$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/08A71970723811EDB0BD0312C4F9AE02.roa File: 08A71970723811EDB0BD0312C4F9AE02.roa (raw, json) Hash identifier: tqO39ucJYdpj09A9EAyx23NdyDy6sspMpuOAB2X2654= Subject key identifier: 4D:20:19:35:27:75:2A:50:C8:23:9E:8A:34:AA:FF:2A:E0:71:85:50 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: AD Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/08A71970723811EDB0BD0312C4F9AE02.roa Signing time: Tue 17 Oct 2023 04:35:34 +0000 ROA not before: Tue 17 Oct 2023 04:35:34 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 4826 IP address blocks: 203.23.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Oct 17 04:35:34 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=652e0f16-64fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:52:a1:6e:a0:01:53:d9:5b:60:08:5d:67: a9:5f:95:97:2b:39:58:6b:55:5d:50:bd:72:91:4e: 62:5a:bc:c8:ee:e1:89:65:71:98:32:9f:16:de:40: ba:e1:93:40:af:f1:46:84:ba:3e:83:09:e3:65:dc: 05:c5:64:b9:6c:c9:7d:c4:7f:0a:c3:b9:12:3b:5e: 35:b0:dc:f2:0f:f0:17:29:c7:50:bb:34:b9:fc:e1: 08:de:9e:af:91:3e:29:cd:ab:7d:9a:28:03:88:d0: 16:e6:0a:4b:fd:ea:f2:34:0b:2f:5a:3c:1c:cc:4d: 81:7a:c8:9e:f1:ee:29:d8:5c:16:ef:e2:ec:a0:30: 88:a4:71:a1:6c:91:3c:1b:44:a7:ba:5f:a5:d1:2e: 76:5e:8d:e1:9d:36:f5:5f:af:97:be:86:2e:cb:77: c6:15:d3:8c:73:1d:d4:f7:d5:db:ca:f8:0c:77:ce: 61:8d:40:aa:b1:07:22:81:4a:b6:f7:0f:8b:7f:c9: 75:8b:a4:3e:0d:70:fc:03:69:32:4c:d5:9e:aa:6f: cb:d1:22:55:d8:85:f2:cb:5a:3d:43:73:fc:0a:59: 6a:18:3e:2e:6e:c6:24:ce:d4:db:fb:d2:8a:58:72: c6:be:ac:62:36:c5:ed:7e:62:7c:df:bc:16:e6:8f: 80:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:20:19:35:27:75:2A:50:C8:23:9E:8A:34:AA:FF:2A:E0:71:85:50 X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/08A71970723811EDB0BD0312C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.23.97.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:ef:5f:f3:4a:17:10:ba:6d:12:b1:aa:00:f1:3c:a1:cb:9e: 4d:91:fa:f4:30:13:18:f8:36:84:7a:80:98:17:07:f5:03:0b: 83:a9:db:14:9f:74:b7:d9:57:4c:1b:5f:a2:1d:14:24:da:21: 5a:0f:d7:21:3f:95:7e:9b:4e:86:e0:e7:7b:71:1b:be:f7:c3: 8c:a3:41:2e:88:13:92:d5:dd:10:dc:d0:b5:e3:c7:52:d7:59: e7:a4:4f:f4:f4:8c:14:bf:7e:2b:4a:9e:48:7a:82:d7:83:e6: 8b:87:df:e7:73:e6:cf:14:74:2c:35:0e:a4:b2:2c:80:e1:73: 62:a3:86:4e:2c:29:64:4e:e9:f0:83:ce:7e:0b:4a:9a:9f:d0: ea:f9:fe:40:5b:0e:a0:f1:c1:26:87:0b:11:dc:d5:68:42:5f: e2:1c:d5:0d:76:e6:cb:60:3a:c7:81:9e:5c:4f:50:77:83:26: c9:ac:56:84:b3:92:5b:c6:78:77:50:c9:b2:4e:7d:46:6d:a9: c6:20:34:bb:48:47:c6:72:2e:57:7f:61:6e:93:1c:00:31:5d: f9:bf:37:49:e0:ce:7d:de:61:9a:bd:43:9c:a3:55:2d:a3:5a: 58:d6:ec:45:82:cc:0f:10:61:ce:4c:df:21:20:1d:75:7f:06: 30:5a:33:96 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjMxMDE3MDQzNTM0WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTJlMGYxNi02NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzZSoW6gAVPZW2AIXWepX5WXKzlYa1VdUL1ykU5iWrzI7uGJZXGYMp8W3kC6 4ZNAr/FGhLo+gwnjZdwFxWS5bMl9xH8Kw7kSO141sNzyD/AXKcdQuzS5/OEI3p6v kT4pzat9migDiNAW5gpL/eryNAsvWjwczE2Besie8e4p2FwW7+LsoDCIpHGhbJE8 G0Snul+l0S52Xo3hnTb1X6+XvoYuy3fGFdOMcx3U99XbyvgMd85hjUCqsQcigUq2 9w+Lf8l1i6Q+DXD8A2kyTNWeqm/L0SJV2IXyy1o9Q3P8CllqGD4ubsYkztTb+9KK WHLGvqxiNsXtfmJ837wW5o+ADwIDAQABo4IClTCCApEwHQYDVR0OBBYEFE0gGTUn dSpQyCOeijSq/yrgcYVQMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYxNzIvQkE1NEMxMzQ3MjJCMTFFRDk3RDczQzVBQzRGOUFFMDIvMDhBNzE5NzA3 MjM4MTFFREIwQkQwMzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLF2EwDQYJKoZIhvcNAQELBQADggEBAB/vX/NKFxC6bRKx qgDxPKHLnk2R+vQwExj4NoR6gJgXB/UDC4Op2xSfdLfZV0wbX6IdFCTaIVoP1yE/ lX6bTobg53txG773w4yjQS6IE5LV3RDc0LXjx1LXWeekT/T0jBS/fitKnkh6gteD 5ouH3+dz5s8UdCw1DqSyLIDhc2Kjhk4sKWRO6fCDzn4LSpqf0Or5/kBbDqDxwSaH CxHc1WhCX+Ic1Q125stgOseBnlxPUHeDJsmsVoSzklvGeHdQybJOfUZtqcYgNLtI R8ZyLld/YW6THAAxXfm/N0ngzn3eYZq9Q5yjVS2jWljW7EWCzA8QYc5M3yEgHXV/ BjBaM5Y= -----END CERTIFICATE-----Generated at Fri May 17 06:18:09 2024 by rpki-client on console-fra.rpki-client.org