$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/3A5B01A0CA8F11EAA35BF958C4F9AE02.roa File: 3A5B01A0CA8F11EAA35BF958C4F9AE02.roa (raw, json) Hash identifier: OcAUVKDHbk1M3ldi7RXMrcxcBlT+QMXwwWIoA0y3skM= Subject key identifier: 5D:44:40:D9:DC:E9:52:EC:E9:19:AE:41:26:14:C1:B7:1E:38:F0:E9 Certificate issuer: /CN=A91E3C9A/serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE Certificate serial: 06EB Authority key identifier: 1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/3A5B01A0CA8F11EAA35BF958C4F9AE02.roa Signing time: Sat 08 Jul 2023 21:37:46 +0000 ROA not before: Sat 08 Jul 2023 21:37:46 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 140923 IP address blocks: 103.153.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 22:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C9A/serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE Validity Not Before: Jul 8 21:37:46 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64a9d72a-2503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:00:50:cd:17:9a:88:33:c8:56:c4:4c:b6: 2a:f2:60:98:92:89:33:59:ef:f9:72:12:10:39:33: 34:19:b9:b6:4d:0a:9e:e7:ad:40:b8:0c:e6:f2:82: 59:30:40:71:82:16:0f:a9:38:3e:ce:ba:d1:f4:c9: 4b:d1:03:9c:44:a1:f9:76:a1:6b:dd:af:6d:9b:c9: 36:f3:e0:59:87:d1:af:17:00:ca:1e:52:f4:fb:0c: 67:f2:dd:48:d9:e8:c2:60:c9:78:14:11:ea:70:4b: 70:bf:8f:42:6b:0d:d3:42:07:cb:4e:b9:b9:6c:a6: 15:f9:9a:9b:93:b2:ad:6f:97:d5:85:a6:8a:4e:74: 82:44:a1:61:cc:41:cc:65:c4:2d:c9:0f:60:e4:83: 41:2c:6f:2b:b6:cd:5a:e8:58:13:83:e2:7f:fa:d7: de:0c:95:4f:f6:2a:ea:39:59:94:5a:07:c6:e3:cc: 9a:35:62:6d:fa:65:2c:c4:38:bc:b9:ca:e7:21:af: 23:2d:a8:2f:b4:04:4f:b1:f7:98:b3:4b:b3:ed:29: c8:bb:66:30:81:c2:f9:eb:d0:38:d1:b5:86:fb:19: e7:bd:bd:b3:42:e2:41:e0:b4:19:e0:ce:61:77:47: d8:c0:2e:76:9e:a2:e1:1c:ee:2d:99:fe:91:5b:10: aa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:44:40:D9:DC:E9:52:EC:E9:19:AE:41:26:14:C1:B7:1E:38:F0:E9 X509v3 Authority Key Identifier: keyid:1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/3A5B01A0CA8F11EAA35BF958C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.130.0/24 Signature Algorithm: sha256WithRSAEncryption 75:ea:78:dd:b9:6a:f7:c4:17:ee:97:e0:0c:df:15:ef:ed:87: 1e:f7:92:f4:85:90:4c:06:cd:3d:58:95:40:eb:e4:3d:d4:bd: 27:90:45:97:39:2b:1a:04:09:3b:c0:c9:c7:1a:45:9e:bb:64: b3:7c:42:a3:7d:a4:eb:11:51:53:ee:9d:3c:99:d9:e4:0c:b6: a7:a7:c8:a1:40:eb:79:04:93:4d:b3:44:bc:b7:cd:97:72:d5: 43:eb:df:da:25:c1:99:82:ac:cd:07:44:59:ac:06:8a:d4:7d: 8d:9c:ab:64:89:d6:f5:d3:23:5f:33:7f:63:75:44:c6:57:e5: c9:07:0e:c0:e9:4e:6d:21:f4:04:93:2e:08:b8:b7:0a:30:2d: f6:e8:3d:8e:dd:7a:83:d0:b8:7a:40:52:b9:d3:97:bc:cf:93: b0:05:ad:0a:34:7c:8c:46:12:4a:f1:66:9e:b8:37:c4:de:8d: b3:4c:01:1b:d9:92:67:5c:bb:d2:6e:31:e2:a3:91:77:e6:82: f5:df:28:25:1f:98:3b:ca:54:26:3b:e0:26:a5:19:4c:29:d7: 73:16:74:8d:2b:04:3a:35:c3:13:bd:69:77:af:d1:e5:72:9f: 7f:7d:16:74:8c:78:57:a3:88:14:b4:ff:7a:e9:d6:3c:4d:81: a3:c4:2e:27 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDOUExMTAvBgNVBAUTKDFFN0UwRDg5NDZCQzQ4RDA3NTRCMDNFOTg3MkFEMzg4 MEM1NEU0QkUwHhcNMjMwNzA4MjEzNzQ2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE5ZDcyYS0yNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArw0AUM0XmogzyFbETLYq8mCYkokzWe/5chIQOTM0Gbm2TQqe561AuAzm8oJZ MEBxghYPqTg+zrrR9MlL0QOcRKH5dqFr3a9tm8k28+BZh9GvFwDKHlL0+wxn8t1I 2ejCYMl4FBHqcEtwv49Caw3TQgfLTrm5bKYV+Zqbk7Ktb5fVhaaKTnSCRKFhzEHM ZcQtyQ9g5INBLG8rts1a6FgTg+J/+tfeDJVP9irqOVmUWgfG48yaNWJt+mUsxDi8 ucrnIa8jLagvtARPsfeYs0uz7SnIu2YwgcL569A40bWG+xnnvb2zQuJB4LQZ4M5h d0fYwC52nqLhHO4tmf6RWxCqaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF1EQNnc 6VLs6RmuQSYUwbceOPDpMB8GA1UdIwQYMBaAFB5+DYlGvEjQdUsD6Ycq04gMVOS+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M5QS9BMUQ2MUQzQUNB OEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNOQjFTd1BwaHlyVGlBeFU1 TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0huNE5pVWE4U05CMVN3UHBoeXJUaUF4VTVMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNDOUEvQTFENjFEM0FDQThEMTFFQUJFNUJCNjU2QzRGOUFFMDIvM0E1QjAxQTBD QThGMTFFQUEzNUJGOTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnmYIwDQYJKoZIhvcNAQELBQADggEBAHXqeN25avfEF+6X 4AzfFe/thx73kvSFkEwGzT1YlUDr5D3UvSeQRZc5KxoECTvAyccaRZ67ZLN8QqN9 pOsRUVPunTyZ2eQMtqenyKFA63kEk02zRLy3zZdy1UPr39olwZmCrM0HRFmsBorU fY2cq2SJ1vXTI18zf2N1RMZX5ckHDsDpTm0h9ASTLgi4twowLfboPY7deoPQuHpA UrnTl7zPk7AFrQo0fIxGEkrxZp64N8TejbNMARvZkmdcu9JuMeKjkXfmgvXfKCUf mDvKVCY74CalGUwp13MWdI0rBDo1wxO9aXev0eVyn399FnSMeFejiBS0/3rp1jxN gaPELic= -----END CERTIFICATE-----Generated at Fri Jun 7 00:12:17 2024 by rpki-client on console-ams.rpki-client.org