$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa File: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (raw, json) Hash identifier: p0hcyQpDL+7liXNsNYJ0QhYMs371XFG53HXoQaxStOQ= Subject key identifier: DE:96:BB:3A:C8:13:8C:52:D7:DB:50:A8:02:75:CB:10:27:37:E7:99 Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 11C4 Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa Signing time: Wed 02 Aug 2023 17:34:58 +0000 ROA not before: Wed 02 Aug 2023 17:34:58 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 135887 IP address blocks: 144.138.0.0/16 maxlen: 24 147.10.0.0/16 maxlen: 24 149.167.0.0/16 maxlen: 24 155.143.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 17:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4548 (0x11c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: Aug 2 17:34:58 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64ca93c2-899a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:79:be:a2:f3:9e:16:85:61:17:16:39:f4: f4:13:d8:69:30:2c:fc:dd:57:cb:bc:e4:5f:31:d7: 48:d7:da:ea:64:d2:ab:df:59:9d:da:c9:c6:86:0f: 2c:dd:52:03:47:58:bf:db:f3:2c:80:bb:7a:92:5e: 43:c8:b9:4c:5c:ad:1d:31:16:54:7d:73:6d:c2:ca: d2:5c:7b:a5:e4:2e:e3:12:ff:be:df:b1:21:1e:80: 72:63:ed:cf:16:73:78:70:4f:79:51:3c:ae:0d:c1: ca:22:39:27:12:73:d2:46:53:56:24:54:ee:f5:10: e0:9b:45:f9:d6:9c:df:10:5a:77:ee:31:a0:21:5e: 6e:0e:48:9f:13:9a:87:7c:03:8e:b4:86:6b:40:19: fa:b4:49:3e:58:15:5e:db:fa:a2:83:35:15:c0:c2: 9e:bc:7c:dc:af:86:8f:b5:44:6e:9b:32:59:1e:33: c6:83:18:43:83:03:53:82:88:d6:fd:0a:9b:ca:20: ef:69:7e:63:89:4e:39:95:ab:99:db:5b:74:84:0e: 93:ff:d6:b1:e9:e7:01:f5:92:e9:f0:a8:46:05:05: f3:a2:45:5f:b3:8b:f6:15:a9:fd:5d:53:b7:4d:ab: 5b:61:ef:5f:73:07:9f:9f:09:9f:91:ab:de:0b:2c: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:96:BB:3A:C8:13:8C:52:D7:DB:50:A8:02:75:CB:10:27:37:E7:99 X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.138.0.0/16 147.10.0.0/16 149.167.0.0/16 155.143.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:5a:6e:1d:07:35:7a:e8:c8:d5:2f:51:5a:2f:fa:7b:73:74: 83:44:9d:b0:e5:32:7b:a4:97:82:c4:35:3e:9f:2c:05:f1:cd: 77:2a:31:13:33:c2:f9:fa:9d:5d:8f:2a:ed:2c:f6:e3:e9:db: c0:51:bb:43:86:41:1d:52:4c:d9:11:f2:be:b8:77:8e:d4:ae: f9:15:b5:00:a2:5d:83:a2:1e:d8:71:b0:d1:5b:bc:d9:4b:f5: 0a:a0:68:ff:f3:e6:ad:a4:f3:d3:50:2e:da:2b:d3:91:ed:c1: f1:83:3c:5f:ac:68:e3:53:59:42:8c:eb:c2:20:c5:ce:1b:1e: 1c:55:d4:a7:4a:e3:3f:5e:34:ce:27:12:bd:8e:13:01:5f:c1: d6:b4:90:a9:94:50:0e:43:7a:8a:0e:4d:cf:62:0c:e8:a8:7a: 41:97:67:74:e4:3c:73:11:53:b2:43:c0:0d:82:db:2e:20:83: 94:84:03:bb:83:39:b4:e5:d5:f4:41:5d:bd:92:3d:cd:d6:d7: 63:47:a0:cf:6b:0a:d4:9b:59:41:a8:02:f9:7f:d4:3a:9b:fe: 8c:6b:a9:00:4b:f5:9c:19:35:69:50:dc:d5:36:c9:14:7e:69: 5a:d8:e8:7b:1b:87:a0:56:fd:30:f3:0e:e1:46:a6:64:4f:bc: 58:dd:cb:33 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICEcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjMwODAyMTczNDU4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNhOTNjMi04OTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5B5vqLznhaFYRcWOfT0E9hpMCz83VfLvORfMddI19rqZNKr31md2snGhg8s 3VIDR1i/2/MsgLt6kl5DyLlMXK0dMRZUfXNtwsrSXHul5C7jEv++37EhHoByY+3P FnN4cE95UTyuDcHKIjknEnPSRlNWJFTu9RDgm0X51pzfEFp37jGgIV5uDkifE5qH fAOOtIZrQBn6tEk+WBVe2/qigzUVwMKevHzcr4aPtURumzJZHjPGgxhDgwNTgojW /QqbyiDvaX5jiU45lauZ21t0hA6T/9ax6ecB9ZLp8KhGBQXzokVfs4v2Fan9XVO3 TatbYe9fcwefnwmfkaveCywIuwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFN6WuzrI E4xS19tQqAJ1yxAnN+eZMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkE5ODMvMEUwODJFNzJDRDBGMTFFODlEOUZGMTY1QzRGOUFFMDIvMUJDOTZEOEMx QkExMTFFQThCREQ2MTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDAwCQigMDAJMKAwMAlacDAwCbjzANBgkqhkiG9w0BAQsFAAOC AQEAEVpuHQc1eujI1S9RWi/6e3N0g0SdsOUye6SXgsQ1Pp8sBfHNdyoxEzPC+fqd XY8q7Sz24+nbwFG7Q4ZBHVJM2RHyvrh3jtSu+RW1AKJdg6Ie2HGw0Vu82Uv1CqBo //PmraTz01Au2ivTke3B8YM8X6xo41NZQozrwiDFzhseHFXUp0rjP140zicSvY4T AV/B1rSQqZRQDkN6ig5Nz2IM6Kh6QZdndOQ8cxFTskPADYLbLiCDlIQDu4M5tOXV 9EFdvZI9zdbXY0egz2sK1JtZQagC+X/UOpv+jGupAEv1nBk1aVDc1TbJFH5pWtjo exuHoFb9MPMO4UamZE+8WN3LMw== -----END CERTIFICATE-----