$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/8C7AA19EFE3D11EEAE50E746C4F9AE02.roa File: 8C7AA19EFE3D11EEAE50E746C4F9AE02.roa (raw, json) Hash identifier: chJi0gC3lUpWy2BJwSolEvYBIaqLOdBWJ4kfEtbDNfI= Subject key identifier: 47:76:AC:18:14:F2:66:4A:A0:5D:57:66:49:FB:06:F8:DD:2F:43:D5 Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Certificate serial: 16B8 Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/8C7AA19EFE3D11EEAE50E746C4F9AE02.roa Signing time: Fri 19 Apr 2024 11:11:20 +0000 ROA not before: Fri 19 Apr 2024 11:11:20 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 38193 IP address blocks: 103.120.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 17:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5816 (0x16b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Validity Not Before: Apr 19 11:11:20 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66225158-0a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5a:74:70:02:6c:e7:8e:65:e1:22:86:4f:35: 20:e5:99:e6:2b:a6:4c:c7:b9:ca:2d:3f:07:be:3a: a8:09:2f:b3:6b:44:bc:74:46:c5:0c:0a:2f:28:80: eb:56:0a:ed:af:c9:00:9a:6c:6f:f2:12:41:cc:76: 38:65:40:60:35:b2:87:fe:b1:e7:ca:1c:8c:00:04: c1:bc:83:ed:f3:4f:77:70:65:84:f0:09:16:af:3b: 49:5a:12:3f:cf:8a:f4:80:e9:83:5e:1e:6c:09:45: 20:7d:29:45:3b:ab:60:c7:2b:45:94:6a:c6:ad:b7: d4:42:91:e0:28:3e:4d:cb:8e:9c:cb:74:83:ad:48: a3:fe:36:6c:4f:1e:0e:45:f1:27:b7:7e:1b:c9:99: 07:eb:b1:83:e5:86:a2:35:f8:17:36:5f:cf:8e:13: 57:25:e7:11:29:7f:41:9a:b4:32:4b:a9:49:7e:b0: 3d:93:9c:6a:54:b9:b2:f6:a8:c4:b5:64:f2:74:83: 1f:ec:40:fc:8d:a5:1d:09:8e:e8:94:84:e0:db:d7: 12:08:30:50:e3:64:72:7a:7c:89:66:2b:7b:6a:74: 94:6b:b7:3b:71:b2:a3:88:fb:c1:92:3b:36:f7:41: da:46:6c:17:ec:2c:79:68:d5:87:08:b4:17:9f:29: fc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:76:AC:18:14:F2:66:4A:A0:5D:57:66:49:FB:06:F8:DD:2F:43:D5 X509v3 Authority Key Identifier: keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/8C7AA19EFE3D11EEAE50E746C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.71.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:44:39:76:1d:fe:30:bf:b3:55:e3:07:79:d9:a5:a1:0e:9b: 15:c7:dd:e6:78:b8:a4:3d:d8:ef:12:ac:1f:db:77:a6:75:1d: 3f:62:52:86:80:87:c7:01:95:0c:75:f1:56:36:1b:87:07:90: 9c:6b:5f:54:ca:4b:d2:95:d5:4c:34:0e:a8:65:6d:57:22:e5: ef:64:9f:eb:ee:e7:18:11:f8:ff:97:f2:b4:a8:9b:12:cd:5b: e0:d6:99:cd:c3:d2:22:3a:4a:dd:36:8f:91:40:f8:84:66:53: 10:5e:6a:8c:dc:8e:2c:e9:fc:e9:3a:9f:ed:f9:c7:f9:6a:4e: a3:95:5e:ee:21:4d:79:a0:24:2d:be:24:3e:8c:58:18:05:fe: f4:8a:7e:20:be:db:ba:cf:07:6a:43:f1:ac:f4:be:af:ff:e9: 75:0b:b5:ae:56:bf:fb:ae:ae:0a:70:b1:92:b3:de:ed:bf:31: c0:bc:6e:0f:5a:bc:00:12:b7:09:85:2f:e6:24:1c:eb:16:29: 3b:58:90:d9:9a:ae:29:d7:68:26:d8:25:eb:94:36:2a:87:7f: e1:bd:0c:5b:86:e5:5a:4f:fa:22:06:78:f2:89:d9:1c:50:b4: ef:fe:32:56:3b:2e:e7:17:80:a4:42:66:2c:03:7e:ff:ee:d9: 8b:74:ad:74 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4RTIxMTAvBgNVBAUTKEMxNDg1M0Q5QkQzRjc4RjY0ODBDNjMzNTIwNzY5NDNC Qzc5QjlGQzIwHhcNMjQwNDE5MTExMTIwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjIyNTE1OC0wYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1p0cAJs545l4SKGTzUg5ZnmK6ZMx7nKLT8HvjqoCS+za0S8dEbFDAovKIDr Vgrtr8kAmmxv8hJBzHY4ZUBgNbKH/rHnyhyMAATBvIPt8093cGWE8AkWrztJWhI/ z4r0gOmDXh5sCUUgfSlFO6tgxytFlGrGrbfUQpHgKD5Ny46cy3SDrUij/jZsTx4O RfEnt34byZkH67GD5YaiNfgXNl/PjhNXJecRKX9BmrQyS6lJfrA9k5xqVLmy9qjE tWTydIMf7ED8jaUdCY7olITg29cSCDBQ42RyenyJZit7anSUa7c7cbKjiPvBkjs2 90HaRmwX7Cx5aNWHCLQXnyn8swIDAQABo4IClTCCApEwHQYDVR0OBBYEFEd2rBgU 8mZKoF1XZkn7BvjdL0PVMB8GA1UdIwQYMBaAFMFIU9m9P3j2SAxjNSB2lDvHm5/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhFMi80QzkwOEEyMkUw QjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQWklER00xSUhhVU84ZWJu OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVaFQyYjBfZVBaSURHTTFJSGFVTzhlYm44SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4RTIvNEM5MDhBMjJFMEI2MTFFN0IyRDBGRDgwQzRGOUFFMDIvOEM3QUExOUVG RTNEMTFFRUFFNTBFNzQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABneEcwDQYJKoZIhvcNAQELBQADggEBAH9EOXYd/jC/s1Xj B3nZpaEOmxXH3eZ4uKQ92O8SrB/bd6Z1HT9iUoaAh8cBlQx18VY2G4cHkJxrX1TK S9KV1Uw0DqhlbVci5e9kn+vu5xgR+P+X8rSomxLNW+DWmc3D0iI6St02j5FA+IRm UxBeaozcjizp/Ok6n+35x/lqTqOVXu4hTXmgJC2+JD6MWBgF/vSKfiC+27rPB2pD 8az0vq//6XULta5Wv/uurgpwsZKz3u2/McC8bg9avAAStwmFL+YkHOsWKTtYkNma rinXaCbYJeuUNiqHf+G9DFuG5VpP+iIGePKJ2RxQtO/+MlY7LucXgKRCZiwDfv/u 2Yt0rXQ= -----END CERTIFICATE-----Generated at Wed Apr 24 18:35:52 2024 by rpki-client on console-ams.rpki-client.org