$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/16637998DB5311EE9F9F1F75C4F9AE02.roa File: 16637998DB5311EE9F9F1F75C4F9AE02.roa (raw, json) Hash identifier: 1iBNKJacwV4vfgoIMfHJ0w/UhzKQOgElrPltLAqYwDU= Subject key identifier: B9:11:8B:94:AE:6A:71:2B:AC:71:FE:5A:2B:0C:DE:03:26:C8:62:78 Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB Certificate serial: 04C8 Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/16637998DB5311EE9F9F1F75C4F9AE02.roa Signing time: Wed 06 Mar 2024 00:48:57 +0000 ROA not before: Wed 06 Mar 2024 00:48:57 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 16509 IP address blocks: 1.44.96.0/24 maxlen: 24 203.17.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB Validity Not Before: Mar 6 00:48:57 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65e7bd79-e19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3c:4d:e4:25:a6:8f:21:65:e9:91:c8:8b:9a: cd:2f:9b:44:54:04:19:ac:d5:4a:98:3a:ad:f9:bc: a1:60:52:f3:77:7b:82:d4:c1:ac:67:90:cf:4f:69: 4b:a1:15:38:92:04:61:91:b0:95:9c:18:70:21:e1: 85:1d:26:88:8f:3e:ae:54:f8:e5:66:32:94:0e:f2: c5:a9:a4:df:e6:20:5f:f3:40:e8:d4:60:53:7c:58: c9:36:92:50:b3:3f:8b:62:cf:fa:14:fa:0c:67:05: 42:6a:b2:d1:c9:9c:b8:91:0b:f6:5c:bd:23:3b:0b: d8:c9:b4:01:a6:e7:53:9e:42:88:9c:a8:f7:dc:80: a8:d9:0e:e6:65:70:12:21:11:6d:56:c0:dd:b2:42: 0c:63:02:5a:84:7d:08:98:27:ce:b6:28:7f:ca:d3: 49:78:c7:a9:e5:4d:fe:47:1b:04:fc:0b:3b:d7:18: 7d:41:8c:9b:08:b3:1f:f8:5c:38:4f:08:50:eb:1f: 54:1d:d8:e6:bb:ae:7d:85:f3:1f:a9:d8:47:4a:a4: fb:48:3b:1c:93:a7:cc:73:06:31:98:81:33:2f:a0: 83:a8:bd:7f:fb:31:63:f4:f6:cb:89:1b:4d:92:d2: 11:08:d7:3f:2a:3b:11:c2:0b:f1:62:5a:c8:66:1c: fe:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:11:8B:94:AE:6A:71:2B:AC:71:FE:5A:2B:0C:DE:03:26:C8:62:78 X509v3 Authority Key Identifier: keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/16637998DB5311EE9F9F1F75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.44.96.0/24 203.17.138.0/24 Signature Algorithm: sha256WithRSAEncryption b1:f8:d9:96:78:34:88:e0:eb:b5:74:74:ac:57:70:76:be:ab: 9c:0d:c4:61:08:d0:80:38:83:59:7a:61:25:b0:85:c6:f8:6c: 48:8f:72:8c:82:09:b4:f1:70:af:a8:c6:ee:77:36:45:e9:17: 1c:7f:fc:dd:1c:67:af:94:64:ce:e0:37:e4:19:17:c4:20:34: 3e:d2:ad:76:25:a8:2d:47:cc:70:5d:89:1a:51:eb:ba:d5:08: 2f:eb:2c:0b:e5:fd:73:19:e1:60:3c:56:57:11:51:78:77:e1: f4:f7:a7:ca:1f:f5:91:be:e9:00:32:9f:ef:b3:3a:fb:0a:64: 45:28:42:b9:fd:28:3f:48:bb:c1:59:f1:93:15:87:0d:58:2e: 54:cd:4c:f9:5b:d0:7d:12:4e:36:e2:01:71:90:61:69:2f:ea: 18:bf:49:c7:75:40:11:54:5c:9a:f3:49:ab:e6:56:c3:53:bb: b2:1d:59:b0:54:76:35:b1:d1:ac:e9:4f:8d:9a:f6:51:33:d0: aa:30:ad:9f:45:23:ee:20:1a:e6:9a:00:64:a5:8b:76:50:30: 10:23:a8:f4:c2:15:f2:fa:c6:2d:16:ed:1a:10:b0:e4:eb:e8: 31:2b:20:8d:fc:5d:ad:eb:79:6a:05:9f:bb:c9:0c:55:56:ae: 1c:cb:6a:3d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC RUM0NkU1RkIwHhcNMjQwMzA2MDA0ODU3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWU3YmQ3OS1lMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8jxN5CWmjyFl6ZHIi5rNL5tEVAQZrNVKmDqt+byhYFLzd3uC1MGsZ5DPT2lL oRU4kgRhkbCVnBhwIeGFHSaIjz6uVPjlZjKUDvLFqaTf5iBf80Do1GBTfFjJNpJQ sz+LYs/6FPoMZwVCarLRyZy4kQv2XL0jOwvYybQBpudTnkKInKj33ICo2Q7mZXAS IRFtVsDdskIMYwJahH0ImCfOtih/ytNJeMep5U3+RxsE/As71xh9QYybCLMf+Fw4 TwhQ6x9UHdjmu659hfMfqdhHSqT7SDsck6fMcwYxmIEzL6CDqL1/+zFj9PbLiRtN ktIRCNc/KjsRwgvxYlrIZhz+NQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLkRi5Su anErrHH+WisM3gMmyGJ4MB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE0QjEvODQxODkyMjZGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvMTY2Mzc5OThE QjUzMTFFRTlGOUYxRjc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAABLGADBADLEYowDQYJKoZIhvcNAQELBQADggEBALH42ZZ4 NIjg67V0dKxXcHa+q5wNxGEI0IA4g1l6YSWwhcb4bEiPcoyCCbTxcK+oxu53NkXp Fxx//N0cZ6+UZM7gN+QZF8QgND7SrXYlqC1HzHBdiRpR67rVCC/rLAvl/XMZ4WA8 VlcRUXh34fT3p8of9ZG+6QAyn++zOvsKZEUoQrn9KD9Iu8FZ8ZMVhw1YLlTNTPlb 0H0STjbiAXGQYWkv6hi/Scd1QBFUXJrzSavmVsNTu7IdWbBUdjWx0azpT42a9lEz 0KowrZ9FI+4gGuaaAGSli3ZQMBAjqPTCFfL6xi0W7RoQsOTr6DErII38Xa3reWoF n7vJDFVWrhzLaj0= -----END CERTIFICATE-----Generated at Wed May 1 02:46:18 2024 by rpki-client on console-ams.rpki-client.org