$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/4B3AC7DC5FC811ED869A6956C4F9AE02.roa File: 4B3AC7DC5FC811ED869A6956C4F9AE02.roa (raw, json) Hash identifier: e0M69OOcktS7U9tIaV8UhvpaxYiOb9SW8R6FJOcK+PU= Subject key identifier: 58:B0:95:08:C6:4B:16:46:AC:AA:84:7D:E8:CC:06:C8:13:EE:A2:A2 Certificate issuer: /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A Certificate serial: 06EA Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/4B3AC7DC5FC811ED869A6956C4F9AE02.roa Signing time: Mon 02 Oct 2023 21:58:53 +0000 ROA not before: Mon 02 Oct 2023 21:58:53 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 45177 IP address blocks: 103.123.164.0/22 maxlen: 22 103.123.164.0/24 maxlen: 24 103.123.165.0/24 maxlen: 24 103.123.166.0/24 maxlen: 24 103.123.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A Validity Not Before: Oct 2 21:58:53 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=651b3d1d-8ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a3:00:83:ae:b2:36:a1:35:69:17:03:32:dd: 8a:9a:d2:2a:56:48:ce:2b:27:4f:48:16:a1:93:ba: 40:7b:68:0f:d2:e5:7a:8a:27:0f:be:be:f6:e5:3d: 94:85:0c:c6:f1:0e:7b:97:84:7d:d5:7b:4b:67:7a: 9f:af:5f:22:59:24:98:3c:c6:48:b1:5e:70:84:c5: f9:93:6c:dd:49:b6:00:35:d5:05:e4:eb:c4:b2:89: 56:cd:f3:3d:bd:4f:6d:f9:40:74:9d:b5:0e:13:0c: 4d:7b:83:81:db:1d:fe:d5:48:0e:fa:99:e8:73:84: 1b:35:04:c0:83:9b:dd:99:a1:f0:4a:03:3c:b1:4f: b6:5a:cb:e7:bf:87:11:80:51:2a:a1:36:a8:c3:cf: e2:0f:9c:3a:38:4e:bc:bf:be:77:03:87:59:5c:53: 8e:9e:6d:0a:3c:ea:30:a3:98:33:b9:65:a2:30:15: b2:17:90:73:21:03:16:d5:59:f1:cf:66:3c:d3:5e: 29:97:d1:5f:20:48:d7:ee:7f:45:74:4a:34:3c:90: 84:8f:e4:c5:63:cf:53:a6:a2:a3:20:fa:0b:97:3b: 1a:8e:97:c9:a0:f6:f5:08:14:4f:be:fc:9e:ed:4c: e0:ec:f5:fd:be:e1:fb:1a:51:3d:f0:f9:ed:b5:27: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B0:95:08:C6:4B:16:46:AC:AA:84:7D:E8:CC:06:C8:13:EE:A2:A2 X509v3 Authority Key Identifier: keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/4B3AC7DC5FC811ED869A6956C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.164.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:ef:ce:24:b0:83:e7:0a:bc:60:9e:be:db:a3:44:61:32:99: 66:9e:17:03:4a:1b:6f:95:f6:c0:e8:b2:34:a7:e6:54:83:37: 80:95:b1:93:17:a9:0d:37:75:5a:b7:36:cc:dd:7e:b0:06:5b: ef:6b:8d:6d:b3:ec:a9:5d:61:26:7d:4a:61:45:d5:c8:c9:a0: 4f:59:e1:39:0e:f4:93:89:c5:15:3c:e5:15:7f:53:7b:20:f4: 28:10:10:a1:92:cd:00:95:35:e4:69:83:0b:86:4a:2b:95:97: 81:e2:b5:3c:57:3e:92:74:be:73:db:41:5e:08:9c:b5:1b:6c: 53:63:f7:e7:51:8a:49:8d:bc:b9:b1:d1:f7:88:9d:91:b8:e5: 0d:a0:66:61:e5:db:e0:c0:98:ab:de:f0:b6:ac:f8:ef:97:c3: 81:21:68:cb:ab:d6:45:67:2e:c2:cd:7f:c7:b7:05:33:29:8d: 1d:6b:73:6e:fd:97:48:8b:78:ad:66:7c:ea:00:31:cb:ce:1d: e4:55:2d:4d:ca:a0:3d:86:7f:2d:a9:d0:aa:32:aa:43:f8:19: 97:a6:62:a2:51:e3:28:7f:05:89:7b:a2:51:9e:64:b9:97:62: 32:09:a0:8d:e6:fc:34:b3:d0:b4:fa:2e:c3:1d:dc:06:ea:a2: 86:5a:16:f5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRGRTcxMTAvBgNVBAUTKENCRTNEMkExNjVCMTk0Qjk1OEVFQzNCNkE5NDQ1Nzc3 MkEzQTA5MkEwHhcNMjMxMDAyMjE1ODUzWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFiM2QxZC04ZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA86MAg66yNqE1aRcDMt2KmtIqVkjOKydPSBahk7pAe2gP0uV6iicPvr725T2U hQzG8Q57l4R91XtLZ3qfr18iWSSYPMZIsV5whMX5k2zdSbYANdUF5OvEsolWzfM9 vU9t+UB0nbUOEwxNe4OB2x3+1UgO+pnoc4QbNQTAg5vdmaHwSgM8sU+2Wsvnv4cR gFEqoTaow8/iD5w6OE68v753A4dZXFOOnm0KPOowo5gzuWWiMBWyF5BzIQMW1Vnx z2Y8014pl9FfIEjX7n9FdEo0PJCEj+TFY89TpqKjIPoLlzsajpfJoPb1CBRPvvye 7Uzg7PX9vuH7GlE98PnttSfaVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFiwlQjG SxZGrKqEfejMBsgT7qKiMB8GA1UdIwQYMBaAFMvj0qFlsZS5WO7DtqlEV3cqOgkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEZFNy81QTJEODlFQURC N0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dXeGxMbFk3c08ycVVSWGR5bzZD U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ktUFNvV1d4bExsWTdzTzJxVVJYZHlvNkNTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTRGRTcvNUEyRDg5RUFEQjdEMTFFQUJDRjNFQzNFQzRGOUFFMDIvNEIzQUM3REM1 RkM4MTFFRDg2OUE2OTU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJne6QwDQYJKoZIhvcNAQELBQADggEBABrvziSwg+cKvGCe vtujRGEymWaeFwNKG2+V9sDosjSn5lSDN4CVsZMXqQ03dVq3NszdfrAGW+9rjW2z 7KldYSZ9SmFF1cjJoE9Z4TkO9JOJxRU85RV/U3sg9CgQEKGSzQCVNeRpgwuGSiuV l4HitTxXPpJ0vnPbQV4InLUbbFNj9+dRikmNvLmx0feInZG45Q2gZmHl2+DAmKve 8Las+O+Xw4EhaMur1kVnLsLNf8e3BTMpjR1rc279l0iLeK1mfOoAMcvOHeRVLU3K oD2Gfy2p0KoyqkP4GZemYqJR4yh/BYl7olGeZLmXYjIJoI3m/DSz0LT6LsMd3Abq ooZaFvU= -----END CERTIFICATE-----Generated at Fri May 10 23:04:06 2024 by rpki-client on console-ams.rpki-client.org