$ rpki-client -vvf rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/AFBD773E45FC11EEACF55E79C4F9AE02.roa File: AFBD773E45FC11EEACF55E79C4F9AE02.roa (raw, json) Hash identifier: X3yD/2TWMqnDMFV3Ns7PSoiCLKauFaAI9EM91e9ouJs= Subject key identifier: B7:00:E3:D1:55:4C:0F:9F:2E:36:A0:DF:78:38:E8:9A:23:4A:A5:81 Certificate issuer: /CN=A914AD92/serialNumber=EAEE59BA6A7C7049058C56597CC745C61EC5A0A9 Certificate serial: 02 Authority key identifier: EA:EE:59:BA:6A:7C:70:49:05:8C:56:59:7C:C7:45:C6:1E:C5:A0:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/AFBD773E45FC11EEACF55E79C4F9AE02.roa Signing time: Mon 28 Aug 2023 23:43:28 +0000 ROA not before: Mon 28 Aug 2023 23:43:28 +0000 ROA not after: Wed 29 May 2024 00:00:00 +0000 asID: 149653 IP address blocks: 103.184.172.0/23 maxlen: 23 103.184.172.0/24 maxlen: 24 103.184.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.crl rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Sep 2023 19:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914AD92/serialNumber=EAEE59BA6A7C7049058C56597CC745C61EC5A0A9 Validity Not Before: Aug 28 23:43:28 2023 GMT Not After : May 29 00:00:00 2024 GMT Subject: CN=64ed3120-045a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:2a:0e:f0:f9:6a:3f:9d:57:a9:a9:42:df: 54:9b:b9:38:67:03:a9:b9:8b:78:ed:eb:62:86:a4: ce:d7:7e:db:f6:74:c9:5e:88:87:3a:cf:79:21:6c: 4c:35:c5:14:5f:c4:6a:c9:bf:dd:b4:01:1d:9b:f0: a1:aa:e6:92:f6:71:d2:bf:af:c0:f0:cd:ea:c6:b6: 98:43:f7:54:ee:62:f5:bc:b2:30:91:f9:72:a2:0c: c5:25:4f:27:e2:95:01:a0:de:06:38:49:03:64:53: d4:28:c3:0e:86:d8:00:e4:56:19:27:2a:d0:06:97: 8e:e3:d8:47:f1:6d:a9:1e:56:e1:a4:2f:ad:6c:46: 17:8f:11:e6:cf:c2:b7:68:2c:95:0c:4f:e0:af:3c: 64:ad:d2:07:71:01:98:24:cb:b0:e3:e9:9e:5f:ac: 90:f4:e1:b5:1b:61:ac:39:8f:43:a1:1a:a5:de:9b: f4:5a:00:fa:8a:c0:a4:06:73:97:ee:1d:48:52:12: 40:36:b3:eb:53:45:47:c6:fd:8e:e8:27:f5:91:a1: c4:0d:20:52:a6:d1:2d:18:a5:4d:e5:b0:65:dc:41: fc:b8:89:24:95:15:38:62:84:db:97:f2:83:22:39: eb:ba:ed:9b:c1:4f:46:b0:13:28:51:da:29:3c:42: da:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:00:E3:D1:55:4C:0F:9F:2E:36:A0:DF:78:38:E8:9A:23:4A:A5:81 X509v3 Authority Key Identifier: keyid:EA:EE:59:BA:6A:7C:70:49:05:8C:56:59:7C:C7:45:C6:1E:C5:A0:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/AFBD773E45FC11EEACF55E79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.184.172.