$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/1F88812AAD5311EBA93CEB69C4F9AE02.roa File: 1F88812AAD5311EBA93CEB69C4F9AE02.roa (raw, json) Hash identifier: bG+lV0OxSOPuUHb6cBWsx9ElIiq2Ryk8p3PuLrci1fo= Subject key identifier: 93:72:8B:59:C2:D3:AF:E2:09:73:A0:C1:4B:09:BA:1A:94:1C:90:4C Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 06A5 Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/1F88812AAD5311EBA93CEB69C4F9AE02.roa Signing time: Fri 20 Oct 2023 22:10:36 +0000 ROA not before: Fri 20 Oct 2023 22:10:36 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 137969 IP address blocks: 103.155.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 20:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Validity Not Before: Oct 20 22:10:36 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6532fadb-6a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:8d:06:34:a7:7d:da:3e:89:09:f3:0e:8f: 16:c5:df:a3:90:34:2a:3f:d5:06:49:b4:27:41:dc: e6:8c:a3:e5:5b:57:ae:07:e8:72:dd:ef:51:56:af: 91:42:3b:6a:4c:80:34:16:bf:85:d7:26:50:73:3a: c3:e3:d8:38:94:f7:99:af:c4:f8:f4:1d:c3:82:dd: 2b:c4:34:06:f9:fb:50:24:22:06:6c:12:21:27:68: c0:59:7c:52:bc:09:9a:e8:fa:a1:e8:24:ea:2b:80: 5f:ce:67:16:74:53:dc:f4:74:64:5a:58:e3:7d:75: b9:67:d0:bc:45:cc:2e:d9:4a:a0:35:84:7c:a5:f2: 8c:c7:ba:de:72:71:f2:dc:cd:56:d1:30:62:a4:e0: 63:b3:c7:63:cc:a4:63:0a:40:b6:20:78:79:55:96: 7e:24:06:6a:f3:8d:8e:06:4b:83:96:81:71:12:e8: 21:6a:5d:32:d7:2a:09:fd:64:8e:c4:7f:07:c6:e7: b7:42:3d:a0:89:30:01:1a:59:ce:d8:b8:f0:e2:97: d9:e3:46:0f:6d:52:16:1d:3d:87:46:8e:d9:88:ce: d1:28:6e:c7:24:24:20:e3:86:93:b4:ea:25:97:6f: e6:6c:9b:d0:cc:59:0d:fd:7a:45:58:33:8f:57:66: dc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:72:8B:59:C2:D3:AF:E2:09:73:A0:C1:4B:09:BA:1A:94:1C:90:4C X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/1F88812AAD5311EBA93CEB69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.120.0/23 Signature Algorithm: sha256WithRSAEncryption a6:68:04:4b:3e:37:55:86:b9:26:76:f7:73:e8:ba:6e:d9:02: 80:2f:fd:85:37:11:57:6c:bc:d6:5d:ca:3c:d8:4f:d5:5e:77: f3:2d:5b:ee:af:19:49:47:8d:32:4a:11:a7:5f:55:68:05:05: 90:9c:12:a9:2e:6b:09:c8:71:f3:51:fb:7e:e6:2e:9d:3f:7b: 3c:32:84:df:e7:de:08:dd:69:fe:9b:6a:74:f6:8c:44:06:65: 4d:ab:5c:29:43:f3:a3:8e:9a:2e:e3:c6:8d:0a:95:ab:e9:00: 80:4f:b5:fb:c7:06:11:e9:51:4a:01:04:4a:34:66:e3:b0:ba: d8:8e:91:30:77:57:9f:39:dd:c9:ae:d9:6c:d5:d8:e4:2c:16: 51:20:b1:8a:66:ff:3e:c8:bc:c3:c3:bd:c9:c1:8a:0b:7a:a4: eb:c6:c0:4c:c9:29:6d:4e:fc:e6:99:05:6f:b3:a9:08:58:11: 55:88:0c:8c:a4:87:58:6a:c8:fe:d0:99:03:a3:d4:65:0f:66: 8c:e1:5f:3c:fa:2c:4a:3c:93:a6:39:15:4e:d2:a9:8c:2a:9d: 7f:8b:4d:69:7b:1b:76:44:d3:1d:73:47:20:ae:94:d4:bb:23: f0:15:bf:79:31:9e:cc:f2:08:39:4d:7c:21:51:06:24:bf:af: c3:b5:e8:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjMxMDIwMjIxMDM2WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTMyZmFkYi02YTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCKNBjSnfdo+iQnzDo8Wxd+jkDQqP9UGSbQnQdzmjKPlW1euB+hy3e9RVq+R QjtqTIA0Fr+F1yZQczrD49g4lPeZr8T49B3Dgt0rxDQG+ftQJCIGbBIhJ2jAWXxS vAma6Pqh6CTqK4BfzmcWdFPc9HRkWljjfXW5Z9C8Rcwu2UqgNYR8pfKMx7recnHy 3M1W0TBipOBjs8djzKRjCkC2IHh5VZZ+JAZq842OBkuDloFxEughal0y1yoJ/WSO xH8Hxue3Qj2giTABGlnO2Ljw4pfZ40YPbVIWHT2HRo7ZiM7RKG7HJCQg44aTtOol l2/mbJvQzFkN/XpFWDOPV2bcwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJNyi1nC 06/iCXOgwUsJuhqUHJBMMB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdCRjcvQUQyQUM3MkVGQkVBMTFFQUEwQUMzMzFBQzRGOUFFMDIvMUY4ODgxMkFB RDUzMTFFQkE5M0NFQjY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnm3gwDQYJKoZIhvcNAQELBQADggEBAKZoBEs+N1WGuSZ2 93Poum7ZAoAv/YU3EVdsvNZdyjzYT9Ved/MtW+6vGUlHjTJKEadfVWgFBZCcEqku awnIcfNR+37mLp0/ezwyhN/n3gjdaf6banT2jEQGZU2rXClD86OOmi7jxo0Klavp AIBPtfvHBhHpUUoBBEo0ZuOwutiOkTB3V5853cmu2WzV2OQsFlEgsYpm/z7IvMPD vcnBigt6pOvGwEzJKW1O/OaZBW+zqQhYEVWIDIykh1hqyP7QmQOj1GUPZozhXzz6 LEo8k6Y5FU7SqYwqnX+LTWl7G3ZE0x1zRyCulNS7I/AVv3kxnszyCDlNfCFRBiS/ r8O16Dc= -----END CERTIFICATE-----Generated at Sun Apr 14 23:30:18 2024 by rpki-client on console-fra.rpki-client.org