$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa File: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (raw, json) Hash identifier: vrXf+Op4O+po/pBHhGDf/EhgVSIJ9Gabb6V0iPh0tYI= Subject key identifier: BB:49:50:4E:DD:A9:6E:2F:E2:32:F7:03:52:A0:7F:4B:13:92:48:CD Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 0539 Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa Signing time: Fri 19 Jan 2024 11:26:11 +0000 ROA not before: Fri 19 Jan 2024 11:26:11 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 24499 IP address blocks: 103.157.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Jan 19 11:26:11 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65aa5c53-a0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:46:4a:c6:a8:64:e0:7f:9c:61:12:99:55:11: f6:6e:19:04:4a:3d:72:b8:c3:51:21:da:28:f1:82: 05:79:2d:22:1a:2e:81:77:11:bb:80:be:2a:47:ac: e3:9e:11:40:dd:64:17:34:4d:f5:76:a0:4a:67:be: cf:db:26:9b:2a:26:be:c3:2a:98:32:ba:1f:c2:ad: 52:13:17:b2:a1:63:ea:8e:f6:01:b0:74:fd:1b:67: da:32:54:1f:25:e5:93:9b:b2:b8:4f:93:34:db:b1: 5b:6a:fb:1c:c2:9f:c7:c4:a9:a2:32:de:d4:81:d4: 15:cb:eb:4c:f5:9f:8b:f9:9c:b5:d2:20:5b:c4:8f: c5:b9:c1:cc:92:28:0a:81:86:1b:6a:9a:b9:14:e9: ce:9a:30:22:a9:ab:f2:e9:ff:e9:bf:57:dd:df:ba: 5d:a1:0d:31:12:e8:99:15:e5:3f:75:33:6d:52:84: aa:5b:3c:fd:4f:64:e9:6a:a5:68:5a:0b:18:ac:ac: 8a:f1:14:4f:21:68:13:77:32:e3:bd:70:3d:19:a8: 5d:dd:b2:d8:57:8e:d2:f9:47:c5:10:4e:d6:c7:b7: f9:0e:60:f8:10:29:5b:ab:3f:fa:01:bf:10:2f:98: 9e:00:46:f6:87:5d:11:a3:bd:85:60:a0:f0:6c:7c: b0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:49:50:4E:DD:A9:6E:2F:E2:32:F7:03:52:A0:7F:4B:13:92:48:CD X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.210.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:bf:ca:e3:5a:1b:9f:84:96:ff:27:1d:0c:16:a4:0b:60:b1: dd:69:8b:f1:34:ec:e8:22:c4:3c:0f:6f:5e:db:8c:10:d1:ed: 1b:4f:38:8c:c6:7c:9c:9c:9d:17:a9:0f:93:e5:9f:56:0e:a0: f8:6d:a3:1d:78:95:84:05:7a:3e:a0:54:41:b9:ed:e3:ea:db: b7:2c:23:17:30:1c:68:2d:19:20:46:bb:94:3f:18:eb:2f:ad: c6:09:07:21:fc:23:e2:13:4c:a7:25:b3:9f:52:cc:8a:86:81: d4:3f:00:eb:95:0d:ea:98:60:88:3d:74:ad:b3:24:42:31:9b: 0e:a3:d0:0c:84:48:4c:ad:78:24:ba:34:ee:2e:a2:8a:9a:c9: 87:94:b0:da:ec:ca:b8:15:41:35:ac:08:c4:62:46:19:8f:37: 2a:69:c1:ea:cc:97:d6:c4:20:fa:70:0e:0f:1f:48:9a:3a:cc: 00:b0:2d:c3:79:b1:31:42:8a:dd:29:b3:18:fe:37:4a:9c:a4: 9a:4f:30:11:78:6f:d9:51:39:c2:c9:a0:b5:13:e0:14:1c:b7: 39:68:8c:b7:f4:ae:eb:a2:7a:ba:c1:6d:af:6a:13:dc:79:f1: 57:9c:40:32:6f:1a:7c:43:13:40:39:ce:a6:63:7f:08:81:8f: 7a:7a:9a:19 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjQwMTE5MTEyNjExWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWFhNWM1My1hMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokZKxqhk4H+cYRKZVRH2bhkESj1yuMNRIdoo8YIFeS0iGi6BdxG7gL4qR6zj nhFA3WQXNE31dqBKZ77P2yabKia+wyqYMrofwq1SExeyoWPqjvYBsHT9G2faMlQf JeWTm7K4T5M027Fbavscwp/HxKmiMt7UgdQVy+tM9Z+L+Zy10iBbxI/FucHMkigK gYYbapq5FOnOmjAiqavy6f/pv1fd37pdoQ0xEuiZFeU/dTNtUoSqWzz9T2TpaqVo WgsYrKyK8RRPIWgTdzLjvXA9Gahd3bLYV47S+UfFEE7Wx7f5DmD4EClbqz/6Ab8Q L5ieAEb2h10Ro72FYKDwbHywMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLtJUE7d qW4v4jL3A1Kgf0sTkkjNMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI5NTEvOUEwOTdEOEE5NjAzMTFFQkI4NURCMzQwQzRGOUFFMDIvOEMzQjU4NThC NkJEMTFFRUI2RjQzRjRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnndIwDQYJKoZIhvcNAQELBQADggEBAE6/yuNaG5+Elv8n HQwWpAtgsd1pi/E07OgixDwPb17bjBDR7RtPOIzGfJycnRepD5Pln1YOoPhtox14 lYQFej6gVEG57ePq27csIxcwHGgtGSBGu5Q/GOsvrcYJByH8I+ITTKcls59SzIqG gdQ/AOuVDeqYYIg9dK2zJEIxmw6j0AyESEyteCS6NO4uooqayYeUsNrsyrgVQTWs CMRiRhmPNyppwerMl9bEIPpwDg8fSJo6zACwLcN5sTFCit0psxj+N0qcpJpPMBF4 b9lROcLJoLUT4BQctzlojLf0ruuierrBba9qE9x58VecQDJvGnxDE0A5zqZjfwiB j3p6mhk= -----END CERTIFICATE-----Generated at Wed May 1 02:08:03 2024 by rpki-client on console-fra.rpki-client.org