$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/807CB298903A11EBA9783756C4F9AE02.roa File: 807CB298903A11EBA9783756C4F9AE02.roa (raw, json) Hash identifier: VRlOw4U0zK5u1Vp0LZloOBpL4DGdSHt/Hph/KRzLuAc= Subject key identifier: C7:83:9F:08:B9:F3:BA:D1:A2:44:C4:92:B3:E8:45:98:0C:5E:06:E6 Certificate issuer: /CN=A9157B66/serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Certificate serial: 052D Authority key identifier: C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/807CB298903A11EBA9783756C4F9AE02.roa Signing time: Sat 09 Dec 2023 00:12:16 +0000 ROA not before: Sat 09 Dec 2023 00:12:16 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 132102 IP address blocks: 103.28.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B66/serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Validity Not Before: Dec 9 00:12:16 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6573b0df-fda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:cc:ed:d2:60:da:b7:22:0a:2d:60:6c:b8: a7:57:02:80:c1:eb:86:00:3d:e2:6c:83:6e:54:c1: 18:f3:ca:fb:54:97:be:59:fb:bb:28:b0:22:de:2c: 98:a8:2e:7d:9a:10:89:d8:0f:2a:0e:b9:8a:0c:32: 7a:56:a9:b1:ee:0c:84:41:8f:64:72:75:45:b6:08: 70:9b:8b:e6:d1:2f:66:8a:d5:c1:26:d2:ab:cf:6d: 52:7b:ab:02:85:b5:be:e9:3f:7a:ab:81:79:5c:f6: 08:27:7a:09:c1:b1:a5:ad:a6:09:d7:cb:aa:38:12: 14:70:d0:d0:ff:3f:e9:00:94:b1:54:3d:d6:6d:52: b5:ee:e8:1e:02:11:c4:3b:0f:5f:4b:88:4b:46:a8: d4:99:18:ed:e0:ff:18:e9:88:c9:ba:a4:a5:b0:bc: a7:43:c7:c2:31:2d:7b:a2:a3:aa:a7:6a:dc:e7:d6: 1c:76:86:8d:42:31:82:cb:df:37:dc:b6:6c:53:23: b4:24:b7:e7:32:62:4d:66:38:99:0d:4d:c2:ae:ba: 78:79:22:da:15:7f:ea:aa:12:d3:e0:5b:41:57:00: f1:db:8c:42:73:84:f2:4d:9f:19:14:67:ca:20:e0: 8b:5c:e3:d1:6d:41:fa:05:06:17:95:b0:d2:48:05: ca:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:83:9F:08:B9:F3:BA:D1:A2:44:C4:92:B3:E8:45:98:0C:5E:06:E6 X509v3 Authority Key Identifier: keyid:C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/807CB298903A11EBA9783756C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.20.0/24 Signature Algorithm: sha256WithRSAEncryption 04:a3:43:c8:ca:59:de:fe:72:12:6e:62:ea:27:4a:ff:0c:d7: bd:80:7e:a3:2a:84:ff:80:44:28:11:87:f9:b2:8d:cc:ed:57: 00:a7:53:34:4e:f2:c5:14:55:4b:70:79:61:38:95:fc:f2:37: 2b:47:7f:b1:9f:f1:0c:34:a6:a7:19:1f:89:c3:2b:35:79:16: f1:00:0d:e9:6f:61:09:78:84:1a:93:59:2b:b1:29:88:9b:e7: 54:4b:10:3d:d2:c9:d9:0b:f1:db:e6:a5:8b:ab:42:c6:08:3a: de:e2:56:20:e2:8b:3b:1f:da:a8:ed:47:80:a6:29:71:c7:58: 98:81:07:d2:2f:37:d3:4e:50:09:6c:17:b1:e7:c4:1c:2c:ed: 3f:4b:66:31:9d:7c:4b:d4:c6:c6:ed:fa:fd:13:cc:02:7d:22: 4d:3f:1b:37:f5:4b:e1:70:3e:e7:81:32:4a:ec:f6:2a:6e:ac: 04:0d:80:2f:70:2f:ab:db:40:25:47:1e:0e:33:1a:7b:0b:0a: c6:3b:68:0f:b3:b4:e2:4a:b7:a6:fb:a3:5c:b9:67:1a:c0:66: d7:c3:74:bd:c1:e7:5e:9f:e8:54:ff:07:4f:6a:8e:25:45:99: 5d:c3:9a:dd:a3:06:1a:e6:4b:29:7d:5a:29:9d:48:a9:13:1f: 09:8f:e2:4f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCNjYxMTAvBgNVBAUTKEM0NTVCMDg2QkFCODY0N0NEMjUxMENBODMyNDFFNzAw MTRDRDhBNDQwHhcNMjMxMjA5MDAxMjE2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczYjBkZi1mZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDfM7dJg2rciCi1gbLinVwKAweuGAD3ibINuVMEY88r7VJe+Wfu7KLAi3iyY qC59mhCJ2A8qDrmKDDJ6Vqmx7gyEQY9kcnVFtghwm4vm0S9mitXBJtKrz21Se6sC hbW+6T96q4F5XPYIJ3oJwbGlraYJ18uqOBIUcNDQ/z/pAJSxVD3WbVK17ugeAhHE Ow9fS4hLRqjUmRjt4P8Y6YjJuqSlsLynQ8fCMS17oqOqp2rc59YcdoaNQjGCy983 3LZsUyO0JLfnMmJNZjiZDU3Crrp4eSLaFX/qqhLT4FtBVwDx24xCc4TyTZ8ZFGfK IOCLXOPRbUH6BQYXlbDSSAXK/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMeDnwi5 87rRokTEkrPoRZgMXgbmMB8GA1UdIwQYMBaAFMRVsIa6uGR80lEMqDJB5wAUzYpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I2Ni9FNUM0RDMyNjkw MzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpIelNVUXlvTWtIbkFCVE5p a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hGV3docnE0Wkh6U1VReW9Na0huQUJUTmlrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdCNjYvRTVDNEQzMjY5MDM4MTFFQkE0REM1QTU0QzRGOUFFMDIvODA3Q0IyOTg5 MDNBMTFFQkE5NzgzNzU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnHBQwDQYJKoZIhvcNAQELBQADggEBAASjQ8jKWd7+chJu YuonSv8M172AfqMqhP+ARCgRh/myjcztVwCnUzRO8sUUVUtweWE4lfzyNytHf7Gf 8Qw0pqcZH4nDKzV5FvEADelvYQl4hBqTWSuxKYib51RLED3SydkL8dvmpYurQsYI Ot7iViDiizsf2qjtR4CmKXHHWJiBB9IvN9NOUAlsF7HnxBws7T9LZjGdfEvUxsbt +v0TzAJ9Ik0/Gzf1S+FwPueBMkrs9ipurAQNgC9wL6vbQCVHHg4zGnsLCsY7aA+z tOJKt6b7o1y5ZxrAZtfDdL3B516f6FT/B09qjiVFmV3Dmt2jBhrmSyl9WimdSKkT HwmP4k8= -----END CERTIFICATE-----Generated at Fri May 17 02:01:41 2024 by rpki-client on console-ams.rpki-client.org