$ rpki-client -vvf rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/4CC318AC7FFF11EB8D47E82EC4F9AE02.roa File: 4CC318AC7FFF11EB8D47E82EC4F9AE02.roa (raw, json) Hash identifier: cID8LesjTBPauhbbrKDmJKwZBoEPhQpYrF8g7uce3kc= Subject key identifier: 21:7F:0D:78:E2:8D:95:F7:D2:4D:7D:65:45:4D:18:CE:94:0C:6F:0E Certificate issuer: /CN=A9174ECB/serialNumber=6B7EE2891EBE1D3AF0A562C5A8466581B90459A4 Certificate serial: 10C3 Authority key identifier: 6B:7E:E2:89:1E:BE:1D:3A:F0:A5:62:C5:A8:46:65:81:B9:04:59:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/4CC318AC7FFF11EB8D47E82EC4F9AE02.roa Signing time: Tue 12 Dec 2023 18:05:21 +0000 ROA not before: Tue 12 Dec 2023 18:05:21 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 137199 IP address blocks: 103.101.234.0/23 maxlen: 23 103.115.12.0/23 maxlen: 23 2401:d6c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.crl rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4291 (0x10c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174ECB/serialNumber=6B7EE2891EBE1D3AF0A562C5A8466581B90459A4 Validity Not Before: Dec 12 18:05:21 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6578a0e1-6256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0b:68:d5:6f:6d:f4:e9:2f:a5:13:3e:3c:13: af:f1:63:52:e6:dc:98:c6:b8:a2:a6:ec:7a:0a:4a: ae:ee:02:0f:b0:12:e9:71:ce:84:2f:88:bd:c3:6a: ce:5f:92:dc:aa:6d:a8:1f:6c:a3:74:c3:59:0a:a1: 6b:ab:c0:ca:1f:ff:d3:46:56:bd:cd:f0:33:fd:d3: 5d:47:e1:b4:4a:ae:5c:cf:9f:ba:16:c2:8f:81:38: c8:16:64:9c:9e:81:21:8f:ba:47:7a:fe:47:2c:a1: 85:6a:d0:9c:2e:da:37:ba:38:15:bd:15:eb:eb:d4: c9:9e:dc:8f:cb:d1:71:47:fd:42:e3:b2:06:da:b8: 0f:9c:b3:8d:c1:3f:6b:c9:f1:90:98:e5:e2:77:7d: 5f:0c:c9:91:35:85:8e:39:06:df:6a:de:c1:9a:cd: 12:5d:23:58:15:a3:f3:b8:63:04:df:fa:ce:f5:11: d3:cf:1e:d3:c4:4e:6f:e3:78:9e:a4:8d:e0:2f:b3: db:55:6e:ec:13:d5:a6:db:af:94:ff:4c:61:62:ed: 9f:1f:52:80:42:e9:fb:05:7a:18:17:d1:bd:f1:0e: 82:6e:53:70:2f:42:69:c7:31:b7:eb:bf:2f:39:17: ee:60:52:bf:20:15:cb:28:a3:3f:b2:10:64:08:f7: 74:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7F:0D:78:E2:8D:95:F7:D2:4D:7D:65:45:4D:18:CE:94:0C:6F:0E X509v3 Authority Key Identifier: keyid:6B:7E:E2:89:1E:BE:1D:3A:F0:A5:62:C5:A8:46:65:81:B9:04:59:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/4CC318AC7FFF11EB8D47E82EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.234.0/23 103.115.12.0/23 IPv6: 2401:d6c0::/32 Signature Algorithm: sha256WithRSAEncryption 