$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/63F5A844A07211EBB1E80A0BC4F9AE02.roa File: 63F5A844A07211EBB1E80A0BC4F9AE02.roa (raw, json) Hash identifier: iyBr9siLV3Raf1cSIO0jcjTwdqjbJf25bUYaGgnFBqM= Subject key identifier: DB:35:E1:11:9A:22:67:2C:BB:73:7D:25:AC:80:77:F1:A3:58:72:B3 Certificate issuer: /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Certificate serial: 050E Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/63F5A844A07211EBB1E80A0BC4F9AE02.roa Signing time: Fri 29 Dec 2023 00:22:30 +0000 ROA not before: Fri 29 Dec 2023 00:22:30 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 59355 IP address blocks: 103.147.232.0/23 maxlen: 23 103.147.232.0/24 maxlen: 24 103.147.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1294 (0x50e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Validity Not Before: Dec 29 00:22:30 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658e1146-c892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:15:db:e8:04:c4:8c:88:49:bc:23:ef:f1: bf:e1:65:34:d4:78:69:59:c1:db:96:66:df:37:bf: e0:d8:14:00:f6:42:6d:0d:64:38:d0:d0:00:fb:1d: a6:36:73:76:bd:f8:5b:6b:cc:71:94:d9:b4:8b:e7: a7:ca:ea:78:26:2b:cc:27:a1:2f:c4:17:2f:77:5e: 2c:70:32:5d:19:19:3a:46:a5:97:9f:a7:8d:af:93: cf:f3:18:a1:94:65:5f:cd:fd:d3:7b:6d:30:83:5f: 92:a5:a8:e3:12:27:d1:28:2f:1d:ab:1c:b4:84:ee: ed:3a:8f:c6:12:fc:f1:a8:92:21:aa:ae:f0:bc:e9: 9b:7e:a0:14:f0:da:7f:0a:63:f4:15:ff:14:aa:0e: 24:4d:69:0b:67:5a:ea:9e:f7:12:ca:99:cb:a4:a7: d3:7d:33:45:98:07:87:f0:74:b4:82:4b:58:20:35: 9c:40:da:2e:c3:dd:b6:43:a4:1f:ea:67:ff:4b:b1: 6a:17:3f:ff:e4:b8:41:f6:1b:c6:e5:35:92:d2:9f: 7b:65:dc:78:c3:46:81:18:66:11:f2:5b:ed:82:ed: 14:50:36:40:64:a9:95:f2:4a:d2:08:c8:a4:73:f2: 99:53:f8:70:be:32:c9:38:d3:f3:1b:7b:49:1e:77: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:35:E1:11:9A:22:67:2C:BB:73:7D:25:AC:80:77:F1:A3:58:72:B3 X509v3 Authority Key Identifier: keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/63F5A844A07211EBB1E80A0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.232.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:41:cd:6e:3b:fd:cb:9e:4a:a5:9e:20:1c:40:aa:d5:4f:ff: a1:49:ed:37:75:04:a3:57:e8:4f:5c:f9:ee:db:c7:75:75:89: 23:fc:54:49:7b:84:8f:31:96:e0:b7:2a:69:5e:d3:5d:01:03: 0a:59:7a:e5:8b:59:f6:67:cd:6c:f8:63:26:b4:61:f7:14:71: 7e:a8:aa:4f:a6:26:3e:f7:b8:d1:96:9c:e7:e1:fd:6c:fd:d1: c9:0e:b5:ff:c4:87:e5:81:d3:9b:36:c2:0e:ab:ea:b8:8f:fe: ca:cf:0d:40:13:0c:f7:5e:94:8c:41:52:04:82:02:02:a5:3b: 0b:a2:c1:8d:d7:2c:fe:95:cc:fd:4c:c0:ab:53:eb:2f:38:5a: 5f:79:10:88:a2:9a:29:b8:ed:75:98:5a:53:90:fc:40:79:83: 56:9d:c6:8f:54:7b:07:c3:f3:50:c0:45:cc:02:15:64:1e:0f: a7:00:7a:21:81:4c:cc:87:e3:4c:31:1c:1b:20:d8:37:fb:a4: 77:f8:1d:ea:55:64:07:74:cc:24:aa:65:68:9f:6f:66:ae:10: 8d:a8:7e:d8:cd:75:f4:d7:46:12:a8:f3:51:f9:1d:93:ec:37: d3:64:0c:88:2d:4d:1d:8e:25:8f:f2:93:c6:65:ee:b2:cf:6a: 1a:05:de:09 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdFQTgxMTAvBgNVBAUTKDQxQzExRDgxQUNCQUY2OTNFN0FENjFGQTExNEU3N0I5 RkQ0RjU3QzMwHhcNMjMxMjI5MDAyMjMwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThlMTE0Ni1jODkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9AV2+gExIyISbwj7/G/4WU01HhpWcHblmbfN7/g2BQA9kJtDWQ40NAA+x2m NnN2vfhba8xxlNm0i+enyup4JivMJ6EvxBcvd14scDJdGRk6RqWXn6eNr5PP8xih lGVfzf3Te20wg1+SpajjEifRKC8dqxy0hO7tOo/GEvzxqJIhqq7wvOmbfqAU8Np/ CmP0Ff8Uqg4kTWkLZ1rqnvcSypnLpKfTfTNFmAeH8HS0gktYIDWcQNouw922Q6Qf 6mf/S7FqFz//5LhB9hvG5TWS0p97Zdx4w0aBGGYR8lvtgu0UUDZAZKmV8krSCMik c/KZU/hwvjLJONPzG3tJHnch+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNs14RGa Imcsu3N9JayAd/GjWHKzMB8GA1UdIwQYMBaAFEHBHYGsuvaT561h+hFOd7n9T1fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0VBOC84NDE3NTE1NkEw NzAxMUVCOUFCNkU2NUJDNEY5QUUwMi9RY0VkZ2F5NjlwUG5yV0g2RVU1M3VmMVBW OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjRWRnYXk2OXBQbnJXSDZFVTUzdWYxUFY4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdFQTgvODQxNzUxNTZBMDcwMTFFQjlBQjZFNjVCQzRGOUFFMDIvNjNGNUE4NDRB MDcyMTFFQkIxRTgwQTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnk+gwDQYJKoZIhvcNAQELBQADggEBAJ9BzW47/cueSqWe IBxAqtVP/6FJ7Td1BKNX6E9c+e7bx3V1iSP8VEl7hI8xluC3Kmle010BAwpZeuWL WfZnzWz4Yya0YfcUcX6oqk+mJj73uNGWnOfh/Wz90ckOtf/Eh+WB05s2wg6r6riP /srPDUATDPdelIxBUgSCAgKlOwuiwY3XLP6VzP1MwKtT6y84Wl95EIiimim47XWY WlOQ/EB5g1adxo9UewfD81DARcwCFWQeD6cAeiGBTMyH40wxHBsg2Df7pHf4HepV ZAd0zCSqZWifb2auEI2oftjNdfTXRhKo81H5HZPsN9NkDIgtTR2OJY/yk8Zl7rLP ahoF3gk= -----END CERTIFICATE-----Generated at Fri May 17 02:01:41 2024 by rpki-client on console-ams.rpki-client.org