$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/416EB4022F6111EE8C156634C4F9AE02.roa File: 416EB4022F6111EE8C156634C4F9AE02.roa (raw, json) Hash identifier: lQaHTpxmZmskyWYtJeokoPkASG3xJ0/muDOoYEK+BYM= Subject key identifier: A2:20:1E:5E:DE:94:81:68:36:1C:2B:67:4E:65:84:61:EB:C3:6A:A5 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 2C Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/416EB4022F6111EE8C156634C4F9AE02.roa Signing time: Tue 17 Oct 2023 05:57:07 +0000 ROA not before: Tue 17 Oct 2023 05:57:07 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 4826 IP address blocks: 103.170.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Jun 2024 07:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: Oct 17 05:57:07 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=652e2233-3b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:4d:26:00:7b:83:52:de:75:79:2c:e3:d2: fc:09:38:0d:7e:8b:3f:c3:c5:d7:be:9b:ec:25:8f: 07:68:a8:9b:de:d5:ba:56:63:cf:91:ff:18:5e:64: 91:4a:4a:8f:5a:1e:d8:19:75:c9:d1:a4:14:bc:6b: 82:72:aa:0f:fb:86:93:0e:84:9c:51:22:e9:c7:4c: 96:52:71:46:f2:4c:d6:07:aa:39:aa:98:72:d1:00: 55:5f:fe:77:d2:0c:cd:e4:69:af:48:e6:f4:fe:29: 64:c7:4e:13:34:eb:c6:67:fd:df:87:a3:7c:ed:ea: 7c:19:fa:a9:89:22:af:08:b9:f8:f2:e4:23:8d:45: dd:bb:94:f7:a8:c5:e9:80:78:6d:bb:f3:ff:1e:15: cc:da:07:cd:ae:0a:d8:e8:d2:fa:8d:b9:e8:5b:94: a3:1e:a1:30:bf:2a:38:09:b4:8c:9e:58:80:f1:36: 60:5c:f0:e7:f5:0b:c7:01:ae:a0:b4:92:3c:0c:c7: 6f:07:7e:c1:20:95:c8:aa:20:88:4a:fb:07:21:e7: 8d:69:0e:1b:21:4a:0a:65:10:49:44:cf:b2:c5:43: f6:9b:38:44:07:85:ac:03:5f:47:20:e1:88:60:98: 77:fe:65:32:d7:fc:ed:9b:b4:59:13:0f:03:62:20: 4b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:20:1E:5E:DE:94:81:68:36:1C:2B:67:4E:65:84:61:EB:C3:6A:A5 X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/416EB4022F6111EE8C156634C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.238.0/23 Signature Algorithm: sha256WithRSAEncryption c8:b0:d4:0c:89:87:48:e8:f6:ec:fb:b4:1a:1f:cc:2b:61:74: 2e:21:70:e9:76:87:a0:e6:ec:b5:28:f9:5d:35:1f:95:cc:ca: 85:76:fc:f5:fc:01:26:2c:4a:20:a3:8e:64:d4:13:51:1d:c4: 81:c2:8f:c8:24:c1:7b:4b:0e:e5:17:01:fb:32:d0:fc:3a:c4: 38:97:68:0c:86:96:d6:bc:c5:10:06:46:da:d5:db:e5:25:b3: f0:76:ea:7b:51:3e:03:f3:6e:a5:7a:8b:f4:a1:88:fe:ac:b8: 19:8e:53:71:6f:6b:d4:dd:9f:31:b7:82:23:d8:2f:95:ae:89: 9c:7a:e5:e8:26:11:a5:50:f4:2a:c0:53:53:a2:35:9b:42:13: 19:2a:2d:c1:d0:68:e1:5d:62:a1:74:61:90:40:6a:40:7b:63: d2:8f:69:a6:60:39:8d:e2:75:06:4f:cf:c8:de:0a:a2:c6:e4: 07:a5:38:37:f2:29:a2:c9:6b:92:c7:65:db:bd:d4:85:da:3d: a9:eb:ee:99:4e:85:e9:2b:98:5d:50:e0:cd:90:65:8a:2b:dc: da:eb:bb:8b:18:e2:3e:cb:68:7c:1c:07:ee:b8:82:2b:87:25: 6f:24:f1:c6:f5:76:7a:95:2b:bf:3f:e2:db:8a:23:80:2f:d8: 47:8b:61:cb -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ0RjExMC8GA1UEBRMoNzlDODdEQzU5NUIwQzI3RDIzMzI5QkM5OTI4NEEyM0M4 QkZEQTBFNzAeFw0yMzEwMTcwNTU3MDdaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MmUyMjMzLTNiNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtqk0mAHuDUt51eSzj0vwJOA1+iz/Dxde+m+wljwdoqJve1bpWY8+R/xheZJFK So9aHtgZdcnRpBS8a4Jyqg/7hpMOhJxRIunHTJZScUbyTNYHqjmqmHLRAFVf/nfS DM3kaa9I5vT+KWTHThM068Zn/d+Ho3zt6nwZ+qmJIq8Iufjy5CONRd27lPeoxemA eG278/8eFczaB82uCtjo0vqNuehblKMeoTC/KjgJtIyeWIDxNmBc8Of1C8cBrqC0 kjwMx28HfsEglciqIIhK+wch541pDhshSgplEElEz7LFQ/abOEQHhawDX0cg4Yhg mHf+ZTLX/O2btFkTDwNiIEsRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUoiAeXt6U gWg2HCtnTmWEYevDaqUwHwYDVR0jBBgwFoAUech9xZWwwn0jMpvJkoSiPIv9oOcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDRGL0VGODc1NTE4MkY2 MDExRUVCRjdGNzczM0M0RjlBRTAyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9P Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWNoOXhaV3d3bjBqTXB2SmtvU2lQSXY5b09jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi80MTZFQjQwMjJG NjExMUVFOEMxNTY2MzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeq7jANBgkqhkiG9w0BAQsFAAOCAQEAyLDUDImHSOj27Pu0 Gh/MK2F0LiFw6XaHoObstSj5XTUflczKhXb89fwBJixKIKOOZNQTUR3EgcKPyCTB e0sO5RcB+zLQ/DrEOJdoDIaW1rzFEAZG2tXb5SWz8Hbqe1E+A/NupXqL9KGI/qy4 GY5TcW9r1N2fMbeCI9gvla6JnHrl6CYRpVD0KsBTU6I1m0ITGSotwdBo4V1ioXRh kEBqQHtj0o9ppmA5jeJ1Bk/PyN4KosbkB6U4N/Iposlrksdl273Uhdo9qevumU6F 6SuYXVDgzZBliivc2uu7ixjiPstofBwH7riCK4clbyTxxvV2epUrvz/i24ojgC/Y R4thyw== -----END CERTIFICATE-----Generated at Tue Jun 11 10:37:14 2024 by rpki-client on console-ams.rpki-client.org