$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa File: CD665F4E0AA611EE84B0053DC4F9AE02.roa (raw, json) Hash identifier: t8edc1rczcnyimiu6R9XqLr/tOs3OOkrPa+tLF31RPI= Subject key identifier: C2:EE:8B:CD:D3:18:39:E6:54:D8:FA:35:67:27:B2:02:C4:0F:C1:13 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 03DB Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa Signing time: Tue 19 Sep 2023 01:01:55 +0000 ROA not before: Tue 19 Sep 2023 01:01:55 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 16509 IP address blocks: 103.172.141.0/24 maxlen: 24 2407:d4c0:1000::/40 maxlen: 40 2407:d4c0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 987 (0x3db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Sep 19 01:01:55 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6508f303-62ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:da:cd:7f:8b:49:d5:a0:89:95:b3:57:35: 2d:20:19:25:14:1d:fb:43:b1:c5:de:c7:99:ce:1d: 28:d8:94:9a:c2:4e:35:06:0c:14:69:48:c5:3a:7c: 88:85:5d:63:40:0a:36:5c:38:bb:3e:02:07:84:6e: de:bb:3f:a5:ed:52:90:93:c4:10:ad:09:fb:31:29: 21:3f:0f:4e:8b:4f:ee:3f:75:e1:58:2f:32:82:3d: 3b:d0:9f:4b:32:cd:e0:f0:d7:3c:28:7d:90:69:bd: e8:57:d4:d3:37:32:a8:07:b0:37:d3:86:b6:31:e7: da:dc:f5:a6:49:c9:7c:f7:7f:8e:af:ee:3c:61:bd: 7d:65:55:69:46:86:6e:d4:ca:b9:a1:a5:ba:8e:57: 84:16:cb:ec:67:ab:ab:cb:30:58:a0:79:24:bd:dd: 6e:69:24:44:53:67:6a:bf:77:e1:26:0f:16:eb:15: 71:80:cc:fc:44:f5:73:a4:83:dc:74:2e:5b:c3:5f: 84:7e:b6:3d:71:99:47:af:be:09:21:29:99:4b:3d: 85:20:bc:73:46:47:21:63:fb:22:21:07:d1:f5:85: a7:52:25:34:29:64:68:f1:09:24:5b:0a:75:45:7c: ce:d5:f1:03:53:73:9b:a4:6c:ab:39:46:cd:48:33: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EE:8B:CD:D3:18:39:E6:54:D8:FA:35:67:27:B2:02:C4:0F:C1:13 X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.141.0/24 IPv6: 2407:d4c0:1000::/40 Signature Algorithm: sha256WithRSAEncryption 0d:bd:fa:64:f3:84:04:67:94:26:0a:69:b5:e5:83:ce:92:70: ba:39:ed:e7:9d:db:76:c7:0d:6e:88:15:af:f5:98:8b:37:4e: 3f:49:24:08:b6:98:49:fa:3b:eb:90:70:4d:28:83:05:0a:8b: 05:9d:9f:e1:a8:28:f4:4c:4f:d7:a6:1f:21:cb:24:e3:eb:29: d7:a0:e9:eb:6a:58:1e:bd:03:78:12:f1:c9:8f:d0:13:77:90: 83:93:d6:62:38:9a:bc:53:5a:4a:c3:7d:f8:03:fe:2f:3e:6f: 8f:8d:62:80:e2:af:b7:22:49:07:ce:64:77:2f:49:3a:8e:69: 71:02:a1:24:0b:b5:2f:ce:3c:2f:e4:17:80:e7:5e:e6:53:f2: a6:8b:19:4b:27:01:c5:92:76:c1:7b:c5:5a:b5:68:18:a1:2c: fb:31:65:9e:08:d4:04:69:2f:ef:2e:79:df:8a:0e:86:5d:49: 94:95:bd:63:b9:70:29:8c:00:25:8b:5d:28:6e:48:25:05:5c: f6:e3:ab:3c:64:f5:d3:0b:17:1d:72:0b:ca:cf:4c:a5:c0:a1: 0c:55:09:40:46:08:01:f4:b6:1a:73:2f:f9:ac:7b:5c:45:d1: f1:c2:f9:4c:ec:99:ba:7c:75:53:97:3e:64:21:30:bf:8e:db: 80:d2:5a:0f -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICA9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjMwOTE5MDEwMTU1WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTA4ZjMwMy02MmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssjazX+LSdWgiZWzVzUtIBklFB37Q7HF3seZzh0o2JSawk41BgwUaUjFOnyI hV1jQAo2XDi7PgIHhG7euz+l7VKQk8QQrQn7MSkhPw9Oi0/uP3XhWC8ygj070J9L Ms3g8Nc8KH2Qab3oV9TTNzKoB7A304a2Mefa3PWmScl893+Or+48Yb19ZVVpRoZu 1Mq5oaW6jleEFsvsZ6uryzBYoHkkvd1uaSREU2dqv3fhJg8W6xVxgMz8RPVzpIPc dC5bw1+EfrY9cZlHr74JISmZSz2FILxzRkchY/siIQfR9YWnUiU0KWRo8QkkWwp1 RXzO1fEDU3ObpGyrOUbNSDMqzwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMLui83T GDnmVNj6NWcnsgLED8ETMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRDMTUvQUM5QzZCNTAwQTQ0MTFFQzk0Nzk3RTUzQzRGOUFFMDIvQ0Q2NjVGNEUw QUE2MTFFRTg0QjAwNTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBABnrI0wDgQCAAIwCAMGACQH1MAQMA0GCSqGSIb3DQEBCwUA A4IBAQANvfpk84QEZ5QmCmm15YPOknC6Oe3nndt2xw1uiBWv9ZiLN04/SSQItphJ +jvrkHBNKIMFCosFnZ/hqCj0TE/Xph8hyyTj6ynXoOnralgevQN4EvHJj9ATd5CD k9ZiOJq8U1pKw334A/4vPm+PjWKA4q+3IkkHzmR3L0k6jmlxAqEkC7Uvzjwv5BeA 517mU/KmixlLJwHFknbBe8VatWgYoSz7MWWeCNQEaS/vLnnfig6GXUmUlb1juXAp jAAli10obkglBVz246s8ZPXTCxcdcgvKz0ylwKEMVQlARggB9LYacy/5rHtcRdHx wvlM7Jm6fHVTlz5kITC/jtuA0loP -----END CERTIFICATE-----Generated at Wed May 1 02:46:19 2024 by rpki-client on console-ams.rpki-client.org