$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8126464A232B11EBB2348B23C4F9AE02.roa File: 8126464A232B11EBB2348B23C4F9AE02.roa (raw, json) Hash identifier: sfj2xvECrC9UYbOF65OAbFWVk5Du9BFNVeA8onJFiT4= Subject key identifier: 21:1A:AB:94:68:04:62:7B:DF:A9:6B:83:A5:4E:AD:96:46:87:C3:32 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 062C Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8126464A232B11EBB2348B23C4F9AE02.roa Signing time: Wed 20 Sep 2023 22:40:43 +0000 ROA not before: Wed 20 Sep 2023 22:40:43 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 135386 IP address blocks: 103.153.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Jun 2024 22:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1580 (0x62c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Sep 20 22:40:43 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=650b74eb-d85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:05:f2:92:e8:63:bc:79:fa:ff:bc:a5:76: 57:8f:8e:7e:4e:40:d4:19:c4:9e:11:b0:29:47:9b: a8:47:57:de:07:64:33:59:b5:30:c9:98:f4:a6:b8: 48:08:0b:68:c2:f2:d4:39:f7:78:a9:94:3c:68:cc: 4e:93:c7:96:1b:43:00:cf:b9:bf:a1:0d:aa:95:ff: 5a:02:97:b1:25:5b:8d:8b:1e:9c:af:82:10:4f:56: 17:44:6e:f3:70:96:11:57:c2:55:1b:90:7e:56:f8: e8:e7:2a:6b:7d:45:c5:ba:1c:7c:db:ca:d2:9e:00: 82:36:28:30:f8:63:76:b2:6f:5d:41:ca:2b:55:79: f2:bc:64:ac:7a:c5:b6:ad:d9:42:ca:dc:a3:b7:cc: da:cf:68:27:02:96:7e:01:94:d2:62:86:50:67:7d: c3:5e:05:d7:63:cc:9e:97:83:f6:b7:14:34:25:0a: 57:6a:00:6f:ed:23:d9:09:60:eb:ee:28:f7:f0:96: 90:c6:50:d8:21:93:b7:0f:50:8c:16:d7:58:4d:70: bf:18:96:29:a5:d8:2e:6d:55:46:5d:d7:b9:cd:d6: 18:3a:2e:27:f0:3b:27:dd:e7:5a:79:02:05:6e:b8: 9a:1d:6c:66:1e:9e:3a:89:c0:eb:c1:d0:b3:66:63: bb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1A:AB:94:68:04:62:7B:DF:A9:6B:83:A5:4E:AD:96:46:87:C3:32 X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8126464A232B11EBB2348B23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.100.0/23 Signature Algorithm: sha256WithRSAEncryption a6:0b:b6:7b:6d:9a:ab:2f:9d:02:9e:26:8d:55:47:06:22:ee: 06:21:ca:c3:6e:01:e6:0d:b7:28:41:a7:91:2d:ef:da:13:66: b3:ab:b0:64:83:db:56:5f:15:ef:41:4c:e7:f7:e4:7e:d6:32: fe:8c:64:e0:f1:87:44:ab:b0:5e:f7:39:8a:6c:07:c6:3a:a0: 58:ad:1e:9e:53:81:83:53:dd:13:dd:6a:80:d3:f9:09:d1:9e: 1e:01:48:54:4c:31:09:67:df:f2:2e:36:b5:45:47:03:7f:91: 3f:a0:95:8f:ed:09:2f:8a:f8:d3:f6:c5:8b:da:df:f3:bc:6d: 6d:e0:28:83:a4:c4:ce:b7:65:69:aa:73:8f:87:2f:ec:97:05: bf:ae:44:29:dc:f8:41:72:f1:f9:8a:6b:54:5c:c0:4b:ac:ef: e4:61:5e:12:e8:27:08:1f:73:82:87:ea:ff:74:d3:ee:aa:95: 33:69:8a:29:01:7d:0c:a9:eb:3c:8d:d3:97:26:e3:19:33:bd: 72:26:89:f1:1d:62:25:82:c4:0e:b5:f4:ea:e6:cc:75:59:8c: a3:ff:62:1a:1f:03:01:3f:a7:6e:0d:00:10:4c:9b:c8:c0:76: e1:89:74:78:74:2b:5d:9e:15:41:8a:47:8c:dd:e1:8a:c0:ba: bd:c0:b3:88 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjMwOTIwMjI0MDQzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTBiNzRlYi1kODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfYF8pLoY7x5+v+8pXZXj45+TkDUGcSeEbApR5uoR1feB2QzWbUwyZj0prhI CAtowvLUOfd4qZQ8aMxOk8eWG0MAz7m/oQ2qlf9aApexJVuNix6cr4IQT1YXRG7z cJYRV8JVG5B+Vvjo5yprfUXFuhx828rSngCCNigw+GN2sm9dQcorVXnyvGSsesW2 rdlCytyjt8zaz2gnApZ+AZTSYoZQZ33DXgXXY8yel4P2txQ0JQpXagBv7SPZCWDr 7ij38JaQxlDYIZO3D1CMFtdYTXC/GJYppdgubVVGXde5zdYYOi4n8Dsn3edaeQIF briaHWxmHp46icDrwdCzZmO7TQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCEaq5Ro BGJ736lrg6VOrZZGh8MyMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI5NEQvMkM3MTYyQ0MyMzI4MTFFQjlGRjZFOTFBQzRGOUFFMDIvODEyNjQ2NEEy MzJCMTFFQkIyMzQ4QjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmWQwDQYJKoZIhvcNAQELBQADggEBAKYLtnttmqsvnQKe Jo1VRwYi7gYhysNuAeYNtyhBp5Et79oTZrOrsGSD21ZfFe9BTOf35H7WMv6MZODx h0SrsF73OYpsB8Y6oFitHp5TgYNT3RPdaoDT+QnRnh4BSFRMMQln3/IuNrVFRwN/ kT+glY/tCS+K+NP2xYva3/O8bW3gKIOkxM63ZWmqc4+HL+yXBb+uRCnc+EFy8fmK a1RcwEus7+RhXhLoJwgfc4KH6v900+6qlTNpiikBfQyp6zyN05cm4xkzvXImifEd YiWCxA619OrmzHVZjKP/YhofAwE/p24NABBMm8jAduGJdHh0K12eFUGKR4zd4YrA ur3As4g= -----END CERTIFICATE-----Generated at Fri Jun 21 00:20:18 2024 by rpki-client on console-ams.rpki-client.org