$ rpki-client -vvf rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/B174D294F50011EEB5298B64C4F9AE02.roa File: B174D294F50011EEB5298B64C4F9AE02.roa (raw, json) Hash identifier: DmsBe/nWUMAmA56V3udTaCz0NsFVXi5Q9O4KvJmVDd0= Subject key identifier: 4F:38:50:D9:61:85:1F:11:AA:16:93:67:96:35:15:F9:56:0E:D2:6D Certificate issuer: /CN=A91542DD/serialNumber=1C80F9D577EDC4603520314A17A45CB6A7C5C160 Certificate serial: 0C16 Authority key identifier: 1C:80:F9:D5:77:ED:C4:60:35:20:31:4A:17:A4:5C:B6:A7:C5:C1:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/B174D294F50011EEB5298B64C4F9AE02.roa Signing time: Thu 02 May 2024 19:03:26 +0000 ROA not before: Thu 02 May 2024 19:03:26 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 7015 IP address blocks: 36.255.213.0/24 maxlen: 24 103.210.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.crl rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3094 (0xc16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91542DD/serialNumber=1C80F9D577EDC4603520314A17A45CB6A7C5C160 Validity Not Before: May 2 19:03:26 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6633e37e-b03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6f:e5:45:b1:d8:66:35:f2:32:ea:6f:f9:db: 13:8c:e6:ae:dd:29:00:c7:e6:b7:34:e3:a3:3f:41: 4b:d9:9b:dd:5f:8f:8f:23:7e:fd:b7:f3:5d:42:eb: 5d:01:57:83:3c:42:58:6b:eb:2b:c6:44:4d:32:da: b0:f7:3c:97:80:75:43:0c:58:ae:89:5b:b7:56:68: 50:77:ad:d3:d2:74:ba:89:1c:7d:fc:1a:e0:c4:1f: e5:7c:20:57:7e:7d:4e:77:6d:df:52:9f:e2:fe:5f: d7:57:80:df:47:64:a0:0d:d4:96:23:37:d4:d7:74: 26:ba:fb:dc:c8:d6:29:c7:4d:72:17:3e:a4:6a:62: d4:c5:2c:df:d9:38:bf:ed:2f:6e:b4:94:80:7d:09: 07:29:04:b3:82:90:fd:8e:0d:1c:4b:e5:78:cf:37: 1f:f3:62:9a:58:7d:86:48:93:bf:5b:bc:54:a3:91: f9:d6:37:c5:1b:50:52:08:e7:db:0f:d0:d5:4c:2c: e3:29:4f:39:c0:74:37:3f:2d:ab:58:26:d9:b3:7f: c1:c1:a9:ee:b0:f7:9d:71:93:0a:25:0c:2e:5e:a4: 45:57:b2:e4:68:a8:34:28:ec:c6:01:89:15:e5:3c: 36:02:71:48:5a:93:77:bc:85:fd:2c:dc:a9:86:67: ec:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:38:50:D9:61:85:1F:11:AA:16:93:67:96:35:15:F9:56:0E:D2:6D X509v3 Authority Key Identifier: keyid:1C:80:F9:D5:77:ED:C4:60:35:20:31:4A:17:A4:5C:B6:A7:C5:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/B174D294F50011EEB5298B64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.213.0/24 103.210.12.0/24 Signature Algorithm: sha256WithRSAEncryption 