$ rpki-client -vvf rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/A4A123AE910F11EBA9F7B639C4F9AE02.roa File: A4A123AE910F11EBA9F7B639C4F9AE02.roa (raw, json) Hash identifier: 0VlpTd/u5AQ9SvGGwRGZDkuWUVcNk9IhchTlmde8Q0E= Subject key identifier: 5D:AF:81:26:01:5D:69:FA:D6:D7:C6:94:DB:BB:7E:5E:FC:EB:92:D5 Certificate issuer: /CN=A917F89D/serialNumber=C396305D02D2F885F3FADED53AC310F21BD05487 Certificate serial: 11E4 Authority key identifier: C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/A4A123AE910F11EBA9F7B639C4F9AE02.roa Signing time: Fri 14 Jul 2023 17:34:14 +0000 ROA not before: Fri 14 Jul 2023 17:34:14 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 45117 IP address blocks: 103.116.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 17:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4580 (0x11e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F89D/serialNumber=C396305D02D2F885F3FADED53AC310F21BD05487 Validity Not Before: Jul 14 17:34:14 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64b18715-3ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b8:1a:32:25:22:97:c0:1d:2e:c8:81:94:0d: d1:b4:f6:55:8a:a2:86:da:d0:a6:28:70:d6:ed:cd: e8:c3:60:66:92:bc:f8:c4:b7:52:58:eb:52:af:52: f1:13:ed:f7:e9:09:e5:6c:31:7b:4a:33:b1:ca:62: 11:e4:ff:c7:44:5b:da:62:c4:e5:dd:96:4c:14:1b: e0:d3:22:c7:00:8e:4f:a8:0d:01:c1:2a:89:e2:44: a0:2e:fd:65:75:76:2c:28:66:64:a2:a2:3e:89:83: b0:97:79:4c:b0:86:38:3c:fa:c5:b4:0f:b6:d3:5f: 2b:bf:f6:f9:36:68:6d:5f:83:2f:ea:97:5c:39:18: fb:28:f0:8d:f1:4a:0e:fe:87:47:0c:c5:ea:22:be: ee:3e:c6:ad:a3:ba:fa:bc:0f:7b:3c:5e:bd:d7:a5: 0c:1f:20:71:3b:30:34:31:19:98:ed:13:7a:e4:6c: 3d:11:25:ed:18:bf:d7:91:64:ed:1f:19:d1:df:b8: f8:34:50:30:cd:d9:51:aa:21:17:a3:df:01:da:0f: 69:5d:32:30:3f:ad:b3:95:03:98:d8:29:28:36:fa: 7c:e6:bf:39:5b:64:b3:07:8a:49:03:44:1f:20:25: da:e6:57:7f:04:74:44:d2:a8:c1:aa:84:ba:30:3b: 83:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AF:81:26:01:5D:69:FA:D6:D7:C6:94:DB:BB:7E:5E:FC:EB:92:D5 X509v3 Authority Key Identifier: keyid:C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/A4A123AE910F11EBA9F7B639C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.178.0/24 Signature Algorithm: sha256WithRSAEncryption 32:3e:c9:00:de:4a:b1:ec:9b:1a:9f:7b:69:1f:c8:24:00:a1: eb:aa:7e:9b:ef:60:b8:23:62:3d:ae:42:cd:a9:7d:68:ca:8d: 75:cd:fb:d7:de:3a:1c:4e:40:a6:0a:5a:e0:3a:ae:da:63:7b: 2c:28:61:d2:be:9c:e6:9e:50:ec:69:ee:e9:82:6d:04:11:4c: 49:0b:26:f3:fa:51:a6:3c:6f:4b:10:1e:ee:f6:38:69:05:c3: 8f:14:c9:7f:af:0c:01:77:4d:02:23:48:ca:da:eb:5e:5b:84: 36:ef:64:33:c7:bb:1d:1e:1b:e2:e9:7f:3b:4e:22:22:8c:9d: 71:4a:84:c0:ed:41:40:39:1f:70:c9:c1:83:85:a6:80:10:70: 22:b1:45:37:c3:5a:57:43:e9:aa:8d:01:7b:1f:aa:aa:77:fe: 3a:18:9e:17:fc:50:d0:32:34:5b:da:10:72:1f:ec:7c:5a:15: 8f:30:7b:99:6b:a3:5e:64:e7:74:06:cb:7d:4d:40:eb:62:05: ad:d7:8e:34:bc:18:42:3f:1f:10:d6:b0:71:43:b5:4f:74:38: 84:38:30:02:88:1c:87:db:63:d2:03:36:4c:09:ca:65:e5:c9: 21:5c:74:dd:35:62:7d:3d:31:82:f2:cc:75:3f:45:81:6f:78: f5:41:3b:d2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4OUQxMTAvBgNVBAUTKEMzOTYzMDVEMDJEMkY4ODVGM0ZBREVENTNBQzMxMEYy MUJEMDU0ODcwHhcNMjMwNzE0MTczNDE0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGIxODcxNS0zY2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorgaMiUil8AdLsiBlA3RtPZViqKG2tCmKHDW7c3ow2Bmkrz4xLdSWOtSr1Lx E+336QnlbDF7SjOxymIR5P/HRFvaYsTl3ZZMFBvg0yLHAI5PqA0BwSqJ4kSgLv1l dXYsKGZkoqI+iYOwl3lMsIY4PPrFtA+2018rv/b5NmhtX4Mv6pdcORj7KPCN8UoO /odHDMXqIr7uPsato7r6vA97PF6916UMHyBxOzA0MRmY7RN65Gw9ESXtGL/XkWTt HxnR37j4NFAwzdlRqiEXo98B2g9pXTIwP62zlQOY2CkoNvp85r85W2SzB4pJA0Qf ICXa5ld/BHRE0qjBqoS6MDuDjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF2vgSYB XWn61tfGlNu7fl7865LVMB8GA1UdIwQYMBaAFMOWMF0C0viF8/re1TrDEPIb0FSH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg5RC85Njc0QUZDOEE1 QzQxMUU4OTUwNUZEMzFDNEY5QUUwMi93NVl3WFFMUy1JWHotdDdWT3NNUThodlFW SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c1WXdYUUxTLUlYei10N1ZPc01ROGh2UVZJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Y4OUQvOTY3NEFGQzhBNUM0MTFFODk1MDVGRDMxQzRGOUFFMDIvQTRBMTIzQUU5 MTBGMTFFQkE5RjdCNjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABndLIwDQYJKoZIhvcNAQELBQADggEBADI+yQDeSrHsmxqf e2kfyCQAoeuqfpvvYLgjYj2uQs2pfWjKjXXN+9feOhxOQKYKWuA6rtpjeywoYdK+ nOaeUOxp7umCbQQRTEkLJvP6UaY8b0sQHu72OGkFw48UyX+vDAF3TQIjSMra615b hDbvZDPHux0eG+LpfztOIiKMnXFKhMDtQUA5H3DJwYOFpoAQcCKxRTfDWldD6aqN AXsfqqp3/joYnhf8UNAyNFvaEHIf7HxaFY8we5lro15k53QGy31NQOtiBa3XjjS8 GEI/HxDWsHFDtU90OIQ4MAKIHIfbY9IDNkwJymXlySFcdN01Yn09MYLyzHU/RYFv ePVBO9I= -----END CERTIFICATE-----Generated at Wed May 22 18:46:47 2024 by rpki-client on console-fra.rpki-client.org