$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/5A67D452A12F11EF8CA59833C4F9AE02.roa File: 5A67D452A12F11EF8CA59833C4F9AE02.roa (raw, json) Hash identifier: Eay9FAM2Q2PEHmNtC24JGTHz5OZ8Eq/egMWwoN1eHeI= Subject key identifier: FF:ED:06:F9:DE:8D:0A:CA:45:EF:6C:51:50:B4:4F:34:6E:AA:B8:07 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 048E Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/5A67D452A12F11EF8CA59833C4F9AE02.roa Signing time: Tue 12 Nov 2024 19:50:22 +0000 ROA not before: Tue 12 Nov 2024 19:50:22 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 400342 IP address blocks: 103.174.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1166 (0x48e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: Nov 12 19:50:22 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6733b17e-d71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:8b:5a:d8:95:1a:d3:c0:11:f6:b5:bd:0b: 18:a0:31:ef:c4:f7:7b:35:62:06:57:4f:23:bf:59: 49:42:28:0c:d6:0b:5e:9b:96:62:8a:6f:19:c4:dc: ec:23:7f:6e:e4:3c:31:f6:c5:02:63:16:c8:20:fb: fd:6f:4a:83:de:3c:db:2a:6e:3f:bf:e9:86:4e:75: b1:ae:1c:52:dc:98:fa:26:66:a4:73:c2:54:fe:cd: 49:82:2b:c5:16:a7:32:39:4c:b1:65:5d:9d:ce:0b: d3:6e:3e:e8:89:ec:dd:9e:e5:64:1b:16:fe:32:6a: b4:39:f1:82:26:24:c7:3c:5b:8d:7e:4d:b6:ee:4a: 87:b4:b9:df:4b:14:cf:d2:fb:68:4e:16:70:6c:6e: fd:b5:80:bd:3e:73:49:90:17:8a:0e:9a:ce:9c:a3: ed:0b:f0:6f:f2:b5:a0:01:d0:1e:98:12:f6:c7:a2: 73:3e:b1:7c:c1:8c:9c:f2:a3:0d:03:36:09:1f:a5: 8d:5b:09:5d:2d:36:f4:45:43:7d:27:99:a2:10:2c: 14:f3:03:09:68:f1:dc:93:a1:58:fa:76:dc:f0:a2: 9b:e4:c2:e4:f8:be:8c:5c:e4:65:c2:e1:03:91:c4: 7d:87:a0:c8:a9:7f:3d:82:e4:80:f8:89:30:b8:19: 1e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:ED:06:F9:DE:8D:0A:CA:45:EF:6C:51:50:B4:4F:34:6E:AA:B8:07 X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/5A67D452A12F11EF8CA59833C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.96.0/23 Signature Algorithm: sha256WithRSAEncryption c2:df:8a:40:5d:e7:82:7e:c3:82:65:f2:9b:da:3d:7b:a4:76: 58:cb:f7:d2:5d:76:47:1e:15:d8:3f:eb:2e:98:91:96:3d:9d: 4d:eb:64:4a:bc:d9:b6:f2:78:cf:b2:a8:eb:a4:2d:ea:7e:1f: 53:59:5f:1a:26:b1:78:7a:42:c7:85:de:19:9b:fc:b5:01:7b: 8b:ee:65:66:03:0b:e1:85:0e:8d:51:00:3a:6f:66:f6:79:6c: 00:32:26:f5:34:c7:84:85:4c:b9:5d:1c:0f:cf:12:4e:87:5b: 8d:49:5c:c4:d5:a2:32:fe:33:e4:a7:5b:47:bb:14:fa:b3:59: 34:12:9f:3e:d7:c9:3a:f2:71:7c:1a:6a:9c:77:17:91:e0:7e: e6:79:b9:e9:a0:00:69:21:71:1c:45:f4:9e:e8:c7:53:26:2a: f6:43:2e:24:59:9d:b0:fb:e1:6e:18:42:cc:99:a1:15:f8:0c: c0:4a:36:40:49:3b:81:bb:89:37:a8:be:67:80:88:92:ec:66: e8:98:36:b4:9a:c4:4b:41:8d:28:d4:4b:20:96:1b:e1:93:dc: 7a:a3:15:3c:ae:2a:d9:f7:96:60:96:4e:39:6e:a8:41:2d:6b: f3:12:05:a7:4e:f7:71:42:2a:fd:f7:ef:7d:1e:7f:fb:d2:e0: 7e:04:96:ad -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjQxMTEyMTk1MDIyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMzYjE3ZS1kNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszuLWtiVGtPAEfa1vQsYoDHvxPd7NWIGV08jv1lJQigM1gtem5Ziim8ZxNzs I39u5Dwx9sUCYxbIIPv9b0qD3jzbKm4/v+mGTnWxrhxS3Jj6Jmakc8JU/s1JgivF FqcyOUyxZV2dzgvTbj7oiezdnuVkGxb+Mmq0OfGCJiTHPFuNfk227kqHtLnfSxTP 0vtoThZwbG79tYC9PnNJkBeKDprOnKPtC/Bv8rWgAdAemBL2x6JzPrF8wYyc8qMN AzYJH6WNWwldLTb0RUN9J5miECwU8wMJaPHck6FY+nbc8KKb5MLk+L6MXORlwuED kcR9h6DIqX89guSA+IkwuBkeGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP/tBvne jQrKRe9sUVC0TzRuqrgHMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjIzQjkvNzhDRUFDQkMyQjM2MTFFQ0FENTk1QjdDQzRGOUFFMDIvNUE2N0Q0NTJB MTJGMTFFRjhDQTU5ODMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrmAwDQYJKoZIhvcNAQELBQADggEBAMLfikBd54J+w4Jl 8pvaPXukdljL99JddkceFdg/6y6YkZY9nU3rZEq82bbyeM+yqOukLep+H1NZXxom sXh6QseF3hmb/LUBe4vuZWYDC+GFDo1RADpvZvZ5bAAyJvU0x4SFTLldHA/PEk6H W41JXMTVojL+M+SnW0e7FPqzWTQSnz7XyTrycXwaapx3F5HgfuZ5uemgAGkhcRxF 9J7ox1MmKvZDLiRZnbD74W4YQsyZoRX4DMBKNkBJO4G7iTeovmeAiJLsZuiYNrSa xEtBjSjUSyCWG+GT3HqjFTyuKtn3lmCWTjluqEEta/MSBadO93FCKv33730ef/vS 4H4Elq0= -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:59 2024 by rpki-client on console-ams.rpki-client.org