$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/CD57B28C814211EA94DD3E2DC4F9AE02.roa File: CD57B28C814211EA94DD3E2DC4F9AE02.roa (raw, json) Hash identifier: wD9pnjf/HuWd5KNHwqeLPmfmdJatBwE5mxFSZ4a1GKY= Subject key identifier: FA:0E:71:31:F1:3B:C7:4B:28:15:87:DA:6D:38:BC:2A:BF:DE:F4:77 Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 088C Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/CD57B28C814211EA94DD3E2DC4F9AE02.roa Signing time: Wed 20 Sep 2023 20:38:14 +0000 ROA not before: Wed 20 Sep 2023 20:38:14 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 132270 IP address blocks: 103.71.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2188 (0x88c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: Sep 20 20:38:14 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=650b5836-c418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:19:fe:97:19:62:2e:b7:70:31:d2:97:47: 24:0d:c6:78:0f:1a:76:13:9c:d5:a4:d1:91:25:d6: 55:a6:06:3b:d9:a4:7d:20:d0:34:23:48:7d:fb:42: 1d:8e:03:e1:95:12:65:3b:b4:53:4e:e8:52:0c:4b: 12:ca:fa:ee:54:e5:f0:9a:39:15:89:8f:f1:41:76: 96:63:5e:42:b7:e8:dd:ac:29:ec:0a:c1:86:70:70: 79:f5:bc:08:be:65:43:85:c6:ee:30:20:a5:63:7c: 12:87:30:40:f7:8d:f1:45:6d:3b:de:a2:c7:d5:11: 9d:82:c8:16:14:b2:73:9a:3d:bf:7c:26:04:50:0d: b2:18:85:e6:c2:ab:e9:7c:42:b5:e9:0f:23:e5:3c: 0f:36:98:09:d5:d9:50:11:6d:2d:33:15:35:35:49: 5d:ab:26:a4:a2:ff:fb:ba:ee:37:df:65:9c:16:ee: c4:80:ce:98:7b:ef:d8:58:93:fc:ec:a1:86:63:87: 34:d8:43:94:8a:4c:c2:f6:69:46:5e:bc:0f:60:35: b5:2d:bb:69:c9:d1:ab:e3:b2:52:48:c7:1b:d9:98: 5d:a9:b8:8c:17:66:5e:58:3b:af:5c:ee:60:d7:d3: c6:09:61:56:27:6f:2b:f9:3e:c6:eb:fd:74:c9:96: c4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0E:71:31:F1:3B:C7:4B:28:15:87:DA:6D:38:BC:2A:BF:DE:F4:77 X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/CD57B28C814211EA94DD3E2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.71.242.0/23 Signature Algorithm: sha256WithRSAEncryption 64:01:c5:c2:e1:1d:ec:9f:0d:71:1d:3b:90:24:12:d4:29:11: 0a:1e:68:68:dc:94:0b:97:50:b3:f5:c1:ce:cf:95:ec:41:96: 08:29:36:f8:54:52:84:bf:d1:9b:14:84:9c:3c:32:4e:f0:70: e7:2a:e8:52:6d:e5:b7:63:e7:88:28:08:a4:60:3b:d8:3a:53: 76:38:2c:99:8d:4e:f3:42:4a:a5:93:f0:db:33:e4:a7:03:f3: 84:77:6d:26:81:ba:9b:55:e0:0a:57:61:2a:82:55:ad:f8:81: 5e:46:f6:65:4d:af:61:36:90:3a:df:9d:e8:96:05:a7:0f:d5: 70:73:20:45:cf:fc:37:5e:91:59:14:23:aa:0b:3d:36:13:78: 26:1b:5e:37:ca:cf:10:6d:73:36:c0:67:d1:0e:d9:a3:d8:5d: 90:a7:ae:27:be:78:eb:64:f9:77:9c:c9:df:79:12:3d:ee:2e: a8:53:e1:81:ac:c6:a4:e6:45:1d:b8:90:11:ab:c8:a1:7a:ea: 6e:72:ff:92:4b:5a:86:bd:87:40:55:2a:d9:3d:ca:41:cb:3b: ee:78:fa:ce:75:72:aa:15:fc:29:71:84:04:b6:df:8d:17:df: 87:66:c8:28:46:7c:4e:6e:5f:72:cb:93:de:5b:32:b4:85:82: 34:25:ce:1a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjMwOTIwMjAzODE0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTBiNTgzNi1jNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwb0Z/pcZYi63cDHSl0ckDcZ4Dxp2E5zVpNGRJdZVpgY72aR9INA0I0h9+0Id jgPhlRJlO7RTTuhSDEsSyvruVOXwmjkViY/xQXaWY15Ct+jdrCnsCsGGcHB59bwI vmVDhcbuMCClY3wShzBA943xRW073qLH1RGdgsgWFLJzmj2/fCYEUA2yGIXmwqvp fEK16Q8j5TwPNpgJ1dlQEW0tMxU1NUldqyakov/7uu4332WcFu7EgM6Ye+/YWJP8 7KGGY4c02EOUikzC9mlGXrwPYDW1LbtpydGr47JSSMcb2ZhdqbiMF2ZeWDuvXO5g 19PGCWFWJ28r+T7G6/10yZbErwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPoOcTHx O8dLKBWH2m04vCq/3vR3MB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdCM0EvNTUxQkYyQkM4MTQwMTFFQUJCMEQ3MjI4QzRGOUFFMDIvQ0Q1N0IyOEM4 MTQyMTFFQTk0REQzRTJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnR/IwDQYJKoZIhvcNAQELBQADggEBAGQBxcLhHeyfDXEd O5AkEtQpEQoeaGjclAuXULP1wc7PlexBlggpNvhUUoS/0ZsUhJw8Mk7wcOcq6FJt 5bdj54goCKRgO9g6U3Y4LJmNTvNCSqWT8Nsz5KcD84R3bSaBuptV4ApXYSqCVa34 gV5G9mVNr2E2kDrfneiWBacP1XBzIEXP/DdekVkUI6oLPTYTeCYbXjfKzxBtczbA Z9EO2aPYXZCnrie+eOtk+Xecyd95Ej3uLqhT4YGsxqTmRR24kBGryKF66m5y/5JL Woa9h0BVKtk9ykHLO+54+s51cqoV/ClxhAS2340X34dmyChGfE5uX3LLk95bMrSF gjQlzho= -----END CERTIFICATE-----Generated at Sat May 18 22:14:03 2024 by rpki-client on console-fra.rpki-client.org