$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/CE751320B9D511ED89A5B11FC4F9AE02.roa File: CE751320B9D511ED89A5B11FC4F9AE02.roa (raw, json) Hash identifier: QHrkzPB3XYYShkebDaV5iZFEb6asX/vHujmxDlC+XLs= Subject key identifier: A7:C9:F1:9C:B7:D3:F7:53:9B:B9:AB:85:89:51:55:24:38:14:67:98 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 03FF Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/CE751320B9D511ED89A5B11FC4F9AE02.roa Signing time: Thu 31 Aug 2023 01:13:18 +0000 ROA not before: Thu 31 Aug 2023 01:13:18 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 976 IP address blocks: 103.170.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Aug 31 01:13:18 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64efe92e-d3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:69:9c:b0:f9:01:0a:7e:de:aa:49:84:ca:ef: 51:00:8c:52:e2:8b:f3:6d:4a:11:ca:c4:49:80:a3: 76:f8:59:fc:aa:97:c0:d1:03:0e:67:01:25:df:00: 17:02:c1:28:4d:6f:2f:ad:aa:91:32:1b:bf:d7:33: 10:66:79:6d:0b:08:9b:1d:f4:06:b4:71:4c:2a:26: e9:f0:c0:ee:ab:f6:e8:74:f6:78:2a:80:99:ec:1a: 9f:f8:6e:a0:5c:6c:74:3e:c0:3a:dd:34:a0:2a:27: f7:f3:bd:a1:8b:34:72:fe:f1:23:93:2a:61:3e:99: 0c:2c:27:95:84:bf:cf:8f:9f:b4:62:48:ea:5b:87: b5:37:ec:cb:b6:37:63:f7:80:e7:2e:f2:08:0b:1e: a9:bb:1a:ed:99:36:61:8b:26:5f:a8:9a:2c:81:2e: e0:11:cc:49:ce:1c:b6:c2:c3:3f:82:15:01:6d:53: f3:ac:a5:75:11:c6:1c:4c:13:ea:6c:81:26:f8:b9: 65:38:15:2a:37:40:4f:87:27:91:af:81:5a:21:cf: 82:b0:c4:87:0c:66:d0:28:b9:24:48:cc:33:e3:fb: 3f:95:c7:a0:fe:b0:d3:96:67:d6:9a:77:ee:84:07: d5:3b:e7:bd:a4:74:44:a5:8e:7c:23:79:a5:c7:58: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C9:F1:9C:B7:D3:F7:53:9B:B9:AB:85:89:51:55:24:38:14:67:98 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/CE751320B9D511ED89A5B11FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.72.0/24 Signature Algorithm: sha256WithRSAEncryption 03:42:00:90:90:dc:72:87:5f:77:f8:99:8a:47:6d:ea:32:f7: 55:2d:3c:17:c8:6c:b9:40:30:e9:b0:d1:c0:12:e9:0b:65:14: 95:39:00:72:ed:6c:dd:7d:ec:a2:68:3a:48:11:65:e6:78:73: 21:17:e5:fb:cc:16:aa:1e:f0:62:e8:e4:e9:8e:ee:8a:90:42: ad:63:4d:c0:5e:37:ef:03:c3:94:94:69:73:67:46:c6:63:28: a4:bc:05:9c:eb:82:09:b6:b3:23:53:b0:74:7f:e7:9e:3c:f3: 26:92:1e:5c:0e:ed:bb:37:74:dc:b5:91:45:70:3e:11:4a:61: 66:a1:33:15:df:1b:7f:ee:17:76:a3:ad:63:43:a8:42:19:36: 74:ce:77:32:3d:16:07:07:7a:39:0a:ba:02:32:04:23:32:38: 99:ca:41:49:5c:c7:01:4f:f9:f2:65:f3:75:63:a0:02:5b:c2: 91:01:c7:4e:32:2e:37:00:bf:af:53:c6:d7:5a:0c:d9:1c:e4: 41:5a:58:1f:7e:84:e3:14:40:13:f6:8f:3a:d5:ae:f0:be:11: 09:71:18:1b:0f:ab:13:fe:4c:07:68:18:1e:fb:89:ee:11:08: 14:5f:74:85:14:5b:e9:bc:27:ce:21:98:e2:0d:bf:37:b5:8f: 15:73:01:c9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjMwODMxMDExMzE4WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGVmZTkyZS1kM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7WmcsPkBCn7eqkmEyu9RAIxS4ovzbUoRysRJgKN2+Fn8qpfA0QMOZwEl3wAX AsEoTW8vraqRMhu/1zMQZnltCwibHfQGtHFMKibp8MDuq/bodPZ4KoCZ7Bqf+G6g XGx0PsA63TSgKif3872hizRy/vEjkyphPpkMLCeVhL/Pj5+0YkjqW4e1N+zLtjdj 94DnLvIICx6puxrtmTZhiyZfqJosgS7gEcxJzhy2wsM/ghUBbVPzrKV1EcYcTBPq bIEm+LllOBUqN0BPhyeRr4FaIc+CsMSHDGbQKLkkSMwz4/s/lceg/rDTlmfWmnfu hAfVO+e9pHREpY58I3mlx1gCmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKfJ8Zy3 0/dTm7mrhYlRVSQ4FGeYMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI4RTMvNTM5M0MwRUUwMDI2MTFFQ0E0MDYxNjE0QzRGOUFFMDIvQ0U3NTEzMjBC OUQ1MTFFRDg5QTVCMTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnqkgwDQYJKoZIhvcNAQELBQADggEBAANCAJCQ3HKHX3f4 mYpHbeoy91UtPBfIbLlAMOmw0cAS6QtlFJU5AHLtbN197KJoOkgRZeZ4cyEX5fvM Fqoe8GLo5OmO7oqQQq1jTcBeN+8Dw5SUaXNnRsZjKKS8BZzrggm2syNTsHR/5548 8yaSHlwO7bs3dNy1kUVwPhFKYWahMxXfG3/uF3ajrWNDqEIZNnTOdzI9FgcHejkK ugIyBCMyOJnKQUlcxwFP+fJl83VjoAJbwpEBx04yLjcAv69TxtdaDNkc5EFaWB9+ hOMUQBP2jzrVrvC+EQlxGBsPqxP+TAdoGB77ie4RCBRfdIUUW+m8J84hmOINvze1 jxVzAck= -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:21 2024 by rpki-client on console-ams.rpki-client.org