:63:3c:05:28:23:c1:d5:e7:58:c3:a0:9d:c6:c2: 26:cf:09:fa:fd:15:8a:f9:fd:ea:65:f2:50:75:0e:cd:1a:c3: cf:f9:88:6e:36:ca:66:16:db:7f:bd:18:e0:15:04:27:33:ed: 96:3f:35:cc:b3:22:84:8e:91:6c:bb:4c:c9:48:39:b7:9e:1b: 6f:3d:28:83:6d:0c:57:3d:9d:7c:c5:a3:67:2d:00:dd:01:bb: 0d:ca:93:9b:ad:8e:b5:54:b8:33:76:61:15:e9:af:a5:7c:cd: 83:5c:0f:72:1c:e2:a2:91:fd:cd:34:2c:de:9e:d6:3a:2e:6c: f3:79:cf:df -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwMjIxMTAvBgNVBAUTKDI2RDUxQ0MxNEEyM0QwQTg4MjNCNUYxQ0EyMDBFNzA4 NkFDOUE5NjkwHhcNMjQwMTEwMjMyMTIxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTlmMjY3MC0xYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzKzRhGSGEI1ORGMqVIBEY1B4N504bEAFra4SJWNigjB9+t4PTEOikvkptCa Gf6AO2XzCejRisu63VaWngPWMU3+voybRgPTaxPJhtG7bq8drbuT6GnUAc9PU1Sn 0Ys8XKjPZzKJ/nksc/uzWuV/IH5+NFzP8PuOYeYcz04JlaSnXSmVApla8hKv5cjd YIjeinUd7lTfhAZYWk3pTIBJyJ9ivZHIBrsk2gHCvCWc44jsyQsUsprII1BAqZM4 ZB/zgk+hhSH/Ne2U8mVvETrwTfKfJdUlR7NtehI2uH14uDv5G1sRnEVmZH6WTFI1 Ec7H5nzsuCSB00K81m92vCqMPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE8Z9oi2 d89N1dMRLFN6vOaacY1BMB8GA1UdIwQYMBaAFCbVHMFKI9CogjtfHKIA5whqyalp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDAyMi85NEU3Q0FGODMz QUUxMUVCQTFGRkJGNjNDNEY5QUUwMi9KdFVjd1VvajBLaUNPMThjb2dEbkNHckpx V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0VWN3VW9qMEtpQ08xOGNvZ0RuQ0dySnFXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjAwMjIvOTRFN0NBRjgzM0FFMTFFQkExRkZCRjYzQzRGOUFFMDIvNzM2QkM4QjQz M0IwMTFFQkIzOEI0RTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnn4owDQYJKoZIhvcNAQELBQADggEBAImCBhnThApIuMcl Ngqd8jAOZnNKIAciBwmWp0yMCY5XvHvWibj7Pkp/dZOT2OrvobVnP41aX6GfLTEZ xh/+FRFCywqDChPsUWsISlyXLN4jv2Ty0esMV9q0V3kb/DXjTM0B2AVYitE41ahJ DUnCJhORRt3czZEhEu8sjP7ND1oBzbNjPAUoI8HV51jDoJ3GwibPCfr9FYr5/epl 8lB1Ds0aw8/5iG42ymYW23+9GOAVBCcz7ZY/NcyzIoSOkWy7TMlIObeeG289KINt DFc9nXzFo2ctAN0Buw3Kk5utjrVUuDN2YRXpr6V8zYNcD3Ic4qKR/c00LN6e1jou bPN5z98= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:48 2024 by rpki-client on console-ams.rpki-client.org