91:05:cf:d5:43:59:8d:a9:a5:0e:37:5d:16:24:65:25:46:63: 2f:92:42:6e:4d:10:18:29:d7:e7:4c:27:46:27:07:dc:d2:2e: 42:2a:74:83:c1:70:ae:5b:cf:d6:e7:94:f5:d7:b8:b4:9f:f7: 4a:d5:5c:cb:d1:26:1b:6a:62:c0:5d:33:52:da:04:e3:51:da: ae:0d:87:a3:ae:96:19:86:fc:99:57:b1:f0:d9:74:14:93:e2: 8a:c5:cf:cf:c5:22:db:ea:c2:d6:b7:ec:75:ef:bd:fa:5c:89: a8:fc:26:42:4a:cb:f8:fd:81:25:99:1c:2c:4b:28:d4:c8:69: 0b:2a:69:63:b4:3e:d5:9e:74:ef:5d:a4:e1:28:3e:0f:c0:37: 7d:ba:32:70:21:64:fd:eb:01:97:24:7a:57:5f:8a:e7:4b:6e: df:dd:e6:d6:5f:5f:7c:08:05:97:9d:f6:a9:56:6a:b9:9d:66: fd:6a:00:da:39:71:72:50:e1:f5:3f:6e:00:a3:bc:72:cf:b5: 7b:0a:bb:b5:61:41:e1:d4:59:5d:e1:76:09:df:50:a1:41:63: 47:45:df:11:2f:d3:9a:b5:d9:79:77:9b:25:33:c7:66:0c:83: 26:3a:c2:3d:e5:4b:f9:ca:af:a8:35:b5:e9:ab:bb:7a:c6:a5: ec:31:77:d7 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQ0IxMTAvBgNVBAUTKDZCN0VFMjg5MUVCRTFEM0FGMEE1NjJDNUE4NDY2NTgx QjkwNDU5QTQwHhcNMjMxMjEyMTgwNTIxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTc4YTBlMS02MjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wto1W9t9OkvpRM+PBOv8WNS5tyYxriipux6Ckqu7gIPsBLpcc6EL4i9w2rO X5Lcqm2oH2yjdMNZCqFrq8DKH//TRla9zfAz/dNdR+G0Sq5cz5+6FsKPgTjIFmSc noEhj7pHev5HLKGFatCcLto3ujgVvRXr69TJntyPy9FxR/1C47IG2rgPnLONwT9r yfGQmOXid31fDMmRNYWOOQbfat7Bms0SXSNYFaPzuGME3/rO9RHTzx7TxE5v43ie pI3gL7PbVW7sE9Wm26+U/0xhYu2fH1KAQun7BXoYF9G98Q6CblNwL0JpxzG3678v ORfuYFK/IBXLKKM/shBkCPd0JQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCF/DXji jZX30k19ZUVNGM6UDG8OMB8GA1UdIwQYMBaAFGt+4okevh068KVixahGZYG5BFmk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVDQi85NTQyQzhBMEVF NjMxMUU4ODQ2QjQ2NTVDNEY5QUUwMi9hMzdpaVI2LUhUcndwV0xGcUVabGdia0VX YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EzN2lpUjYtSFRyd3BXTEZxRVpsZ2JrRVdhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRFQ0IvOTU0MkM4QTBFRTYzMTFFODg0NkI0NjU1QzRGOUFFMDIvNENDMzE4QUM3 RkZGMTFFQjhENDdFODJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnZeoDBAFncwwwDQQCAAIwBwMFACQB1sAwDQYJKoZIhvcN AQELBQADggEBAJEFz9VDWY2ppQ43XRYkZSVGYy+SQm5NEBgp1+dMJ0YnB9zSLkIq dIPBcK5bz9bnlPXXuLSf90rVXMvRJhtqYsBdM1LaBONR2q4Nh6OulhmG/JlXsfDZ dBST4orFz8/FItvqwta37HXvvfpciaj8JkJKy/j9gSWZHCxLKNTIaQsqaWO0PtWe dO9dpOEoPg/AN326MnAhZP3rAZckeldfiudLbt/d5tZfX3wIBZed9qlWarmdZv1q ANo5cXJQ4fU/bgCjvHLPtXsKu7VhQeHUWV3hdgnfUKFBY0dF3xEv05q12Xl3myUz x2YMgyY6wj3lS/nKr6g1temru3rGpewxd9c= -----END CERTIFICATE-----Generated at Sun May 12 19:08:47 2024 by rpki-client on console-ams.rpki-client.org