$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/A9C1A7F2A9EC11EE800F7626C4F9AE02.roa File: A9C1A7F2A9EC11EE800F7626C4F9AE02.roa (raw, json) Hash identifier: J5UaMWxA22MLIYfNHhaNZK6wflzdwnkR+fQOuZFhg/s= Subject key identifier: A4:B6:A3:D3:77:05:2C:B2:CF:E3:C6:E3:CC:5E:B3:A4:22:B1:C5:8E Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: 46 Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/A9C1A7F2A9EC11EE800F7626C4F9AE02.roa Signing time: Wed 01 May 2024 00:02:38 +0000 ROA not before: Wed 01 May 2024 00:02:38 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 135339 IP address blocks: 103.85.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: May 1 00:02:38 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6631869d-17cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a1:91:e4:cc:02:79:39:f3:3a:b4:09:44:11: 92:cb:cb:0a:ac:d5:ed:a0:4d:8f:4c:95:a6:6a:79: 32:18:f0:70:fb:ea:f0:7d:b7:9b:12:49:f6:56:fb: f0:1d:df:05:43:52:6d:5b:4a:40:4a:75:7d:28:e7: 3c:a6:7b:9e:ec:d3:3b:5c:be:83:28:6a:ac:05:40: e1:d7:49:c6:27:52:39:2f:c0:48:56:32:c6:7d:02: 7a:8e:42:53:40:79:d8:dc:d7:d0:00:4b:44:f2:76: 75:f3:a2:a9:12:c5:a3:f1:9d:d1:96:fc:8a:70:16: 34:5e:2b:f1:11:7a:57:ff:de:4f:d6:48:b3:7a:dc: 3c:af:70:42:46:13:04:ad:41:5a:ae:cd:24:1b:d6: 8d:5e:6c:c1:e1:5c:14:32:11:fa:5f:7f:5d:b9:39: 90:6a:af:08:61:f0:43:7c:12:a0:8b:af:3c:b0:92: f7:02:73:3f:ac:49:bc:d4:15:b1:8d:96:3e:ba:7b: fe:86:54:8e:4a:83:7b:fc:a4:1f:a4:7a:45:d8:51: ac:84:1a:d3:5c:3a:7f:c3:29:45:5b:71:02:5a:7e: 1b:fc:9d:95:a4:f7:0b:ba:c5:48:f0:89:6c:29:df: 3c:cd:cd:43:68:d7:62:51:1e:a1:e7:cf:d9:ff:9d: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B6:A3:D3:77:05:2C:B2:CF:E3:C6:E3:CC:5E:B3:A4:22:B1:C5:8E X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/A9C1A7F2A9EC11EE800F7626C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.114.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:45:78:af:73:3e:fb:01:69:62:ac:bd:37:7e:e5:03:df:3e: 2a:57:26:59:82:9f:7a:b2:22:24:d6:c3:f7:c6:1e:ac:84:97: 50:a5:7a:ca:80:e4:a3:f4:a9:78:91:b0:fc:e9:2e:5e:4f:64: 36:29:5e:59:a7:bc:3a:a8:6a:ce:d3:5e:88:31:2b:14:4a:6d: b3:2c:7d:2e:4b:b6:7c:a7:01:85:c4:12:08:23:b6:b1:82:d9: 23:71:cf:c7:d8:9e:ae:b1:23:28:1c:32:51:58:33:64:33:54: 34:7c:a8:a9:63:71:ed:6a:2f:9e:8f:fd:1c:de:d9:d2:71:08: 61:5d:c6:4a:91:31:9f:34:ed:01:28:9e:24:2e:89:17:67:98: db:f9:ae:0e:2f:07:da:1e:34:4e:4d:45:9c:02:da:c7:30:34: e8:06:bd:66:38:2d:b4:02:03:9e:c0:1a:6c:80:5c:6e:a1:b1: d9:3b:28:34:65:af:4a:1e:b2:81:ba:4a:30:9e:1e:cc:53:36: e7:ca:b2:3a:8f:16:e9:c5:84:f2:bf:c7:80:61:d8:ef:db:ed: 3c:31:d1:64:fb:39:6d:6b:0a:0e:fd:5c:f4:de:2e:70:ba:fe: b2:13:c2:1d:05:37:ef:29:cb:d0:da:04:f8:76:6f:a9:14:e5: 1a:3c:02:c1 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDhFMjExMC8GA1UEBRMoN0QwNjJDNzJEQzVFRjEyRjA1QzQxNjc5RkM2RkUyNTUy QjRFQTAyMDAeFw0yNDA1MDEwMDAyMzhaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MzE4NjlkLTE3Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxoZHkzAJ5OfM6tAlEEZLLywqs1e2gTY9MlaZqeTIY8HD76vB9t5sSSfZW+/Ad 3wVDUm1bSkBKdX0o5zyme57s0ztcvoMoaqwFQOHXScYnUjkvwEhWMsZ9AnqOQlNA edjc19AAS0TydnXzoqkSxaPxndGW/IpwFjReK/ERelf/3k/WSLN63DyvcEJGEwSt QVquzSQb1o1ebMHhXBQyEfpff125OZBqrwhh8EN8EqCLrzywkvcCcz+sSbzUFbGN lj66e/6GVI5Kg3v8pB+kekXYUayEGtNcOn/DKUVbcQJafhv8nZWk9wu6xUjwiWwp 3zzNzUNo12JRHqHnz9n/nR09AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUpLaj03cF LLLP48bjzF6zpCKxxY4wHwYDVR0jBBgwFoAUfQYsctxe8S8FxBZ5/G/iVStOoCAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEOEUyL0MwOTJCMTA2MURF RjExRUI4MzVFMTU3QUM0RjlBRTAyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29D QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZlFZc2N0eGU4UzhGeEJaNV9HX2lWU3RPb0NBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhFMi9DMDkyQjEwNjFERUYxMUVCODM1RTE1N0FDNEY5QUUwMi9BOUMxQTdGMkE5 RUMxMUVFODAwRjc2MjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGdVcjANBgkqhkiG9w0BAQsFAAOCAQEAK0V4r3M++wFpYqy9 N37lA98+KlcmWYKferIiJNbD98YerISXUKV6yoDko/SpeJGw/OkuXk9kNileWae8 OqhqztNeiDErFEptsyx9Lku2fKcBhcQSCCO2sYLZI3HPx9ierrEjKBwyUVgzZDNU NHyoqWNx7Wovno/9HN7Z0nEIYV3GSpExnzTtASieJC6JF2eY2/muDi8H2h40Tk1F nALaxzA06Aa9ZjgttAIDnsAabIBcbqGx2TsoNGWvSh6ygbpKMJ4ezFM258qyOo8W 6cWE8r/HgGHY79vtPDHRZPs5bWsKDv1c9N4ucLr+shPCHQU37ynL0NoE+HZvqRTl GjwCwQ== -----END CERTIFICATE-----Generated at Thu May 16 23:48:41 2024 by rpki-client on console-fra.rpki-client.org