$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/144D1F865F7F11EBB5C08239C4F9AE02.roa File: 144D1F865F7F11EBB5C08239C4F9AE02.roa (raw, json) Hash identifier: L9FXc866DgpJUjP8X+4KuPnyfrF1JFS1NUYDRCmwLNQ= Subject key identifier: 7A:0C:07:39:15:E6:0C:84:B2:DE:56:50:61:17:2D:75:FB:27:E2:DF Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Certificate serial: 09D1 Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/144D1F865F7F11EBB5C08239C4F9AE02.roa Signing time: Tue 02 Apr 2024 20:59:59 +0000 ROA not before: Tue 02 Apr 2024 20:59:59 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 140708 IP address blocks: 103.21.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 20:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2513 (0x9d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Validity Not Before: Apr 2 20:59:59 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660c71ce-4345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:d5:65:18:9a:e0:ab:f0:53:30:52:ac:0e: f2:57:e5:16:07:cf:80:7a:38:09:23:ed:59:9f:8b: 08:a7:3f:ec:27:d6:ce:f0:eb:0c:5d:fd:45:c8:e8: 23:3e:e5:68:0d:dc:86:3e:d7:54:12:16:9f:f9:8d: 98:f0:b7:11:2e:11:fd:ae:dd:1e:f7:6d:d1:fe:7b: bb:15:4d:80:f4:97:9b:9c:fd:c7:1b:44:79:fe:19: d9:82:f8:69:e9:d1:81:fa:3f:4f:86:fa:0a:ef:3f: ce:44:5c:b9:1d:5e:ab:df:0d:1c:cb:5b:f5:41:7e: fa:8a:f1:86:c7:59:49:bb:90:1b:5c:de:07:9b:f9: fd:a9:a2:17:d9:17:65:be:76:fb:6b:81:6e:8d:ab: eb:d6:77:05:c4:47:a5:c7:ea:dd:72:b2:e0:d7:f3: d5:8b:5f:76:bd:8f:61:78:50:92:d2:81:22:86:e0: 1c:f1:79:09:d3:c4:ca:0a:df:3f:b4:79:79:6c:09: f7:4b:d9:b1:fa:71:c2:c2:46:aa:b5:16:d5:a5:ee: d7:5a:a8:06:1b:a4:47:51:0e:3b:78:0b:4e:74:54: 64:5f:70:4b:bc:53:ee:10:33:a4:e0:90:97:c9:2d: 50:3e:6a:eb:ae:ac:d3:b4:d2:f1:0c:13:85:9c:37: 52:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0C:07:39:15:E6:0C:84:B2:DE:56:50:61:17:2D:75:FB:27:E2:DF X509v3 Authority Key Identifier: keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/144D1F865F7F11EBB5C08239C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.21.171.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:83:6a:71:70:89:81:d3:f1:45:5c:1f:fc:0b:75:2d:b1:6e: 0e:92:55:0e:3f:22:a0:1b:64:bd:8e:98:40:65:b2:f9:b9:0c: cc:86:a8:82:b0:d8:9f:e9:e7:39:e3:a6:d9:4a:d4:2f:c3:60: bf:7a:19:48:39:e4:bc:a1:09:55:49:5a:28:b9:c7:89:0a:6a: c9:f9:a5:8c:8c:88:b0:45:78:58:3a:d9:c4:96:17:64:c9:99: a9:83:c0:a0:57:88:91:65:b2:77:fb:76:4c:40:2d:7b:e4:c7: d4:be:47:a6:69:54:4d:ec:3e:36:34:b3:e7:90:f1:5e:11:d3: 24:3a:9e:c8:e0:08:3f:84:9e:83:09:c1:ae:29:fe:23:02:e6: 8f:bd:cc:03:09:33:41:51:a6:f2:e6:e8:3d:f4:89:de:3e:97: 56:f9:60:36:39:86:18:5f:58:b2:e4:75:38:98:45:f4:a6:7b: 23:a7:4b:c7:ad:d1:d4:39:3a:79:ab:f9:af:3d:52:fe:db:8d: b0:8a:a2:45:31:b6:f3:14:7b:6b:f6:42:d7:42:a5:73:42:ba: d6:1b:1b:59:e3:98:ea:72:8e:6b:60:06:21:0a:d7:75:a1:39: a3:5c:19:6f:16:78:bb:05:83:ed:88:d6:c1:cb:97:1c:11:7f: 34:e1:4b:64 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRCN0UxMTAvBgNVBAUTKEVBRjE1MkJEMURENDcwRUY3M0E1MUQ0Qjk1MUQ0RkEw QUE0Q0NEOEUwHhcNMjQwNDAyMjA1OTU5WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjNzFjZS00MzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBjVZRia4KvwUzBSrA7yV+UWB8+AejgJI+1Zn4sIpz/sJ9bO8OsMXf1FyOgj PuVoDdyGPtdUEhaf+Y2Y8LcRLhH9rt0e923R/nu7FU2A9JebnP3HG0R5/hnZgvhp 6dGB+j9PhvoK7z/ORFy5HV6r3w0cy1v1QX76ivGGx1lJu5AbXN4Hm/n9qaIX2Rdl vnb7a4Fujavr1ncFxEelx+rdcrLg1/PVi192vY9heFCS0oEihuAc8XkJ08TKCt8/ tHl5bAn3S9mx+nHCwkaqtRbVpe7XWqgGG6RHUQ47eAtOdFRkX3BLvFPuEDOk4JCX yS1QPmrrrqzTtNLxDBOFnDdSTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHoMBzkV 5gyEst5WUGEXLXX7J+LfMB8GA1UdIwQYMBaAFOrxUr0d1HDvc6UdS5UdT6CqTM2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI3RS8zRjM1QzA4NDU5 MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNPOXpwUjFMbFIxUG9LcE16 WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ2RlN2UjNVY085enBSMUxsUjFQb0twTXpZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTRCN0UvM0YzNUMwODQ1OTE1MTFFQUIzRjJBMTJDQzRGOUFFMDIvMTQ0RDFGODY1 RjdGMTFFQkI1QzA4MjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnFaswDQYJKoZIhvcNAQELBQADggEBABuDanFwiYHT8UVc H/wLdS2xbg6SVQ4/IqAbZL2OmEBlsvm5DMyGqIKw2J/p5znjptlK1C/DYL96GUg5 5LyhCVVJWii5x4kKasn5pYyMiLBFeFg62cSWF2TJmamDwKBXiJFlsnf7dkxALXvk x9S+R6ZpVE3sPjY0s+eQ8V4R0yQ6nsjgCD+EnoMJwa4p/iMC5o+9zAMJM0FRpvLm 6D30id4+l1b5YDY5hhhfWLLkdTiYRfSmeyOnS8et0dQ5Onmr+a89Uv7bjbCKokUx tvMUe2v2QtdCpXNCutYbG1njmOpyjmtgBiEK13WhOaNcGW8WeLsFg+2I1sHLlxwR fzThS2Q= -----END CERTIFICATE-----Generated at Sun May 26 23:05:28 2024 by rpki-client on console-ams.rpki-client.org