$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/971B23D236EA11EE802E9246C4F9AE02.roa File: 971B23D236EA11EE802E9246C4F9AE02.roa (raw, json) Hash identifier: fD87KQzwm9qKp1IVjcCJ2vaovBXqn6b5QBx0LG3czZE= Subject key identifier: 94:39:07:E4:E4:45:71:86:A7:E0:E3:50:E4:2C:8A:FE:2A:B8:A5:4F Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 2F Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/971B23D236EA11EE802E9246C4F9AE02.roa Signing time: Wed 25 Oct 2023 05:37:18 +0000 ROA not before: Wed 25 Oct 2023 05:37:18 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 141212 IP address blocks: 103.156.136.0/24 maxlen: 24 103.156.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Oct 25 05:37:18 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6538a98e-19e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:38:09:0c:c8:a4:14:b1:ec:18:3d:e5:2a:39: e6:01:49:f3:ee:48:ce:19:53:1f:f0:8a:50:65:46: 5d:7d:d1:3c:e1:46:15:f3:98:2c:0d:d9:34:76:d5: 35:e2:76:61:49:07:0d:29:14:ce:5b:cf:c3:1d:7d: ce:cc:b7:7c:e9:50:0b:48:87:40:7e:40:5d:f9:6e: 80:bd:bd:03:6a:3a:24:c8:b1:7a:c5:33:0e:d6:d1: 53:eb:56:6f:e3:fa:fb:73:eb:9b:63:ff:e3:63:ca: 62:4c:3f:40:3d:3b:1c:7a:ad:23:4f:be:df:31:9f: ea:58:2a:61:c8:1a:a2:38:c7:a3:0d:c8:f7:0c:1d: b1:8a:83:26:dc:c2:ed:bc:9f:0e:bc:33:9d:31:5f: bf:2d:0f:da:fb:ab:26:84:30:ae:4e:d0:80:6b:c9: a4:33:c3:3b:71:38:d4:8b:be:cb:ff:62:bb:fa:1c: 74:a9:d9:89:62:94:06:bb:e5:9b:09:74:0b:08:b0: e1:82:8b:1c:79:64:73:65:55:9a:a1:af:f1:23:16: 7a:47:2b:2c:29:0f:ce:29:83:fe:e5:ac:54:04:c3: 60:1f:6a:fc:7b:da:7e:e4:cb:01:94:7e:f1:2c:df: 14:66:74:b3:96:53:64:14:1b:2d:7d:5a:02:72:2b: 73:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:39:07:E4:E4:45:71:86:A7:E0:E3:50:E4:2C:8A:FE:2A:B8:A5:4F X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/971B23D236EA11EE802E9246C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.136.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:cd:ac:e3:d5:c5:3b:b7:50:99:2f:f1:4d:f9:13:5d:e6:30: 8c:99:71:e4:04:ab:29:a6:75:cd:56:2e:38:ba:a7:ef:cb:c2: b1:61:a0:3b:2c:01:25:69:93:d4:9c:a1:f9:61:0a:e0:5c:f5: 20:87:20:e4:14:13:cc:d5:78:d6:07:ac:8c:c3:9d:63:5d:85: 53:07:f7:35:03:ff:92:37:d8:2a:2e:42:3e:18:68:c2:07:27: 21:24:aa:aa:ce:f4:b9:ec:d6:8f:c5:1e:31:d3:ef:ec:52:5b: 40:fb:80:73:f1:fd:c5:2d:10:5e:b9:95:a4:e3:17:1c:13:15: 63:5f:96:83:65:cc:73:b9:9c:43:59:12:4b:86:14:50:50:56: 08:5f:f6:d6:3a:af:73:8d:f3:e4:34:50:e2:52:c1:91:a8:92: 59:fe:d5:f2:36:9f:90:36:c7:21:1c:2f:5a:13:fc:87:4f:31: 9c:d3:80:06:f3:67:2c:a4:15:75:83:52:51:5e:c8:e5:3c:2f: d6:4a:78:12:8b:37:dd:6e:af:01:85:5d:2c:2a:70:38:31:d0: 00:a5:90:77:fd:a9:75:14:fb:91:cc:9a:b6:15:20:91:e3:e9: 9e:3f:ab:1d:9f:29:15:91:e4:1d:06:c6:4e:fd:90:19:bc:dd: 64:fc:0c:5e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjE0NTExMC8GA1UEBRMoNzBEQTQ1OTE5MUU5MDY4NkJEQjBBQzQ3QUJEQTMwQTlD M0UxNzRGQTAeFw0yMzEwMjUwNTM3MThaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MzhhOThlLTE5ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbOAkMyKQUsewYPeUqOeYBSfPuSM4ZUx/wilBlRl190TzhRhXzmCwN2TR21TXi dmFJBw0pFM5bz8Mdfc7Mt3zpUAtIh0B+QF35boC9vQNqOiTIsXrFMw7W0VPrVm/j +vtz65tj/+NjymJMP0A9Oxx6rSNPvt8xn+pYKmHIGqI4x6MNyPcMHbGKgybcwu28 nw68M50xX78tD9r7qyaEMK5O0IBryaQzwztxONSLvsv/Yrv6HHSp2YlilAa75ZsJ dAsIsOGCixx5ZHNlVZqhr/EjFnpHKywpD84pg/7lrFQEw2Afavx72n7kywGUfvEs 3xRmdLOWU2QUGy19WgJyK3NjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUlDkH5ORF cYan4ONQ5CyK/iq4pU8wHwYDVR0jBBgwFoAUcNpFkZHpBoa9sKxHq9owqcPhdPow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMTQ1LzI3ODA3M0NFMzZF QTExRUVBRTEwQUE0NUM0RjlBRTAyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY05wRmtaSHBCb2E5c0t4SHE5b3dxY1BoZFBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE0NS8yNzgwNzNDRTM2RUExMUVFQUUxMEFBNDVDNEY5QUUwMi85NzFCMjNEMjM2 RUExMUVFODAyRTkyNDZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeciDANBgkqhkiG9w0BAQsFAAOCAQEAjM2s49XFO7dQmS/x TfkTXeYwjJlx5ASrKaZ1zVYuOLqn78vCsWGgOywBJWmT1Jyh+WEK4Fz1IIcg5BQT zNV41gesjMOdY12FUwf3NQP/kjfYKi5CPhhowgcnISSqqs70uezWj8UeMdPv7FJb QPuAc/H9xS0QXrmVpOMXHBMVY1+Wg2XMc7mcQ1kSS4YUUFBWCF/21jqvc43z5DRQ 4lLBkaiSWf7V8jafkDbHIRwvWhP8h08xnNOABvNnLKQVdYNSUV7I5Twv1kp4Eos3 3W6vAYVdLCpwODHQAKWQd/2pdRT7kcyathUgkePpnj+rHZ8pFZHkHQbGTv2QGbzd ZPwMXg== -----END CERTIFICATE-----Generated at Fri May 31 10:02:40 2024 by rpki-client on console-ams.rpki-client.org