$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/5B49C0145D3E11EE93D0E174C4F9AE02.roa File: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (raw, json) Hash identifier: igK4RUZd69l6dw9/JuDTOrtAbsTrMEnSdwYfbwgXfdI= Subject key identifier: AA:6D:BB:95:97:3D:54:D8:7E:08:D6:EE:04:9C:68:E4:41:27:EF:4A Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Certificate serial: 03 Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/5B49C0145D3E11EE93D0E174C4F9AE02.roa Signing time: Wed 27 Sep 2023 14:01:30 +0000 ROA not before: Wed 27 Sep 2023 14:01:30 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 142162 IP address blocks: 103.167.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Validity Not Before: Sep 27 14:01:30 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=651435b9-4b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:81:01:ef:57:08:83:cb:12:3a:dd:88:77: cd:5f:80:cb:28:ad:f0:f8:02:ae:5f:74:eb:77:da: 06:c9:e6:39:a8:5b:2b:17:ed:30:fa:21:60:a9:55: f2:29:bc:95:f8:17:9f:1a:5a:d8:bb:ad:e6:cb:b1: 99:1e:ec:86:62:cf:d3:f9:40:b6:f6:0d:14:ea:20: 2c:79:12:81:6f:f6:62:4e:bf:4d:ba:61:e1:63:80: a1:fc:d1:59:15:43:3d:1a:18:ba:83:7b:1d:3f:4c: 5f:70:05:a9:8b:5d:d9:cc:8f:d0:ac:73:b2:8e:8a: 70:7f:47:7c:73:b1:b3:61:6d:96:52:a0:c7:3e:29: 4d:42:00:5f:52:aa:22:aa:97:85:36:6a:57:24:8b: d3:9d:4a:c3:f7:df:fb:c9:a0:43:66:56:7d:44:ec: 6a:49:17:05:8b:73:ca:c7:7d:f2:0d:9a:65:1e:60: 71:71:8e:25:0f:c7:70:57:43:5f:2e:9c:5c:c2:ee: c2:10:35:a9:fd:b5:a0:99:53:9a:b1:ba:c1:4f:31: 41:7e:1c:f8:a1:29:bb:82:5e:f3:30:e2:e4:a9:03: 54:c8:2a:c7:a3:2b:db:0c:c3:c4:7b:0a:01:9a:7b: 95:e7:84:9d:e7:57:c7:83:97:72:15:e4:f4:e7:f9: bd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6D:BB:95:97:3D:54:D8:7E:08:D6:EE:04:9C:68:E4:41:27:EF:4A X509v3 Authority Key Identifier: keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/5B49C0145D3E11EE93D0E174C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.40.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:94:b9:ab:ff:cb:d4:fe:68:d4:e9:2e:6a:5d:a8:9e:af:11: 05:da:a8:94:45:3e:49:0d:b4:4b:c9:24:2b:63:32:0f:d6:0d: 4c:8e:ee:74:82:7a:7b:72:92:f8:2b:78:6e:21:5d:75:24:22: 4e:46:ee:0f:4c:7c:16:80:fe:df:60:d2:42:0c:bb:c6:63:7b: 44:4a:f8:0a:24:ca:c0:aa:bf:97:5c:c9:86:4e:df:df:04:84: e4:c9:9f:84:eb:40:a0:ac:b2:9d:b0:af:3b:62:a9:77:9c:c4: 89:38:3c:57:23:48:65:56:e1:b4:86:36:20:a4:10:7b:3a:e0: cf:76:a2:fb:33:ab:e3:2e:82:f0:a2:c8:3f:9c:4a:01:3d:8c: 94:ed:3f:5f:4c:f1:07:37:3c:29:14:1d:68:85:d2:75:c6:06: 25:b3:cc:42:a7:7e:a2:c5:2c:c2:75:08:13:b6:c8:ed:bf:ff: 6c:64:39:db:78:21:85:49:21:73:2b:d4:72:f9:3d:2f:9c:82: fc:a3:2f:8d:2a:54:ee:22:48:ac:90:08:04:cd:f8:37:f6:8b: 43:7f:79:5a:41:94:d9:67:4a:57:1c:aa:89:a9:ae:d0:b3:38: 06:e3:58:94:5d:15:10:67:b8:d2:4e:ae:97:50:b7:06:c7:88: d4:36:be:b5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QUY3QTExMC8GA1UEBRMoRjEwODkyRjg1NDY4QkYwMDRFRUY1RjRFMUZBNTkxN0Yw NjMyQTA0OTAeFw0yMzA5MjcxNDAxMzBaFw0yNDA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MTQzNWI5LTRiNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvu4EB71cIg8sSOt2Id81fgMsorfD4Aq5fdOt32gbJ5jmoWysX7TD6IWCpVfIp vJX4F58aWti7rebLsZke7IZiz9P5QLb2DRTqICx5EoFv9mJOv026YeFjgKH80VkV Qz0aGLqDex0/TF9wBamLXdnMj9Csc7KOinB/R3xzsbNhbZZSoMc+KU1CAF9SqiKq l4U2alcki9OdSsP33/vJoENmVn1E7GpJFwWLc8rHffINmmUeYHFxjiUPx3BXQ18u nFzC7sIQNan9taCZU5qxusFPMUF+HPihKbuCXvMw4uSpA1TIKsejK9sMw8R7CgGa e5XnhJ3nV8eDl3IV5PTn+b01AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUqm27lZc9 VNh+CNbuBJxo5EEn70owHwYDVR0jBBgwFoAU8QiS+FRovwBO719OH6WRfwYyoEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBRjdBL0UwNTMzMzM2QkFD OTExRUJCODA3RDUxQ0M0RjlBRTAyLzhRaVMtRlJvdndCTzcxOU9INldSZndZeW9F ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFFpUy1GUm92d0JPNzE5T0g2V1Jmd1l5b0VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi81QjQ5QzAxNDVE M0UxMUVFOTNEMEUxNzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGenKDANBgkqhkiG9w0BAQsFAAOCAQEAf5S5q//L1P5o1Oku al2onq8RBdqolEU+SQ20S8kkK2MyD9YNTI7udIJ6e3KS+Ct4biFddSQiTkbuD0x8 FoD+32DSQgy7xmN7REr4CiTKwKq/l1zJhk7f3wSE5MmfhOtAoKyynbCvO2Kpd5zE iTg8VyNIZVbhtIY2IKQQezrgz3ai+zOr4y6C8KLIP5xKAT2MlO0/X0zxBzc8KRQd aIXSdcYGJbPMQqd+osUswnUIE7bI7b//bGQ523ghhUkhcyvUcvk9L5yC/KMvjSpU 7iJIrJAIBM34N/aLQ395WkGU2WdKVxyqiamu0LM4BuNYlF0VEGe40k6ul1C3BseI 1Da+tQ== -----END CERTIFICATE-----Generated at Fri May 17 02:01:41 2024 by rpki-client on console-ams.rpki-client.org