$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/1ACA9A7011BC11EBA0759F52C4F9AE02.roa File: 1ACA9A7011BC11EBA0759F52C4F9AE02.roa (raw, json) Hash identifier: 1/WmY9YBhKiu5MIvT1vmw+1SrQM0aVWoRuNlt6WnK0s= Subject key identifier: D6:7E:03:BF:7C:FD:79:FB:26:0F:2B:6C:EA:21:FD:81:03:EF:44:BD Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 06A8 Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/1ACA9A7011BC11EBA0759F52C4F9AE02.roa Signing time: Thu 14 Mar 2024 23:12:22 +0000 ROA not before: Thu 14 Mar 2024 23:12:22 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 64271 IP address blocks: 103.147.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 23:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Validity Not Before: Mar 14 23:12:22 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65f38456-9c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:00:01:14:8a:c7:e0:b9:0a:ac:e6:02:4b:5d: 9a:8d:3d:68:c3:b6:15:60:cd:96:36:05:4b:67:b3: cd:6e:d2:28:1c:c0:37:6a:79:12:8f:86:72:99:1c: a8:25:d2:1d:28:11:71:f3:dc:38:94:29:12:3b:c6: 4f:49:e6:aa:c7:5d:ff:f0:25:8b:c4:49:a6:1f:9d: 82:2f:70:23:71:91:5e:aa:66:d5:e3:05:41:0a:a6: ab:25:70:54:d0:15:93:df:48:73:4f:60:84:6e:ab: 41:8f:53:75:b8:c6:98:cc:40:df:6c:6d:7c:ce:16: 2d:ac:3e:4d:44:9c:7a:e0:3d:1c:9b:1c:de:12:92: 27:a3:50:ab:ef:bd:a9:56:d9:87:90:d6:aa:b7:6c: fc:91:11:b2:1c:a6:67:39:a6:81:50:cf:46:a1:64: 7c:fd:ed:f2:ac:59:17:9f:cb:57:f8:58:4b:20:b5: 0d:20:09:d5:38:3c:08:72:74:99:be:4a:d7:d5:fc: 62:39:ca:47:f2:f2:44:ec:a3:90:d7:11:65:b7:3c: bc:4a:e4:07:cd:6c:65:d0:d0:cc:f8:6d:1f:fa:18: 41:bd:d5:00:f2:77:c0:86:2b:9a:1a:00:0d:9e:2e: 93:1e:10:b1:8c:96:eb:8d:dc:f8:e7:d7:26:f6:b1: 22:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7E:03:BF:7C:FD:79:FB:26:0F:2B:6C:EA:21:FD:81:03:EF:44:BD X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/1ACA9A7011BC11EBA0759F52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.198.0/23 Signature Algorithm: sha256WithRSAEncryption 67:33:83:19:92:10:cc:96:96:83:0f:42:d7:65:3a:c2:32:ce: 15:28:2b:c0:a1:1f:02:33:89:7b:10:1a:f4:71:de:6a:ec:b3: 25:9a:f5:35:f1:ee:89:43:0d:27:96:03:da:a0:73:6d:65:f7: b3:32:b4:35:ec:35:63:6c:89:cd:24:ba:e8:3a:d1:7e:39:bc: f0:ee:d5:12:aa:a3:ad:8b:5f:82:84:62:1a:2f:5e:2b:31:ef: dc:cb:fa:05:b2:c9:89:81:d3:df:05:91:5b:6f:bb:9b:90:ae: 86:fe:14:51:91:f6:52:04:03:3e:ec:0a:3b:b7:ef:6e:21:45: 46:51:60:4a:62:e5:90:3f:c3:d7:76:33:55:61:fc:a1:4a:9a: 91:a4:53:15:97:50:75:5a:3c:fd:5c:ad:56:87:6b:09:17:c1: 2b:d7:a2:e6:70:ef:a2:36:48:fd:19:6f:95:05:65:d9:f4:86: 5f:02:84:95:17:db:d3:58:aa:be:fd:07:b1:b5:b6:5d:e2:5c: 0a:29:90:4f:99:9f:38:07:5d:09:66:c4:bb:af:fb:4a:bf:4a: 22:bf:ee:4a:8c:69:a0:4a:94:e2:3f:98:95:5e:c6:a9:35:88: b6:db:42:f4:64:a6:c4:31:90:79:56:a6:1a:9e:13:2a:9a:05: 8d:7f:5e:08 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjQwMzE0MjMxMjIyWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWYzODQ1Ni05YzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5AABFIrH4LkKrOYCS12ajT1ow7YVYM2WNgVLZ7PNbtIoHMA3ankSj4ZymRyo JdIdKBFx89w4lCkSO8ZPSeaqx13/8CWLxEmmH52CL3AjcZFeqmbV4wVBCqarJXBU 0BWT30hzT2CEbqtBj1N1uMaYzEDfbG18zhYtrD5NRJx64D0cmxzeEpIno1Cr772p VtmHkNaqt2z8kRGyHKZnOaaBUM9GoWR8/e3yrFkXn8tX+FhLILUNIAnVODwIcnSZ vkrX1fxiOcpH8vJE7KOQ1xFltzy8SuQHzWxl0NDM+G0f+hhBvdUA8nfAhiuaGgAN ni6THhCxjJbrjdz459cm9rEigwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNZ+A798 /Xn7Jg8rbOoh/YED70S9MB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlGNUEvMDg5OEIyM0ExMUJBMTFFQkJDMUE1ODRDQzRGOUFFMDIvMUFDQTlBNzAx MUJDMTFFQkEwNzU5RjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnk8YwDQYJKoZIhvcNAQELBQADggEBAGczgxmSEMyWloMP QtdlOsIyzhUoK8ChHwIziXsQGvRx3mrssyWa9TXx7olDDSeWA9qgc21l97MytDXs NWNsic0kuug60X45vPDu1RKqo62LX4KEYhovXisx79zL+gWyyYmB098FkVtvu5uQ rob+FFGR9lIEAz7sCju3724hRUZRYEpi5ZA/w9d2M1Vh/KFKmpGkUxWXUHVaPP1c rVaHawkXwSvXouZw76I2SP0Zb5UFZdn0hl8ChJUX29NYqr79B7G1tl3iXAopkE+Z nzgHXQlmxLuv+0q/SiK/7kqMaaBKlOI/mJVexqk1iLbbQvRkpsQxkHlWphqeEyqa BY1/Xgg= -----END CERTIFICATE-----Generated at Mon Jun 3 01:55:26 2024 by rpki-client on console-ams.rpki-client.org