$ rpki-client -vvf rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/EB17A8C2152511ECAD055780C4F9AE02.roa File: EB17A8C2152511ECAD055780C4F9AE02.roa (raw, json) Hash identifier: tSfOi8QEd8WZFX+kKoxAdQaNFmUMXky40Cr2qEqOVlo= Subject key identifier: D7:4C:70:D7:B2:07:F0:E0:21:4E:91:C1:34:B7:37:C5:86:F2:7C:77 Certificate issuer: /CN=A914DF56/serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9 Certificate serial: 0417 Authority key identifier: 13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/EB17A8C2152511ECAD055780C4F9AE02.roa Signing time: Tue 05 Mar 2024 02:03:43 +0000 ROA not before: Tue 05 Mar 2024 02:03:43 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 134497 IP address blocks: 103.161.60.0/23 maxlen: 23 103.161.60.0/24 maxlen: 24 103.161.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DF56/serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9 Validity Not Before: Mar 5 02:03:43 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65e67d7f-71f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c2:59:df:51:d0:38:cb:2c:33:64:26:e0:08: 27:cd:0e:c7:f7:6e:d7:76:fe:ff:af:0e:78:56:29: c9:be:ff:9c:45:be:e8:9a:c6:5e:ff:d3:cb:b9:3e: 85:dc:95:68:c9:9d:b6:a8:86:64:9d:9b:62:83:be: 7c:ea:47:23:06:f8:4d:3f:5b:ce:b0:57:76:16:51: e6:85:2b:c6:36:59:f4:b6:a5:30:16:3a:ba:c1:be: d0:7a:96:cd:26:00:a5:b1:ca:8e:5e:9d:99:00:0b: 9d:c5:df:f3:3f:b9:c3:aa:c4:18:c6:c3:8b:12:0d: bc:6e:2f:19:b4:2d:7c:0b:1d:55:57:f0:0b:65:c4: a0:c7:a8:c6:cb:d1:2c:ee:e4:bf:88:59:68:91:ef: b2:f6:62:c7:67:8d:7f:8d:1f:70:d8:e0:7f:17:51: 54:6a:c3:0e:14:49:7f:52:8f:bb:9c:cc:75:cc:df: 52:6f:e2:5a:3d:6d:58:e4:7b:4d:c4:c7:14:75:40: 45:7a:ea:4b:e3:68:fa:c2:7a:4e:ea:eb:2e:da:2c: f6:f1:dc:9e:6b:a1:ac:75:01:de:d7:d4:6f:b5:05: 5c:f6:40:ce:7e:68:31:af:41:d4:86:17:31:5e:72: 8a:8c:f0:bb:82:d9:6d:2d:62:64:13:35:01:61:4a: 10:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4C:70:D7:B2:07:F0:E0:21:4E:91:C1:34:B7:37:C5:86:F2:7C:77 X509v3 Authority Key Identifier: keyid:13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/EB17A8C2152511ECAD055780C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.60.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:00:5e:ad:6c:10:a6:52:af:c5:31:63:21:9a:1c:e3:28:8d: e7:f3:4f:16:b8:1c:e4:ca:bd:35:08:22:65:5f:7b:2c:58:6b: 77:9d:94:c6:c9:71:5d:73:ab:21:f2:18:c5:2e:18:0a:86:c6: c9:d0:da:39:1f:18:ad:75:ed:37:d7:28:a7:b3:67:28:21:a0: 32:3b:b8:4f:9c:21:0d:fc:23:85:ce:b8:f8:8f:be:dc:59:7e: a4:91:e3:e5:0b:7c:e2:05:3b:e3:75:0c:31:34:92:01:30:c4: c4:fa:24:85:05:80:e2:95:2d:39:09:ba:24:51:f5:8e:9b:cc: b6:13:09:c9:0d:71:fb:56:d3:a2:95:18:1b:4c:89:40:5e:75: d8:e4:a7:c9:2d:43:03:dc:e8:18:cf:35:2c:03:8c:76:20:1d: c4:80:c6:da:4a:de:a8:71:68:c5:2b:ab:44:94:c1:c8:16:f8: ed:d8:af:ae:ae:87:c3:bc:6c:24:23:4b:04:e3:ba:77:26:c2: 21:1f:8f:11:09:03:23:1e:e0:e1:e0:c6:66:b8:99:28:bc:2a: 2d:74:4f:7d:76:d1:d3:f1:1a:66:b8:4f:e8:d9:31:db:92:0e: 81:81:67:f6:c3:f9:ae:57:2b:f8:08:10:ef:3d:c3:a6:b2:e6: 24:eb:bc:da -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERGNTYxMTAvBgNVBAUTKDEzOTZFQTk0MDk0NUZDMjA1RkYyRTNEMUIyQkUxQjkw RDcyQ0M1RTkwHhcNMjQwMzA1MDIwMzQzWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWU2N2Q3Zi03MWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysJZ31HQOMssM2Qm4AgnzQ7H927Xdv7/rw54VinJvv+cRb7omsZe/9PLuT6F 3JVoyZ22qIZknZtig7586kcjBvhNP1vOsFd2FlHmhSvGNln0tqUwFjq6wb7QepbN JgClscqOXp2ZAAudxd/zP7nDqsQYxsOLEg28bi8ZtC18Cx1VV/ALZcSgx6jGy9Es 7uS/iFloke+y9mLHZ41/jR9w2OB/F1FUasMOFEl/Uo+7nMx1zN9Sb+JaPW1Y5HtN xMcUdUBFeupL42j6wnpO6usu2iz28dyea6GsdQHe19RvtQVc9kDOfmgxr0HUhhcx XnKKjPC7gtltLWJkEzUBYUoQuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNdMcNey B/DgIU6RwTS3N8WG8nx3MB8GA1UdIwQYMBaAFBOW6pQJRfwgX/Lj0bK+G5DXLMXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REY1Ni9CRDdGQTAzODE1 MjMxMUVDQjc0RjIwODBDNEY5QUUwMi9FNWJxbEFsRl9DQmY4dVBSc3I0YmtOY3N4 ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U1YnFsQWxGX0NCZjh1UFJzcjRia05jc3hlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NERGNTYvQkQ3RkEwMzgxNTIzMTFFQ0I3NEYyMDgwQzRGOUFFMDIvRUIxN0E4QzIx NTI1MTFFQ0FEMDU1NzgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnoTwwDQYJKoZIhvcNAQELBQADggEBAF4AXq1sEKZSr8Ux YyGaHOMojefzTxa4HOTKvTUIImVfeyxYa3edlMbJcV1zqyHyGMUuGAqGxsnQ2jkf GK117TfXKKezZyghoDI7uE+cIQ38I4XOuPiPvtxZfqSR4+ULfOIFO+N1DDE0kgEw xMT6JIUFgOKVLTkJuiRR9Y6bzLYTCckNcftW06KVGBtMiUBeddjkp8ktQwPc6BjP NSwDjHYgHcSAxtpK3qhxaMUrq0SUwcgW+O3Yr66uh8O8bCQjSwTjuncmwiEfjxEJ AyMe4OHgxma4mSi8Ki10T3120dPxGma4T+jZMduSDoGBZ/bD+a5XK/gIEO89w6ay 5iTrvNo= -----END CERTIFICATE-----Generated at Tue May 7 03:12:18 2024 by rpki-client on console-fra.rpki-client.org