$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/D19E7784AAF811EE8D8CCD25C4F9AE02.roa File: D19E7784AAF811EE8D8CCD25C4F9AE02.roa (raw, json) Hash identifier: Vyg6+POtNSEnTBAoWuD3J5tcnzIVlgG0O+xzvLd8qPk= Subject key identifier: A1:D9:62:B5:45:E0:C4:46:4A:C3:5C:2E:F0:4F:3C:D7:8E:78:4A:DE Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Certificate serial: 06D7 Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/D19E7784AAF811EE8D8CCD25C4F9AE02.roa Signing time: Sun 25 Feb 2024 10:11:12 +0000 ROA not before: Sun 25 Feb 2024 10:11:12 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 141215 IP address blocks: 103.156.152.0/24 maxlen: 24 103.156.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1751 (0x6d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Validity Not Before: Feb 25 10:11:12 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65db1240-9258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c4:61:89:80:91:50:7b:b9:11:c5:c3:0a:b6: 12:87:f2:20:bf:76:cf:4f:78:55:2d:4d:21:91:23: 16:34:74:3b:b5:7b:d0:38:d4:73:27:fa:d9:e1:83: ef:6c:c5:4d:60:61:29:39:f4:a5:2c:e5:15:0e:01: 35:43:df:c5:91:87:c3:62:71:82:2e:7c:9f:b4:06: 2f:15:72:2c:66:b3:c9:ce:7a:8d:7b:fa:a7:c9:58: 7a:02:c1:bc:fb:8d:1e:38:c3:cd:45:b5:6e:80:01: 66:23:17:4e:86:0c:38:8c:43:5b:5c:3f:ba:38:1e: 7e:0b:dc:b6:69:bc:2f:9b:b0:7b:b4:94:57:dd:58: 34:02:38:46:f9:a8:70:de:e0:bf:a0:03:8c:7d:b3: 39:ae:ba:14:14:ab:15:5d:f5:4b:b1:e8:37:20:57: c7:d3:ea:a9:60:01:32:1e:ec:ae:92:cb:aa:84:41: 1d:9c:ac:5a:cd:24:a8:83:84:37:d0:5d:01:79:e5: 2e:d0:05:8d:3a:7c:96:f1:b3:e5:a0:9a:65:01:a4: 4b:b6:5d:c3:1b:68:47:fb:1a:fc:35:5d:35:6e:1b: 99:31:95:9f:fe:5d:66:af:cd:d6:73:3f:99:46:2c: 55:53:f5:62:37:a2:9a:2e:09:71:7e:4a:07:15:c9: 38:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D9:62:B5:45:E0:C4:46:4A:C3:5C:2E:F0:4F:3C:D7:8E:78:4A:DE X509v3 Authority Key Identifier: keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/D19E7784AAF811EE8D8CCD25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.152.0/23 Signature Algorithm: sha256WithRSAEncryption b5:08:7a:79:70:08:f7:5a:c2:24:2e:d8:ae:aa:08:58:44:c6: 31:26:63:b6:45:d6:62:fa:9f:cd:61:d9:fe:ae:16:53:bc:8e: 10:24:8d:70:59:10:5d:89:d4:bd:84:14:f0:29:de:8f:52:60: 4c:26:7e:47:5e:18:fb:a1:75:cf:41:37:aa:64:24:4e:77:56: 29:77:94:59:db:af:56:d0:9a:24:7a:c1:c2:d9:19:20:48:05: 86:62:8f:a5:af:72:6a:cf:ec:4c:e9:1e:44:aa:c6:f9:1a:60: 28:39:35:58:3b:28:00:08:a6:3e:0c:a1:4a:0b:67:b7:26:b2: 4d:fc:17:26:57:37:08:be:7a:58:65:e2:5b:e1:b3:89:bd:cc: 93:38:23:a4:3b:aa:01:4d:42:5e:3b:7d:db:54:95:8f:78:42: ce:31:c4:6f:78:24:21:f6:3b:e1:c5:3a:02:01:65:0f:92:ab: 3f:82:c3:b4:87:75:e9:cc:70:c8:e3:91:c4:ec:e1:7f:12:35: b8:46:e3:b0:13:5e:6e:2e:76:c5:c3:ab:e3:28:c4:26:bb:83: f3:ef:98:ca:4f:85:0c:d9:d3:02:1a:32:fc:2f:0d:a2:7a:12: 59:e6:21:f0:60:74:39:80:30:dd:9f:22:04:06:60:4a:b6:fd: b9:c4:94:3c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy Mzg4RTVFQjEwHhcNMjQwMjI1MTAxMTEyWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWRiMTI0MC05MjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMRhiYCRUHu5EcXDCrYSh/Igv3bPT3hVLU0hkSMWNHQ7tXvQONRzJ/rZ4YPv bMVNYGEpOfSlLOUVDgE1Q9/FkYfDYnGCLnyftAYvFXIsZrPJznqNe/qnyVh6AsG8 +40eOMPNRbVugAFmIxdOhgw4jENbXD+6OB5+C9y2abwvm7B7tJRX3Vg0AjhG+ahw 3uC/oAOMfbM5rroUFKsVXfVLseg3IFfH0+qpYAEyHuyuksuqhEEdnKxazSSog4Q3 0F0BeeUu0AWNOnyW8bPloJplAaRLtl3DG2hH+xr8NV01bhuZMZWf/l1mr83Wcz+Z RixVU/ViN6KaLglxfkoHFck4iQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKHZYrVF 4MRGSsNcLvBPPNeOeEreMB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4 NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVGQUQvQTRENzg5OUUwODY2MTFFQjhBMkQxNTM1QzRGOUFFMDIvRDE5RTc3ODRB QUY4MTFFRThEOENDRDI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnJgwDQYJKoZIhvcNAQELBQADggEBALUIenlwCPdawiQu 2K6qCFhExjEmY7ZF1mL6n81h2f6uFlO8jhAkjXBZEF2J1L2EFPAp3o9SYEwmfkde GPuhdc9BN6pkJE53Vil3lFnbr1bQmiR6wcLZGSBIBYZij6WvcmrP7EzpHkSqxvka YCg5NVg7KAAIpj4MoUoLZ7cmsk38FyZXNwi+elhl4lvhs4m9zJM4I6Q7qgFNQl47 fdtUlY94Qs4xxG94JCH2O+HFOgIBZQ+Sqz+Cw7SHdenMcMjjkcTs4X8SNbhG47AT Xm4udsXDq+MoxCa7g/PvmMpPhQzZ0wIaMvwvDaJ6ElnmIfBgdDmAMN2fIgQGYEq2 /bnElDw= -----END CERTIFICATE-----Generated at Tue May 7 00:53:17 2024 by rpki-client on console-ams.rpki-client.org