$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/4156CE4E8B8811EF99CAC23CC4F9AE02.roa File: 4156CE4E8B8811EF99CAC23CC4F9AE02.roa (raw, json) Hash identifier: aC5CXVsf3TUJUqObfYO8YqGBcyfi/oOuuM/n6aK5tiE= Subject key identifier: 52:9C:89:13:54:04:03:6E:9F:0F:37:80:B2:BC:15:96:98:26:84:03 Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Certificate serial: 0131 Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/4156CE4E8B8811EF99CAC23CC4F9AE02.roa Signing time: Wed 16 Oct 2024 06:31:20 +0000 ROA not before: Wed 16 Oct 2024 06:31:20 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 7483 IP address blocks: 203.57.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Validity Not Before: Oct 16 06:31:20 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=670f5db8-8e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:34:12:0d:8f:1d:67:8c:73:ea:1b:d6:9a: 12:cc:57:ee:eb:d9:07:1a:6b:90:7a:d3:4e:c8:37: 6f:98:15:f3:a5:44:99:34:0e:f5:1a:70:49:5d:1b: 50:45:55:db:19:0a:39:02:d1:db:77:8b:f2:fa:65: bc:8a:01:f7:7e:08:e7:3e:5d:c0:94:68:b5:e1:55: bf:ce:0b:79:0b:88:55:53:db:45:dc:13:89:c5:4e: 39:ca:a4:ac:a8:7b:e3:06:40:9f:02:eb:b5:2f:99: e1:0e:0b:d1:05:73:c1:bd:bc:08:50:30:84:80:7d: 05:0c:0b:fc:67:5f:b7:aa:62:43:f2:68:bf:28:ea: 01:bf:55:36:0a:f1:dc:3e:14:62:ca:03:9f:64:56: da:19:cb:0a:d9:fe:9b:14:a9:dd:62:0c:80:24:1e: db:6b:10:af:a2:46:ea:39:74:74:c1:b9:34:da:4f: 47:d4:68:b3:e6:53:f2:97:e3:dd:df:4e:0f:8c:01: 5d:37:13:73:2a:26:a3:16:8c:7c:d3:53:56:78:28: 23:d7:bd:74:6d:17:56:2c:be:b9:6a:83:d0:f0:15: ed:7a:72:d5:39:0b:7b:f5:88:50:dc:3f:3f:7a:e3: 4a:3f:4e:d3:c0:a1:c0:f8:a9:a2:ce:b6:aa:fd:3b: b6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9C:89:13:54:04:03:6E:9F:0F:37:80:B2:BC:15:96:98:26:84:03 X509v3 Authority Key Identifier: keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/4156CE4E8B8811EF99CAC23CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.57.34.0/24 Signature Algorithm: sha256WithRSAEncryption 43:8e:d6:6d:32:43:7e:1e:c6:13:98:f0:d5:d3:d6:f0:21:ad: 1a:67:1d:55:3e:35:a3:91:e1:95:1f:17:0b:91:a0:6e:78:e8: 47:e5:32:4c:82:b3:e2:13:5c:96:33:b4:9d:67:58:3e:e3:29: a8:7e:a7:1b:c9:40:6b:f5:97:94:1a:ce:a1:e7:e1:9a:02:6c: 78:92:16:9e:98:90:49:06:24:88:1d:a4:bf:bd:a5:a2:fc:0c: cf:76:99:1c:a1:42:d5:1e:2d:80:c8:d0:1f:a6:66:c1:84:e1: a9:4f:f9:2e:64:7a:14:a2:df:37:d4:3f:f6:f3:12:44:2d:92: f4:7a:7f:f9:9c:1f:9e:22:d4:4d:22:75:70:72:ff:85:64:7e: df:dd:28:cb:f5:70:2e:44:0d:56:b2:36:88:db:47:68:aa:39: d7:11:4d:50:b9:73:a6:23:fb:e6:9f:59:5b:11:12:9c:92:e2: c3:ef:4e:84:78:c1:68:c5:2e:ca:2d:03:aa:75:7a:8a:63:17: c8:02:67:3a:70:3d:7a:cc:54:5c:a4:4f:8d:9b:d1:f8:2c:7b: b1:e9:dc:cc:f5:32:0c:f9:e6:94:53:0a:f6:8d:81:46:94:7c: 5c:16:db:01:cf:e6:57:66:09:67:77:d1:9e:5e:dd:52:66:b3: 7b:35:69:44 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNkExMTAvBgNVBAUTKDQ3NTMwMEM5NkVCOUEyNEUzMzFEMEIzOTAwNzBDNDVB MjlDOTVFNjkwHhcNMjQxMDE2MDYzMTIwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBmNWRiOC04ZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFM0Eg2PHWeMc+ob1poSzFfu69kHGmuQetNOyDdvmBXzpUSZNA71GnBJXRtQ RVXbGQo5AtHbd4vy+mW8igH3fgjnPl3AlGi14VW/zgt5C4hVU9tF3BOJxU45yqSs qHvjBkCfAuu1L5nhDgvRBXPBvbwIUDCEgH0FDAv8Z1+3qmJD8mi/KOoBv1U2CvHc PhRiygOfZFbaGcsK2f6bFKndYgyAJB7baxCvokbqOXR0wbk02k9H1Giz5lPyl+Pd 304PjAFdNxNzKiajFox801NWeCgj1710bRdWLL65aoPQ8BXtenLVOQt79YhQ3D8/ euNKP07TwKHA+Kmizraq/Tu20QIDAQABo4IClTCCApEwHQYDVR0OBBYEFFKciRNU BANunw83gLK8FZaYJoQDMB8GA1UdIwQYMBaAFEdTAMluuaJOMx0LOQBwxFopyV5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM2QS80MDkzNDI4MEM3 QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9rNHpIUXM1QUhERVdpbkpY bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxTUF5VzY1b2s0ekhRczVBSERFV2luSlhtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0MzNkEvNDA5MzQyODBDN0IyMTFFRDkzNTdBMjNDQzRGOUFFMDIvNDE1NkNFNEU4 Qjg4MTFFRjk5Q0FDMjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLOSIwDQYJKoZIhvcNAQELBQADggEBAEOO1m0yQ34exhOY 8NXT1vAhrRpnHVU+NaOR4ZUfFwuRoG546EflMkyCs+ITXJYztJ1nWD7jKah+pxvJ QGv1l5QazqHn4ZoCbHiSFp6YkEkGJIgdpL+9paL8DM92mRyhQtUeLYDI0B+mZsGE 4alP+S5kehSi3zfUP/bzEkQtkvR6f/mcH54i1E0idXBy/4Vkft/dKMv1cC5EDVay NojbR2iqOdcRTVC5c6Yj++afWVsREpyS4sPvToR4wWjFLsotA6p1eopjF8gCZzpw PXrMVFykT42b0fgse7Hp3Mz1Mgz55pRTCvaNgUaUfFwW2wHP5ldmCWd30Z5e3VJm s3s1aUQ= -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:07 2024 by rpki-client on console-ams.rpki-client.org