$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1D45B78003C211EEB2272068C4F9AE02.roa File: 1D45B78003C211EEB2272068C4F9AE02.roa (raw, json) Hash identifier: MhnlI9exW+RMMsOOeA0js7t38sgb1HY334sjZbPPcIs= Subject key identifier: 33:AB:D5:31:93:78:F4:60:73:0F:5D:BB:ED:79:F8:B7:E4:E1:3B:81 Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Certificate serial: 64 Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1D45B78003C211EEB2272068C4F9AE02.roa Signing time: Wed 29 Nov 2023 06:17:24 +0000 ROA not before: Wed 29 Nov 2023 06:17:24 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 134716 IP address blocks: 103.197.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Validity Not Before: Nov 29 06:17:24 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6566d774-f49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:7c:0e:1c:f3:fd:05:03:fa:63:e1:ce:46: e3:96:58:59:a1:7e:09:d1:65:36:9a:ee:18:d5:08: 2f:d0:c0:5f:49:83:9e:36:35:3d:02:3f:40:7b:d5: 77:a4:75:c4:fd:78:3a:43:fa:68:7a:42:e7:6c:06: 47:31:27:fd:e8:5c:f1:b2:85:37:a3:12:bb:c2:92: 7c:86:ef:9d:8a:d4:97:b7:9c:b8:29:a5:1a:23:81: 74:3e:40:d2:e1:6f:33:a9:8d:15:4a:cf:f8:2b:b4: c7:58:e5:8a:23:78:3f:44:33:64:37:51:8d:04:17: e0:64:cf:b7:de:46:eb:10:d9:79:27:f0:ad:e9:a8: 84:28:5e:38:58:53:75:1f:2b:9a:ee:27:16:7e:f3: fc:cc:b9:59:26:41:00:52:d5:76:96:c1:ee:47:ff: 6a:df:c8:ed:1f:c3:f2:72:49:fb:23:53:e3:7e:32: f6:6a:1c:9f:89:3b:bf:5b:3a:91:1a:32:6c:fa:7e: b6:f4:10:d9:32:20:ce:5b:37:4a:18:9a:02:71:95: 51:48:68:0a:6e:57:4d:57:a8:60:40:41:d0:b7:b6: f9:23:ff:57:03:d0:f4:26:fa:99:9f:f1:80:96:bb: 36:b3:c8:51:9c:7f:3a:f1:4d:1b:6d:13:41:6e:f2: 2a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AB:D5:31:93:78:F4:60:73:0F:5D:BB:ED:79:F8:B7:E4:E1:3B:81 X509v3 Authority Key Identifier: keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1D45B78003C211EEB2272068C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.200.0/24 Signature Algorithm: sha256WithRSAEncryption a3:c6:f1:49:9a:03:da:89:e5:62:04:58:e3:1d:c9:a9:1d:62: 99:a7:ec:5d:81:99:e0:45:bf:41:e6:15:f6:2e:50:80:c2:44: 5c:ee:28:80:75:cf:ce:32:17:8d:ea:11:c4:7a:49:f4:e6:7b: ca:8f:2d:56:15:13:a6:02:06:79:b7:49:78:63:a9:97:34:e6: d4:c0:1e:45:45:64:b7:ae:ac:b1:ff:8b:39:70:d4:c2:bf:3b: 0f:f2:18:03:ff:bd:18:53:f0:8a:29:b3:3f:cf:83:f6:2e:13: da:35:8b:d1:0e:25:a3:9c:ed:80:b9:aa:b1:fc:7e:17:2a:3b: 85:df:92:c4:88:e7:7e:1e:34:29:15:fc:a3:43:c0:a3:26:8b: 99:6c:7f:bb:ee:b2:72:e2:2b:2c:46:1b:e1:2e:ed:ec:1f:dc: b5:43:c6:9f:88:c2:7a:97:35:64:17:eb:16:35:87:30:07:6a: 88:f4:48:87:fc:67:69:c6:10:39:ad:77:fa:2e:28:2d:69:ff: 66:a1:5c:76:68:29:18:0b:15:68:ab:69:ae:36:d0:38:70:9e: 31:d1:41:95:c5:cb:54:6c:6a:bf:ab:38:02:ed:9d:a5:a1:ba: 80:6b:ef:55:79:19:7f:8b:87:ff:99:e9:83:b1:90:50:d7:81: cc:2f:06:69 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTZBMTExMC8GA1UEBRMoQ0REN0NDNTk5NEUzNDA0RTZDMjNBRTk0MkE1OTIxOEI1 N0M1QzEzMTAeFw0yMzExMjkwNjE3MjRaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NjZkNzc0LWY0OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC62nwOHPP9BQP6Y+HORuOWWFmhfgnRZTaa7hjVCC/QwF9Jg542NT0CP0B71Xek dcT9eDpD+mh6QudsBkcxJ/3oXPGyhTejErvCknyG752K1Je3nLgppRojgXQ+QNLh bzOpjRVKz/grtMdY5YojeD9EM2Q3UY0EF+Bkz7feRusQ2Xkn8K3pqIQoXjhYU3Uf K5ruJxZ+8/zMuVkmQQBS1XaWwe5H/2rfyO0fw/JySfsjU+N+MvZqHJ+JO79bOpEa Mmz6frb0ENkyIM5bN0oYmgJxlVFIaApuV01XqGBAQdC3tvkj/1cD0PQm+pmf8YCW uzazyFGcfzrxTRttE0Fu8ip3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUM6vVMZN4 9GBzD1277Xn4t+ThO4EwHwYDVR0jBBgwFoAUzdfMWZTjQE5sI66UKlkhi1fFwTEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNkExLzMxNUI3RTA4RkY3 QjExRURBNjJERjEwRUM0RjlBRTAyL3pkZk1XWlRqUUU1c0k2NlVLbGtoaTFmRndU RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemRmTVdaVGpRRTVzSTY2VUtsa2hpMWZGd1RFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZBMS8zMTVCN0UwOEZGN0IxMUVEQTYyREYxMEVDNEY5QUUwMi8xRDQ1Qjc4MDAz QzIxMUVFQjIyNzIwNjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfFyDANBgkqhkiG9w0BAQsFAAOCAQEAo8bxSZoD2onlYgRY 4x3JqR1imafsXYGZ4EW/QeYV9i5QgMJEXO4ogHXPzjIXjeoRxHpJ9OZ7yo8tVhUT pgIGebdJeGOplzTm1MAeRUVkt66ssf+LOXDUwr87D/IYA/+9GFPwiimzP8+D9i4T 2jWL0Q4lo5ztgLmqsfx+Fyo7hd+SxIjnfh40KRX8o0PAoyaLmWx/u+6ycuIrLEYb 4S7t7B/ctUPGn4jCepc1ZBfrFjWHMAdqiPRIh/xnacYQOa13+i4oLWn/ZqFcdmgp GAsVaKtprjbQOHCeMdFBlcXLVGxqv6s4Au2dpaG6gGvvVXkZf4uH/5npg7GQUNeB zC8GaQ== -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:57 2024 by rpki-client on console-ams.rpki-client.org