$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/73438FF06DED11E9A21D1341C4F9AE02.roa File: 73438FF06DED11E9A21D1341C4F9AE02.roa (raw, json) Hash identifier: ezI8TwMx43cHowiyWTqvZ83VJ4vIz73nr929q1FGN6U= Subject key identifier: 7D:7B:AD:1D:6A:F9:58:B1:E1:96:BE:FD:6E:A6:5E:BE:1C:89:CF:F4 Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 3359 Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/73438FF06DED11E9A21D1341C4F9AE02.roa Signing time: Fri 04 Aug 2023 14:50:41 +0000 ROA not before: Fri 04 Aug 2023 14:50:41 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 134376 IP address blocks: 103.63.27.0/24 maxlen: 24 2001:de8:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13145 (0x3359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: Aug 4 14:50:41 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64cd1041-bdac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:97:63:bb:6e:f7:13:e3:ff:e6:bf:46:92: d8:02:e0:4b:cc:81:7d:9a:4a:83:be:56:bf:da:e1: 20:6f:e0:b2:3f:9c:07:cd:a4:f3:e2:9c:a6:ea:9b: 05:11:32:cb:28:61:aa:17:12:65:47:e2:c9:b5:12: 37:a0:a9:cc:ab:f7:9d:2d:0c:33:82:82:55:91:6b: ac:f1:5d:79:84:b5:6d:13:90:ac:3f:7b:f2:b5:c0: 62:30:e0:5e:b1:db:88:ab:b3:e5:2b:dc:57:cd:6d: 7c:a5:f3:8f:1d:45:1d:46:ac:3c:83:76:b9:8c:df: 6d:f2:6f:9d:d0:13:2f:f1:3e:94:2a:2a:44:33:c9: 23:c9:4b:1d:7f:02:39:e2:20:90:30:0d:f7:38:9e: 2d:28:75:f6:0c:c8:4d:f9:4a:5b:77:6d:d1:3b:5a: fe:35:da:d4:f3:c8:3f:f1:bb:92:df:dd:01:e7:4d: aa:83:a5:f7:95:41:a3:e4:0a:28:32:a3:5c:3d:af: 81:25:91:f4:f4:88:65:34:3e:2f:32:b5:aa:b3:9c: e7:ea:1d:87:69:22:1e:ab:59:69:66:36:91:30:d9: 8b:0e:0c:71:2d:d7:1f:83:e1:12:93:d5:c7:7b:0e: cf:d5:fb:c6:7b:95:3d:89:34:2b:99:88:aa:5e:10: 67:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7B:AD:1D:6A:F9:58:B1:E1:96:BE:FD:6E:A6:5E:BE:1C:89:CF:F4 X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/73438FF06DED11E9A21D1341C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.63.27.0/24 IPv6: 2001:de8:8000::/48 Signature Algorithm: sha256WithRSAEncryption 90:e8:63:53:4c:75:ac:bc:0c:75:eb:1f:79:6e:4f:de:05:10: ae:8f:c3:13:52:36:bb:fa:2a:6b:30:ec:66:14:a8:89:34:1f: 55:03:06:34:75:64:47:65:95:64:9f:a8:74:04:ed:49:a9:6c: e6:14:f8:96:16:8c:10:15:44:fe:8a:24:63:b8:b9:03:1f:d3: 07:55:8d:d2:c1:da:a9:e3:54:6c:a7:ce:42:26:65:13:47:86: c0:a1:3d:9c:cf:90:08:e0:23:9f:f4:02:4b:9b:ca:25:4d:e1: 55:b7:4b:26:11:06:76:b2:29:0d:e4:fd:2e:67:f1:11:e3:6a: 70:d4:c7:bb:31:8b:8e:1a:18:25:92:e4:fd:a2:fb:8b:bd:91: 2b:39:8c:d3:1a:cd:f9:60:75:e5:f8:ba:a0:30:54:ed:67:bb: 03:28:22:7a:20:9e:eb:f8:b2:45:be:95:68:07:14:c9:ef:8d: 11:f1:9c:06:0f:91:99:e0:d8:1c:10:98:b2:27:f7:dc:f4:86: bc:11:65:4c:64:10:c9:ed:a0:25:77:b4:44:16:e0:fe:e7:3f: 12:54:bf:cc:16:d7:33:55:6d:e3:8e:e5:1f:fb:32:a6:0b:ff: 87:1b:af:55:16:84:14:fe:9b:bc:98:e1:70:c6:a7:21:04:a3: b5:64:19:34 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICM1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjMwODA0MTQ1MDQxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNkMTA0MS1iZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CWXY7tu9xPj/+a/RpLYAuBLzIF9mkqDvla/2uEgb+CyP5wHzaTz4pym6psF ETLLKGGqFxJlR+LJtRI3oKnMq/edLQwzgoJVkWus8V15hLVtE5CsP3vytcBiMOBe sduIq7PlK9xXzW18pfOPHUUdRqw8g3a5jN9t8m+d0BMv8T6UKipEM8kjyUsdfwI5 4iCQMA33OJ4tKHX2DMhN+Upbd23RO1r+NdrU88g/8buS390B502qg6X3lUGj5Aoo MqNcPa+BJZH09IhlND4vMrWqs5zn6h2HaSIeq1lpZjaRMNmLDgxxLdcfg+ESk9XH ew7P1fvGe5U9iTQrmYiqXhBnxQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFH17rR1q +Vix4Za+/W6mXr4cic/0MB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzIwMUQvQ0QxRTI5NDgxRDkyMTFFMkEzQjFGNEY1MDhCMDJDRDIvNzM0MzhGRjA2 REVEMTFFOUEyMUQxMzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnPxswDwQCAAIwCQMHACABDeiAADANBgkqhkiG9w0BAQsF AAOCAQEAkOhjU0x1rLwMdesfeW5P3gUQro/DE1I2u/oqazDsZhSoiTQfVQMGNHVk R2WVZJ+odATtSals5hT4lhaMEBVE/ookY7i5Ax/TB1WN0sHaqeNUbKfOQiZlE0eG wKE9nM+QCOAjn/QCS5vKJU3hVbdLJhEGdrIpDeT9LmfxEeNqcNTHuzGLjhoYJZLk /aL7i72RKzmM0xrN+WB15fi6oDBU7We7AygieiCe6/iyRb6VaAcUye+NEfGcBg+R meDYHBCYsif33PSGvBFlTGQQye2gJXe0RBbg/uc/ElS/zBbXM1Vt447lH/sypgv/ hxuvVRaEFP6bvJjhcManIQSjtWQZNA== -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org