$ rpki-client -vvf rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa File: E3901F981BD711EEB9597921C4F9AE02.roa (raw, json) Hash identifier: WAkCaN8gPES1r0aKIa9bLRXktTida+w4l1rKNkY5dRk= Subject key identifier: B0:2A:5E:DE:B5:20:EC:68:93:C1:DF:02:E3:83:F0:91:31:91:7A:4E Certificate issuer: /CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Certificate serial: 02 Authority key identifier: 4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa Signing time: Thu 06 Jul 2023 08:34:14 +0000 ROA not before: Thu 06 Jul 2023 08:34:14 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 151326 IP address blocks: 103.197.254.0/23 maxlen: 23 2001:df2:6fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Validity Not Before: Jul 6 08:34:14 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64a67c86-b981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:a2:e2:42:75:ef:77:44:fe:a2:39:94:2d: c9:b0:91:51:2b:8d:43:3f:58:00:93:bd:38:8e:82: c8:49:4f:ad:34:ed:16:71:c9:ae:be:38:39:79:cb: 26:b4:a7:7d:6a:a4:e4:37:dc:c4:dc:79:2c:57:9c: ff:14:c2:62:81:49:b4:91:57:97:ee:92:4d:03:cc: fc:11:a4:8f:54:1c:6a:0b:e0:ae:2c:17:25:d4:2f: 81:ea:9f:19:08:13:49:c1:7e:79:10:0e:9d:9e:16: fd:ed:90:46:85:04:f7:7c:68:05:fa:c7:42:49:f7: c0:84:56:4a:51:89:70:0b:06:46:0c:14:78:f9:92: 76:0b:4f:39:4f:3a:62:9e:50:6c:55:4a:e8:26:e4: 3f:9c:53:ca:c9:e1:3a:67:f2:df:be:58:e3:19:92: 0c:37:ad:c0:64:6a:c4:95:59:09:dd:ea:de:56:b9: 1e:4d:88:4e:ad:29:80:78:e9:ce:06:e1:18:22:85: c8:2e:58:d4:d4:f1:3c:53:22:df:9e:0e:2b:62:5c: f7:f2:dd:41:b7:97:e3:e7:f9:4b:86:7b:eb:a4:0d: 94:9e:e9:7e:05:86:72:6a:7e:38:b4:0a:4e:57:86: 0d:60:37:61:6e:40:f5:dd:1f:0c:5d:a2:44:c6:5f: e3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2A:5E:DE:B5:20:EC:68:93:C1:DF:02:E3:83:F0:91:31:91:7A:4E X509v3 Authority Key Identifier: keyid:4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.254.0/23 IPv6: 2001:df2:6fc0::/48 Signature Algorithm: sha256WithRSAEncryption 75:c7:92:83:42:f8:d9:e9:27:0a:28:fb:83:96:ac:97:02:f3: 2d:66:a4:45:1e:c9:b3:84:0e:69:8e:19:54:ad:b5:c3:e4:0b: 0b:24:b1:e6:65:c6:d5:6d:50:b0:19:dc:eb:e4:e7:1b:f9:ab: 01:9e:aa:07:60:c5:45:eb:fc:e1:23:3c:41:48:a8:bf:9a:6d: 3d:e3:8d:51:ae:6e:1a:e5:3d:4b:03:42:f7:9d:ce:f8:db:63: 6f:88:2e:0f:0d:a9:4e:85:9f:56:20:76:20:2c:2a:df:de:c8: cb:02:eb:dd:ef:e0:f7:58:a4:c2:8c:e9:3c:9c:cf:7e:51:f5: 8b:5f:6d:7b:35:20:65:ce:d3:eb:6c:2f:61:c2:76:d0:a3:3c: cb:11:cc:28:cd:da:07:bd:85:eb:d0:c5:89:ae:78:90:e1:a3: 8b:bd:ad:20:a1:b2:a5:76:7a:cb:02:b2:5b:65:41:a0:34:2a: 3c:31:0b:39:03:d7:34:91:e2:c1:6f:da:a4:06:fe:42:77:62: 9c:23:7c:21:48:50:10:04:9a:a9:83:f4:8e:ef:8b:10:05:94: 0b:18:13:03:fd:10:dd:3f:22:9f:93:bd:4c:76:81:c2:be:7d: 30:d5:d8:14:47:6d:dc:97:58:5f:0f:15:2f:6e:6b:d7:c7:30: 19:46:ae:0f -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTY3RTExMC8GA1UEBRMoNEI3MjJBM0E2NzkzQkYzMkM5QkNGNTJFNEU3NzJFMEE2 RjNBNjMxOTAeFw0yMzA3MDYwODM0MTRaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0YTY3Yzg2LWI5ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuCaLiQnXvd0T+ojmULcmwkVErjUM/WACTvTiOgshJT6007RZxya6+ODl5yya0 p31qpOQ33MTceSxXnP8UwmKBSbSRV5fukk0DzPwRpI9UHGoL4K4sFyXUL4HqnxkI E0nBfnkQDp2eFv3tkEaFBPd8aAX6x0JJ98CEVkpRiXALBkYMFHj5knYLTzlPOmKe UGxVSugm5D+cU8rJ4Tpn8t++WOMZkgw3rcBkasSVWQnd6t5WuR5NiE6tKYB46c4G 4RgihcguWNTU8TxTIt+eDitiXPfy3UG3l+Pn+UuGe+ukDZSe6X4FhnJqfji0Ck5X hg1gN2FuQPXdHwxdokTGX+PXAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUsCpe3rUg 7GiTwd8C44PwkTGRek4wHwYDVR0jBBgwFoAUS3IqOmeTvzLJvPUuTncuCm86Yxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBNjdFLzY3QjRDQjg0MUJE MzExRUU5NjVGRUYzOEM0RjlBRTAyL1MzSXFPbWVUdnpMSnZQVXVUbmN1Q204Nll4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzNJcU9tZVR2ekxKdlBVdVRuY3VDbTg2WXhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY3RS82N0I0Q0I4NDFCRDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9FMzkwMUY5ODFC RDcxMUVFQjk1OTc5MjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWfF/jAPBAIAAjAJAwcAIAEN8m/AMA0GCSqGSIb3DQEBCwUA A4IBAQB1x5KDQvjZ6ScKKPuDlqyXAvMtZqRFHsmzhA5pjhlUrbXD5AsLJLHmZcbV bVCwGdzr5Ocb+asBnqoHYMVF6/zhIzxBSKi/mm09441Rrm4a5T1LA0L3nc7422Nv iC4PDalOhZ9WIHYgLCrf3sjLAuvd7+D3WKTCjOk8nM9+UfWLX217NSBlztPrbC9h wnbQozzLEcwozdoHvYXr0MWJrniQ4aOLva0gobKldnrLArJbZUGgNCo8MQs5A9c0 keLBb9qkBv5Cd2KcI3whSFAQBJqpg/SO74sQBZQLGBMD/RDdPyKfk71MdoHCvn0w 1dgUR23cl1hfDxUvbmvXxzAZRq4P -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:18 2024 by rpki-client on console-ams.rpki-client.org