$ rpki-client -vvf rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/C17E4DE2503E11EBB72F4C61C4F9AE02.roa File: C17E4DE2503E11EBB72F4C61C4F9AE02.roa (raw, json) Hash identifier: 1V76BNFXFgS71VyAOD6L3jOI19ixiwlX9hTVN7MA9kk= Subject key identifier: B7:97:34:E6:56:DF:B9:A2:D7:B7:3C:27:0A:6F:B9:B0:6F:9B:F8:6C Certificate issuer: /CN=A919271C/serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A Certificate serial: 05E8 Authority key identifier: 9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/C17E4DE2503E11EBB72F4C61C4F9AE02.roa Signing time: Thu 18 Jan 2024 23:41:46 +0000 ROA not before: Thu 18 Jan 2024 23:41:46 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 134489 IP address blocks: 103.161.48.0/23 maxlen: 23 103.161.48.0/24 maxlen: 24 103.161.49.0/24 maxlen: 24 2407:1b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 21:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919271C/serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A Validity Not Before: Jan 18 23:41:46 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65a9b73a-29ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:f5:0f:aa:11:91:cc:a4:bd:f9:08:c8:34: 00:97:f8:92:5d:bc:70:0c:bf:37:4d:ab:26:3c:ee: 2d:5b:36:81:36:18:56:30:37:b7:27:fe:ff:da:40: 00:2c:97:bd:97:e9:cd:2f:44:b0:6b:24:d5:e5:02: 96:be:08:e3:f1:6b:fa:39:41:ca:4f:82:d9:d2:99: af:c5:6d:70:61:71:82:bb:7f:0a:e5:8b:b5:36:eb: 1b:4b:40:91:ff:7e:41:63:0e:cd:8c:9e:25:63:1f: 9e:3c:01:3f:0d:1e:7d:d2:6d:1a:1b:00:c8:36:58: a5:9c:20:23:a3:11:f7:cd:1a:64:9e:3a:d3:6b:84: ab:16:9d:3e:36:1c:53:01:d3:26:30:e6:06:66:4b: 0c:b2:45:40:d6:89:30:50:a9:ec:9d:64:51:1b:43: 2a:ce:20:60:7f:8e:23:43:f0:c4:68:0f:36:2f:bf: 9a:28:11:4e:0f:15:56:73:d0:f2:b6:e7:cf:d1:e2: 4d:27:26:83:6f:e6:ba:73:a8:dc:5e:cb:ae:e8:ce: 01:22:0d:bb:f7:48:e0:91:de:6d:ab:c5:92:75:cc: c4:5e:cb:be:78:2f:65:de:80:19:3d:52:9c:4c:cf: 4f:29:2c:09:9d:a5:32:d0:aa:2e:3c:e2:0c:83:04: 17:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:97:34:E6:56:DF:B9:A2:D7:B7:3C:27:0A:6F:B9:B0:6F:9B:F8:6C X509v3 Authority Key Identifier: keyid:9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/C17E4DE2503E11EBB72F4C61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.48.0/23 IPv6: 2407:1b40::/32 Signature Algorithm: sha256WithRSAEncryption 5d:8d:e8:6c:3f:03:87:23:61:ce:8e:5b:ac:53:ab:95:5b:05: 74:1d:ed:76:35:31:cb:a3:df:51:c5:33:92:31:1f:b4:3c:67: 9d:6d:dc:12:2e:46:6d:b6:3a:2a:51:14:21:8f:73:d3:5e:4b: b0:39:d6:0f:3b:70:71:10:00:27:1a:f1:43:f2:74:c2:e4:2e: cc:af:2d:1f:18:fd:3e:4b:ac:75:a1:8b:97:f7:07:d3:42:ec: 82:8e:3a:b7:68:88:e5:ad:98:42:6c:c1:4e:da:ef:17:16:5a: 32:93:59:a7:24:e0:8c:93:f1:36:54:46:ce:99:30:17:67:ad: 62:07:38:8f:8a:c0:72:a7:1d:cd:22:c7:02:cf:2d:07:ee:da: d2:48:a3:6e:44:2f:cc:e1:ba:de:39:16:86:42:7b:2d:a4:a6: b4:da:17:1f:19:ca:c8:2f:92:f5:fb:bd:d6:8e:68:23:82:8f: 31:eb:a8:07:18:29:b1:ab:3a:b2:d2:32:d2:9e:98:51:0d:c3: 11:3e:b8:59:d7:1c:0c:e6:46:55:ef:03:6b:30:f7:bd:38:48: da:b6:86:e1:d3:34:45:20:39:fb:2d:db:6e:e9:c2:88:9a:b7: f9:77:17:05:ca:d7:7d:a2:47:1c:68:51:c5:10:fc:d1:31:80: 39:79:45:19 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI3MUMxMTAvBgNVBAUTKDlBRTAyMkREOTBGQUNBRjJCQzVDNzM3NkU4QTg0Q0U1 MDUxRTg5NkEwHhcNMjQwMTE4MjM0MTQ2WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWE5YjczYS0yOWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6r1D6oRkcykvfkIyDQAl/iSXbxwDL83TasmPO4tWzaBNhhWMDe3J/7/2kAA LJe9l+nNL0SwayTV5QKWvgjj8Wv6OUHKT4LZ0pmvxW1wYXGCu38K5Yu1NusbS0CR /35BYw7NjJ4lYx+ePAE/DR590m0aGwDINlilnCAjoxH3zRpknjrTa4SrFp0+NhxT AdMmMOYGZksMskVA1okwUKnsnWRRG0MqziBgf44jQ/DEaA82L7+aKBFODxVWc9Dy tufP0eJNJyaDb+a6c6jcXsuu6M4BIg2790jgkd5tq8WSdczEXsu+eC9l3oAZPVKc TM9PKSwJnaUy0KouPOIMgwQXIQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLeXNOZW 37mi17c8JwpvubBvm/hsMB8GA1UdIwQYMBaAFJrgIt2Q+sryvFxzduioTOUFHolq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjcxQy9FREYxM0M2MDUw M0MxMUVCQTJERjMyNUZDNEY5QUUwMi9tdUFpM1pENnl2SzhYSE4yNktoTTVRVWVp V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL211QWkzWkQ2eXZLOFhITjI2S2hNNVFVZWlXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTI3MUMvRURGMTNDNjA1MDNDMTFFQkEyREYzMjVGQzRGOUFFMDIvQzE3RTRERTI1 MDNFMTFFQkI3MkY0QzYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnoTAwDQQCAAIwBwMFACQHG0AwDQYJKoZIhvcNAQELBQAD ggEBAF2N6Gw/A4cjYc6OW6xTq5VbBXQd7XY1Mcuj31HFM5IxH7Q8Z51t3BIuRm22 OipRFCGPc9NeS7A51g87cHEQACca8UPydMLkLsyvLR8Y/T5LrHWhi5f3B9NC7IKO OrdoiOWtmEJswU7a7xcWWjKTWack4IyT8TZURs6ZMBdnrWIHOI+KwHKnHc0ixwLP LQfu2tJIo25EL8zhut45FoZCey2kprTaFx8ZysgvkvX7vdaOaCOCjzHrqAcYKbGr OrLSMtKemFENwxE+uFnXHAzmRlXvA2sw9704SNq2huHTNEUgOfst227pwoiat/l3 FwXK132iRxxoUcUQ/NExgDl5RRk= -----END CERTIFICATE-----Generated at Mon May 13 00:28:28 2024 by rpki-client on console-ams.rpki-client.org