$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1E4548E4E1F211EEA360BE22C4F9AE02.roa File: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (raw, json) Hash identifier: yQ1FIIFonh7cCfLctJ8d+Ls3IWEwlpiHbaUt9UxU1rY= Subject key identifier: 9E:6D:91:6F:53:21:78:71:1C:5C:63:8D:E0:EF:39:3D:D9:65:86:D3 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 04 Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1E4548E4E1F211EEA360BE22C4F9AE02.roa Signing time: Thu 14 Mar 2024 11:00:50 +0000 ROA not before: Thu 14 Mar 2024 11:00:50 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 4755 IP address blocks: 103.145.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Mar 14 11:00:50 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65f2d8e2-810e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:28:c7:ee:37:18:7c:a0:bc:03:af:d6:96: 80:42:76:20:45:48:c9:42:50:78:6a:c0:54:4e:be: 8a:45:81:e1:ee:e5:34:a1:02:2e:06:e8:40:f0:ef: b0:a2:15:10:83:77:db:0a:11:e9:60:4a:5b:4b:e0: fb:fe:c7:e8:b9:79:46:a7:15:92:c6:c2:44:13:13: 08:56:d7:11:f5:50:40:f4:6a:53:d8:87:1f:ac:10: 2a:88:d0:48:af:38:95:47:8c:92:b9:d4:bf:71:a5: 56:6d:e8:66:58:1d:fc:73:86:30:67:d4:32:cb:2b: 25:fb:d2:a7:8a:c5:82:d6:72:c0:12:e9:58:d8:e6: 75:3e:82:3a:30:95:5d:dc:58:fe:9e:db:02:48:d7: 63:09:c2:af:cf:88:16:7c:a5:bf:30:91:8e:6f:6a: 38:38:e5:bb:75:9b:ca:e0:56:ab:82:c3:53:a8:88: ff:53:62:f6:9c:8f:8e:a0:59:ed:a6:6e:40:70:ba: a0:59:d0:36:39:7e:a3:2a:db:e5:75:ac:1e:e8:5d: 6c:5e:2f:5f:f6:73:2e:42:4e:f1:f2:d0:3b:0f:26: a8:2d:cb:26:d6:d1:99:1c:72:de:9c:be:67:2c:ef: 95:2e:89:56:09:85:e5:1d:8c:63:3b:a0:b2:aa:8d: 47:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6D:91:6F:53:21:78:71:1C:5C:63:8D:E0:EF:39:3D:D9:65:86:D3 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1E4548E4E1F211EEA360BE22C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.88.0/24 Signature Algorithm: sha256WithRSAEncryption b1:c5:8a:6f:79:c7:1e:0f:00:9c:67:99:4c:99:05:dc:4d:1b: 64:fe:af:82:9f:62:7e:0c:0b:9c:8f:71:2d:d5:da:5b:e6:a9: 08:5a:5b:23:a6:9d:7a:ef:f5:c0:d0:52:be:e8:b6:94:16:24: 08:90:65:ac:72:de:74:e9:b0:49:46:b1:c4:2e:66:21:49:fb: 96:a4:3b:c2:59:1b:25:87:8c:06:96:99:c5:3d:50:bd:53:82: c6:36:72:45:75:e2:7a:bf:13:7e:7f:85:f3:1f:f8:19:b5:35: fb:9f:08:99:3d:f2:cc:8c:b1:ed:bc:ee:a7:f4:8e:b7:3f:dc: 66:e7:5b:d2:96:ef:e6:22:4f:fa:b7:26:cf:cf:7f:7e:ab:a5: fd:19:0a:44:1b:6b:b4:0c:0c:b9:8d:e5:5b:ee:6b:94:49:a4: 23:47:1f:95:1d:a4:57:b5:75:e1:20:af:9c:76:77:c4:90:f8: 84:51:46:e3:ee:44:c5:c9:06:03:52:7c:30:5f:67:61:ad:10: d9:76:0d:f3:b6:b6:a5:b8:b5:e3:ed:09:39:13:48:2d:0f:92: 81:0b:cb:3e:ed:b1:99:27:33:cb:81:4a:dc:a2:47:56:42:00: 19:9d:5c:59:ae:86:0f:29:e4:d7:f2:91:9f:25:69:12:99:2a: d4:59:f4:2d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OENBQTExMC8GA1UEBRMoMzc3ODU0NEUyNDY5NTQ4QkYwOUI1NERERDgwM0Q3RDdE OTBGN0U2MjAeFw0yNDAzMTQxMTAwNTBaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZjJkOGUyLTgxMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzlSjH7jcYfKC8A6/WloBCdiBFSMlCUHhqwFROvopFgeHu5TShAi4G6EDw77Ci FRCDd9sKEelgSltL4Pv+x+i5eUanFZLGwkQTEwhW1xH1UED0alPYhx+sECqI0Eiv OJVHjJK51L9xpVZt6GZYHfxzhjBn1DLLKyX70qeKxYLWcsAS6VjY5nU+gjowlV3c WP6e2wJI12MJwq/PiBZ8pb8wkY5vajg45bt1m8rgVquCw1OoiP9TYvacj46gWe2m bkBwuqBZ0DY5fqMq2+V1rB7oXWxeL1/2cy5CTvHy0DsPJqgtyybW0Zkcct6cvmcs 75UuiVYJheUdjGM7oLKqjUf5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUnm2Rb1Mh eHEcXGON4O85PdllhtMwHwYDVR0jBBgwFoAUN3hUTiRpVIvwm1Td2APX19kPfmIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4Q0FBL0RDRDAyQTIwRTFF QTExRUU5OTlDNzAyQUM0RjlBRTAyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjNoVVRpUnBWSXZ3bTFUZDJBUFgxOWtQZm1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi8xRTQ1NDhFNEUx RjIxMUVFQTM2MEJFMjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeRWDANBgkqhkiG9w0BAQsFAAOCAQEAscWKb3nHHg8AnGeZ TJkF3E0bZP6vgp9ifgwLnI9xLdXaW+apCFpbI6adeu/1wNBSvui2lBYkCJBlrHLe dOmwSUaxxC5mIUn7lqQ7wlkbJYeMBpaZxT1QvVOCxjZyRXXier8Tfn+F8x/4GbU1 +58ImT3yzIyx7bzup/SOtz/cZudb0pbv5iJP+rcmz89/fqul/RkKRBtrtAwMuY3l W+5rlEmkI0cflR2kV7V14SCvnHZ3xJD4hFFG4+5ExckGA1J8MF9nYa0Q2XYN87a2 pbi14+0JORNILQ+SgQvLPu2xmSczy4FK3KJHVkIAGZ1cWa6GDynk1/KRnyVpEpkq 1Fn0LQ== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:36 2024 by rpki-client on console-ams.rpki-client.org