$ rpki-client -vvf rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/0C1EB10A3A5011ED8B4A2570C4F9AE02.roa File: 0C1EB10A3A5011ED8B4A2570C4F9AE02.roa (raw, json) Hash identifier: lskQ/yu8M1tBJMgyGzF7vQdWZvqpvVyiFeiC9RPv8m4= Subject key identifier: 44:81:21:14:66:67:C4:76:C9:92:32:B3:B9:D2:4D:21:CA:D7:AF:F5 Certificate issuer: /CN=A9169451/serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72 Certificate serial: C9 Authority key identifier: 01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/0C1EB10A3A5011ED8B4A2570C4F9AE02.roa Signing time: Fri 15 Sep 2023 03:44:27 +0000 ROA not before: Fri 15 Sep 2023 03:44:27 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 150138 IP address blocks: 103.16.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169451/serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72 Validity Not Before: Sep 15 03:44:27 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6503d31b-df0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:91:af:14:60:6e:c3:d1:5f:7b:c2:0a:44: b0:cf:d5:62:a0:48:ac:8d:fc:f8:38:f4:e4:b5:b9: f1:2c:6e:45:a5:4c:a7:46:bb:33:39:5e:f6:33:ca: 22:82:8e:f1:2d:0f:d4:27:15:e1:95:a1:7e:cc:9f: 36:3b:1b:45:ba:f8:54:94:a1:43:8d:6d:c2:4a:53: 3f:e3:2e:49:b2:b1:83:54:aa:c9:c3:91:6f:7d:e2: 27:fb:b7:91:c2:a3:5d:92:b5:f4:26:7c:88:12:93: 41:4c:94:4a:35:d4:e7:39:40:47:2e:ca:bd:29:ac: b7:f3:21:ce:a5:ad:27:1b:fb:65:00:f8:4b:65:eb: 0c:30:e8:f9:39:b0:5e:ff:e3:00:94:2b:0f:77:89: 80:a8:fd:83:55:75:77:2d:7c:b2:26:6e:16:5c:89: 34:ad:4a:5d:78:92:40:bf:07:73:a2:da:2f:8d:54: e2:e5:49:1d:0c:3d:58:ee:02:74:ab:1f:f7:59:42: 5b:22:0c:b6:9e:73:df:5f:12:3e:c1:0f:5f:4d:a8: 0f:de:a0:85:5f:84:df:19:a7:c8:3f:2a:a7:b5:b4: dc:ab:37:60:20:cc:2f:ae:1f:bf:8c:6b:ca:72:44: 77:b5:82:c3:95:04:a3:ac:f8:11:5d:c7:1a:90:e0: 32:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:81:21:14:66:67:C4:76:C9:92:32:B3:B9:D2:4D:21:CA:D7:AF:F5 X509v3 Authority Key Identifier: keyid:01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/0C1EB10A3A5011ED8B4A2570C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.16.208.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:d1:af:e6:7a:2e:fe:a0:d2:6b:f0:c1:13:08:cc:1a:c4:e1: b1:0e:c1:a6:71:f4:2a:5d:49:eb:34:5c:0c:7d:a0:dc:e8:15: f0:2a:5e:bc:ea:49:1b:bf:ed:6d:64:d4:14:41:8a:c8:70:da: 71:5c:fd:09:0c:ab:b0:d9:d5:d1:a4:8a:cc:06:a6:e6:7e:f7: ad:26:78:37:0f:a1:14:cb:41:38:2c:2d:1b:ef:c3:f2:d8:e0: 63:d8:cd:fc:fd:9b:58:1c:f4:97:63:36:81:7f:19:79:0d:38: cb:27:de:c2:fe:2c:bb:ce:92:3e:e8:28:25:17:14:42:73:75: 93:50:c9:6a:56:5f:c6:38:9b:58:2d:a6:10:19:77:be:fa:6b: 3a:27:ff:62:e8:9a:be:3b:ca:c2:17:37:de:a6:bb:a1:bf:d1: ee:1e:37:10:38:fa:95:6f:a2:ac:1f:1c:50:4c:6b:20:e6:45: 51:53:a8:33:39:aa:29:d2:d3:b1:74:0a:d0:57:85:44:45:25: f4:3b:3f:64:54:b5:e1:af:30:92:17:09:de:36:4b:55:3b:6b: 91:85:bf:8f:14:4e:3b:fa:7b:c5:39:51:b6:e9:fc:85:04:1e: e1:f2:3d:9a:3e:6b:02:ae:c1:78:7c:04:fb:d3:16:0d:17:22: 2d:84:8f:b4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk0NTExMTAvBgNVBAUTKDAxRjk1Q0M1RjBBNkI5RTk2N0M2RjhGMzZDN0Y2NEQ0 MjQ0QkFDNzIwHhcNMjMwOTE1MDM0NDI3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTAzZDMxYi1kZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18yRrxRgbsPRX3vCCkSwz9VioEisjfz4OPTktbnxLG5FpUynRrszOV72M8oi go7xLQ/UJxXhlaF+zJ82OxtFuvhUlKFDjW3CSlM/4y5JsrGDVKrJw5FvfeIn+7eR wqNdkrX0JnyIEpNBTJRKNdTnOUBHLsq9Kay38yHOpa0nG/tlAPhLZesMMOj5ObBe /+MAlCsPd4mAqP2DVXV3LXyyJm4WXIk0rUpdeJJAvwdzotovjVTi5UkdDD1Y7gJ0 qx/3WUJbIgy2nnPfXxI+wQ9fTagP3qCFX4TfGafIPyqntbTcqzdgIMwvrh+/jGvK ckR3tYLDlQSjrPgRXccakOAyiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFESBIRRm Z8R2yZIys7nSTSHK16/1MB8GA1UdIwQYMBaAFAH5XMXwprnpZ8b482x/ZNQkS6xy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQ1MS83MURCNjdENDNB NEQxMUVEOTAwREUyNkVDNEY5QUUwMi9BZmxjeGZDbXVlbG54dmp6Ykg5azFDUkxy SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmbGN4ZkNtdWVsbnh2anpiSDlrMUNSTHJISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk0NTEvNzFEQjY3RDQzQTREMTFFRDkwMERFMjZFQzRGOUFFMDIvMEMxRUIxMEEz QTUwMTFFRDhCNEEyNTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnENAwDQYJKoZIhvcNAQELBQADggEBACrRr+Z6Lv6g0mvw wRMIzBrE4bEOwaZx9CpdSes0XAx9oNzoFfAqXrzqSRu/7W1k1BRBishw2nFc/QkM q7DZ1dGkiswGpuZ+960meDcPoRTLQTgsLRvvw/LY4GPYzfz9m1gc9JdjNoF/GXkN OMsn3sL+LLvOkj7oKCUXFEJzdZNQyWpWX8Y4m1gtphAZd776azon/2Lomr47ysIX N96mu6G/0e4eNxA4+pVvoqwfHFBMayDmRVFTqDM5qinS07F0CtBXhURFJfQ7P2RU teGvMJIXCd42S1U7a5GFv48UTjv6e8U5Ubbp/IUEHuHyPZo+awKuwXh8BPvTFg0X Ii2Ej7Q= -----END CERTIFICATE-----Generated at Sat May 25 05:50:37 2024 by rpki-client on console-fra.rpki-client.org