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:97:bd:32:75:da:9a:fc:36:55:54:2a:34:df:3e:50:c0:db: 0c:c3:a0:95:bd:8e:8f:1c:e0:d0:f1:4e:5a:f0:7e:49:a5:62: ac:b2:0c:6e:97:08:dd:9c:09:51:f2:6b:11:fc:ca:65:b2:21: bf:14:08:00:7e:33:0b:7f:37:9c:91:4e:2b:fb:b2:38:e2:64: 4c:1c:0b:a9:bb:99:3a:1c:7c:f8:c8:fa:8a:17:96:75:d1:2a: ba:d1:59:f2:3b:6e:d2:78:63:11:e8:7f:b4:d2:d7:4f:70:f2: d2:c1:b3:e0:11:79:78:1f:15:8c:47:f0:42:eb:c9:cd:66:18: 06:8d:ed:4b:b7:4f:37:38:4e:6d:18:c4:fe:f1:ce:be:cb:0f: 42:67:f6:ce:c9:e1:93:ac:f2:ad:ea:2b:84:6a:65:8b:83:ca: af:11:1e:52:53:9f:28:e9:98:29:b2:d3:6b:f6:b4:bb:d5:85: 2a:db:fc:86:f4:66:da:97:a4:57:7e:57:f3:c1:1a:6f:bf:ed: 37:3a:d1:df:0b:70:4c:9a:88:b6:43:55:fb:45:9e:4d:a8:ad: 8b:47:7e:53:57:02:64:f7:4e:d9:d7:99:70:a0:9e:e4:bc:90: c9:37:c8:66:0f:b5:e0:fe:1c:02:37:97:6a:3b:a6:e4:62:de: 4f:8b:df:3f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QUQ5MjExMC8GA1UEBRMoRUFFRTU5QkE2QTdDNzA0OTA1OEM1NjU5N0NDNzQ1QzYx RUM1QTBBOTAeFw0yMzA4MjgyMzQzMjhaFw0yNDA1MjkwMDAwMDBaMBgxFjAUBgNV BAMTDTY0ZWQzMTIwLTA0NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3fioO8PlqP51XqalC31SbuThnA6m5i3jt62KGpM7Xftv2dMleiIc6z3khbEw1 xRRfxGrJv920AR2b8KGq5pL2cdK/r8DwzerGtphD91TuYvW8sjCR+XKiDMUlTyfi lQGg3gY4SQNkU9Qoww6G2ADkVhknKtAGl47j2EfxbakeVuGkL61sRhePEebPwrdo LJUMT+CvPGSt0gdxAZgky7Dj6Z5frJD04bUbYaw5j0OhGqXem/RaAPqKwKQGc5fu HUhSEkA2s+tTRUfG/Y7oJ/WRocQNIFKm0S0YpU3lsGXcQfy4iSSVFThihNuX8oMi Oeu67ZvBT0awEyhR2ik8Qtq1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUtwDj0VVM D58uNqDfeDjomiNKpYEwHwYDVR0jBBgwFoAU6u5Zump8cEkFjFZZfMdFxh7FoKkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBRDkyLzMzMEQwOEUwQUU5 RTExRUM5RTQ4M0Q3M0M0RjlBRTAyLzZ1NVp1bXA4Y0VrRmpGWlpmTWRGeGg3Rm9L ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNnU1WnVtcDhjRWtGakZaWmZNZEZ4aDdGb0trLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUQ5Mi8zMzBEMDhFMEFFOUUxMUVDOUU0ODNENzNDNEY5QUUwMi9BRkJENzczRTQ1 RkMxMUVFQUNGNTVFNzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWe4rDANBgkqhkiG9w0BAQsFAAOCAQEAWpe9MnXamvw2VVQq NN8+UMDbDMOglb2Ojxzg0PFOWvB+SaVirLIMbpcI3ZwJUfJrEfzKZbIhvxQIAH4z C383nJFOK/uyOOJkTBwLqbuZOhx8+Mj6iheWddEqutFZ8jtu0nhjEeh/tNLXT3Dy 0sGz4BF5eB8VjEfwQuvJzWYYBo3tS7dPNzhObRjE/vHOvssPQmf2zsnhk6zyreor hGpli4PKrxEeUlOfKOmYKbLTa/a0u9WFKtv8hvRm2pekV35X88Eab7/tNzrR3wtw TJqItkNV+0WeTaiti0d+U1cCZPdO2deZcKCe5LyQyTfIZg+14P4cAjeXajum5GLe T4vfPw== -----END CERTIFICATE-----Generated at Tue Aug 29 20:00:01 2023 by rpki-client on console-fra.rpki-client.org