$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/5A892D6424E011EDAEC0E529C4F9AE02.roa File: 5A892D6424E011EDAEC0E529C4F9AE02.roa (raw, json) Hash identifier: hD/ATLAAYUyRMW6O66/4L+ra15DS1ajdFvliMlcn8tc= Subject key identifier: 8B:35:BC:4F:53:B7:6C:BD:D2:E3:45:B2:4C:3C:DE:B4:BD:09:E2:E0 Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 0367 Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/5A892D6424E011EDAEC0E529C4F9AE02.roa Signing time: Thu 11 Jan 2024 02:24:30 +0000 ROA not before: Thu 11 Jan 2024 02:24:30 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 38136 IP address blocks: 103.177.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: Jan 11 02:24:30 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=659f515e-51d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:7d:62:b9:35:f4:59:8b:ef:23:07:8b:ee: 7c:f3:8f:ab:e6:b4:60:97:24:e7:14:f3:8b:08:35: 02:9e:11:d3:f0:b7:cc:37:c7:99:32:fb:34:a5:0c: 9b:6b:19:af:6b:3f:54:87:43:7c:61:fe:3c:d4:e8: 84:d1:b9:39:17:39:a0:f1:71:1d:9d:6a:29:59:34: a0:8f:44:d9:07:c9:7e:22:d6:ae:5b:10:e3:a4:d3: ce:32:37:31:ec:a3:fd:f1:31:86:16:69:92:7f:df: bf:13:52:39:42:94:b1:9a:8c:5e:41:d4:7d:a7:9f: 80:1d:32:4f:62:47:fa:1e:2a:21:73:72:22:de:17: bc:db:c8:86:0d:0e:5d:3a:bd:e5:86:72:54:44:6c: 24:1e:15:27:10:cc:8d:75:52:c1:f6:7f:2d:b4:f7: b2:c2:38:dc:6a:b4:bf:2c:84:aa:85:40:51:47:c3: 59:09:10:fb:bb:0d:ef:a1:29:69:6d:8c:c9:59:03: d4:fb:63:46:80:4c:96:46:41:2b:d9:59:2e:58:c1: 83:e7:76:8c:51:de:33:d9:ca:1e:78:f5:18:3f:d4: f1:f2:dc:fa:b0:c8:3e:76:be:31:f5:4e:6f:7e:51: 1c:d2:3c:75:8c:5e:69:37:bd:22:b0:d9:40:b5:1d: e2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:35:BC:4F:53:B7:6C:BD:D2:E3:45:B2:4C:3C:DE:B4:BD:09:E2:E0 X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/5A892D6424E011EDAEC0E529C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.248.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:59:01:1f:4d:bf:e9:1d:3c:c8:a4:52:3e:4a:0b:2c:77:0a: 49:11:da:c0:26:16:dc:29:82:07:51:c1:2f:58:bc:94:2a:2e: d8:d7:24:17:cb:bd:10:de:cf:f7:fc:5a:89:d9:07:70:34:55: 88:4d:33:82:30:de:5f:e5:9b:96:40:30:2b:37:ab:36:37:8c: fc:b5:b6:09:53:43:9a:d9:6b:43:92:16:bf:8c:de:5f:ef:e9: 17:3a:85:54:e3:55:16:61:f7:fb:7d:34:2e:7f:44:d1:58:89: d3:9f:cd:51:79:4c:fd:79:eb:d9:a2:b3:7c:48:f5:fe:b4:2c: aa:94:a6:3d:89:22:eb:e2:78:46:22:82:9d:b2:22:e1:f5:7c: aa:60:65:1c:00:88:e9:67:ea:3c:ab:b2:10:83:b4:d4:40:1c: 64:58:84:fe:c8:d5:aa:0d:82:f1:3a:a4:56:ee:4d:61:ac:85: bb:5b:f0:8b:79:1c:fa:f1:24:64:02:0c:2f:ab:07:15:6f:15: 7d:d2:43:b5:4a:0c:44:84:bf:0e:da:71:2e:7f:8f:bf:78:f5: 52:88:97:0c:e1:24:37:30:43:a0:74:aa:23:44:5f:cf:97:31: db:e1:96:0e:e3:53:4c:28:5c:82:67:3d:c1:93:69:e7:20:de: 75:3e:5c:4f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjQwMTExMDIyNDMwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTlmNTE1ZS01MWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJV9Yrk19FmL7yMHi+5884+r5rRglyTnFPOLCDUCnhHT8LfMN8eZMvs0pQyb axmvaz9Uh0N8Yf481OiE0bk5Fzmg8XEdnWopWTSgj0TZB8l+ItauWxDjpNPOMjcx 7KP98TGGFmmSf9+/E1I5QpSxmoxeQdR9p5+AHTJPYkf6Hiohc3Ii3he828iGDQ5d Or3lhnJURGwkHhUnEMyNdVLB9n8ttPeywjjcarS/LISqhUBRR8NZCRD7uw3voSlp bYzJWQPU+2NGgEyWRkEr2VkuWMGD53aMUd4z2coeePUYP9Tx8tz6sMg+dr4x9U5v flEc0jx1jF5pN70isNlAtR3iEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIs1vE9T t2y90uNFskw83rS9CeLgMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBFMTEvRDA2MEM5QjI1QkQ2MTFFQ0FEODMzNjUxQzRGOUFFMDIvNUE4OTJENjQy NEUwMTFFREFFQzBFNTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnsfgwDQYJKoZIhvcNAQELBQADggEBAE5ZAR9Nv+kdPMik Uj5KCyx3CkkR2sAmFtwpggdRwS9YvJQqLtjXJBfLvRDez/f8WonZB3A0VYhNM4Iw 3l/lm5ZAMCs3qzY3jPy1tglTQ5rZa0OSFr+M3l/v6Rc6hVTjVRZh9/t9NC5/RNFY idOfzVF5TP1569mis3xI9f60LKqUpj2JIuvieEYigp2yIuH1fKpgZRwAiOln6jyr shCDtNRAHGRYhP7I1aoNgvE6pFbuTWGshbtb8It5HPrxJGQCDC+rBxVvFX3SQ7VK DESEvw7acS5/j7949VKIlwzhJDcwQ6B0qiNEX8+XMdvhlg7jU0woXIJnPcGTaecg 3nU+XE8= -----END CERTIFICATE-----Generated at Tue May 21 03:39:34 2024 by rpki-client on console-ams.rpki-client.org