$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/1A0FD01411BC11EBA0759F52C4F9AE02.roa File: 1A0FD01411BC11EBA0759F52C4F9AE02.roa (raw, json) Hash identifier: 0XN9EZ4o4OF/LsbCrndQVN6EKGwIuwGsOPBGXuiVcqo= Subject key identifier: 76:D0:67:F1:FD:54:DE:BF:43:35:BE:0C:48:A5:DF:53:CF:92:57:8D Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 06A7 Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/1A0FD01411BC11EBA0759F52C4F9AE02.roa Signing time: Thu 14 Mar 2024 23:12:21 +0000 ROA not before: Thu 14 Mar 2024 23:12:21 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 138545 IP address blocks: 103.147.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1703 (0x6a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Validity Not Before: Mar 14 23:12:21 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65f38455-187b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:74:7a:fb:b5:69:51:d4:0c:58:a8:04:f6:a7: 2a:4a:c7:4c:cf:82:8f:cb:57:3a:56:83:6e:a1:d8: 0a:47:b3:4c:ee:dc:60:9f:c7:b6:04:82:20:e3:3a: 10:ca:09:33:13:a8:63:d9:06:74:0f:82:e9:14:61: 3b:89:b7:74:95:68:10:87:e5:fc:e1:cc:8c:c0:c0: 0b:65:92:34:d1:99:54:b1:dc:c4:39:af:04:48:02: c3:7a:3f:66:ce:c1:9f:76:db:9c:58:4d:3e:69:7c: 9d:34:27:6d:81:2d:ec:85:90:8f:20:5a:e0:fc:db: cd:72:df:a8:a1:fc:69:f7:83:4b:93:b4:8d:5a:33: f9:76:38:aa:b4:79:fd:58:d4:0b:b6:f1:41:bd:54: df:c9:ff:bf:91:d7:7b:45:d0:7d:22:5a:3d:a6:fc: a6:1d:6c:d0:c7:a9:dc:68:bc:6f:99:48:9c:e6:cd: 85:ed:29:2e:c4:1b:f7:5e:bc:24:5b:ba:52:04:97: fe:67:d0:bd:97:21:f4:38:36:8f:38:18:fc:1c:5c: e4:d9:a1:5e:c7:bc:06:5a:4e:90:a8:5e:67:5e:9c: 05:68:94:e2:04:10:16:7f:c8:be:72:1e:b2:ad:66: 09:ad:42:27:e8:29:78:3c:83:97:ab:83:b0:47:5e: ff:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D0:67:F1:FD:54:DE:BF:43:35:BE:0C:48:A5:DF:53:CF:92:57:8D X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/1A0FD01411BC11EBA0759F52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.198.0/23 Signature Algorithm: sha256WithRSAEncryption e0:50:9b:f0:09:91:00:8e:bf:ec:9c:83:a6:55:fa:3b:46:f4: 46:a0:67:c5:2d:fb:0f:6d:82:37:ee:19:6c:51:60:1f:8b:81: 90:2a:a3:ea:9f:4a:9f:23:5d:8a:66:d8:5b:17:34:72:32:fb: 04:70:85:7d:be:97:83:c0:65:cc:f2:03:55:d0:43:dd:50:89: 9c:7f:e9:6a:9b:07:c6:da:4d:5b:a3:15:94:16:fa:20:f3:b2: 25:8d:4a:c7:9a:00:e0:48:74:ce:2b:2e:2e:da:27:9b:b8:56: 07:d4:da:f3:6a:2c:99:65:1b:79:dc:e3:e8:86:7c:57:d3:72: 84:b1:5f:d3:b4:fa:19:95:60:d3:f0:00:24:b3:28:17:11:b3: f3:06:57:9a:dc:1d:4c:46:76:2f:0b:d4:22:36:fa:10:cf:86: d4:cc:7b:a3:f0:8e:e4:39:07:75:09:84:c9:8d:eb:e8:cc:a4: 85:e7:7e:4d:93:a8:c8:eb:c4:71:5e:90:79:6f:52:93:a9:1e: 5f:ec:5a:c6:bd:80:2b:a1:64:5d:e8:98:81:4e:3c:4e:d9:a4: 41:31:8f:5b:d2:b5:5d:ba:64:87:9d:60:f0:76:cf:7c:64:7b: ef:70:75:65:10:e8:e6:86:2d:80:90:a7:96:c5:5b:6b:a9:8a: 32:25:31:f0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjQwMzE0MjMxMjIxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWYzODQ1NS0xODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnR6+7VpUdQMWKgE9qcqSsdMz4KPy1c6VoNuodgKR7NM7txgn8e2BIIg4zoQ ygkzE6hj2QZ0D4LpFGE7ibd0lWgQh+X84cyMwMALZZI00ZlUsdzEOa8ESALDej9m zsGfdtucWE0+aXydNCdtgS3shZCPIFrg/NvNct+oofxp94NLk7SNWjP5djiqtHn9 WNQLtvFBvVTfyf+/kdd7RdB9Ilo9pvymHWzQx6ncaLxvmUic5s2F7SkuxBv3Xrwk W7pSBJf+Z9C9lyH0ODaPOBj8HFzk2aFex7wGWk6QqF5nXpwFaJTiBBAWf8i+ch6y rWYJrUIn6Cl4PIOXq4OwR17/wQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHbQZ/H9 VN6/QzW+DEil31PPkleNMB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlGNUEvMDg5OEIyM0ExMUJBMTFFQkJDMUE1ODRDQzRGOUFFMDIvMUEwRkQwMTQx MUJDMTFFQkEwNzU5RjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnk8YwDQYJKoZIhvcNAQELBQADggEBAOBQm/AJkQCOv+yc g6ZV+jtG9EagZ8Ut+w9tgjfuGWxRYB+LgZAqo+qfSp8jXYpm2FsXNHIy+wRwhX2+ l4PAZczyA1XQQ91QiZx/6WqbB8baTVujFZQW+iDzsiWNSseaAOBIdM4rLi7aJ5u4 VgfU2vNqLJllG3nc4+iGfFfTcoSxX9O0+hmVYNPwACSzKBcRs/MGV5rcHUxGdi8L 1CI2+hDPhtTMe6PwjuQ5B3UJhMmN6+jMpIXnfk2TqMjrxHFekHlvUpOpHl/sWsa9 gCuhZF3omIFOPE7ZpEExj1vStV26ZIedYPB2z3xke+9wdWUQ6OaGLYCQp5bFW2up ijIlMfA= -----END CERTIFICATE-----Generated at Sat Jun 1 00:33:00 2024 by rpki-client on console-fra.rpki-client.org