$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/A9AA1A5E30AB11EC876F1B41C4F9AE02.roa File: A9AA1A5E30AB11EC876F1B41C4F9AE02.roa (raw, json) Hash identifier: WbEnl0/p9DW5LSQBfY/eVybwxbm+uFz2TgwUcU/Waio= Subject key identifier: 6E:BC:EB:97:29:E2:96:66:A0:98:EF:3D:59:52:FA:54:E6:32:B7:29 Certificate issuer: /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Certificate serial: 0500 Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/A9AA1A5E30AB11EC876F1B41C4F9AE02.roa Signing time: Thu 25 Jan 2024 00:43:03 +0000 ROA not before: Thu 25 Jan 2024 00:43:03 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 24567 IP address blocks: 103.146.208.0/24 maxlen: 24 103.146.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1280 (0x500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Validity Not Before: Jan 25 00:43:03 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b1ae97-1b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:64:5e:f6:6f:c2:71:3a:29:0d:27:e3:b5:10: 29:a5:61:2d:32:e9:94:85:b3:86:e6:6a:86:c0:f8: a0:4f:c6:c1:4d:22:1f:d6:29:66:e2:d5:ea:c4:40: 46:65:0e:83:cf:dd:ea:a9:b1:38:27:68:8f:45:93: 07:16:56:12:ac:b0:da:f8:6e:44:ec:e7:aa:1c:ee: 11:a2:be:0c:27:ff:97:b9:eb:3c:cc:2a:b0:11:e5: 1b:6c:52:b4:ab:84:c8:8e:0e:4c:86:d3:27:00:d4: ec:32:46:f1:ff:e0:d3:ff:ef:b0:2e:31:66:27:69: ba:74:bf:a5:8e:68:3b:fb:a3:54:49:1d:43:f4:cb: ef:5b:4c:8c:87:83:07:ef:0b:62:01:c5:a4:14:7a: fa:37:0d:7b:ff:04:fe:dd:36:6b:fc:4f:f7:4e:d5: 17:5e:ef:4b:9f:e1:8c:8b:1f:05:51:a8:95:4c:79: c9:53:f8:79:41:5c:9b:8c:ec:74:f5:74:a2:42:70: a1:02:b4:38:0e:80:0a:53:bc:73:1d:8b:37:a7:d3: be:6d:b3:29:73:65:94:c8:94:f3:64:fe:55:45:61: da:ee:e1:86:9c:1e:b8:5b:e5:74:cd:ff:e9:c9:d0: 8b:b5:7e:63:67:eb:aa:4a:a0:51:69:22:1d:9b:f7: b2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BC:EB:97:29:E2:96:66:A0:98:EF:3D:59:52:FA:54:E6:32:B7:29 X509v3 Authority Key Identifier: keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/A9AA1A5E30AB11EC876F1B41C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.208.0/23 Signature Algorithm: sha256WithRSAEncryption 35:4e:76:78:32:03:2b:88:f7:27:2b:58:ae:31:84:ed:f9:b6: 46:52:f3:77:27:9c:87:45:c8:35:5c:26:87:ee:9c:f1:46:93: 83:be:fd:05:69:5f:00:14:d0:c2:9f:9b:f7:51:fe:09:a1:28: 83:49:5c:82:e0:08:5e:80:46:4b:42:9f:19:89:64:d1:58:91: c6:b4:93:6d:7f:32:33:19:b7:91:c0:50:1a:a1:0b:61:35:ec: b4:88:40:a3:36:35:4e:87:ce:99:87:a1:27:af:3c:d8:8d:03: 60:d2:b6:0d:fa:c4:28:b5:b1:e7:fa:b8:84:63:c9:35:e7:bd: 0c:a1:09:78:e2:39:87:4f:0e:b4:58:83:e0:03:14:f7:4e:27: 99:ca:74:dd:dc:ad:4a:95:86:41:7a:b3:1a:7b:77:d0:16:b9: 91:d5:79:9c:0c:25:02:01:db:14:bd:15:b8:10:fd:be:05:74: 4c:27:cc:c4:8f:07:cf:37:ee:09:00:36:d0:34:8d:1f:cb:d7: db:f1:2a:2a:e6:e3:db:6d:1b:8e:9b:d8:56:cb:65:e2:97:77: 0d:19:96:c3:c8:c7:20:30:bd:aa:9d:fb:5f:43:2a:d9:e4:aa: d4:7e:ca:19:cc:12:73:df:fb:51:f0:30:44:73:c2:69:31:5b: b0:02:14:2d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg2MUQxMTAvBgNVBAUTKEU2MTIzRjQ5RUFFRjY2NEMyMkY5NENENUVCQkFFQUNF RDM4N0ExNkYwHhcNMjQwMTI1MDA0MzAzWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWIxYWU5Ny0xYjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGRe9m/CcTopDSfjtRAppWEtMumUhbOG5mqGwPigT8bBTSIf1ilm4tXqxEBG ZQ6Dz93qqbE4J2iPRZMHFlYSrLDa+G5E7OeqHO4Ror4MJ/+Xues8zCqwEeUbbFK0 q4TIjg5MhtMnANTsMkbx/+DT/++wLjFmJ2m6dL+ljmg7+6NUSR1D9MvvW0yMh4MH 7wtiAcWkFHr6Nw17/wT+3TZr/E/3TtUXXu9Ln+GMix8FUaiVTHnJU/h5QVybjOx0 9XSiQnChArQ4DoAKU7xzHYs3p9O+bbMpc2WUyJTzZP5VRWHa7uGGnB64W+V0zf/p ydCLtX5jZ+uqSqBRaSIdm/ey5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFG6865cp 4pZmoJjvPVlS+lTmMrcpMB8GA1UdIwQYMBaAFOYSP0nq72ZMIvlM1eu66s7Th6Fv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODYxRC9EMjk5N0Y2MEFC RTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlprd2ktVXpWNjdycXp0T0hv VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoSV9TZXJ2Wmt3aS1VelY2N3JxenRPSG9XOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjg2MUQvRDI5OTdGNjBBQkUzMTFFQjlDMkIxMTU2QzRGOUFFMDIvQTlBQTFBNUUz MEFCMTFFQzg3NkYxQjQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnktAwDQYJKoZIhvcNAQELBQADggEBADVOdngyAyuI9ycr WK4xhO35tkZS83cnnIdFyDVcJofunPFGk4O+/QVpXwAU0MKfm/dR/gmhKINJXILg CF6ARktCnxmJZNFYkca0k21/MjMZt5HAUBqhC2E17LSIQKM2NU6HzpmHoSevPNiN A2DStg36xCi1sef6uIRjyTXnvQyhCXjiOYdPDrRYg+ADFPdOJ5nKdN3crUqVhkF6 sxp7d9AWuZHVeZwMJQIB2xS9FbgQ/b4FdEwnzMSPB8837gkANtA0jR/L19vxKirm 49ttG46b2FbLZeKXdw0ZlsPIxyAwvaqd+19DKtnkqtR+yhnMEnPf+1HwMERzwmkx W7ACFC0= -----END CERTIFICATE-----Generated at Fri May 17 02:01:45 2024 by rpki-client on console-ams.rpki-client.org