96:6f:43:11:9b:80:75:15:25:ca:14:ed:36:46:f1:ae:9f:b3: 9e:2f:76:ec:c5:34:39:d9:ba:27:0f:d1:95:18:17:1f:17:9d: 26:ed:bc:6f:06:7c:0d:4c:f5:7f:3a:99:10:33:ab:41:5a:8b: 83:32:37:a0:e7:1b:36:c2:de:0a:f6:50:68:fc:f9:e4:2c:fd: 3f:3d:9d:c0:0d:22:ee:d5:14:b3:de:bf:85:49:3a:63:52:b0: cd:08:61:63:60:b5:a5:7d:95:58:f8:0b:e7:26:34:9e:57:2f: f8:10:1a:70:61:75:d8:b9:d9:f8:d6:46:0c:0a:23:44:55:eb: 3f:bb:85:9c:4b:01:e9:37:fa:85:e9:c6:8e:2b:44:ce:ac:f3: d9:c8:a9:d8:48:d4:ec:6a:ea:be:1d:c2:a1:23:fd:13:99:f4: 1a:76:34:3e:88:7d:90:8e:3a:d1:6d:56:5e:f1:bf:32:c2:56: 33:7e:ac:76:46:f3:ac:1e:7f:a4:4e:4c:bb:d6:77:25:a0:c7: f4:a5:41:55:aa:e2:6e:2f:b3:92:44:71:3b:97:3e:41:bc:77: 69:c3:bb:62:19:6a:18:96:c4:55:44:ae:96:68:a3:2f:22:35: dd:1f:a9:91:0e:40:2b:78:72:46:94:99:03:1a:b5:56:59:11: 7f:6d:08:04 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQyREQxMTAvBgNVBAUTKDFDODBGOUQ1NzdFREM0NjAzNTIwMzE0QTE3QTQ1Q0I2 QTdDNUMxNjAwHhcNMjQwNTAyMTkwMzI2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzZTM3ZS1iMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5G/lRbHYZjXyMupv+dsTjOau3SkAx+a3NOOjP0FL2ZvdX4+PI379t/NdQutd AVeDPEJYa+srxkRNMtqw9zyXgHVDDFiuiVu3VmhQd63T0nS6iRx9/BrgxB/lfCBX fn1Od23fUp/i/l/XV4DfR2SgDdSWIzfU13QmuvvcyNYpx01yFz6kamLUxSzf2Ti/ 7S9utJSAfQkHKQSzgpD9jg0cS+V4zzcf82KaWH2GSJO/W7xUo5H51jfFG1BSCOfb D9DVTCzjKU85wHQ3Py2rWCbZs3/BwanusPedcZMKJQwuXqRFV7LkaKg0KOzGAYkV 5Tw2AnFIWpN3vIX9LNyphmfs7QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFE84UNlh hR8RqhaTZ5Y1FflWDtJtMB8GA1UdIwQYMBaAFByA+dV37cRgNSAxShekXLanxcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDJERC85Mzk3OTc0NkU2 NEQxMUU5OEExODg1N0JDNEY5QUUwMi9ISUQ1MVhmdHhHQTFJREZLRjZSY3RxZkZ3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hJRDUxWGZ0eEdBMUlERktGNlJjdHFmRndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQyREQvOTM5Nzk3NDZFNjREMTFFOThBMTg4NTdCQzRGOUFFMDIvQjE3NEQyOTRG NTAwMTFFRUI1Mjk4QjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAk/9UDBABn0gwwDQYJKoZIhvcNAQELBQADggEBAJZvQxGb gHUVJcoU7TZG8a6fs54vduzFNDnZuicP0ZUYFx8XnSbtvG8GfA1M9X86mRAzq0Fa i4MyN6DnGzbC3gr2UGj8+eQs/T89ncANIu7VFLPev4VJOmNSsM0IYWNgtaV9lVj4 C+cmNJ5XL/gQGnBhddi52fjWRgwKI0RV6z+7hZxLAek3+oXpxo4rRM6s89nIqdhI 1Oxq6r4dwqEj/ROZ9Bp2ND6IfZCOOtFtVl7xvzLCVjN+rHZG86wef6ROTLvWdyWg x/SlQVWq4m4vs5JEcTuXPkG8d2nDu2IZahiWxFVErpZooy8iNd0fqZEOQCt4ckaU mQMatVZZEX9tCAQ= -----END CERTIFICATE-----Generated at Thu May 16 20:25:41 2024 by rpki-client on console-ams.rpki-client.org