$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/1714A7D489BD11EC9550C184C4F9AE02.roa File: 1714A7D489BD11EC9550C184C4F9AE02.roa (raw, json) Hash identifier: /nlPwaxkze5WnDIlqk83D6pBLKWfYfYc84TIgQJD8GU= Subject key identifier: 39:9E:D9:04:DC:74:C0:F4:D8:7F:E8:CA:3D:F1:99:AD:9F:3F:CF:F7 Certificate issuer: /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8 Certificate serial: 068F Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/1714A7D489BD11EC9550C184C4F9AE02.roa Signing time: Tue 30 Jan 2024 23:41:52 +0000 ROA not before: Tue 30 Jan 2024 23:41:52 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 139088 IP address blocks: 103.157.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 23:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8 Validity Not Before: Jan 30 23:41:52 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65b9893f-2d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:34:91:f9:70:3d:e0:b5:b6:17:ec:7f:e9: 49:2a:81:a9:db:f6:3a:2d:91:01:50:fd:91:f0:3e: f0:da:9f:9e:6d:94:4c:3c:4f:fa:59:fc:ea:65:21: 19:7a:4a:86:35:1a:56:f8:24:5a:7e:a7:7d:b5:c9: 32:c2:19:b5:dd:2e:57:09:bb:01:65:69:2f:33:85: ba:65:a2:c8:27:7b:1f:78:80:24:22:62:8a:2e:ce: b9:66:88:7a:18:8c:50:5f:b0:6e:2b:a3:44:e2:44: a3:2b:6d:2b:58:10:a1:2f:61:e8:5f:6a:1a:5a:2d: c0:35:50:4b:aa:fd:d5:b8:43:38:f3:cf:85:62:e8: 5b:ba:e0:55:11:e1:66:12:05:87:a8:57:86:fa:d8: e0:44:cd:4b:41:79:93:eb:49:f2:50:0d:33:b0:6e: 0c:ed:f3:05:44:9c:b2:20:6a:75:47:9b:2e:b7:71: 16:9a:dc:2f:f8:e8:22:71:a0:39:72:87:a2:c6:fb: 69:b1:83:89:ae:2b:4c:61:f6:9c:a1:14:19:4a:44: 0b:cb:e0:82:f4:ec:13:98:f6:b6:66:84:e3:10:7a: d7:25:c5:77:bb:55:57:39:4d:65:f3:9d:71:de:de: 29:a7:b4:ec:37:7c:29:27:21:c7:1b:9f:a7:a4:81: e4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9E:D9:04:DC:74:C0:F4:D8:7F:E8:CA:3D:F1:99:AD:9F:3F:CF:F7 X509v3 Authority Key Identifier: keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/1714A7D489BD11EC9550C184C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.248.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:f5:d7:6c:7b:d7:40:4f:21:06:dc:55:60:01:ec:28:fa:83: 14:1e:54:a2:93:6b:77:92:81:7b:37:fa:d4:0f:98:c0:64:23: 6c:49:99:db:a8:6e:ad:d9:72:4f:50:a6:75:5f:91:a0:6e:58: 81:eb:a9:f7:68:15:a5:2a:87:6e:c6:db:a8:f3:cf:84:52:34: 31:e0:bb:46:8d:98:7b:94:2a:f2:cc:f2:c7:b6:03:d6:c4:45: 9d:f3:56:5f:3d:5b:ad:c9:38:80:a0:8d:72:88:40:d7:16:ff: 07:4e:1d:48:82:41:46:ba:d8:ed:d0:c5:87:52:05:e8:b9:62: d0:ba:2e:7c:50:6d:13:4d:ec:c5:30:ff:68:07:13:40:d8:2e: 66:2e:af:9a:7a:d4:25:b1:6b:e4:da:19:2f:fb:d5:a4:90:29: a0:27:6b:12:62:b1:9c:1f:7f:64:34:10:2c:12:79:c7:bf:45: f6:24:b5:c4:d9:8d:36:ec:fe:8b:f9:56:e8:f6:e1:de:d8:3d: 6b:c8:75:23:9c:ae:f6:cc:ef:19:f7:01:a0:de:ff:c5:c1:02: 4d:00:db:8f:66:4f:ee:a4:b3:28:43:4d:ed:5a:08:f1:75:e4: 2c:eb:f3:8a:6a:dd:f9:bb:6d:c1:f8:d8:38:36:fd:bb:ca:c2: f5:06:11:8c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM2REMxMTAvBgNVBAUTKEJDMDJCMDA1Q0NBQTA0NTNGQzlCODE3QkI3OENCQTkx NUYyN0MyQTgwHhcNMjQwMTMwMjM0MTUyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5ODkzZi0yZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdI0kflwPeC1thfsf+lJKoGp2/Y6LZEBUP2R8D7w2p+ebZRMPE/6WfzqZSEZ ekqGNRpW+CRafqd9tckywhm13S5XCbsBZWkvM4W6ZaLIJ3sfeIAkImKKLs65Zoh6 GIxQX7BuK6NE4kSjK20rWBChL2HoX2oaWi3ANVBLqv3VuEM488+FYuhbuuBVEeFm EgWHqFeG+tjgRM1LQXmT60nyUA0zsG4M7fMFRJyyIGp1R5sut3EWmtwv+OgicaA5 coeixvtpsYOJritMYfacoRQZSkQLy+CC9OwTmPa2ZoTjEHrXJcV3u1VXOU1l851x 3t4pp7TsN3wpJyHHG5+npIHkWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDme2QTc dMD02H/oyj3xma2fP8/3MB8GA1UdIwQYMBaAFLwCsAXMqgRT/JuBe7eMupFfJ8Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzZEQy9CMDQzNjQ3QTE5 RjkxMUVCQjhDREVENEZDNEY5QUUwMi92QUt3QmN5cUJGUDhtNEY3dDR5NmtWOG53 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZBS3dCY3lxQkZQOG00Rjd0NHk2a1Y4bndxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM2REMvQjA0MzY0N0ExOUY5MTFFQkI4Q0RFRDRGQzRGOUFFMDIvMTcxNEE3RDQ4 OUJEMTFFQzk1NTBDMTg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnnfgwDQYJKoZIhvcNAQELBQADggEBABv112x710BPIQbc VWAB7Cj6gxQeVKKTa3eSgXs3+tQPmMBkI2xJmduobq3Zck9QpnVfkaBuWIHrqfdo FaUqh27G26jzz4RSNDHgu0aNmHuUKvLM8se2A9bERZ3zVl89W63JOICgjXKIQNcW /wdOHUiCQUa62O3QxYdSBei5YtC6LnxQbRNN7MUw/2gHE0DYLmYur5p61CWxa+Ta GS/71aSQKaAnaxJisZwff2Q0ECwSece/RfYktcTZjTbs/ov5Vuj24d7YPWvIdSOc rvbM7xn3AaDe/8XBAk0A249mT+6ksyhDTe1aCPF15Czr84pq3fm7bcH42Dg2/bvK wvUGEYw= -----END CERTIFICATE-----Generated at Fri May 17 00:19:44 2024 by rpki-client on console-ams.rpki-client.org