$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/BF2B3DBAC0DF11EEACF1217BC4F9AE02.roa File: BF2B3DBAC0DF11EEACF1217BC4F9AE02.roa (raw, json) Hash identifier: GQPMc0eyMumKOlnQtriGgnPrjQ1l8khb7T3XDmlzyoU= Subject key identifier: B7:1A:8B:15:5B:22:EF:28:F7:10:EB:9A:11:54:2E:A6:FD:B3:61:DD Certificate issuer: /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3 Certificate serial: 0563 Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/BF2B3DBAC0DF11EEACF1217BC4F9AE02.roa Signing time: Thu 01 Feb 2024 08:56:11 +0000 ROA not before: Thu 01 Feb 2024 08:56:11 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138640 IP address blocks: 103.164.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1379 (0x563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3 Validity Not Before: Feb 1 08:56:11 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65bb5cab-741a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:37:e3:f6:2c:b0:99:20:cc:d7:ea:74:55: 8c:4e:b0:bd:61:51:e4:f9:93:6e:4e:5d:e5:2c:46: 61:38:5b:08:14:7c:a2:42:13:d2:aa:d4:32:4b:bd: 3a:ee:03:d4:ba:e1:fa:51:4a:99:b1:06:85:02:54: 7c:36:50:ff:62:23:3a:6e:bb:46:5d:51:29:8d:62: 10:fd:6d:da:99:26:62:4d:0d:61:7e:f6:fa:83:00: bd:29:15:5f:35:8d:98:68:cc:3c:37:74:4b:b9:05: 7d:be:0b:f4:d3:62:44:76:13:73:ad:93:83:eb:95: 91:08:02:a0:c9:a6:f4:4b:f6:b0:78:ce:72:ae:d3: e5:6a:d5:cb:56:bf:d9:9d:6e:4d:8a:fb:36:7d:e0: 9c:f5:28:b3:fc:08:50:3e:a0:d2:e8:c8:36:5d:83: b4:9e:3b:07:0c:67:25:4f:32:91:e5:9c:e5:2e:f9: 37:76:ca:f7:48:06:53:db:cd:0d:54:e6:28:4d:95: db:81:88:0a:95:af:5d:f7:f7:c1:33:2a:fa:58:d1: a0:4c:f9:7d:68:2b:85:f5:e8:74:60:62:13:98:54: 22:3e:7b:6e:64:2f:d4:0d:c9:16:12:d3:f0:6b:a2: 53:28:5f:8b:d5:c1:9e:b6:ce:d0:fb:db:e9:af:14: 36:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1A:8B:15:5B:22:EF:28:F7:10:EB:9A:11:54:2E:A6:FD:B3:61:DD X509v3 Authority Key Identifier: keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/BF2B3DBAC0DF11EEACF1217BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.255.0/24 Signature Algorithm: sha256WithRSAEncryption 93:9c:5b:37:c6:3d:85:5c:ac:86:09:6c:4b:a8:2d:68:b2:bf: 9a:bb:07:71:3a:75:e2:ab:0e:e4:5b:13:09:b6:b0:7c:e4:20: 2e:65:b8:e3:82:d4:7e:b9:dd:73:2a:10:8c:37:01:39:9b:91: 31:c7:ef:ab:3a:a5:e8:29:b1:a7:a4:bf:24:b4:d3:b1:04:a1: 09:45:8b:80:ae:90:43:65:a1:4e:be:40:3a:e0:11:36:d5:26: 53:46:7f:93:fb:77:cc:4a:65:f8:cf:3d:a3:04:de:84:9d:5b: 86:0a:2f:17:ec:32:67:5f:00:42:bf:87:bc:8b:8c:f3:66:8d: 3e:8c:dd:d3:38:f4:a0:57:eb:f0:31:ac:31:19:8e:35:ff:bb: e1:0a:40:ad:f0:f1:ed:c5:76:f5:29:94:51:2f:2a:cf:62:a6: 55:82:b1:bd:dd:76:b5:47:00:68:d4:9b:88:3a:7b:16:af:95: c5:68:1e:3f:03:cc:5d:1b:e2:07:27:84:9e:68:ed:f1:da:e9: c5:5a:71:bd:19:d9:dc:92:df:e7:d4:e6:87:30:56:4d:2c:6b: 5a:62:07:a5:a7:8e:93:08:df:5f:4d:ad:da:6f:77:e7:79:46: ba:b7:61:c1:a2:a0:81:6e:3c:93:4c:6c:4f:a1:2a:2c:f2:7b: e4:ed:08:4b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEQjUxMTAvBgNVBAUTKDQ3RUM1M0JGREQzNTEzMjBFODlCMkM1NDFCQUNERDRE OEQ1MkEwQjMwHhcNMjQwMjAxMDg1NjExWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWJiNWNhYi03NDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsM34/YssJkgzNfqdFWMTrC9YVHk+ZNuTl3lLEZhOFsIFHyiQhPSqtQyS706 7gPUuuH6UUqZsQaFAlR8NlD/YiM6brtGXVEpjWIQ/W3amSZiTQ1hfvb6gwC9KRVf NY2YaMw8N3RLuQV9vgv002JEdhNzrZOD65WRCAKgyab0S/aweM5yrtPlatXLVr/Z nW5Nivs2feCc9Siz/AhQPqDS6Mg2XYO0njsHDGclTzKR5ZzlLvk3dsr3SAZT280N VOYoTZXbgYgKla9d9/fBMyr6WNGgTPl9aCuF9eh0YGITmFQiPntuZC/UDckWEtPw a6JTKF+L1cGets7Q+9vprxQ2bwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLcaixVb Iu8o9xDrmhFULqb9s2HdMB8GA1UdIwQYMBaAFEfsU7/dNRMg6JssVBus3U2NUqCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0RCNS8wQzk5OUVDMDhG QTExMUVCQTIyMDY2MUVDNEY5QUUwMi9SLXhUdjkwMUV5RG9teXhVRzZ6ZFRZMVNv TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IteFR2OTAxRXlEb215eFVHNnpkVFkxU29MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNEQjUvMEM5OTlFQzA4RkExMTFFQkEyMjA2NjFFQzRGOUFFMDIvQkYyQjNEQkFD MERGMTFFRUFDRjEyMTdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnpP8wDQYJKoZIhvcNAQELBQADggEBAJOcWzfGPYVcrIYJ bEuoLWiyv5q7B3E6deKrDuRbEwm2sHzkIC5luOOC1H653XMqEIw3ATmbkTHH76s6 pegpsaekvyS007EEoQlFi4CukENloU6+QDrgETbVJlNGf5P7d8xKZfjPPaME3oSd W4YKLxfsMmdfAEK/h7yLjPNmjT6M3dM49KBX6/AxrDEZjjX/u+EKQK3w8e3FdvUp lFEvKs9iplWCsb3ddrVHAGjUm4g6exavlcVoHj8DzF0b4gcnhJ5o7fHa6cVacb0Z 2dyS3+fU5ocwVk0sa1piB6WnjpMI319Nrdpvd+d5Rrq3YcGioIFuPJNMbE+hKizy e+TtCEs= -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org