$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/FE7916F4A65911EE9702B85EC4F9AE02.roa File: FE7916F4A65911EE9702B85EC4F9AE02.roa (raw, json) Hash identifier: CV1EQjEjjdHwBMMGXdDxueDuiKkHbJ4Ed99HTO2xdws= Subject key identifier: 54:1D:D5:8D:4F:AB:23:DC:D5:44:30:42:30:0C:8B:36:BE:87:72:C5 Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Certificate serial: 06B0 Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/FE7916F4A65911EE9702B85EC4F9AE02.roa Signing time: Fri 29 Dec 2023 14:53:15 +0000 ROA not before: Fri 29 Dec 2023 14:53:15 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 23750 IP address blocks: 103.156.152.0/24 maxlen: 24 103.156.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jan 2024 14:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1712 (0x6b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Validity Not Before: Dec 29 14:53:15 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=658edd5a-bf64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:73:9b:67:ae:78:45:18:38:30:b7:8d:3e:c1: bb:03:27:6d:25:b1:f6:b7:2d:77:4c:3c:c9:74:9d: 50:8e:d9:d2:7c:51:f5:25:95:55:63:cf:0b:19:5c: bc:dd:d5:21:97:8d:37:fb:08:cb:45:e4:ef:c4:50: d7:3f:1c:36:7c:62:e0:69:77:c8:8d:2b:55:26:3d: 2a:a6:61:22:a5:75:5d:b4:6d:47:74:ac:77:1e:dd: ca:3b:61:fa:0b:d0:89:24:96:8a:e4:23:5c:0d:bc: bb:3a:5b:12:5c:f5:a1:6b:ad:25:f3:02:2b:92:39: d9:ba:65:37:ca:c1:b5:b1:e4:58:99:55:ff:03:28: 2f:3d:0d:7f:a1:72:2d:5c:26:c9:3b:b5:86:ab:5c: 0f:fd:1e:c8:d2:51:96:f6:81:3a:bd:7c:3d:f5:c0: 46:de:99:1d:76:1b:9e:ca:4e:0c:44:01:5d:9c:c3: 99:8f:b2:46:22:98:91:1b:f3:01:eb:83:e0:c5:de: 60:49:81:2d:76:1f:fe:2e:d0:0b:c8:3c:3a:4f:88: ff:7a:3f:72:d2:eb:e2:0c:33:8e:43:d3:01:0e:12: a1:b8:86:d1:d1:cd:4d:d5:15:ad:1c:e4:39:f0:a2: 76:40:18:8f:f9:1e:64:65:54:43:a3:be:3a:29:5d: 95:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1D:D5:8D:4F:AB:23:DC:D5:44:30:42:30:0C:8B:36:BE:87:72:C5 X509v3 Authority Key Identifier: keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/FE7916F4A65911EE9702B85EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.152.0/23 Signature Algorithm: sha256WithRSAEncryption 13:22:72:ad:82:c9:e2:8b:03:87:fe:10:cc:71:df:e6:ff:36: cb:0a:db:9e:0b:ca:8c:70:2a:d9:41:4d:d0:46:80:f5:87:8f: 26:58:87:1e:0a:d3:ee:4f:0f:42:82:6c:88:6a:a4:d5:62:53: 6c:df:d5:88:b9:79:83:34:91:20:e4:75:da:97:f2:4f:3e:8b: fc:b2:68:96:15:98:78:70:ae:5b:7f:85:72:15:ad:1f:43:62: e6:04:f5:b7:07:d6:cc:0d:19:19:9a:19:91:a2:04:4a:ed:f6: 6a:c0:6e:77:08:0e:fb:07:12:67:51:f2:69:f8:0e:71:0d:83: da:98:d2:6d:13:55:67:d4:46:89:51:ef:0f:72:14:28:5b:d3: 56:66:1e:00:6e:91:bf:af:30:d9:8f:9b:42:4b:fa:3f:d5:40: f5:df:9f:8e:0c:66:b2:65:c6:ba:7b:8f:d4:6f:7c:e8:fe:29: 24:7e:52:a3:e9:d2:3f:65:47:97:44:82:97:dd:b2:c4:52:8e: 0d:7e:ac:45:c3:41:37:c6:ad:66:5a:d8:8f:f8:93:53:08:15: 1c:9c:4e:b1:77:00:17:40:90:dc:34:6b:da:e4:09:db:a9:48: 5a:ca:6e:1d:a0:d2:98:39:e9:af:e0:6f:6b:56:16:d6:e5:37: 61:e9:67:14 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy Mzg4RTVFQjEwHhcNMjMxMjI5MTQ1MzE1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NThlZGQ1YS1iZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nObZ654RRg4MLeNPsG7AydtJbH2ty13TDzJdJ1QjtnSfFH1JZVVY88LGVy8 3dUhl403+wjLReTvxFDXPxw2fGLgaXfIjStVJj0qpmEipXVdtG1HdKx3Ht3KO2H6 C9CJJJaK5CNcDby7OlsSXPWha60l8wIrkjnZumU3ysG1seRYmVX/AygvPQ1/oXIt XCbJO7WGq1wP/R7I0lGW9oE6vXw99cBG3pkddhueyk4MRAFdnMOZj7JGIpiRG/MB 64Pgxd5gSYEtdh/+LtALyDw6T4j/ej9y0uviDDOOQ9MBDhKhuIbR0c1N1RWtHOQ5 8KJ2QBiP+R5kZVRDo746KV2VDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFQd1Y1P qyPc1UQwQjAMiza+h3LFMB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4 NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVGQUQvQTRENzg5OUUwODY2MTFFQjhBMkQxNTM1QzRGOUFFMDIvRkU3OTE2RjRB NjU5MTFFRTk3MDJCODVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnJgwDQYJKoZIhvcNAQELBQADggEBABMicq2CyeKLA4f+ EMxx3+b/NssK254LyoxwKtlBTdBGgPWHjyZYhx4K0+5PD0KCbIhqpNViU2zf1Yi5 eYM0kSDkddqX8k8+i/yyaJYVmHhwrlt/hXIVrR9DYuYE9bcH1swNGRmaGZGiBErt 9mrAbncIDvsHEmdR8mn4DnENg9qY0m0TVWfURolR7w9yFChb01ZmHgBukb+vMNmP m0JL+j/VQPXfn44MZrJlxrp7j9RvfOj+KSR+UqPp0j9lR5dEgpfdssRSjg1+rEXD QTfGrWZa2I/4k1MIFRycTrF3ABdAkNw0a9rkCdupSFrKbh2g0pg56a/gb2tWFtbl N2HpZxQ= -----END CERTIFICATE-----Generated at Fri Dec 29 15:35:04 2023 by rpki-client on console-ams.rpki-client.org