$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/430FB1B69FC411EEBA6AB80AC4F9AE02.roa File: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (raw, json) Hash identifier: 3JCYdG127llvDq2ItCHcIF18EbtwG2SS2OGY+RRrxS8= Subject key identifier: 5C:AE:FF:5D:62:17:DE:FA:B6:63:40:69:1E:6E:3E:E7:3A:0F:6D:7B Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Certificate serial: 50 Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/430FB1B69FC411EEBA6AB80AC4F9AE02.roa Signing time: Wed 15 May 2024 08:12:32 +0000 ROA not before: Wed 15 May 2024 08:12:32 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 151370 IP address blocks: 103.212.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 08:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Validity Not Before: May 15 08:12:32 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66446e70-3f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:34:3a:5a:6a:31:e7:60:2d:fa:72:f0:b0: 45:0e:fb:0d:2d:83:60:6e:b6:0c:27:b7:5c:61:b5: 72:d6:63:a2:45:0a:ea:6c:ff:69:6c:60:1c:35:40: e7:68:4c:09:d7:8d:2d:b1:be:e8:b9:1c:48:98:4f: 6d:fb:23:69:5f:8d:54:36:dd:7a:09:90:29:f6:12: 23:bd:58:18:65:38:55:3b:4e:90:2c:2e:8e:30:18: aa:c5:c8:8a:58:49:42:34:a2:75:79:de:11:78:d8: db:50:6d:67:f4:ae:9c:14:b2:07:bc:90:89:92:4d: 1d:03:2f:d3:40:fb:d5:c9:ae:3c:45:c2:0c:ba:f3: e8:b4:d8:3e:e2:f5:03:5a:35:fe:18:46:07:18:5a: 35:d4:8f:d8:d1:37:86:32:28:92:9f:7a:69:ae:f0: 56:00:1f:37:3f:95:d5:f4:5c:89:2f:02:63:58:16: 4c:c7:21:02:e9:55:e6:bd:42:cd:c8:09:40:5d:43: f5:2b:1d:97:17:5c:a1:ec:82:ef:ab:70:26:79:bd: 77:01:e5:4d:b4:a1:16:4d:ee:bc:6b:d6:58:8a:56: a6:1b:f4:fc:00:49:b6:14:a8:7b:58:85:c6:87:17: b1:50:2f:19:05:eb:93:ba:e5:c4:cf:c5:8d:0a:e4: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AE:FF:5D:62:17:DE:FA:B6:63:40:69:1E:6E:3E:E7:3A:0F:6D:7B X509v3 Authority Key Identifier: keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/430FB1B69FC411EEBA6AB80AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.185.0/24 Signature Algorithm: sha256WithRSAEncryption d5:ff:9c:a3:1b:49:d1:0c:f1:79:69:0f:aa:1b:36:70:aa:16: f4:79:36:22:4e:31:1e:1f:88:cb:d0:bd:4c:54:72:11:dd:92: c5:45:c2:6a:57:ca:8d:68:ce:10:e7:ef:49:64:60:30:79:e0: 8a:4c:83:c4:13:91:4e:2f:99:6c:6f:5b:9d:2a:3d:c8:1b:c8: 20:90:56:21:1c:b4:d8:76:10:ba:11:fc:c2:30:04:7f:88:ae: c3:1e:c9:8e:4a:da:74:38:ce:b9:63:e1:23:38:c8:07:e9:7a: 00:46:1f:3e:41:99:00:e6:56:cd:f9:03:bc:e5:1e:f0:e0:c7: b9:1b:82:95:1c:3f:85:81:5c:44:f3:e7:dc:4c:9a:38:5e:78: 1b:b6:37:c3:3b:b4:68:21:a3:72:4d:63:9a:d4:cd:8b:3a:90: 1e:20:04:49:7f:7a:ab:c3:53:fb:14:85:69:4c:20:c6:f3:ab: 87:4f:bb:70:c7:c1:cd:a7:ff:d9:74:e4:b3:7a:87:17:d0:1f: 28:00:f2:c4:82:a1:01:0b:5e:26:77:a8:e0:35:b7:fe:05:89: ac:3a:37:11:14:8d:56:ee:25:40:fa:91:b6:78:2e:ac:9e:bc: 05:7b:f9:7d:dc:94:e8:08:d8:b5:b4:3c:97:fe:b9:0c:f0:c9: 56:fe:62:4c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0Y2QzExMC8GA1UEBRMoNjYzQzRFOTlCNkI2QjIzMjkzRkE0MkI2MTJCMjQyMjk5 Mjk3MjY3MTAeFw0yNDA1MTUwODEyMzJaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NDQ2ZTcwLTNmOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzcTQ6Wmox52At+nLwsEUO+w0tg2Butgwnt1xhtXLWY6JFCups/2lsYBw1QOdo TAnXjS2xvui5HEiYT237I2lfjVQ23XoJkCn2EiO9WBhlOFU7TpAsLo4wGKrFyIpY SUI0onV53hF42NtQbWf0rpwUsge8kImSTR0DL9NA+9XJrjxFwgy68+i02D7i9QNa Nf4YRgcYWjXUj9jRN4YyKJKfemmu8FYAHzc/ldX0XIkvAmNYFkzHIQLpVea9Qs3I CUBdQ/UrHZcXXKHsgu+rcCZ5vXcB5U20oRZN7rxr1liKVqYb9PwASbYUqHtYhcaH F7FQLxkF65O65cTPxY0K5EE7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUXK7/XWIX 3vq2Y0BpHm4+5zoPbXswHwYDVR0jBBgwFoAUZjxOmba2sjKT+kK2ErJCKZKXJnEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRjZDLzkxMzgzNjhFOUUz ODExRUVCMUM4MDc3NkM0RjlBRTAyL1pqeE9tYmEyc2pLVC1rSzJFckpDS1pLWEpu RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmp4T21iYTJzaktULWtLMkVySkNLWktYSm5FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0Y2Qy85MTM4MzY4RTlFMzgxMUVFQjFDODA3NzZDNEY5QUUwMi80MzBGQjFCNjlG QzQxMUVFQkE2QUI4MEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfUuTANBgkqhkiG9w0BAQsFAAOCAQEA1f+coxtJ0QzxeWkP qhs2cKoW9Hk2Ik4xHh+Iy9C9TFRyEd2SxUXCalfKjWjOEOfvSWRgMHngikyDxBOR Ti+ZbG9bnSo9yBvIIJBWIRy02HYQuhH8wjAEf4iuwx7JjkradDjOuWPhIzjIB+l6 AEYfPkGZAOZWzfkDvOUe8ODHuRuClRw/hYFcRPPn3EyaOF54G7Y3wzu0aCGjck1j mtTNizqQHiAESX96q8NT+xSFaUwgxvOrh0+7cMfBzaf/2XTks3qHF9AfKADyxIKh AQteJneo4DW3/gWJrDo3ERSNVu4lQPqRtngurJ68BXv5fdyU6AjYtbQ8l/65DPDJ Vv5iTA== -----END CERTIFICATE-----Generated at Wed May 29 10:43:12 2024 by rpki-client on console-ams.rpki-client.org