$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/E2323DE4C7A411EC8667B90EC4F9AE02.roa File: E2323DE4C7A411EC8667B90EC4F9AE02.roa (raw, json) Hash identifier: K/3uQxJu9KgbFW1UeOyb9Kwabzwk+mFnggL7g7/+jHo= Subject key identifier: 86:59:FD:B8:66:C9:FC:84:D1:FC:D8:05:F7:F7:D5:A4:5F:A9:DC:E7 Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Certificate serial: 0499 Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/E2323DE4C7A411EC8667B90EC4F9AE02.roa Signing time: Sat 07 Oct 2023 00:21:40 +0000 ROA not before: Sat 07 Oct 2023 00:21:40 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 207190 IP address blocks: 103.101.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1177 (0x499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Validity Not Before: Oct 7 00:21:40 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6520a494-0ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:7a:57:8e:46:3c:c8:cd:c9:8b:ab:13:00: 6d:34:2c:89:f2:f6:a6:56:0c:f2:55:af:e7:d5:90: fd:5c:49:b9:2c:42:96:a6:42:c0:83:94:74:43:5e: ab:51:a1:f4:02:dd:9a:b1:9a:8a:8d:d9:66:12:b9: 8c:1e:76:00:e5:53:02:54:d1:16:53:e9:7b:4e:81: af:86:f3:09:2c:fa:be:1b:98:94:ec:1b:1f:37:7a: 4a:bf:a3:88:ef:5e:fb:85:4c:a6:0f:dc:e6:9c:46: 18:98:63:d6:88:42:2c:04:95:96:db:84:04:2e:b4: 64:e6:6a:99:89:1d:eb:dc:5c:6d:fd:19:86:ac:9c: a7:d7:65:ea:0e:29:33:59:a8:22:af:be:e9:60:86: d7:9b:ee:c6:08:97:52:77:e7:98:c0:cd:93:87:49: ee:be:bc:85:8c:b9:89:5d:7d:07:fa:c2:cb:6e:e9: ad:95:de:90:25:12:a9:f2:e3:a3:92:ba:d1:71:7c: ea:6c:a8:78:0f:9a:49:29:e1:06:64:59:65:13:a4: e4:c8:61:e7:c6:d4:ad:71:7c:94:4f:d7:79:65:91: 1a:c4:39:7d:c8:79:81:f8:df:db:5f:21:9a:be:3b: 4c:c5:35:9d:ac:60:6b:4d:b4:ac:06:cf:b7:67:5a: 2d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:59:FD:B8:66:C9:FC:84:D1:FC:D8:05:F7:F7:D5:A4:5F:A9:DC:E7 X509v3 Authority Key Identifier: keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/E2323DE4C7A411EC8667B90EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.206.0/23 Signature Algorithm: sha256WithRSAEncryption 17:8b:d2:78:74:c4:43:d3:c5:26:c1:da:1b:33:bb:43:2c:fa: 9c:2b:b3:d6:3e:28:36:f8:2d:15:44:af:79:0c:58:f0:24:5b: 3c:9d:b5:6b:e0:41:69:6c:99:65:af:3a:5b:c6:40:56:c6:46: 3b:a1:bb:f7:70:c0:17:13:e8:a8:8e:4b:d1:73:fc:a3:ac:7d: db:f5:12:a2:9b:aa:82:3e:bc:96:21:aa:5f:b5:7d:49:d8:c8: 69:5c:84:f9:fb:d0:ef:5a:28:37:85:d9:bc:20:3b:3e:bf:1d: e0:03:6c:00:db:ab:78:22:9e:11:d8:3b:53:ba:05:af:25:a7: 8e:25:50:6b:ea:16:21:25:e8:07:90:50:c7:c1:07:8a:cb:f3: d1:60:07:5f:18:ad:22:4e:d3:e5:73:66:19:5a:7f:7f:6b:c3: d6:7d:ec:39:c9:2b:b6:c3:7e:02:4e:7d:bd:47:b9:a5:de:ce: 4f:16:c5:28:59:56:6e:40:05:58:aa:57:9b:5e:c2:b4:46:ef: 52:ad:0f:8f:61:28:a3:d0:a6:c2:dc:2d:a8:dd:b8:e9:06:22: 48:74:3b:51:2d:ca:e4:af:c6:1d:5e:1e:e2:3f:59:b5:49:62: 98:cb:96:c5:1d:18:a6:ef:9f:4b:b7:23:06:2d:25:c5:8d:05: 71:b5:16:98 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz QzI1OUMxOUYwHhcNMjMxMDA3MDAyMTQwWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTIwYTQ5NC0wY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdJ6V45GPMjNyYurEwBtNCyJ8vamVgzyVa/n1ZD9XEm5LEKWpkLAg5R0Q16r UaH0At2asZqKjdlmErmMHnYA5VMCVNEWU+l7ToGvhvMJLPq+G5iU7BsfN3pKv6OI 7177hUymD9zmnEYYmGPWiEIsBJWW24QELrRk5mqZiR3r3Fxt/RmGrJyn12XqDikz Wagir77pYIbXm+7GCJdSd+eYwM2Th0nuvryFjLmJXX0H+sLLbumtld6QJRKp8uOj krrRcXzqbKh4D5pJKeEGZFllE6TkyGHnxtStcXyUT9d5ZZEaxDl9yHmB+N/bXyGa vjtMxTWdrGBrTbSsBs+3Z1otlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIZZ/bhm yfyE0fzYBff31aRfqdznMB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3 ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUY1RjcvNDRGQ0U1NjhDNzg0MTFFQkFENEM5NjU5QzRGOUFFMDIvRTIzMjNERTRD N0E0MTFFQzg2NjdCOTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnZc4wDQYJKoZIhvcNAQELBQADggEBABeL0nh0xEPTxSbB 2hszu0Ms+pwrs9Y+KDb4LRVEr3kMWPAkWzydtWvgQWlsmWWvOlvGQFbGRjuhu/dw wBcT6KiOS9Fz/KOsfdv1EqKbqoI+vJYhql+1fUnYyGlchPn70O9aKDeF2bwgOz6/ HeADbADbq3ginhHYO1O6Ba8lp44lUGvqFiEl6AeQUMfBB4rL89FgB18YrSJO0+Vz Zhlaf39rw9Z97DnJK7bDfgJOfb1HuaXezk8WxShZVm5ABViqV5tewrRG71KtD49h KKPQpsLcLajduOkGIkh0O1EtyuSvxh1eHuI/WbVJYpjLlsUdGKbvn0u3IwYtJcWN BXG1Fpg= -----END CERTIFICATE-----Generated at Sun May 19 02:59:13 2024 by rpki-client on console-ams.rpki-client.org